Edit tour

Windows Analysis Report
https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US

Overview

General Information

Sample URL:	https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US
Analysis ID:	1509553
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Blob-based file download detected

Found iframes

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6968 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4264 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6804 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4388 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

Acrobat.exe (PID: 3332 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 2680 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 1800 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2068 --field-trial-handle=1736,i,407474587202690358,5460987275091151970,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US

LLM: Score: 10 Reasons: The brand name 'Arrowhead Scientific, Inc.' does not match the domain 'intuit.com'. The domain 'intuit.com' is associated with Intuit, a well-known company that provides financial and accounting software, but the brand name on the webpage is different. This discrepancy suggests that the webpage may be a phishing site. DOM: 0.0.pages.csv

Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: Iframe src: blob:https://connect.intuit.com/1cdbc82a-de75-49a4-9df0-096dce138778
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: Iframe src: blob:https://connect.intuit.com/1cdbc82a-de75-49a4-9df0-096dce138778
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: Iframe src: blob:https://connect.intuit.com/1cdbc82a-de75-49a4-9df0-096dce138778
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: Iframe src: https://qfp.intuit.com/jh0Y8EVpwlX-K1OY?6bc8640c02812f3a=whqLv4z_J3VJHaa6wnc8A0kYl59sUwOD7kPMGF26PO8wwKESdHpDVOrPe0PCg3grY5lulX2cwR-c3VBVyIA1BMC9wYtcar10HwFsFzgaDr_3KjvgNOp065UC3xWCoKXLNQTlBvFA-6kpICJ41v_C0Q&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdi

Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US

HTTP Parser: Base64 decoded: {"alg":"HS256","typ":"JWT"}

Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No favicon
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No favicon
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No favicon
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No favicon
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No favicon
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No favicon
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: https://feedback.qbo.intuit.com/forums/920104	HTTP Parser: No favicon
Source: https://feedback-form.trustarc.com/watchdog/request	HTTP Parser: No favicon

Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No <meta name="author".. found
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No <meta name="author".. found
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No <meta name="author".. found

Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No <meta name="copyright".. found
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No <meta name="copyright".. found
Source: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US HTTP/1.1Host: connect.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=eyCbwemgRikorTJoyEwudBfP4UnnJfNOrWD+Jq8gahg4sJsyAD+UpeKeE8PDfw8y8ju5QsdiJUsiPnKDGbVd1zIximgm+W1ab4FsDNynd5ouilv1IwUxphBb35+X; AWSALBCORS=eyCbwemgRikorTJoyEwudBfP4UnnJfNOrWD+Jq8gahg4sJsyAD+UpeKeE8PDfw8y8ju5QsdiJUsiPnKDGbVd1zIximgm+W1ab4FsDNynd5ouilv1IwUxphBb35+X
Source: global traffic	HTTP traffic detected: GET /american-express.bug.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /discover.bug.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2 HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://connect.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2 HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://connect.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /truste.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /flags/us.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /visa.bug.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /mastercard.bug.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2 HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://connect.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9835.59c20536643b9726.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/7868.851b65ef7fa1a422.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/1193.3dd404b7ea3c36c8.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8948.2692353fb3048aa0.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2378.40683c6fb386355f.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-3dbe3e04f86f6c11.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /american-express.bug.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /truste.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /mastercard.bug.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /visa.bug.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /flags/us.svg HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-560765ab0625ba27.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js HTTP/1.1Host: cdn.segment.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9835.59c20536643b9726.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://connect.intuit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-593e743601aca717.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-7d82d00ca8a38f1d.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/7868.851b65ef7fa1a422.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/1193.3dd404b7ea3c36c8.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8948.2692353fb3048aa0.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6859-0e318ca24b4b6137.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2332-a40370253963c421.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5439-f4c5699a82de3c8e.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2378.40683c6fb386355f.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/3161-f0b07e6689a822c1.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-3dbe3e04f86f6c11.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-560765ab0625ba27.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings HTTP/1.1Host: cdn.segment.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-593e743601aca717.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5480-42cda307521b848a.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5669-3d23076a3a43f159.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-7d82d00ca8a38f1d.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6859-0e318ca24b4b6137.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8804-0df16ebd6cb32488.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/3161-f0b07e6689a822c1.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2332-a40370253963c421.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2352-26b800f7418ab0e8.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/1.1Host: cdn.segment.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/4737-7116baf9e1ba5e68.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5480-42cda307521b848a.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5439-f4c5699a82de3c8e.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9661-dfcd811ec7b9d297.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1Host: prd.sentry-io.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5669-3d23076a3a43f159.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5544-4c8425f3484e6d6d.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8804-0df16ebd6cb32488.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5428-18008d1732926864.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6139-309dee1860ca094e.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1Host: prd.sentry-io.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/payable-f99486b740249e9c.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/1.30.0-release_1.30.0-80b42f1/_buildManifest.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/1.30.0-release_1.30.0-80b42f1/_ssgManifest.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2766.b29c036bad593b19.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2352-26b800f7418ab0e8.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/4737-7116baf9e1ba5e68.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9661-dfcd811ec7b9d297.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5544-4c8425f3484e6d6d.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
Source: global traffic	HTTP traffic detected: GET /next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8482.b28cf868ec59260b.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
Source: global traffic	HTTP traffic detected: GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/1.1Host: cdn.segment.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6139-309dee1860ca094e.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
Source: global traffic	HTTP traffic detected: GET /_next/static/1.30.0-release_1.30.0-80b42f1/_buildManifest.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5428-18008d1732926864.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
Source: global traffic	HTTP traffic detected: GET /portal/rest/pdf/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/invoice.pdf HTTP/1.1Host: connect.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0intuit-realmid: 193514612387714Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36intuit_tid: cp-c0963-817d-45ce-8b08-8488f37b48d6Accept: application/pdfsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; AWSALBCORS=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6835-37c4d58b85c794a8.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
Source: global traffic	HTTP traffic detected: GET /i33jrfiwxn31hedn.js?9xqf08dnc54dm8lt=v60nf4oj&wkzxu6z39p8c5fqp=16888CCFE5EA4EE5ACCBC28664B129CC HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/payable-f99486b740249e9c.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
Source: global traffic	HTTP traffic detected: GET /_next/static/1.30.0-release_1.30.0-80b42f1/_ssgManifest.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
Source: global traffic	HTTP traffic detected: GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/04e01638/04e01638.js HTTP/1.1Host: bcdn-god.we-stats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2766.b29c036bad593b19.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
Source: global traffic	HTTP traffic detected: GET /next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8482.b28cf868ec59260b.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
Source: global traffic	HTTP traffic detected: GET /portal/rest/reporting/prometheus/view HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; AWSALB=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC; AWSALBCORS=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC
Source: global traffic	HTTP traffic detected: GET /portal/rest/invoice/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/view HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; AWSALB=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC; AWSALBCORS=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC
Source: global traffic	HTTP traffic detected: GET /portal/rest/pdf/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/invoice.pdf HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; AWSALB=hJUME2OyVRH9ASfwUn+rGVU0mnZhLJ0smYOdimFXwY3Fqo6zjETFsFldZOGSV+ZjNUPqimp+JE1U9zVOUHpLdScWxng4EpLxrAyuOHPDV+6J8sjnq4Z8Qu43rQdX; AWSALBCORS=hJUME2OyVRH9ASfwUn+rGVU0mnZhLJ0smYOdimFXwY3Fqo6zjETFsFldZOGSV+ZjNUPqimp+JE1U9zVOUHpLdScWxng4EpLxrAyuOHPDV+6J8sjnq4Z8Qu43rQdX
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6835-37c4d58b85c794a8.js HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2
Source: global traffic	HTTP traffic detected: GET /i33jrfiwxn31hedn.js?9xqf08dnc54dm8lt=v60nf4oj&wkzxu6z39p8c5fqp=16888CCFE5EA4EE5ACCBC28664B129CC HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; tmx_guid=AAxwFG5nsDspC9blQ_dJf3C2ftGe4yQBiR5CHs7tDpqD5-aYPkFdvl6Pn_my1RtgLH14hcPRAMs_mUeCUVhWM3Jr7uQUSg; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/04e01638/04e01638.js HTTP/1.1Host: bcdn-god.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/assessment HTTP/1.1Host: risk-vendor-svc.api.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; cdSNum=1726075537139-sjn0000936-3569fb87-961b-4a63-a34c-f079de61b7c4; ADRUM_BTa=R:27\|g:09954651-abc9-4401-9fc4-223aee74784d\|n:intuit-sbg-prod_87bcfab1-ad5a-4af1-95e0-7eed4f8a1800; SameSite=None; ADRUM_BT1=R:27\|i:307331\|e:1; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy-seal/validation?rid=6218d0ea-ee8b-4472-87dd-ba4bf95aab3d HTTP/1.1Host: privacy.truste.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LJVFYF6zeP6tRSLW?fdfb7b0627303635=78Ll-L1lmSGxLYtH5pMqCNj5q4qYe_KFHes5jXktGDINjjhOq6QqnnVBIp7UZ_fEuouoz5W8YEhGJwkNh2k4nTRfF-8caVOcptvC-aPbxSeQtZPO6-8wz4xZh1BVTx6b2vSbYQtszAEGoCVzYlcMM2RsiDev6ZM7swocAR9vwLdbtOwKTIVyTCZL5gulVFemzplbB9GR7QZal2NiL3BF_dM&jb=353b2e2e62716d773d57696e646f77732668716d3f55616c666f7573273a32333024627b6a773f4168726f6d65266a73623f416a706d656727323231333f HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /3pUhvj1JZk_QAV2A?31cf279dc5a80175=JPP5rXlv-hmUheSvnvXyEQbQGzmaJZr6_WPUjweJeSTIvo1hdNGAeQ-zkcjCklozwAcWejdKqV8WqIx0dU1syFQRHOXazd4qBup01Bkv1JDARPWSVv2h83WQGOk8OyEfxAgWBT55fb7fjGV5kFJO75RBZmlWT0u5q3-sDYiZYfz7Ow HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /portal/rest/reporting/prometheus/pageLoad HTTP/1.1Host: connect.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; AWSALB=PiXqMhoj2PRhck/5rcgB1PoGeU1wJMeR22K9363vbJYeNnHFJXoxD+bEURFzN6+lXtCpHqu+dNZ3/v87PvhTP+8E6iia+ivwDnSHbSrbJOzAGs8hL7l33yhIFGrh; AWSALBCORS=PiXqMhoj2PRhck/5rcgB1PoGeU1wJMeR22K9363vbJYeNnHFJXoxD+bEURFzN6+lXtCpHqu+dNZ3/v87PvhTP+8E6iia+ivwDnSHbSrbJOzAGs8hL7l33yhIFGrh
Source: global traffic	HTTP traffic detected: GET /3pUhvj1JZk_QAV2A?31cf279dc5a80175=JPP5rXlv-hmUheSvnvXyEQbQGzmaJZr6_WPUjweJeSTIvo1hdNGAeQ-zkcjCklozwAcWejdKqV8WqIx0dU1syFQRHOXazd4qBup01Bkv1JDARPWSVv2h83WQGOk8OyEfxAgWBT55fb7fjGV5kFJO75RBZmlWT0u5q3-sDYiZYfz7Ow HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /jh0Y8EVpwlX-K1OY?6bc8640c02812f3a=whqLv4z_J3VJHaa6wnc8A0kYl59sUwOD7kPMGF26PO8wwKESdHpDVOrPe0PCg3grY5lulX2cwR-c3VBVyIA1BMC9wYtcar10HwFsFzgaDr_3KjvgNOp065UC3xWCoKXLNQTlBvFA-6kpICJ41v_C0Q&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: static.cns-icn-prod.a.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /YocZRwxdsxEx-CRk?f40d530d3d770f8f=h5oDc3GmJDzGVFi8yvbcTX6xNkp4pvsf7XoQuE_CuCz7fiZLaXb-bOHMtq5_IswqZlIOK9etJhcuB3VX_EQx8V3wfCuhpX4Q25t91eLwHvUl9k7-Zd5M7nSqkOWDahBmuM08blDBQOebUGpWQXex5v4h-JQh6Mw7dIHTqJdbZXM8d56ospqE9IidpR3FV4-U0oz0vJk7BH98yOFs2ga6qLckhQ HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /LJVFYF6zeP6tRSLW?fdfb7b0627303635=78Ll-L1lmSGxLYtH5pMqCNj5q4qYe_KFHes5jXktGDINjjhOq6QqnnVBIp7UZ_fEuouoz5W8YEhGJwkNh2k4nTRfF-8caVOcptvC-aPbxSeQtZPO6-8wz4xZh1BVTx6b2vSbYQtszAEGoCVzYlcMM2RsiDev6ZM7swocAR9vwLdbtOwKTIVyTCZL5gulVFemzplbB9GR7QZal2NiL3BF_dM&jb=353b2e2e62716d773d57696e646f77732668716d3f55616c666f7573273a32333024627b6a773f4168726f6d65266a73623f416a706d656727323231333f HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /fp/clear.png HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /, v60nf4oj/7b25835e2ff541ab16888ccfe5ea4ee5accbc28664b129ccsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://connect.intuit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NfOpx-RLutCFq1dn?27f2e3b7cb9047b0=ZPvAywB5fIwacgCX0emF994U9IaW7vfygBgwYztfdQRp2-UXl6iIJlr-umeZHrZgmrGgTxROGccZmruL70PVh7UrcnWskAEeJ_YeITWytng1wLisPuiazozX-8TjSd-_4Fj2pGVJQtQCZXh1d9nRQWMWNvPW_Elk-ljsg5CtFJkVKJ2hRzGcPB29tG5QKB-KuTCMvHYe1sRmDDCK-loAVnYC36k HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /YbxrASaDVd3Kc50e?c36b7dc3a8f47772=_6WGV0IKupf2sDLowowrHE5d-CNLDavGE7JHc6bkw8vxK4hipz483WKFXhkTTHCwqO4EIHtUZQ0bmoRG511DgtuTHNWZ7kg7mX6zfgUwpjnq118c266Rm-2-wmVSiq3znVgRlgXMo2LumzDAW1BrZ-R7lYGn0eNvNgCvu_o HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qfp.intuit.com/jh0Y8EVpwlX-K1OY?6bc8640c02812f3a=whqLv4z_J3VJHaa6wnc8A0kYl59sUwOD7kPMGF26PO8wwKESdHpDVOrPe0PCg3grY5lulX2cwR-c3VBVyIA1BMC9wYtcar10HwFsFzgaDr_3KjvgNOp065UC3xWCoKXLNQTlBvFA-6kpICJ41v_C0Q&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/s
Source: global traffic	HTTP traffic detected: GET /lpDGnmvXq62r7PSf?637c223a99a163ea=CAYim9EfYdnzPtCTte2Qz-24SiiSkfhl3FKGWsa_-AcX0CXRlplUCdosJbvMWs_4BKlLSPrJEqRaZ22T0NufRZ0tYkGfEJn0JdLt4IGZI-6M4Vte8mHlLA4CIv-HaYramB3zh-xRBSC-JAAkDsAflg05mzZDsOMXGkJ4GedL4-5ETA HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /j__WaTLYPrl6qGp7?aa873481f3a0bc61=rMN_jfGojP1IOt5ffuqdQbUIR_O3ddu83uiIa6E5RArI2qrysOpxwlnqYmGGx9Odr7atDG8tbBeG7E9xQmj7fHcE6YVAB_1tPhKx6LywQbuzYIBiAmWoufj_aV_icUbQ1aXU2oS2ngbaQD26QZuufYenD10zRqrj9-noNdXIZNUpUHNEzDbolGJ68lFWa0MdHlzZxOJb_obHuqOKYKhNnNlO3dg HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consumer-resources/dispute-resolution-2 HTTP/1.1Host: www.truste.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dToK1MV5MGu3tON6?54906d7b2a507590=e68J4le_aX5FwXPztJQEBqorlBykjp6odpX6FNw9PlEU7I_GBQjvoSeOzKeo2mw8x8a9C1izvY9Ni5zyrMNNugjnBpPdxTzJL49xljnsAsDGb2E9Fa4H9YvRawU9m0b5m3gzk3GeHCSvTzohBqHAhh-S2ISEt2O6HA&jb=33342e647b633f3737383431333963646134643634673d3b343031633b6e33373535393f6c6132 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp/clear.png HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /aVktxHr1yxfM_xzW?4a8d7d6febec4476=FKCAGmo7QSqkyWEi9jtKITg7GcpP_pxtSLXM6DoA018fuE13nE6FOJ0lOMN8u5yWkEDn8JdQv-b2ahtER3VP10E2lnbA0VANsej3TTL575_OQK1n0YGXesjvufg9lGgvDCncsV1OrI1sl8uJ39RgZW6fEEaGEVjM7w&jf=33342e647b603f666335346161333164376335363b60393b67396064636c633561333f6b393666 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qfp.intuit.com/YocZRwxdsxEx-CRk?f40d530d3d770f8f=h5oDc3GmJDzGVFi8yvbcTX6xNkp4pvsf7XoQuE_CuCz7fiZLaXb-bOHMtq5_IswqZlIOK9etJhcuB3VX_EQx8V3wfCuhpX4Q25t91eLwHvUl9k7-Zd5M7nSqkOWDahBmuM08blDBQOebUGpWQXex5v4h-JQh6Mw7dIHTqJdbZXM8d56ospqE9IidpR3FV4-U0oz0vJk7BH98yOFs2ga6qLckhQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /kEPQu84JXQYDm1_x?25e1b7f73f845a49=pGn11jxnaWcHQPMbJPrunCjmWdKatxIQWG5uPNmJlhh02TWcWA8EpsACM2dL1pb68sriXvMt3yuZ1_BbQ4HryGPD3O7NbDDV4qeFQoSiEUfNWioddaLmf5G_954EB71XQ8O2LjkzvY7wRKdbqDngWTYS9-LK&fr HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qfp.intuit.com/YocZRwxdsxEx-CRk?f40d530d3d770f8f=h5oDc3GmJDzGVFi8yvbcTX6xNkp4pvsf7XoQuE_CuCz7fiZLaXb-bOHMtq5_IswqZlIOK9etJhcuB3VX_EQx8V3wfCuhpX4Q25t91eLwHvUl9k7-Zd5M7nSqkOWDahBmuM08blDBQOebUGpWQXex5v4h-JQh6Mw7dIHTqJdbZXM8d56ospqE9IidpR3FV4-U0oz0vJk7BH98yOFs2ga6qLckhQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /FPxXzG1PhpyQS7SB?1d71699f7fdc1c3a=ZK7vmt70b8Cm5HIImIohlmxC34GNiVs52OPeagBIfu452JyskXJiAjYQJQQ4Hhoq8idieqXo1MRB0naryzjZl4mp38a8knoT-IhX9k-euH9lGi8hU54BwwYVDAt17nxjloYboIExhvFQxM0CYdSYboBQ2paK HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /dispute-resolution-2/ HTTP/1.1Host: trustarc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PkZVOpDZnhDGCexp?17d39b247fcb9cdb=nVkRwyJvVDVl-d20oI0CYrLk69QLjm_HmCIhSNwhb5D77SLgJ9jdtczF2oernQbn6xXFXArblXCvgenO-WcOGjk_hmTqogO485yw9DhGqfgvrpGcNqPXvlFCZnbhkopaJpDSDlG9PWKHG9WqF5y8hSBTlCQJpBB88Dllb9o9KW3HY_ni8z7pJ5bIfUhTjTihggz7uQVz62I8OkP1DtyMyPxzSA&jf=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 HTTP/1.1Host: h.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://h.online-metrix.net/j__WaTLYPrl6qGp7?aa873481f3a0bc61=rMN_jfGojP1IOt5ffuqdQbUIR_O3ddu83uiIa6E5RArI2qrysOpxwlnqYmGGx9Odr7atDG8tbBeG7E9xQmj7fHcE6YVAB_1tPhKx6LywQbuzYIBiAmWoufj_aV_icUbQ1aXU2oS2ngbaQD26QZuufYenD10zRqrj9-noNdXIZNUpUHNEzDbolGJ68lFWa0MdHlzZxOJb_obHuqOKYKhNnNlO3dgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /do_Wm0ryEoptAt-X?59529d0ed5049cd5=PEbhHvhkErVP3GM2OJip-Zetl5Yts5kQMhmtz5ZatdC1NeH_m4PkQ1VCDzAl3oWcMVfZ6JD06E93U4L994CywanF59gizxqCMJ-ZUW88lcEMw1FBVdqYZ8x0afZBX1MkWu54UvE6FqQhPrY2rcj-AKZfnE9qSmqOSPGccmk HTTP/1.1Host: h64.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lpDGnmvXq62r7PSf?637c223a99a163ea=CAYim9EfYdnzPtCTte2Qz-24SiiSkfhl3FKGWsa_-AcX0CXRlplUCdosJbvMWs_4BKlLSPrJEqRaZ22T0NufRZ0tYkGfEJn0JdLt4IGZI-6M4Vte8mHlLA4CIv-HaYramB3zh-xRBSC-JAAkDsAflg05mzZDsOMXGkJ4GedL4-5ETA HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /YbxrASaDVd3Kc50e?c36b7dc3a8f47772=_6WGV0IKupf2sDLowowrHE5d-CNLDavGE7JHc6bkw8vxK4hipz483WKFXhkTTHCwqO4EIHtUZQ0bmoRG511DgtuTHNWZ7kg7mX6zfgUwpjnq118c266Rm-2-wmVSiq3znVgRlgXMo2LumzDAW1BrZ-R7lYGn0eNvNgCvu_o HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /dToK1MV5MGu3tON6?54906d7b2a507590=e68J4le_aX5FwXPztJQEBqorlBykjp6odpX6FNw9PlEU7I_GBQjvoSeOzKeo2mw8x8a9C1izvY9Ni5zyrMNNugjnBpPdxTzJL49xljnsAsDGb2E9Fa4H9YvRawU9m0b5m3gzk3GeHCSvTzohBqHAhh-S2ISEt2O6HA&jb=33342e647b633f3737383431333963646134643634673d3b343031633b6e33373535393f6c6132 HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /aVktxHr1yxfM_xzW?4a8d7d6febec4476=FKCAGmo7QSqkyWEi9jtKITg7GcpP_pxtSLXM6DoA018fuE13nE6FOJ0lOMN8u5yWkEDn8JdQv-b2ahtER3VP10E2lnbA0VANsej3TTL575_OQK1n0YGXesjvufg9lGgvDCncsV1OrI1sl8uJ39RgZW6fEEaGEVjM7w&jf=33342e647b603f666335346161333164376335363b60393b67396064636c633561333f6b393666 HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /kEPQu84JXQYDm1_x?25e1b7f73f845a49=pGn11jxnaWcHQPMbJPrunCjmWdKatxIQWG5uPNmJlhh02TWcWA8EpsACM2dL1pb68sriXvMt3yuZ1_BbQ4HryGPD3O7NbDDV4qeFQoSiEUfNWioddaLmf5G_954EB71XQ8O2LjkzvY7wRKdbqDngWTYS9-LK&fr HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /consumer-information/privacy-feedback-button HTTP/1.1Host: trustarc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FPxXzG1PhpyQS7SB?1d71699f7fdc1c3a=ZK7vmt70b8Cm5HIImIohlmxC34GNiVs52OPeagBIfu452JyskXJiAjYQJQQ4Hhoq8idieqXo1MRB0naryzjZl4mp38a8knoT-IhX9k-euH9lGi8hU54BwwYVDAt17nxjloYboIExhvFQxM0CYdSYboBQ2paK HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /OPfxpuGF5bIp34io?d8db3d54d2a1f2d7=zvHym783VnVXY8aFjHFT2tatJy2EdVlkV7FH88Pdw94rp8dpWvhJ96x5x_bd4OH56W6iWLqyrOmak6V5ucb4nqcEFeEw1xgwEXmiTxFwNnKGjsP_WvlXZ338gEzL_fG4RJKZ4v7jxNLzG3OdQiKe3qnkjrWv_h4BMdtEJrXFP0k8_9FDrT44W-htXPuUnlnPZa_ABG7Sgu40ID-89DroSg&sera_parametere=URIPAgoGBFIFUFADVVUEBwJWVwwKAwwGAQJUAVBUB1RUUAYAAQJQAQoFVBNHQlwLWRJHQUsWBiEXUSQQA3VEUAcIQVBUVlgAXBIVEAd1RFV1UhcCfBYHVVoJFUFHFFImElVwEA93EwFbW1MNBgFSUFNQVgIKV1ZWVgdWAFUDVFIOVVEMAFEFVVYABVMFCFgEBVIUW1ddVgAPUQQHAQlSV1JQVFMNBwQEUEAMRgkBGQEPVAVQXlEGUgRWA1QNBVNbUQMKBFpSBVEFUQdXUgIFUgcEB1cKBgNDUw9bBAwAWUReCw8YCRVFDA9fXwwNCUcKXF8UVwVwXRddCwMTVkdcUwZVFFdXQAgyWwgCWkNCRwFVX0ZRQmxWBF4KBFRXWkcHQ18BBQg%3D&count=0&max=0 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qfp.intuit.com/jh0Y8EVpwlX-K1OY?6bc8640c02812f3a=whqLv4z_J3VJHaa6wnc8A0kYl59sUwOD7kPMGF26PO8wwKESdHpDVOrPe0PCg3grY5lulX2cwR-c3VBVyIA1BMC9wYtcar10HwFsFzgaDr_3KjvgNOp065UC3xWCoKXLNQTlBvFA-6kpICJ41v_C0Q&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transf
Source: global traffic	HTTP traffic detected: GET /consumer-information/privacy-feedback-button/ HTTP/1.1Host: trustarc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dToK1MV5MGu3tON6?54906d7b2a507590=e68J4le_aX5FwXPztJQEBqorlBykjp6odpX6FNw9PlEU7I_GBQjvoSeOzKeo2mw8x8a9C1izvY9Ni5zyrMNNugjnBpPdxTzJL49xljnsAsDGb2E9Fa4H9YvRawU9m0b5m3gzk3GeHCSvTzohBqHAhh-S2ISEt2O6HA&ja=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
Source: global traffic	HTTP traffic detected: GET /3p06UcGCgDiQfqTo?c84a36c162de6771=RXG_bMwZXr_XhFVIwt32kqwNxnOKzv8xkV12KQJ3Lr7tVsgdukkYLWwDbAZt4u8BFdjr4sKadJl67ZXZePF2AgbrW6mvX44pIenhtrJCALuoQNZbeGZinNjJKjbYHYDnPvXqlCUtKGrUiC72ax9c60_zVHxJ4LWUytfDJnOiYOprtjSzKMuipPt2sZNmgZIhFMavpPVwFNe7QYuUG4mxO76tJg&jf=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 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /dToK1MV5MGu3tON6?54906d7b2a507590=e68J4le_aX5FwXPztJQEBqorlBykjp6odpX6FNw9PlEU7I_GBQjvoSeOzKeo2mw8x8a9C1izvY9Ni5zyrMNNugjnBpPdxTzJL49xljnsAsDGb2E9Fa4H9YvRawU9m0b5m3gzk3GeHCSvTzohBqHAhh-S2ISEt2O6HA&jac=1&je=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 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest
Source: global traffic	HTTP traffic detected: GET /RmpvkGZVpTL2gC0p?8f0a204681a65600=walIN3r193HTkqhqrpkPASuIB5Ilg_xDrjRW8-b-IHWBZl2vX8CNzK6JkEfjWmh9Eh-HsNkbXllEe0xv67l9wYLduAqIgSVb6U4NM16l0VNBt52KHZu6cYRuRyAt5caA-zBl_bZ8wFUXoIAF2S5eB2QNGRb8L-Rhk8BeON90OZE1tTO20DsxOvLpk9o_BS51NK7HUfXArK0pd-5_PiVGD75Iow&jac=1&je=3332312e2e6a60663d3a77645f313a63685d33387273573238706b5f37326e635f333264665d303870635f303a70685f30386f6b5d3232716e5f323a617f5d333a717e57382e3b3a342c313238302c302c322e322e3224333038322c333830362c333a30382e3b3a342c32342c32342c313870765d64696e71652e74707d672e74707d6d24767077653a69635f747275653872715d666d6463756e742e78706d6d727c2e7f656e743d476f6f676c652532324b6c612c2d303228456f6d6f6e6729247f6f64703f434e474c4525323028476d6d656e672d3041253030547d6e69616c2d3a38332c312e30253230285377696476516a636c6770253030466d746b63672d3a382a5177627a65726f292532302a327a32323832413046452b21273043273a385b756b647453686164657225323266706b746d702b HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /dToK1MV5MGu3tON6?54906d7b2a507590=e68J4le_aX5FwXPztJQEBqorlBykjp6odpX6FNw9PlEU7I_GBQjvoSeOzKeo2mw8x8a9C1izvY9Ni5zyrMNNugjnBpPdxTzJL49xljnsAsDGb2E9Fa4H9YvRawU9m0b5m3gzk3GeHCSvTzohBqHAhh-S2ISEt2O6HA&jac=1&je=31342e2e7f676b3f382e34362e3132332e3131 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /zz73lkYIxHYfsipX?17010c8a988fe793=_xa2xjqV5mq_VMnhe1zKwnr8AiUmkmW8ZGvYGpQGZyFYuvp0x0wu-anZKEpS-1UPFsk0caBXRbfuMgRDXKpTPm0n1aejV1gjOZ_XZQzKrXphqKMFVduq06UvDtVUJenQ8HFf82TnE1Wyk8yvEHwTKdGONrTu0YHyPSorcYdEfRE HTTP/1.1Host: v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /do_Wm0ryEoptAt-X?59529d0ed5049cd5=PEbhHvhkErVP3GM2OJip-Zetl5Yts5kQMhmtz5ZatdC1NeH_m4PkQ1VCDzAl3oWcMVfZ6JD06E93U4L994CywanF59gizxqCMJ-ZUW88lcEMw1FBVdqYZ8x0afZBX1MkWu54UvE6FqQhPrY2rcj-AKZfnE9qSmqOSPGccmk HTTP/1.1Host: h64.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OPfxpuGF5bIp34io?d8db3d54d2a1f2d7=zvHym783VnVXY8aFjHFT2tatJy2EdVlkV7FH88Pdw94rp8dpWvhJ96x5x_bd4OH56W6iWLqyrOmak6V5ucb4nqcEFeEw1xgwEXmiTxFwNnKGjsP_WvlXZ338gEzL_fG4RJKZ4v7jxNLzG3OdQiKe3qnkjrWv_h4BMdtEJrXFP0k8_9FDrT44W-htXPuUnlnPZa_ABG7Sgu40ID-89DroSg&sera_parametere=URIPAgoGBFIFUFADVVUEBwJWVwwKAwwGAQJUAVBUB1RUUAYAAQJQAQoFVBNHQlwLWRJHQUsWBiEXUSQQA3VEUAcIQVBUVlgAXBIVEAd1RFV1UhcCfBYHVVoJFUFHFFImElVwEA93EwFbW1MNBgFSUFNQVgIKV1ZWVgdWAFUDVFIOVVEMAFEFVVYABVMFCFgEBVIUW1ddVgAPUQQHAQlSV1JQVFMNBwQEUEAMRgkBGQEPVAVQXlEGUgRWA1QNBVNbUQMKBFpSBVEFUQdXUgIFUgcEB1cKBgNDUw9bBAwAWUReCw8YCRVFDA9fXwwNCUcKXF8UVwVwXRddCwMTVkdcUwZVFFdXQAgyWwgCWkNCRwFVX0ZRQmxWBF4KBFRXWkcHQ18BBQg%3D&count=0&max=0 HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.1 HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/assets/dist/style.css?ver=1711660746 HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/style.css?ver=1711465962 HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/assets/dist/js/jquery-3.6.0.min.js?ver=1711465976 HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dToK1MV5MGu3tON6?54906d7b2a507590=e68J4le_aX5FwXPztJQEBqorlBykjp6odpX6FNw9PlEU7I_GBQjvoSeOzKeo2mw8x8a9C1izvY9Ni5zyrMNNugjnBpPdxTzJL49xljnsAsDGb2E9Fa4H9YvRawU9m0b5m3gzk3GeHCSvTzohBqHAhh-S2ISEt2O6HA&jac=1&je=31342e2e7f676b3f382e34362e3132332e3131 HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /zz73lkYIxHYfsipX?17010c8a988fe793=_xa2xjqV5mq_VMnhe1zKwnr8AiUmkmW8ZGvYGpQGZyFYuvp0x0wu-anZKEpS-1UPFsk0caBXRbfuMgRDXKpTPm0n1aejV1gjOZ_XZQzKrXphqKMFVduq06UvDtVUJenQ8HFf82TnE1Wyk8yvEHwTKdGONrTu0YHyPSorcYdEfRE HTTP/1.1Host: v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dToK1MV5MGu3tON6?54906d7b2a507590=e68J4le_aX5FwXPztJQEBqorlBykjp6odpX6FNw9PlEU7I_GBQjvoSeOzKeo2mw8x8a9C1izvY9Ni5zyrMNNugjnBpPdxTzJL49xljnsAsDGb2E9Fa4H9YvRawU9m0b5m3gzk3GeHCSvTzohBqHAhh-S2ISEt2O6HA&jac=1&je=3133313c2e24726f3d6e6f2662617473743f273540273a306e6574656e2d3030253149392632322732432532327374617477712730302d314325303261606370676b666f2d303027374426617564683d6367646063673c353a3635376438306462606c313f31343337363932646264396334363732606e3734343336343167606564393d31376360373435613231313726677a313f306a6066636433353e666336363a3d3d323a313762323836326439373b363636636a6037656734312e68716f3f5f6166666d757325323031302675616a3f2735402d30306170636a61766763767d7a6d27303025334125323278383627303027304b27303260697666677173273a3a2d31432732323634253232253241273030607a636c647125303a273141273d4a2d35402732326272616e64253230273143273a30456f6d676e6d27303041607a676f67273232253243253232766770716b6d662730322733432d303031333f2d3a302735442532432537422532306070636c6c2730322733432d30304e6d7c2d3b40432733444272616e64253230273041273a30746570736b676c2732302d3b4927303038253232253744253241273540273a306072636e662d30302531492d3a30416a726f6d69756d25323227304127303a74677271696d66273032273b492d30303331372532322537442537462730412d303066776c6e5e6770736b6766446b717625323225334125354227354027303a6070616c64273a302733432d3a3a456d6d676c652532304368726d6f6727303a2730432732307e6770736b67662d30302733412532323131372e322c373b31302c33333025303a273544273a4b2d35402732326272616e64253230273143273a304c6f7625314a432733464a7a696c66273232253243253232766770716b6d662730322733432d3030382c3826382c322732322537442532432535402730306a70636e6625303a273141273a3a4b6a706d6d69756d253232253241273030746d7071696d6e273a302733432d3a3a3333352e302e353933382e3131302730302d3546253744273a4127323065676a6b6e6725323225334166616c71672730412d30306d6d646764273032273b492d3030273232253243253232706e6376646d7a6f2732302531492730325561666c6d7571253232253243253232726e63766467706f56677271616d6c25303a2d3b4327303231302e302e30253230273041273a30756f7536362d30302531496e696e71672537442675616c3d2535402730306a70636e6673273a302733432d3d4a2735402532326272616e642530302731432d3030476d6f6564672732324b607a6d6f67253232253243253232746770716b676c27323025314927303233393f2d303027374425324325374225303060706366662732302531492730324c677c2d3140432533444272616e642530302730412d303076677271616d6c25303a2d3b43273032382532322537442530412735402d30306270616c6c273032273b492d30304168726f6d69756d253230273041273a30746570736b676c2732302d3b4927303031313725323225374427374627304b2730326f6f60616e6725303a2d3b4364636c7365253243253232726e63766467706f253032273b432732305f6166666d7573253232253744 HTTP/1.1Host: qfp.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anony
Source: global traffic	HTTP traffic detected: GET /embed/index.php?tracker_id=86894795 HTTP/1.1Host: chat-application.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /autoblockasset/core.min.39652c2.js?domain=trustarc.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /autoblockoptout?domain=trustarc.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RmpvkGZVpTL2gC0p?8f0a204681a65600=walIN3r193HTkqhqrpkPASuIB5Ilg_xDrjRW8-b-IHWBZl2vX8CNzK6JkEfjWmh9Eh-HsNkbXllEe0xv67l9wYLduAqIgSVb6U4NM16l0VNBt52KHZu6cYRuRyAt5caA-zBl_bZ8wFUXoIAF2S5eB2QNGRb8L-Rhk8BeON90OZE1tTO20DsxOvLpk9o_BS51NK7HUfXArK0pd-5_PiVGD75Iow&je=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 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=
Source: global traffic	HTTP traffic detected: GET /RmpvkGZVpTL2gC0p?8f0a204681a65600=walIN3r193HTkqhqrpkPASuIB5Ilg_xDrjRW8-b-IHWBZl2vX8CNzK6JkEfjWmh9Eh-HsNkbXllEe0xv67l9wYLduAqIgSVb6U4NM16l0VNBt52KHZu6cYRuRyAt5caA-zBl_bZ8wFUXoIAF2S5eB2QNGRb8L-Rhk8BeON90OZE1tTO20DsxOvLpk9o_BS51NK7HUfXArK0pd-5_PiVGD75Iow&je=35312e2e6263613f31267067655f7570646376673f273f4027323030273a302733432d3f4a27303076657225323225334131273546273f46 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frontend/web/index.php?r=api%2Fload-js&tracker_id=86894795 HTTP/1.1Host: chat-application.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/logo.svg HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/02/res-square-rect-blue.png HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/assets/dist/js/jquery-3.6.0.min.js?ver=1711465976 HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/02/res-square-plus-pink.png HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/logo.svg HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/02/res-square-rect-blue.png HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/assets/dist/images/icon-search.svg HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /autoblockoptout?domain=trustarc.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /autoblockasset/core.min.39652c2.js?domain=trustarc.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/assets/dist/images/icon-arrow.svg HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/wp-content/themes/trustarc/assets/dist/style.css?ver=1711660746Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/02/seal-truste-privacy-feedback.png HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/assets/dist/js/app.js?ver=1711465976 HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frontend/web/index.php?r=api%2Fload-js&tracker_id=86894795 HTTP/1.1Host: chat-application.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notice?domain=trustarc.com&c=teconsent&js=nj&noticeType=bb&gtm=1&text=true&pcookie&irmc=irmlink HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://trustarc.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/assets/dist/images/icon-search.svg HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/02/res-square-plus-pink.png HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/footer-logo.svg HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/li.svg HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /log?domain=trustarc.com&country=us&state=&behavior=implied&session=ed43af48-7bd4-44f3-986c-0d41a800497d&userType=NEW&c=a0de&referer=https://trustarc.com&language=en HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /asset/notice.js/v/v1.7-230 HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://trustarc.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/x.svg HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/fb.svg HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.6.1 HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/assets/dist/images/icon-arrow.svg HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/02/seal-truste-privacy-feedback.png HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/trustarc/assets/dist/js/app.js?ver=1711465976 HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /notice?domain=trustarc.com&c=teconsent&js=nj&noticeType=bb&gtm=1&text=true&pcookie&irmc=irmlink HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /bannermsg?action=views&domain=trustarc.com&behavior=implied&country=us&language=en&rand=0.6817166937050458&session=ed43af48-7bd4-44f3-986c-0d41a800497d&userType=NEW&referer=https://trustarc.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /get?name=SourceSansPro-Regular.ttf HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://trustarc.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RmpvkGZVpTL2gC0p?8f0a204681a65600=walIN3r193HTkqhqrpkPASuIB5Ilg_xDrjRW8-b-IHWBZl2vX8CNzK6JkEfjWmh9Eh-HsNkbXllEe0xv67l9wYLduAqIgSVb6U4NM16l0VNBt52KHZu6cYRuRyAt5caA-zBl_bZ8wFUXoIAF2S5eB2QNGRb8L-Rhk8BeON90OZE1tTO20DsxOvLpk9o_BS51NK7HUfXArK0pd-5_PiVGD75Iow&je=31312e2e7a67743f3a455a333a544530 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/footer-logo.svg HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/li.svg HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/x.svg HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/fb.svg HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.6.1 HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /log?domain=trustarc.com&country=us&state=&behavior=implied&session=ed43af48-7bd4-44f3-986c-0d41a800497d&userType=NEW&c=a0de&referer=https://trustarc.com&language=en HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /asset/notice.js/v/v1.7-230 HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /bannermsg?action=views&domain=trustarc.com&behavior=implied&country=us&language=en&rand=0.6817166937050458&session=ed43af48-7bd4-44f3-986c-0d41a800497d&userType=NEW&referer=https://trustarc.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us
Source: global traffic	HTTP traffic detected: GET /v2/segment/sbseg-qbo-clickstream/m HTTP/1.1Host: eventbus.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/02/cropped-favicon-32x32.png HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/consumer-information/privacy-feedback-button/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563
Source: global traffic	HTTP traffic detected: GET /rs/846-LLZ-652/images/rwtsmin_minified.js HTTP/1.1Host: info.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_9ns793lfk_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://trustarc.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/t2_9ns793lfk/config HTTP/1.1Host: pixel-config.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://trustarc.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/02/cropped-favicon-32x32.png HTTP/1.1Host: trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7
Source: global traffic	HTTP traffic detected: GET /RmpvkGZVpTL2gC0p?8f0a204681a65600=walIN3r193HTkqhqrpkPASuIB5Ilg_xDrjRW8-b-IHWBZl2vX8CNzK6JkEfjWmh9Eh-HsNkbXllEe0xv67l9wYLduAqIgSVb6U4NM16l0VNBt52KHZu6cYRuRyAt5caA-zBl_bZ8wFUXoIAF2S5eB2QNGRb8L-Rhk8BeON90OZE1tTO20DsxOvLpk9o_BS51NK7HUfXArK0pd-5_PiVGD75Iow&je=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 HTTP/1.1Host: qfp.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=172607
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1726075563807&id=t2_9ns793lfk&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=6ec303c8-1691-4af5-bc7a-25f17f3544b7&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_e9773deb&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_9ns793lfk_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/t2_9ns793lfk/config HTTP/1.1Host: pixel-config.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/AW-1046165339?random=1726075564556&cv=11&fst=1726075564556&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4990z8864344206za201zb864344206&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftrustarc.com%2Fconsumer-information%2Fprivacy-feedback-button%2F&hn=www.googleadservices.com&frm=0&tiba=Privacy%20Dispute%20Resolution%20Services%20%7C%20TrustArc&npa=0&pscdl=noapi&auid=1873485069.1726075563&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-GC23DHTMEC&gacid=1116691183.1726075565&gtm=45je4990v876577859z8864344206za200zb864344206&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=0&z=523045096 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rs/846-LLZ-652/images/rwtsmin_minified.js HTTP/1.1Host: info.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; __cf_bm=CF1YeuCVCpLgV04osqi4zVvQ6aP7rsMRBeTfCUL5uvE-1726075565-1.0.1.1-obvYFVB6KgOxSw6GHQGGoIn23ncTwVvYZZs5_OCYSQC00ZGYAXncamIuieayUy9QNhLwTHwnsdYHuN5CJUmbCg; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565
Source: global traffic	HTTP traffic detected: GET /forums/920104 HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1726075563807&id=t2_9ns793lfk&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=6ec303c8-1691-4af5-bc7a-25f17f3544b7&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_e9773deb&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/AW-1046165339/?random=1726075564556&cv=11&fst=1726075564556&bg=ffffff&guid=ON&async=1&gtm=45be4990z8864344206za201zb864344206&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftrustarc.com%2Fconsumer-information%2Fprivacy-feedback-button%2F&hn=www.googleadservices.com&frm=0&tiba=Privacy%20Dispute%20Resolution%20Services%20%7C%20TrustArc&npa=0&pscdl=noapi&auid=1873485069.1726075563&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth-component/uv-auth/uv-auth.css HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://feedback.qbo.intuit.com/forums/920104Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/AW-1046165339/?random=1726075564556&cv=11&fst=1726075564556&bg=ffffff&guid=ON&async=1&gtm=45be4990z8864344206za201zb864344206&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftrustarc.com%2Fconsumer-information%2Fprivacy-feedback-button%2F&hn=www.googleadservices.com&frm=0&tiba=Privacy%20Dispute%20Resolution%20Services%20%7C%20TrustArc&npa=0&pscdl=noapi&auid=1873485069.1726075563&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/AW-1046165339/?random=1726075564556&cv=11&fst=1726074000000&bg=ffffff&guid=ON&async=1&gtm=45be4990z8864344206za201zb864344206&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftrustarc.com%2Fconsumer-information%2Fprivacy-feedback-button%2F&hn=www.googleadservices.com&frm=0&tiba=Privacy%20Dispute%20Resolution%20Services%20%7C%20TrustArc&npa=0&pscdl=noapi&auid=1873485069.1726075563&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDpaXnfzOaCg7FbCSNQ2uqoZTqrzxCfrf5wog&random=3726938828&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://trustarc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth-component/uv-auth/uv-auth.esm.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://feedback.qbo.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/forums/920104Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/wp-components.esm.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://feedback.qbo.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/forums/920104Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /pkg/clients/site2/index-3226d0051af924eb2646f02816d7a869f328355bedcca204e4e0120f1e09f3b1.css HTTP/1.1Host: assets.uvcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://feedback.qbo.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads.uservoice.com/logo/design_setting/109817/original/logo.png?1385523798 HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback.qbo.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pkg/clients/site2/index-4d5e5366848ad2d8e3621058840315fab85cf070d00e5a1229debd2483a1609a.js HTTP/1.1Host: assets.uvcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth-component/uv-auth/p-3e73ccf5.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://feedback.qbo.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/auth-component/uv-auth/uv-auth.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /auth-component/uv-auth/p-8c5cd27e.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://feedback.qbo.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/auth-component/uv-auth/uv-auth.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/p-5117d167.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://feedback.qbo.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/web-portal-components/wp-components/wp-components.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/p-0d86e690.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://feedback.qbo.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/web-portal-components/wp-components/wp-components.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/p-0d33de92.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://feedback.qbo.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/web-portal-components/wp-components/wp-components.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /auth-component/uv-auth/uv-auth.esm.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/wp-components.esm.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/AW-1046165339/?random=1726075564556&cv=11&fst=1726074000000&bg=ffffff&guid=ON&async=1&gtm=45be4990z8864344206za201zb864344206&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftrustarc.com%2Fconsumer-information%2Fprivacy-feedback-button%2F&hn=www.googleadservices.com&frm=0&tiba=Privacy%20Dispute%20Resolution%20Services%20%7C%20TrustArc&npa=0&pscdl=noapi&auid=1873485069.1726075563&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDpaXnfzOaCg7FbCSNQ2uqoZTqrzxCfrf5wog&random=3726938828&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads.uservoice.com/logo/design_setting/109817/original/logo.png?1385523798 HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pkg/clients/site2/tab-selected-4eefad526fb67f2b709b1ee705a24f85794b87407331c04ed60b5b38160bae0a.png HTTP/1.1Host: widget.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.uvcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth-component/uv-auth/static/fonts/proxima_nova_regular.woff2 HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://feedback.qbo.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://feedback.qbo.intuit.com/auth-component/uv-auth/uv-auth.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA
Source: global traffic	HTTP traffic detected: GET /pkg/clients/_shared/field_select-d895064f3513fbd6ca8294037e3a30201cc96fae499b8d6e742a5efe3b1dd438.png HTTP/1.1Host: widget.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.uvcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/p-2250179d.entry.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://feedback.qbo.intuit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/web-portal-components/wp-components/wp-components.esm.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA; _uservoice_tz=America%2FHavana
Source: global traffic	HTTP traffic detected: GET /pkg/clients/_icons/icon.search.16px-bae686b6ac02e0aff2fa9842d8b09cd0584847bc6351aa04d30a9656b3c01672.png HTTP/1.1Host: widget.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.uvcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_environment/5SytiYyrEoStsXof7g09w.js HTTP/1.1Host: qbo.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback.qbo.intuit.com/forums/920104Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA; _uservoice_tz=America%2FHavana
Source: global traffic	HTTP traffic detected: GET /t2/141454/portal/track.js?_=1726075569859&s=0&c=__uvSessionData0 HTTP/1.1Host: by2.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback.qbo.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=rgikZEymT2Obd1X9OCF6XDdCFNEJ0ub.DMDGBxgftjg-1726075570-1.0.1.1-bpM51cyeNsCQrlpJp398lvq0G3Fvjk9F13buryXeIZ4j0..RXYR3WgnmhgIsNNWBjdOWavaVXasHKhf6M4f15Q
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/p-0d86e690.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA; _uservoice_tz=America%2FHavana
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/p-0d33de92.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA; _uservoice_tz=America%2FHavana
Source: global traffic	HTTP traffic detected: GET /auth-component/uv-auth/p-3e73ccf5.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA; _uservoice_tz=America%2FHavana
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/p-5117d167.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA; _uservoice_tz=America%2FHavana
Source: global traffic	HTTP traffic detected: GET /pkg/clients/site2/tab-selected-4eefad526fb67f2b709b1ee705a24f85794b87407331c04ed60b5b38160bae0a.png HTTP/1.1Host: widget.uservoice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=rgikZEymT2Obd1X9OCF6XDdCFNEJ0ub.DMDGBxgftjg-1726075570-1.0.1.1-bpM51cyeNsCQrlpJp398lvq0G3Fvjk9F13buryXeIZ4j0..RXYR3WgnmhgIsNNWBjdOWavaVXasHKhf6M4f15Q
Source: global traffic	HTTP traffic detected: GET /web-portal-components/wp-components/p-2250179d.entry.js HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA; _uservoice_tz=America%2FHavana
Source: global traffic	HTTP traffic detected: GET /widget_environment/5SytiYyrEoStsXof7g09w.js HTTP/1.1Host: qbo.uservoice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=rgikZEymT2Obd1X9OCF6XDdCFNEJ0ub.DMDGBxgftjg-1726075570-1.0.1.1-bpM51cyeNsCQrlpJp398lvq0G3Fvjk9F13buryXeIZ4j0..RXYR3WgnmhgIsNNWBjdOWavaVXasHKhf6M4f15Q
Source: global traffic	HTTP traffic detected: GET /pkg/clients/site2/index-4d5e5366848ad2d8e3621058840315fab85cf070d00e5a1229debd2483a1609a.js HTTP/1.1Host: assets.uvcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pkg/clients/_icons/icon.search.16px-bae686b6ac02e0aff2fa9842d8b09cd0584847bc6351aa04d30a9656b3c01672.png HTTP/1.1Host: widget.uservoice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=rgikZEymT2Obd1X9OCF6XDdCFNEJ0ub.DMDGBxgftjg-1726075570-1.0.1.1-bpM51cyeNsCQrlpJp398lvq0G3Fvjk9F13buryXeIZ4j0..RXYR3WgnmhgIsNNWBjdOWavaVXasHKhf6M4f15Q
Source: global traffic	HTTP traffic detected: GET /pkg/clients/_shared/field_select-d895064f3513fbd6ca8294037e3a30201cc96fae499b8d6e742a5efe3b1dd438.png HTTP/1.1Host: widget.uservoice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=rgikZEymT2Obd1X9OCF6XDdCFNEJ0ub.DMDGBxgftjg-1726075570-1.0.1.1-bpM51cyeNsCQrlpJp398lvq0G3Fvjk9F13buryXeIZ4j0..RXYR3WgnmhgIsNNWBjdOWavaVXasHKhf6M4f15Q
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: feedback.qbo.intuit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; _rf=0; _uv_sid=e62e67468511b8d2d84c1e259289f51c; __cf_bm=gF4nDkkM6IIssgqIJnT3zg4f8PpIt8rV4yhfmeyQcfQ-1726075567-1.0.1.1-gxSVSPNPRuvxl2Ih8566Fi_hr1QPioBGOBeafG_ciGOAWbk38BPmkJ2z1_MwVZxkjBbw2OJykr_hDmp3RsaohA; _uservoice_tz=America%2FHavana; uvts=96c6edab-de53-4a8b-572b-d15fd749f9a2
Source: global traffic	HTTP traffic detected: GET /t2/141454/portal/track.js?_=1726075569859&s=0&c=__uvSessionData0 HTTP/1.1Host: by2.uservoice.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=rgikZEymT2Obd1X9OCF6XDdCFNEJ0ub.DMDGBxgftjg-1726075570-1.0.1.1-bpM51cyeNsCQrlpJp398lvq0G3Fvjk9F13buryXeIZ4j0..RXYR3WgnmhgIsNNWBjdOWavaVXasHKhf6M4f15Q; uvts=96c6edab-de53-4a8b-572b-d15fd749f9a2
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1Host: wup-04e01638.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consumer-information/file-a-privacy-dispute/ HTTP/1.1Host: trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/request HTTP/1.1Host: feedback-form.truste.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watchdog/request HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/css/watchdog.css?v=3.0.0.26 HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/css/te-icons.css?v=3.0.0.10 HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/css/jquery.ui.autocomplete.css HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/css/jquery.ui.theme.css HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/css/bootstrap.min.css HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/jquery-2.1.4.min.js HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/jquery-ui.min.js HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/validate.js?v=3.0.0.11 HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/survey.js?v=3.0.0.9 HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/bootstrap.min.js HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/bootbox.min.js HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/css/images/logo-truste.gif HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/jquery-2.1.4.min.js HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=layout-stylesheet&t=1726074000 HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/validate.js?v=3.0.0.11 HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=image&c=captchaResponse&t=4c5dd4bea6b24fd4b9a76777f67f61cb HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/survey.js?v=3.0.0.9 HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=reload-icon HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=sound-icon HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=script-include&c=captchaResponse&t=4c5dd4bea6b24fd4b9a76777f67f61cb HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/bootstrap.min.js HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/bootbox.min.js HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/css/images/logo-truste.gif HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/js/jquery-ui.min.js HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=image&c=captchaResponse&t=4c5dd4bea6b24fd4b9a76777f67f61cb HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=reload-icon HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=sound-icon HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/css/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback-form.trustarc.com/watchdog/resources/css/jquery.ui.theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=script-include&c=captchaResponse&t=4c5dd4bea6b24fd4b9a76777f67f61cb HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=reload-disabled-icon HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=sound-disabled-icon HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/resources/css/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=reload-disabled-icon HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://feedback-form.trustarc.com/watchdog/requestAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /watchdog/botdetectcaptcha?get=sound-disabled-icon HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=EC33B7D98B46045CE6876B512B2665D4; TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: feedback-form.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=ed43af48-7bd4-44f3-986c-0d41a800497d\|NEW; notice_behavior=implied,us; _gcl_au=1.1.1873485069.1726075563; _rdt_uuid=1726075563803.6ec303c8-1691-4af5-bc7a-25f17f3544b7; _gid=GA1.2.1047510332.1726075565; _gat_UA-4146259-15=1; rw_gclid=; rw_entry_url=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_entry_url-p=https://trustarc.com/consumer-information/privacy-feedback-button/; rw_source=webdirect; rw_source-p=webdirect; rw_channel=direct; rw_channel-p=direct; rw_utm_campaign=; rw_utm_campaign-p=; rw_utm_content=; rw_utm_content-p=; rw_utm_term=; rw_utm_term-p=; rw_utm_medium=; rw_utm_medium-p=; rw_utm_source=; rw_utm_source-p=; _ga_GC23DHTMEC=GS1.1.1726075564.1.0.1726075564.60.0.0; _ga=GA1.1.1116691183.1726075565; _mkto_trk=id:846-LLZ-652&token:_mch-trustarc.com-1726075565489-46292
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic	HTTP traffic detected: GET /consumer-resources/dispute-resolution-2 HTTP/1.1Host: www.truste.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_399.2.dr	String found in binary or memory: <a href="https://www.facebook.com/TrustArc/" target="_blank"><img src="https://trustarc.com/wp-content/uploads/2023/11/fb.svg" class="attachment-full size-full" alt="facebook" decoding="async" loading="lazy" /></a> equals www.facebook.com (Facebook)
Source: chromecache_399.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/trustarc/" target="_blank"><img src="https://trustarc.com/wp-content/uploads/2023/11/li.svg" class="attachment-full size-full" alt="LinkedIn" decoding="async" loading="lazy" /></a> equals www.linkedin.com (Linkedin)
Source: chromecache_399.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/TrustArc/"/> equals www.facebook.com (Facebook)
Source: chromecache_578.2.dr	String found in binary or memory: !function(e){'use strict';function n(e){if(e&&e.__esModule)return e;var n=Object.create(null);return e&&Object.keys(e).forEach((function(t){if('default'!==t){var o=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(n,t,o.get?o:{enumerable:!0,get:function(){return e[t]}})}})),n.default=e,Object.freeze(n)}var t=n(e),o=function(e){return!!e&&'true'===e.toLowerCase()},r=function(e){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:/[\|,]+/;return e?new Set(e.split(n)):new Set},a=function(e){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:/[\|,]+/;return e=e.replace(/^\{[a-zA-Z]+\}$/,''),r(e,n)},l=function(e,n){var t=new Set;return e.forEach((function(e){n.has(e)&&t.add(e)})),t};if(t&&'function'==typeof t.init){var c=function(e){var n=arguments.length>1&&void 0!==arguments[1]&&arguments[1];if(e)try{return JSON.parse(e)}catch(n){console.error('[Bindings] Could not convert value as object:',e),console.error('[Bindings] '.concat(n.message))}return n?[]:{}}('{"Required Cookies":{"domains":["ajax.googleapis.com","app-sj01.marketo.com","consent.trustarc.com","consent.truste.com","console.accessibleweb.com","info.trustarc.com","login.truste.com","ramp.accessibleweb.com","remote.captcha.com","s3-us-west-1.amazonaws.com","submit-irm.trustarc.com","trustarc.com","www.googletagmanager.com","www.trustarc.com"],"value":"0"},"Advertising Cookies":{"domains":["adnxs.com","assets.buzzsprout.com","doubleclick.net","googleads.g.doubleclick.net","ib.adnxs.com","i.ytimg.com","linkedin.com",".mktoweb.com","munchkin.marketo.net","px.ads.linkedin.com","secure.adnxs.com","snap.licdn.com","static.ads-twitter.com","static.doubleclick.net","stats.g.doubleclick.net","storage.buzzsprout.com","ws-assets.zoominfo.com","www.buzzsprout.com","www.linkedin.com","www.redditstatic.com","www.youtube.com","www.youtube-nocookie.com","youtube.com","zoominfo.com"],"value":"2"},"Functional Cookies":{"domains":["accounts.livechatinc.com","api.livechatinc.com","bam-cell.nr-data.net","bam.nr-data.net","branding.jifo.co","cdn.jifo.co","cdnjs.cloudflare.com","cdn.livechatinc.com",".cloudfront.net","e.infogram.com","f.vimeocdn.com","g2.com","g2crowd.com","images.g2crowd.com","images.jifo.co","i.vimeocdn.com","jobs.jobvite.com","js-agent.newrelic.com","maps.googleapis.com","maps.google.com","maps.gstatic.com","nr-data.net","p.typekit.net","s.infogram.com","ssl.google-analytics.com","use.fontawesome.com","use.typekit.net","vimeo.com","ws.zoominfo.com","www.g2.com","www.google-analytics.com","www.google.com","www.google.ie","www.gstatic.com","yt3.ggpht.com"],"value":"1"}}'),s={autoOptInTrustArcDomain:!0,autoOptInHostAfterConsent:!0,enableIframeBlocking:!0,enableAutoBlocking:o('true'),enableAutoBlockOnConsent:o('true'),dntEnabled:o('false'),gpcEnabled:o('false'),dntConsentLevels:a(''),gpcConsentLevels:a(''),cookieNameOverride:'',localStorageNameOverride:'',cpraFinProg:o('false'),allConsentLevels:a(''),autoblockDefaultLevels:a('{AutoblockDefaultIdx}')};s.allConsentLevels&&
Source: chromecache_572.2.dr, chromecache_578.2.dr	String found in binary or memory: !function(e){'use strict';function n(e){if(e&&e.__esModule)return e;var n=Object.create(null);return e&&Object.keys(e).forEach((function(t){if('default'!==t){var o=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(n,t,o.get?o:{enumerable:!0,get:function(){return e[t]}})}})),n.default=e,Object.freeze(n)}var t=n(e),o=function(e){return!!e&&'true'===e.toLowerCase()},r=function(e){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:/[\|,]+/;return e?new Set(e.split(n)):new Set},a=function(e){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:/[\|,]+/;return e=e.replace(/^\{[a-zA-Z]+\}$/,''),r(e,n)},l=function(e,n){var t=new Set;return e.forEach((function(e){n.has(e)&&t.add(e)})),t};if(t&&'function'==typeof t.init){var c=function(e){var n=arguments.length>1&&void 0!==arguments[1]&&arguments[1];if(e)try{return JSON.parse(e)}catch(n){console.error('[Bindings] Could not convert value as object:',e),console.error('[Bindings] '.concat(n.message))}return n?[]:{}}('{"Required Cookies":{"domains":["ajax.googleapis.com","app-sj01.marketo.com","consent.trustarc.com","consent.truste.com","console.accessibleweb.com","info.trustarc.com","login.truste.com","ramp.accessibleweb.com","remote.captcha.com","s3-us-west-1.amazonaws.com","submit-irm.trustarc.com","trustarc.com","www.googletagmanager.com","www.trustarc.com"],"value":"0"},"Advertising Cookies":{"domains":["adnxs.com","assets.buzzsprout.com","doubleclick.net","googleads.g.doubleclick.net","ib.adnxs.com","i.ytimg.com","linkedin.com",".mktoweb.com","munchkin.marketo.net","px.ads.linkedin.com","secure.adnxs.com","snap.licdn.com","static.ads-twitter.com","static.doubleclick.net","stats.g.doubleclick.net","storage.buzzsprout.com","ws-assets.zoominfo.com","www.buzzsprout.com","www.linkedin.com","www.redditstatic.com","www.youtube.com","www.youtube-nocookie.com","youtube.com","zoominfo.com"],"value":"2"},"Functional Cookies":{"domains":["accounts.livechatinc.com","api.livechatinc.com","bam-cell.nr-data.net","bam.nr-data.net","branding.jifo.co","cdn.jifo.co","cdnjs.cloudflare.com","cdn.livechatinc.com",".cloudfront.net","e.infogram.com","f.vimeocdn.com","g2.com","g2crowd.com","images.g2crowd.com","images.jifo.co","i.vimeocdn.com","jobs.jobvite.com","js-agent.newrelic.com","maps.googleapis.com","maps.google.com","maps.gstatic.com","nr-data.net","p.typekit.net","s.infogram.com","ssl.google-analytics.com","use.fontawesome.com","use.typekit.net","vimeo.com","ws.zoominfo.com","www.g2.com","www.google-analytics.com","www.google.com","www.google.ie","www.gstatic.com","yt3.ggpht.com"],"value":"1"}}'),s={autoOptInTrustArcDomain:!0,autoOptInHostAfterConsent:!0,enableIframeBlocking:!0,enableAutoBlocking:o('true'),enableAutoBlockOnConsent:o('true'),dntEnabled:o('false'),gpcEnabled:o('false'),dntConsentLevels:a(''),gpcConsentLevels:a(''),cookieNameOverride:'',localStorageNameOverride:'',cpraFinProg:o('false'),allConsentLevels:a(''),autoblockDefaultLevels:a('{AutoblockDefaultIdx}')};s.allConsentLevels&&
Source: chromecache_469.2.dr, chromecache_539.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Wj:function(){e=Ab()},md:function(){d()}}};var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr, chromecache_539.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Xg:e,Vg:f,Wg:g,Eh:k,Fh:m,De:n,Ab:b},q=D.YT;if(q)return q.ready&&q.ready(d),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(HC(w,"iframe_api")\|\|HC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!yC&&FC(x[A],p.De))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_463.2.dr, chromecache_413.2.dr, chromecache_567.2.dr, chromecache_513.2.dr, chromecache_407.2.dr, chromecache_379.2.dr	String found in binary or memory: return b}uC.H="internal.enableAutoEventOnTimer";var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: connect.intuit.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: static.cns-icn-prod.a.intuit.com
Source: global traffic	DNS traffic detected: DNS query: smx.intuit.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: prd.sentry-io.a.intuit.com
Source: global traffic	DNS traffic detected: DNS query: eventbus.intuit.com
Source: global traffic	DNS traffic detected: DNS query: aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: qfp.intuit.com
Source: global traffic	DNS traffic detected: DNS query: bcdn-god.we-stats.com
Source: global traffic	DNS traffic detected: DNS query: risk-vendor-svc.api.intuit.com
Source: global traffic	DNS traffic detected: DNS query: wup-04e01638.us.v2.we-stats.com
Source: global traffic	DNS traffic detected: DNS query: quickbooks.intuit.com
Source: global traffic	DNS traffic detected: DNS query: log-04e01638.us.v2.we-stats.com
Source: global traffic	DNS traffic detected: DNS query: privacy.truste.com
Source: global traffic	DNS traffic detected: DNS query: www.truste.com
Source: global traffic	DNS traffic detected: DNS query: h.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: eu-aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: trustarc.com
Source: global traffic	DNS traffic detected: DNS query: h64.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: consent.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: chat-application.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.livechatinc.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: info.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: feedback.qbo.intuit.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 846-llz-652.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: assets.uvcdn.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: widget.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: qbo.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: by2.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: feedback-form.truste.com
Source: global traffic	DNS traffic detected: DNS query: feedback-form.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org

Source: unknown

HTTP traffic detected: POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1Host: prd.sentry-io.a.intuit.comConnection: keep-aliveContent-Length: 480sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://connect.intuit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://connect.intuit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_417.2.dr, chromecache_598.2.dr	String found in binary or memory: http://bootboxjs.com/license.txt
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: http://consent.trustarc.com/noticemsg?
Source: chromecache_370.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Autocomplete#theming
Source: chromecache_370.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Menu#theming
Source: chromecache_439.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Theming/API
Source: chromecache_505.2.dr, chromecache_507.2.dr, chromecache_562.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_473.2.dr, chromecache_596.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_473.2.dr, chromecache_596.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_439.2.dr, chromecache_370.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_415.2.dr, chromecache_453.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_370.2.dr	String found in binary or memory: http://jqueryui.com/about)
Source: chromecache_439.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/
Source: chromecache_473.2.dr, chromecache_596.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_473.2.dr, chromecache_596.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_399.2.dr	String found in binary or memory: http://ogp.me/ns#
Source: chromecache_399.2.dr	String found in binary or memory: http://ogp.me/ns/fb#
Source: chromecache_473.2.dr, chromecache_596.2.dr	String found in binary or memory: http://psd2html.com/jcf
Source: chromecache_484.2.dr	String found in binary or memory: http://scripts.sil.org/OFL.
Source: chromecache_484.2.dr	String found in binary or memory: http://scripts.sil.org/OFLThis
Source: chromecache_515.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000000e7fe
Source: chromecache_515.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000000e802
Source: chromecache_515.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000000e805
Source: chromecache_515.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000000e807
Source: chromecache_515.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000011b23
Source: chromecache_515.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735993f
Source: chromecache_515.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000077359969
Source: chromecache_604.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_470.2.dr	String found in binary or memory: http://www.trustarc.com/about/
Source: chromecache_470.2.dr	String found in binary or memory: http://www.youronlinechoices.eu/
Source: 2D85F72862B55C4EADD9E66E06947F3D0.10.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_379.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_464.2.dr, chromecache_486.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://api-js-log.trustarc.com/error
Source: chromecache_399.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_372.2.dr	String found in binary or memory: https://app.qbo.intuit.com/app/login?pagereq=paymentssetup%3Fp_prioritycode%3Dacq937_payments_webpg
Source: chromecache_383.2.dr	String found in binary or memory: https://assets.uvcdn.com/pkg/clients/site2/ie-6f6256efa8fcab0da2c5c83d6ccddaabe16fdd607b4f9e01ad9efe
Source: chromecache_383.2.dr	String found in binary or memory: https://assets.uvcdn.com/pkg/clients/site2/index-3226d0051af924eb2646f02816d7a869f328355bedcca204e4e
Source: chromecache_383.2.dr	String found in binary or memory: https://assets.uvcdn.com/pkg/clients/site2/index-4d5e5366848ad2d8e3621058840315fab85cf070d00e5a1229d
Source: chromecache_383.2.dr	String found in binary or memory: https://assets.uvcdn.com/pkg/clients/site2/lt_IE_9-5d621b8b38991dde7ef0c335fc7cc90426c625e325949517b
Source: chromecache_383.2.dr	String found in binary or memory: https://bdwebit.com/blog/what-does-it-mean-when-a-website-security-certificate-expires/
Source: chromecache_463.2.dr, chromecache_413.2.dr, chromecache_469.2.dr, chromecache_567.2.dr, chromecache_513.2.dr, chromecache_539.2.dr, chromecache_407.2.dr, chromecache_379.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_399.2.dr	String found in binary or memory: https://chat-application.com/embed/index.php?tracker_id=86894795
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://consent-pref.trustarc.com?type=trustarcnew_gdpr&layout=gdpr
Source: chromecache_468.2.dr	String found in binary or memory: https://consent.trustarc.com/
Source: chromecache_399.2.dr	String found in binary or memory: https://consent.trustarc.com/autoblockasset/core.min.39652c2.js?domain=trustarc.com
Source: chromecache_399.2.dr	String found in binary or memory: https://consent.trustarc.com/autoblockoptout?domain=trustarc.com
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://consent.trustarc.com/bannermsg?
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://consent.trustarc.com/get?name=SourceSansPro-Regular.eot)
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://consent.trustarc.com/get?name=SourceSansPro-Regular.otf)
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://consent.trustarc.com/get?name=SourceSansPro-Regular.ttf)
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://consent.trustarc.com/get?name=SourceSansPro-Regular.woff)
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://consent.trustarc.com/get?name=trustarc_close.svg
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://consent.trustarc.com/log
Source: chromecache_393.2.dr, chromecache_386.2.dr, chromecache_506.2.dr, chromecache_559.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_383.2.dr	String found in binary or memory: https://feedback.qbo.intuit.com/admin
Source: chromecache_383.2.dr	String found in binary or memory: https://feedback.qbo.intuit.com/dashboard/contributor/myActivity
Source: chromecache_383.2.dr	String found in binary or memory: https://feedback.qbo.intuit.com/forums/920104
Source: chromecache_383.2.dr	String found in binary or memory: https://feedback.qbo.intuit.com/forums/920104-quickbooks-invoice-online-checkout
Source: chromecache_595.2.dr, chromecache_493.2.dr	String found in binary or memory: https://github.com/bugsnag/bugsnag-js
Source: chromecache_505.2.dr, chromecache_507.2.dr, chromecache_562.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_372.2.dr	String found in binary or memory: https://glam.app.intuit.com/app/guesttos?glocale=en_US
Source: chromecache_379.2.dr	String found in binary or memory: https://google.com
Source: chromecache_379.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_470.2.dr	String found in binary or memory: https://jira.truste.com/browse/DR-132
Source: chromecache_419.2.dr	String found in binary or memory: https://jira.truste.com/browse/DR-140
Source: chromecache_470.2.dr	String found in binary or memory: https://jira.truste.com/browse/DR-149
Source: chromecache_399.2.dr	String found in binary or memory: https://login.truste.com/
Source: chromecache_515.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=msx7sac&ht=tk&f=1980.1981.8542.2005.2006.2009.2011&a=125797425&app
Source: chromecache_379.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_463.2.dr, chromecache_413.2.dr, chromecache_469.2.dr, chromecache_567.2.dr, chromecache_513.2.dr, chromecache_539.2.dr, chromecache_407.2.dr, chromecache_379.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_372.2.dr	String found in binary or memory: https://public-consumer-chat.app.intuit.com/app/ccs/consumer?experienceId=sbsegUsDtCorePos
Source: chromecache_513.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_383.2.dr	String found in binary or memory: https://qbo.intuit.com
Source: chromecache_383.2.dr	String found in binary or memory: https://qbo.uservoice.com/widget_environment/5SytiYyrEoStsXof7g09w.js
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us/
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us/help-article/chargebacks/sign-payments-dispute-pro
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us/help-article/product-system-requirements/system-re
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/money/see-plans/
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/offers/5apy/
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/desktop/#easy-payments
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/legal/
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/legal/qbmoneycard/toc92020/greendot/
Source: chromecache_372.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/legal/toc102017/greendot/?elqTrackId=abf7d8c40f3f48e0b939dfe3
Source: chromecache_383.2.dr	String found in binary or memory: https://s3.amazonaws.com/uploads.uservoice.com/logo/design_setting/109817/original/logo.png?13855237
Source: chromecache_399.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_530.2.dr, chromecache_478.2.dr	String found in binary or memory: https://sketchapp.com
Source: chromecache_413.2.dr, chromecache_513.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_469.2.dr, chromecache_539.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_486.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://submit-irm.trustarc.com/services/validation/11bc4513-fc39-4d64-bcf3-ae603d2bd140
Source: chromecache_464.2.dr, chromecache_486.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_463.2.dr, chromecache_413.2.dr, chromecache_469.2.dr, chromecache_567.2.dr, chromecache_513.2.dr, chromecache_539.2.dr, chromecache_407.2.dr, chromecache_379.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_595.2.dr, chromecache_493.2.dr	String found in binary or memory: https://tinyurl.com/yy3rn63z
Source: chromecache_399.2.dr	String found in binary or memory: https://trust.trustarc.com/
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/#website
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/?p=2753
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/?s=
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/comments/feed/
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/consumer-information/
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/consumer-information/privacy-feedback-button/
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/consumer-information/privacy-feedback-button/#breadcrumb
Source: chromecache_470.2.dr	String found in binary or memory: https://trustarc.com/dispute-resolution-faqs/
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/feed/
Source: chromecache_399.2.dr, chromecache_470.2.dr	String found in binary or memory: https://trustarc.com/privacy-policy/
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/themes/trustarc/assets/dist/images/icon-search.svg
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/themes/trustarc/assets/dist/js/app.js?ver=1711465976
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/themes/trustarc/assets/dist/js/jquery-3.6.0.min.js?ver=1711465976
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/themes/trustarc/assets/dist/style.css?ver=1711660746
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/themes/trustarc/style.css?ver=1711465962
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2023/11/footer-logo.svg
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2023/11/li.svg
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2023/11/logo.svg
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2023/11/x.svg
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2024/02/cropped-favicon-180x180.png
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2024/02/cropped-favicon-192x192.png
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2024/02/cropped-favicon-270x270.png
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2024/02/cropped-favicon-32x32.png
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2024/02/res-square-plus-pink.png
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2024/02/res-square-rect-blue.png
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-content/uploads/2024/03/OG-main.png
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-json/
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ftrustarc.com%2Fconsumer-information%
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/wp-json/wp/v2/pages/2753
Source: chromecache_399.2.dr	String found in binary or memory: https://trustarc.com/xmlrpc.php?rsd
Source: chromecache_399.2.dr	String found in binary or memory: https://twitter.com/TrustArc
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/38974e/00000000000000007735993f/30/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/38974e/00000000000000007735993f/30/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/38974e/00000000000000007735993f/30/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/5cca6d/00000000000000000000e802/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/5cca6d/00000000000000000000e802/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/5cca6d/00000000000000000000e802/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/620bf8/00000000000000000000e7fe/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/620bf8/00000000000000000000e7fe/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/620bf8/00000000000000000000e7fe/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/64e458/000000000000000077359969/30/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/64e458/000000000000000077359969/30/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/64e458/000000000000000077359969/30/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/9cf49e/00000000000000000000e807/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/9cf49e/00000000000000000000e807/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/9cf49e/00000000000000000000e807/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/f7c91f/000000000000000000011b23/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/f7c91f/000000000000000000011b23/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_515.2.dr	String found in binary or memory: https://use.typekit.net/af/f7c91f/000000000000000000011b23/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_399.2.dr	String found in binary or memory: https://use.typekit.net/msx7sac.css
Source: chromecache_383.2.dr	String found in binary or memory: https://www.californiagameday.com/collections/chandler-rogers-jersey
Source: chromecache_383.2.dr	String found in binary or memory: https://www.californiagameday.com/collections/fernando-mendoza-jersey
Source: chromecache_383.2.dr	String found in binary or memory: https://www.californiagameday.com/collections/jaydn-ott-jersey
Source: chromecache_470.2.dr	String found in binary or memory: https://www.dataprivacyframework.gov/s/european-individuals
Source: chromecache_383.2.dr	String found in binary or memory: https://www.gamedaybulldogs.com
Source: chromecache_383.2.dr	String found in binary or memory: https://www.gamedaybulldogs.com/collections/branson-robinson-jersey
Source: chromecache_383.2.dr	String found in binary or memory: https://www.gamedaybulldogs.com/collections/carson-beck-jersey
Source: chromecache_413.2.dr, chromecache_513.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_464.2.dr, chromecache_486.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_464.2.dr, chromecache_486.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_464.2.dr, chromecache_486.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_379.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_464.2.dr, chromecache_486.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_363.2.dr, chromecache_365.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/AW-1046165339/?random
Source: chromecache_379.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_379.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_463.2.dr, chromecache_413.2.dr, chromecache_567.2.dr, chromecache_513.2.dr, chromecache_407.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_464.2.dr, chromecache_486.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_399.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_399.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-T3CS5GN
Source: chromecache_463.2.dr, chromecache_413.2.dr, chromecache_567.2.dr, chromecache_513.2.dr, chromecache_407.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_372.2.dr	String found in binary or memory: https://www.intuit.com/legal/licenses/payment-licenses/
Source: chromecache_372.2.dr	String found in binary or memory: https://www.intuit.com/legal/licenses/payment-licenses/.
Source: chromecache_399.2.dr	String found in binary or memory: https://www.linkedin.com/company/trustarc/
Source: chromecache_469.2.dr, chromecache_539.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_409.2.dr, chromecache_414.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/8d515a58/pixel.js
Source: chromecache_413.2.dr, chromecache_513.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_604.2.dr	String found in binary or memory: https://www.thehonorroll.com/
Source: chromecache_383.2.dr	String found in binary or memory: https://www.tigersoutfit.com/collections/chaney-johnson-jersey
Source: chromecache_411.2.dr, chromecache_468.2.dr	String found in binary or memory: https://www.trustarc.com/privacy-policy/
Source: chromecache_469.2.dr, chromecache_539.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_399.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49760 version: TLS 1.2

System Summary

Blob-based file download detected

Source: C:\Users\user\Downloads\downloaded.pdf

File download: blob:https://connect.intuit.com/1cdbc82a-de75-49a4-9df0-096dce138778C:\Users\user\Downloads\downloaded.pdf

Source: classification engine

Classification label: mal52.phis.win@48/428@180/59

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\57785e1f-8676-4d5f-a30a-6e482afbfd0e.tmp

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-09-11 13-26-35-629.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4264 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4388 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2068 --field-trial-handle=1736,i,407474587202690358,5460987275091151970,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4264 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4388 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2068 --field-trial-handle=1736,i,407474587202690358,5460987275091151970,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

File opened: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\crash_reporter.cfg

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	0%	URL Reputation	safe
https://static.cns-icn-prod.a.intuit.com/favicon.png	0%	Avira URL Cloud	safe
https://trustarc.com/wp-content/uploads/2023/11/x.svg	0%	Avira URL Cloud	safe
https://use.typekit.net/af/38974e/00000000000000007735993f/30/a?primer=7fa3915bdafdf03041871920a205b	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/payments/desktop/#easy-payments	0%	Avira URL Cloud	safe
https://trustarc.com/wp-content/uploads/2023/11/logo.svg	0%	Avira URL Cloud	safe
https://feedback.qbo.intuit.com/favicon.ico	0%	Avira URL Cloud	safe
https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/l?primer=7fa3915bdafdf03041871920a205b	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8948.2692353fb3048aa0.js	0%	Avira URL Cloud	safe
https://feedback.qbo.intuit.com/web-portal-components/wp-components/p-0d86e690.js	0%	Avira URL Cloud	safe
https://assets.uvcdn.com/pkg/clients/site2/lt_IE_9-5d621b8b38991dde7ef0c335fc7cc90426c625e325949517b	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/money/see-plans/	0%	Avira URL Cloud	safe
https://trustarc.com/consumer-information/privacy-feedback-button	0%	Avira URL Cloud	safe
https://consent.trustarc.com/bannermsg?action=views&domain=trustarc.com&behavior=implied&country=us&language=en&rand=0.6817166937050458&session=ed43af48-7bd4-44f3-986c-0d41a800497d&userType=NEW&referer=https://trustarc.com	0%	Avira URL Cloud	safe
https://www.redditstatic.com/ads/pixel.js	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFL.	0%	Avira URL Cloud	safe
https://qfp.intuit.com/RmpvkGZVpTL2gC0p?8f0a204681a65600=walIN3r193HTkqhqrpkPASuIB5Ilg_xDrjRW8-b-IHWBZl2vX8CNzK6JkEfjWmh9Eh-HsNkbXllEe0xv67l9wYLduAqIgSVb6U4NM16l0VNBt52KHZu6cYRuRyAt5caA-zBl_bZ8wFUXoIAF2S5eB2QNGRb8L-Rhk8BeON90OZE1tTO20DsxOvLpk9o_BS51NK7HUfXArK0pd-5_PiVGD75Iow	0%	Avira URL Cloud	safe
https://trustarc.com/feed/	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/truste.svg	0%	Avira URL Cloud	safe
http://docs.jquery.com/UI/Autocomplete#theming	0%	Avira URL Cloud	safe
https://glam.app.intuit.com/app/guesttos?glocale=en_US	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2352-26b800f7418ab0e8.js	0%	Avira URL Cloud	safe
https://risk-vendor-svc.api.intuit.com/v1/assessment	0%	Avira URL Cloud	safe
https://trustarc.com/wp-json/wp/v2/pages/2753	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/payable-f99486b740249e9c.js	0%	Avira URL Cloud	safe
https://bcdn-god.we-stats.com/scripts/04e01638/04e01638.js	0%	Avira URL Cloud	safe
https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=sound-disabled-icon	0%	Avira URL Cloud	safe
https://use.typekit.net/af/620bf8/00000000000000000000e7fe/27/d?primer=7fa3915bdafdf03041871920a205b	0%	Avira URL Cloud	safe
https://px.ads.linkedin.com/collect?	0%	Avira URL Cloud	safe
https://qfp.intuit.com/3p06UcGCgDiQfqTo?c84a36c162de6771=RXG_bMwZXr_XhFVIwt32kqwNxnOKzv8xkV12KQJ3Lr7tVsgdukkYLWwDbAZt4u8BFdjr4sKadJl67ZXZePF2AgbrW6mvX44pIenhtrJCALuoQNZbeGZinNjJKjbYHYDnPvXqlCUtKGrUiC72ax9c60_zVHxJ4LWUytfDJnOiYOprtjSzKMuipPt2sZNmgZIhFMavpPVwFNe7QYuUG4mxO76tJg&jf=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	0%	Avira URL Cloud	safe
https://use.typekit.net/af/38974e/00000000000000007735993f/30/d?primer=7fa3915bdafdf03041871920a205b	0%	Avira URL Cloud	safe
https://feedback-form.trustarc.com/watchdog/resources/css/watchdog.css?v=3.0.0.26	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/mastercard.bug.svg	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2	0%	Avira URL Cloud	safe
https://feedback.qbo.intuit.com/auth-component/uv-auth/uv-auth.css	0%	Avira URL Cloud	safe
https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1	0%	Avira URL Cloud	safe
http://typekit.com/eulas/000000000000000000011b23	0%	Avira URL Cloud	safe
https://connect.intuit.com/portal/rest/pdf/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/invoice.pdf	0%	Avira URL Cloud	safe
https://feedback.qbo.intuit.com/forums/920104-quickbooks-invoice-online-checkout	0%	Avira URL Cloud	safe
https://log-04e01638.us.v2.we-stats.com/api/v1/sendLogs?cid=ironfist&cdsnum=1726075537139-sjn0000936-3569fb87-961b-4a63-a34c-f079de61b7c4&csid=de5d3f8de21d442794d5b0de3b939741&ds=js&sdkVer=2.28.0.1370.1bbbfa1	0%	Avira URL Cloud	safe
https://trustarc.com/wp-content/uploads/2024/03/OG-main.png	0%	Avira URL Cloud	safe
https://trustarc.com/wp-content/uploads/2023/11/fb.svg	0%	Avira URL Cloud	safe
https://use.typekit.net/af/38974e/00000000000000007735993f/30/l?primer=7fa3915bdafdf03041871920a205b	0%	Avira URL Cloud	safe
https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/a?primer=7fa3915bdafdf03041871920a205b	0%	Avira URL Cloud	safe
https://qfp.intuit.com/YbxrASaDVd3Kc50e?c36b7dc3a8f47772=_6WGV0IKupf2sDLowowrHE5d-CNLDavGE7JHc6bkw8vxK4hipz483WKFXhkTTHCwqO4EIHtUZQ0bmoRG511DgtuTHNWZ7kg7mX6zfgUwpjnq118c266Rm-2-wmVSiq3znVgRlgXMo2LumzDAW1BrZ-R7lYGn0eNvNgCvu_o	0%	Avira URL Cloud	safe
https://trustarc.com/wp-content/uploads/2024/02/res-square-rect-blue.png	0%	Avira URL Cloud	safe
https://consent-pref.trustarc.com?type=trustarcnew_gdpr&layout=gdpr	0%	Avira URL Cloud	safe
http://www.trustarc.com/about/	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5669-3d23076a3a43f159.js	0%	Avira URL Cloud	safe
https://feedback-form.trustarc.com/watchdog/resources/css/images/logo-truste.gif	0%	Avira URL Cloud	safe
https://connect.intuit.com/portal/rest/invoice/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/view	0%	Avira URL Cloud	safe
https://tinyurl.com/yy3rn63z	0%	Avira URL Cloud	safe
https://trustarc.com/wp-content/uploads/2023/11/li.svg	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2378.40683c6fb386355f.js	0%	Avira URL Cloud	safe
https://quickbooks.intuit.com/payments/legal/toc102017/greendot/?elqTrackId=abf7d8c40f3f48e0b939dfe3	0%	Avira URL Cloud	safe
https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/d?primer=7fa3915bdafdf03041871920a205b	0%	Avira URL Cloud	safe
https://h64.online-metrix.net/do_Wm0ryEoptAt-X?59529d0ed5049cd5=PEbhHvhkErVP3GM2OJip-Zetl5Yts5kQMhmtz5ZatdC1NeH_m4PkQ1VCDzAl3oWcMVfZ6JD06E93U4L994CywanF59gizxqCMJ-ZUW88lcEMw1FBVdqYZ8x0afZBX1MkWu54UvE6FqQhPrY2rcj-AKZfnE9qSmqOSPGccmk	0%	Avira URL Cloud	safe
https://connect.intuit.com/portal/rest/reporting/batch	0%	Avira URL Cloud	safe
https://trustarc.com/wp-content/themes/trustarc/assets/dist/js/app.js?ver=1711465976	0%	Avira URL Cloud	safe
https://consent.trustarc.com/autoblockoptout?domain=trustarc.com	0%	Avira URL Cloud	safe
https://feedback-form.trustarc.com/watchdog/resources/css/jquery.ui.theme.css	0%	Avira URL Cloud	safe
https://trustarc.com/wp-includes/js/wp-emoji-release.min.js?ver=6.6.1	0%	Avira URL Cloud	safe
http://psd2html.com/jcf	0%	Avira URL Cloud	safe
https://feedback.qbo.intuit.com/web-portal-components/wp-components/p-5117d167.js	0%	Avira URL Cloud	safe
https://consent.trustarc.com/get?name=SourceSansPro-Regular.eot)	0%	Avira URL Cloud	safe
https://trustarc.com/consumer-information/file-a-privacy-dispute/	0%	Avira URL Cloud	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://consent.trustarc.com/log	0%	Avira URL Cloud	safe
https://trustarc.com/wp-content/uploads/2024/02/cropped-favicon-270x270.png	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/webpack-3dbe3e04f86f6c11.js	0%	Avira URL Cloud	safe
https://consent.trustarc.com/get?name=trustarc_close.svg	0%	Avira URL Cloud	safe
https://use.typekit.net/af/f7c91f/000000000000000000011b23/27/a?primer=7fa3915bdafdf03041871920a205b	0%	Avira URL Cloud	safe
https://trustarc.com/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=script-include&c=captchaResponse&t=4c5dd4bea6b24fd4b9a76777f67f61cb	0%	Avira URL Cloud	safe
https://submit-irm.trustarc.com/services/validation/11bc4513-fc39-4d64-bcf3-ae603d2bd140	0%	Avira URL Cloud	safe
https://yoast.com/wordpress/plugins/seo/	0%	Avira URL Cloud	safe
https://trustarc.com/	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5428-18008d1732926864.js	0%	Avira URL Cloud	safe
https://privacy.truste.com/privacy-seal/validation?rid=6218d0ea-ee8b-4472-87dd-ba4bf95aab3d	0%	Avira URL Cloud	safe
https://feedback-form.truste.com/watchdog/request	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7868.851b65ef7fa1a422.js	0%	Avira URL Cloud	safe
https://h.online-metrix.net/j__WaTLYPrl6qGp7?aa873481f3a0bc61=rMN_jfGojP1IOt5ffuqdQbUIR_O3ddu83uiIa6E5RArI2qrysOpxwlnqYmGGx9Odr7atDG8tbBeG7E9xQmj7fHcE6YVAB_1tPhKx6LywQbuzYIBiAmWoufj_aV_icUbQ1aXU2oS2ngbaQD26QZuufYenD10zRqrj9-noNdXIZNUpUHNEzDbolGJ68lFWa0MdHlzZxOJb_obHuqOKYKhNnNlO3dg	0%	Avira URL Cloud	safe
https://trust.trustarc.com/	0%	Avira URL Cloud	safe
https://assets.uvcdn.com/pkg/clients/site2/index-4d5e5366848ad2d8e3621058840315fab85cf070d00e5a1229d	0%	Avira URL Cloud	safe
https://www.truste.com/consumer-resources/dispute-resolution-2	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/main-593e743601aca717.js	0%	Avira URL Cloud	safe
https://www.trustarc.com/privacy-policy/	0%	Avira URL Cloud	safe
https://www.gamedaybulldogs.com	0%	Avira URL Cloud	safe
https://qfp.intuit.com/NfOpx-RLutCFq1dn?27f2e3b7cb9047b0=ZPvAywB5fIwacgCX0emF994U9IaW7vfygBgwYztfdQRp2-UXl6iIJlr-umeZHrZgmrGgTxROGccZmruL70PVh7UrcnWskAEeJ_YeITWytng1wLisPuiazozX-8TjSd-_4Fj2pGVJQtQCZXh1d9nRQWMWNvPW_Elk-ljsg5CtFJkVKJ2hRzGcPB29tG5QKB-KuTCMvHYe1sRmDDCK-loAVnYC36k	0%	Avira URL Cloud	safe
https://trustarc.com/comments/feed/	0%	Avira URL Cloud	safe
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3161-f0b07e6689a822c1.js	0%	Avira URL Cloud	safe
https://trustarc.com/dispute-resolution-faqs/	0%	Avira URL Cloud	safe
https://widget.uservoice.com/pkg/clients/site2/tab-selected-4eefad526fb67f2b709b1ee705a24f85794b87407331c04ed60b5b38160bae0a.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	172.64.41.3	true	false	unknown
v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.net	91.235.134.131	true	false	unknown
truste-com-509071560.us-east-1.elb.amazonaws.com	3.214.225.17	true	false	unknown
static.cns-icn-prod.a.intuit.com	13.225.78.31	true	false	unknown
eu-aa.online-metrix.net	91.235.132.129	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
sj01.mktossl.com	104.17.73.206	true	false	unknown
stats.g.doubleclick.net	173.194.76.157	true	false	unknown
d2rikquc8s9owl.cloudfront.net	65.9.86.56	true	false	unknown
d296je7bbdd650.cloudfront.net	52.85.48.9	true	false	unknown
s3.amazonaws.com	54.231.236.208	true	false	unknown
wup-04e01638.us.v2.we-stats.com	52.141.217.134	true	false	unknown
h-v60nf4oj-qfp.online-metrix.net	91.235.133.106	true	false	unknown
www.google.com	172.217.18.100	true	false	unknown
h64.online-metrix.net	192.225.158.1	true	false	unknown
by2.uservoice.com	104.17.27.92	true	false	unknown
aa.online-metrix.net	91.235.132.129	true	false	unknown
widget.uservoice.com	104.17.31.92	true	false	unknown
chat-application.com	3.215.34.116	true	false	unknown
eventbus.a.intuit.com	35.166.207.170	true	false	unknown
legacy-validation-prod2-1100105057.us-east-1.elb.amazonaws.com	44.213.177.215	true	false	unknown
prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com	52.24.39.108	true	false	unknown
platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com	54.188.205.94	true	false	unknown
assets.uvcdn.com	104.18.18.225	true	false	unknown
legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com	54.81.34.222	true	false	unknown
consent.trustarc.com	18.238.243.9	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.65.140	true	false	unknown
analytics-alv.google.com	216.239.34.181	true	false	unknown
www3.l.google.com	142.250.181.238	true	false	unknown
reddit.map.fastly.net	151.101.193.140	true	false	unknown
qbo.uservoice.com	104.17.28.92	true	false	unknown
googleads.g.doubleclick.net	142.250.186.162	true	false	unknown
trustarc.com	141.193.213.21	true	false	unknown
td.doubleclick.net	142.250.186.98	true	false	unknown
prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com	35.84.56.34	true	false	unknown
h.online-metrix.net	91.235.132.130	true	false	unknown
846-llz-652.mktoresp.com	192.28.147.68	true	false	unknown
log-04e01638.us.v2.we-stats.com	52.238.253.184	true	false	unknown
alb.reddit.com	unknown	unknown	false	unknown
smx.intuit.com	unknown	unknown	false	unknown
www.truste.com	unknown	unknown	false	unknown
connect.intuit.com	unknown	unknown	true	unknown
use.typekit.net	unknown	unknown	false	unknown
www.redditstatic.com	unknown	unknown	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown
privacy.truste.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
qfp.intuit.com	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
risk-vendor-svc.api.intuit.com	unknown	unknown	false	unknown
info.trustarc.com	unknown	unknown	false	unknown
prd.sentry-io.a.intuit.com	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
pixel-config.reddit.com	unknown	unknown	false	unknown
quickbooks.intuit.com	unknown	unknown	false	unknown
feedback.qbo.intuit.com	unknown	unknown	false	unknown
feedback-form.truste.com	unknown	unknown	false	unknown
eventbus.intuit.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
cdn.livechatinc.com	unknown	unknown	false	unknown
bcdn-god.we-stats.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
translate.google.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
feedback-form.trustarc.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://trustarc.com/wp-content/uploads/2023/11/logo.svg	false	Avira URL Cloud: safe	unknown
https://trustarc.com/wp-content/uploads/2023/11/x.svg	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/favicon.png	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8948.2692353fb3048aa0.js	false	Avira URL Cloud: safe	unknown
https://feedback.qbo.intuit.com/web-portal-components/wp-components/p-0d86e690.js	false	Avira URL Cloud: safe	unknown
https://feedback.qbo.intuit.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://qfp.intuit.com/RmpvkGZVpTL2gC0p?8f0a204681a65600=walIN3r193HTkqhqrpkPASuIB5Ilg_xDrjRW8-b-IHWBZl2vX8CNzK6JkEfjWmh9Eh-HsNkbXllEe0xv67l9wYLduAqIgSVb6U4NM16l0VNBt52KHZu6cYRuRyAt5caA-zBl_bZ8wFUXoIAF2S5eB2QNGRb8L-Rhk8BeON90OZE1tTO20DsxOvLpk9o_BS51NK7HUfXArK0pd-5_PiVGD75Iow	false	Avira URL Cloud: safe	unknown
https://www.redditstatic.com/ads/pixel.js	false	Avira URL Cloud: safe	unknown
https://trustarc.com/consumer-information/privacy-feedback-button	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/truste.svg	false	Avira URL Cloud: safe	unknown
https://consent.trustarc.com/bannermsg?action=views&domain=trustarc.com&behavior=implied&country=us&language=en&rand=0.6817166937050458&session=ed43af48-7bd4-44f3-986c-0d41a800497d&userType=NEW&referer=https://trustarc.com	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2352-26b800f7418ab0e8.js	false	Avira URL Cloud: safe	unknown
https://risk-vendor-svc.api.intuit.com/v1/assessment	false	Avira URL Cloud: safe	unknown
https://bcdn-god.we-stats.com/scripts/04e01638/04e01638.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/payable-f99486b740249e9c.js	false	Avira URL Cloud: safe	unknown
https://qfp.intuit.com/3p06UcGCgDiQfqTo?c84a36c162de6771=RXG_bMwZXr_XhFVIwt32kqwNxnOKzv8xkV12KQJ3Lr7tVsgdukkYLWwDbAZt4u8BFdjr4sKadJl67ZXZePF2AgbrW6mvX44pIenhtrJCALuoQNZbeGZinNjJKjbYHYDnPvXqlCUtKGrUiC72ax9c60_zVHxJ4LWUytfDJnOiYOprtjSzKMuipPt2sZNmgZIhFMavpPVwFNe7QYuUG4mxO76tJg&jf=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	false	Avira URL Cloud: safe	unknown
https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=sound-disabled-icon	false	Avira URL Cloud: safe	unknown
https://feedback-form.trustarc.com/watchdog/resources/css/watchdog.css?v=3.0.0.26	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/mastercard.bug.svg	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/portal/rest/pdf/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/invoice.pdf	false	Avira URL Cloud: safe	unknown
https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1	false	Avira URL Cloud: safe	unknown
https://feedback.qbo.intuit.com/auth-component/uv-auth/uv-auth.css	false	Avira URL Cloud: safe	unknown
https://log-04e01638.us.v2.we-stats.com/api/v1/sendLogs?cid=ironfist&cdsnum=1726075537139-sjn0000936-3569fb87-961b-4a63-a34c-f079de61b7c4&csid=de5d3f8de21d442794d5b0de3b939741&ds=js&sdkVer=2.28.0.1370.1bbbfa1	false	Avira URL Cloud: safe	unknown
https://trustarc.com/wp-content/uploads/2023/11/fb.svg	false	Avira URL Cloud: safe	unknown
https://qfp.intuit.com/YbxrASaDVd3Kc50e?c36b7dc3a8f47772=_6WGV0IKupf2sDLowowrHE5d-CNLDavGE7JHc6bkw8vxK4hipz483WKFXhkTTHCwqO4EIHtUZQ0bmoRG511DgtuTHNWZ7kg7mX6zfgUwpjnq118c266Rm-2-wmVSiq3znVgRlgXMo2LumzDAW1BrZ-R7lYGn0eNvNgCvu_o	false	Avira URL Cloud: safe	unknown
https://trustarc.com/wp-content/uploads/2024/02/res-square-rect-blue.png	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5669-3d23076a3a43f159.js	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/portal/rest/invoice/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/view	false	Avira URL Cloud: safe	unknown
https://feedback-form.trustarc.com/watchdog/resources/css/images/logo-truste.gif	false	Avira URL Cloud: safe	unknown
https://trustarc.com/wp-content/uploads/2023/11/li.svg	false	Avira URL Cloud: safe	unknown
https://trustarc.com/wp-content/themes/trustarc/assets/dist/js/app.js?ver=1711465976	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2378.40683c6fb386355f.js	false	Avira URL Cloud: safe	unknown
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	false	URL Reputation: safe	unknown
https://h64.online-metrix.net/do_Wm0ryEoptAt-X?59529d0ed5049cd5=PEbhHvhkErVP3GM2OJip-Zetl5Yts5kQMhmtz5ZatdC1NeH_m4PkQ1VCDzAl3oWcMVfZ6JD06E93U4L994CywanF59gizxqCMJ-ZUW88lcEMw1FBVdqYZ8x0afZBX1MkWu54UvE6FqQhPrY2rcj-AKZfnE9qSmqOSPGccmk	false	Avira URL Cloud: safe	unknown
https://connect.intuit.com/portal/rest/reporting/batch	false	Avira URL Cloud: safe	unknown
https://consent.trustarc.com/autoblockoptout?domain=trustarc.com	false	Avira URL Cloud: safe	unknown
https://trustarc.com/wp-includes/js/wp-emoji-release.min.js?ver=6.6.1	false	Avira URL Cloud: safe	unknown
https://trustarc.com/consumer-information/privacy-feedback-button/	false		unknown
https://feedback-form.trustarc.com/watchdog/resources/css/jquery.ui.theme.css	false	Avira URL Cloud: safe	unknown
https://trustarc.com/consumer-information/file-a-privacy-dispute/	false	Avira URL Cloud: safe	unknown
https://feedback.qbo.intuit.com/web-portal-components/wp-components/p-5117d167.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/webpack-3dbe3e04f86f6c11.js	false	Avira URL Cloud: safe	unknown
https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=script-include&c=captchaResponse&t=4c5dd4bea6b24fd4b9a76777f67f61cb	false	Avira URL Cloud: safe	unknown
https://privacy.truste.com/privacy-seal/validation?rid=6218d0ea-ee8b-4472-87dd-ba4bf95aab3d	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5428-18008d1732926864.js	false	Avira URL Cloud: safe	unknown
https://feedback-form.truste.com/watchdog/request	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7868.851b65ef7fa1a422.js	false	Avira URL Cloud: safe	unknown
https://qfp.intuit.com/NfOpx-RLutCFq1dn?27f2e3b7cb9047b0=ZPvAywB5fIwacgCX0emF994U9IaW7vfygBgwYztfdQRp2-UXl6iIJlr-umeZHrZgmrGgTxROGccZmruL70PVh7UrcnWskAEeJ_YeITWytng1wLisPuiazozX-8TjSd-_4Fj2pGVJQtQCZXh1d9nRQWMWNvPW_Elk-ljsg5CtFJkVKJ2hRzGcPB29tG5QKB-KuTCMvHYe1sRmDDCK-loAVnYC36k	false	Avira URL Cloud: safe	unknown
https://h.online-metrix.net/j__WaTLYPrl6qGp7?aa873481f3a0bc61=rMN_jfGojP1IOt5ffuqdQbUIR_O3ddu83uiIa6E5RArI2qrysOpxwlnqYmGGx9Odr7atDG8tbBeG7E9xQmj7fHcE6YVAB_1tPhKx6LywQbuzYIBiAmWoufj_aV_icUbQ1aXU2oS2ngbaQD26QZuufYenD10zRqrj9-noNdXIZNUpUHNEzDbolGJ68lFWa0MdHlzZxOJb_obHuqOKYKhNnNlO3dg	false	Avira URL Cloud: safe	unknown
https://www.truste.com/consumer-resources/dispute-resolution-2	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/main-593e743601aca717.js	false	Avira URL Cloud: safe	unknown
https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3161-f0b07e6689a822c1.js	false	Avira URL Cloud: safe	unknown
https://widget.uservoice.com/pkg/clients/site2/tab-selected-4eefad526fb67f2b709b1ee705a24f85794b87407331c04ed60b5b38160bae0a.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://assets.uvcdn.com/pkg/clients/site2/lt_IE_9-5d621b8b38991dde7ef0c335fc7cc90426c625e325949517b	chromecache_383.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_469.2.dr, chromecache_539.2.dr	false	URL Reputation: safe	unknown
https://quickbooks.intuit.com/payments/desktop/#easy-payments	chromecache_372.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/38974e/00000000000000007735993f/30/a?primer=7fa3915bdafdf03041871920a205b	chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/l?primer=7fa3915bdafdf03041871920a205b	chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/money/see-plans/	chromecache_372.2.dr	false	Avira URL Cloud: safe	unknown
http://scripts.sil.org/OFL.	chromecache_484.2.dr	false	Avira URL Cloud: safe	unknown
https://trustarc.com/feed/	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
http://docs.jquery.com/UI/Autocomplete#theming	chromecache_370.2.dr	false	Avira URL Cloud: safe	unknown
https://glam.app.intuit.com/app/guesttos?glocale=en_US	chromecache_372.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_464.2.dr, chromecache_486.2.dr	false	URL Reputation: safe	unknown
https://trustarc.com/wp-json/wp/v2/pages/2753	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/620bf8/00000000000000000000e7fe/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect?	chromecache_513.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/38974e/00000000000000007735993f/30/d?primer=7fa3915bdafdf03041871920a205b	chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_505.2.dr, chromecache_507.2.dr, chromecache_562.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/000000000000000000011b23	chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_486.2.dr	false	URL Reputation: safe	unknown
https://feedback.qbo.intuit.com/forums/920104-quickbooks-invoice-online-checkout	chromecache_383.2.dr	false	Avira URL Cloud: safe	unknown
https://trustarc.com/wp-content/uploads/2024/03/OG-main.png	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/38974e/00000000000000007735993f/30/l?primer=7fa3915bdafdf03041871920a205b	chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
https://consent-pref.trustarc.com?type=trustarcnew_gdpr&layout=gdpr	chromecache_411.2.dr, chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
http://www.trustarc.com/about/	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_399.2.dr	false	URL Reputation: safe	unknown
https://tinyurl.com/yy3rn63z	chromecache_595.2.dr, chromecache_493.2.dr	false	Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/payments/legal/toc102017/greendot/?elqTrackId=abf7d8c40f3f48e0b939dfe3	chromecache_372.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
http://psd2html.com/jcf	chromecache_473.2.dr, chromecache_596.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_393.2.dr, chromecache_386.2.dr, chromecache_506.2.dr, chromecache_559.2.dr	false	Avira URL Cloud: safe	unknown
https://consent.trustarc.com/get?name=SourceSansPro-Regular.eot)	chromecache_411.2.dr, chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_505.2.dr, chromecache_507.2.dr, chromecache_562.2.dr	false	Avira URL Cloud: safe	unknown
https://consent.trustarc.com/log	chromecache_411.2.dr, chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://trustarc.com/wp-content/uploads/2024/02/cropped-favicon-270x270.png	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://trustarc.com/xmlrpc.php?rsd	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/f7c91f/000000000000000000011b23/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
https://consent.trustarc.com/get?name=trustarc_close.svg	chromecache_411.2.dr, chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://submit-irm.trustarc.com/services/validation/11bc4513-fc39-4d64-bcf3-ae603d2bd140	chromecache_411.2.dr, chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://trustarc.com/	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.uvcdn.com/pkg/clients/site2/index-4d5e5366848ad2d8e3621058840315fab85cf070d00e5a1229d	chromecache_383.2.dr	false	Avira URL Cloud: safe	unknown
https://trust.trustarc.com/	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://www.trustarc.com/privacy-policy/	chromecache_411.2.dr, chromecache_468.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gamedaybulldogs.com	chromecache_383.2.dr	false	Avira URL Cloud: safe	unknown
https://trustarc.com/comments/feed/	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://trustarc.com/dispute-resolution-faqs/	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.194.76.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.19.225	unknown	United States	13335	CLOUDFLARENETUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
18.238.243.123	unknown	United States	16509	AMAZON-02US	false
141.193.213.21	trustarc.com	United States	396845	DV-PRIMARY-ASN1US	false
52.35.79.138	unknown	United States	16509	AMAZON-02US	false
151.101.193.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
104.17.73.206	sj01.mktossl.com	United States	13335	CLOUDFLARENETUS	false
151.101.65.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
13.35.58.148	unknown	United States	16509	AMAZON-02US	false
44.241.213.0	unknown	United States	16509	AMAZON-02US	false
141.193.213.20	unknown	United States	396845	DV-PRIMARY-ASN1US	false
104.18.18.225	assets.uvcdn.com	United States	13335	CLOUDFLARENETUS	false
96.17.64.189	unknown	United States	16625	AKAMAI-ASUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
3.214.183.78	unknown	United States	14618	AMAZON-AESUS	false
3.214.225.17	truste-com-509071560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.166.207.170	eventbus.a.intuit.com	United States	16509	AMAZON-02US	false
34.213.165.212	unknown	United States	16509	AMAZON-02US	false
104.17.29.92	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.141.217.134	wup-04e01638.us.v2.we-stats.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.238.243.9	consent.trustarc.com	United States	16509	AMAZON-02US	false
104.17.31.92	widget.uservoice.com	United States	13335	CLOUDFLARENETUS	false
52.85.48.9	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
3.229.155.61	unknown	United States	14618	AMAZON-AESUS	false
54.81.34.222	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
13.32.121.110	unknown	United States	16509	AMAZON-02US	false
91.235.132.130	h.online-metrix.net	Netherlands	30286	THMUS	false
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false
44.213.177.215	legacy-validation-prod2-1100105057.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.204.30.119	unknown	United States	14618	AMAZON-AESUS	false
54.69.149.23	unknown	United States	16509	AMAZON-02US	false
52.24.39.108	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com	United States	16509	AMAZON-02US	false
142.250.181.238	www3.l.google.com	United States	15169	GOOGLEUS	false
104.17.28.92	qbo.uservoice.com	United States	13335	CLOUDFLARENETUS	false
192.28.147.68	846-llz-652.mktoresp.com	United States	53580	MARKETOUS	false
52.238.253.184	log-04e01638.us.v2.we-stats.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
91.235.132.129	eu-aa.online-metrix.net	Netherlands	30286	THMUS	false
104.17.30.92	unknown	United States	13335	CLOUDFLARENETUS	false
91.235.134.131	v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.net	Netherlands	30286	THMUS	false
54.231.160.152	unknown	United States	16509	AMAZON-02US	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
3.215.34.116	chat-application.com	United States	14618	AMAZON-AESUS	false
142.250.186.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
65.9.86.56	d2rikquc8s9owl.cloudfront.net	United States	16509	AMAZON-02US	false
13.225.78.31	static.cns-icn-prod.a.intuit.com	United States	16509	AMAZON-02US	false
91.235.133.106	h-v60nf4oj-qfp.online-metrix.net	Netherlands	30286	THMUS	false
142.250.186.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
54.231.236.208	s3.amazonaws.com	United States	16509	AMAZON-02US	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
35.84.56.34	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com	United States	237	MERIT-AS-14US	false
104.17.27.92	by2.uservoice.com	United States	13335	CLOUDFLARENETUS	false
192.225.158.1	h64.online-metrix.net	United States	30286	THMUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
54.188.205.94	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com	United States	16509	AMAZON-02US	false
151.101.129.140	unknown	United States	54113	FASTLYUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1509553
Start date and time:	2024-09-11 19:24:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@48/428@180/59
Cookbook Comments:	Browse: https://privacy.truste.com/privacy-seal/validation?rid=6218d0ea-ee8b-4472-87dd-ba4bf95aab3d Browse: https://feedback.qbo.intuit.com/forums/920104 Browse: https://trustarc.com/consumer-information/file-a-privacy-dispute/ Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 216.58.206.46, 74.125.206.84, 34.104.35.123, 23.57.18.228, 23.32.10.200, 52.165.165.26, 199.232.210.172, 142.250.184.202, 142.250.185.202, 172.217.16.138, 142.250.185.74, 142.250.186.170, 142.250.186.74, 142.250.185.234, 142.250.186.138, 142.250.185.170, 216.58.212.138, 142.250.185.106, 172.217.23.106, 142.250.181.234, 142.250.185.138, 216.58.206.42, 142.250.74.202, 192.229.221.95, 13.95.31.18, 142.250.185.104, 23.192.240.149, 142.250.185.136, 52.165.164.15, 2.19.126.198, 2.19.126.206, 2.19.126.219, 2.19.126.211, 23.38.98.94, 23.38.98.79, 172.217.18.106, 2.22.61.186, 2.22.61.163, 13.107.42.14, 23.210.118.178, 23.192.243.198, 142.250.184.238, 2.19.126.143, 2.19.126.149, 184.28.88.176, 2.23.197.184, 142.250.65.227, 142.251.40.99, 54.227.187.23, 52.202.204.11, 52.5.13.197, 23.22.254.206
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, e8652.dscx.akamaiedge.net, http-download.intuit.com.edgekey.net, e39296.f.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, e10776.b.akamaiedge.net, mktg.intuit.com.edgekey.net, wildcard.marketo.net.edgekey.net, acroipm2.adobe.com, a1874.dscg1.akamai.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, use-stls.adobe.com.edgesuite.net, www.googletagmanager.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, cdn.livechat.com.edgekey.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, crl.root-x1.letsencrypt.org.edgekey.net, www-linkedin-com.l-0005.l-msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net,
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US

Simulations

Behavior and APIs

Time	Type	Description
13:26:41	API Interceptor	1x Sleep call for process: AcroCEF.exe modified

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.233349247372174
Encrypted:	false
SSDEEP:	6:PpZIq2Pwkn2nKuAl9OmbnIFUt82pbZmw+2pxkwOwkn2nKuAl9OmbjLJ:PpZIvYfHAahFUt82pb/+2px5JfHAaSJ
MD5:	6B1E9F45B436DDFFFF8CC7C57077E6C5
SHA1:	6E1353C2C0B9F3C6D8FEF8124A7495289B067CF6
SHA-256:	4A45E01F0232CB74DED742AD5CE7E6D0AED36C42F96208260CEBC6CAA1EBAC7A
SHA-512:	19AC70EAC95741A19C27CD77084D5C0C937B8D571F5D7E358C442116A8C93B1C477DBDC3BF48FD93D8E2536FB8FA32AEFFEBFA6384CFB2292563D12B32B8F5B6
Malicious:	false
Reputation:	low
Preview:	2024/09/11-13:26:33.766 15c0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/09/11-13:26:33.771 15c0 Recovering log #3.2024/09/11-13:26:33.771 15c0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.233349247372174
Encrypted:	false
SSDEEP:	6:PpZIq2Pwkn2nKuAl9OmbnIFUt82pbZmw+2pxkwOwkn2nKuAl9OmbjLJ:PpZIvYfHAahFUt82pb/+2px5JfHAaSJ
MD5:	6B1E9F45B436DDFFFF8CC7C57077E6C5
SHA1:	6E1353C2C0B9F3C6D8FEF8124A7495289B067CF6
SHA-256:	4A45E01F0232CB74DED742AD5CE7E6D0AED36C42F96208260CEBC6CAA1EBAC7A
SHA-512:	19AC70EAC95741A19C27CD77084D5C0C937B8D571F5D7E358C442116A8C93B1C477DBDC3BF48FD93D8E2536FB8FA32AEFFEBFA6384CFB2292563D12B32B8F5B6
Malicious:	false
Reputation:	low
Preview:	2024/09/11-13:26:33.766 15c0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/09/11-13:26:33.771 15c0 Recovering log #3.2024/09/11-13:26:33.771 15c0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	333
Entropy (8bit):	5.230340945324999
Encrypted:	false
SSDEEP:	6:Ppj4+q2Pwkn2nKuAl9Ombzo2jMGIFUt82pjm8Zmw+2pjfXiVkwOwkn2nKuAl9OmT:Ppk+vYfHAa8uFUt82pC8/+2prSV5JfHA
MD5:	A29B021EB5F2A3C63D28807A8D9047E3
SHA1:	B5F25EC863FB08EAC5DCBD001D85C0BA943CD4A9
SHA-256:	6BA6CE94E3A9F87FF866E3CFFA43887C39A32BD50AA77B50E951EC5B81E24D48
SHA-512:	97B47F7648EE8570B525BDF46764A943DD306155C2C938F62D634D29E25F9695196991FF3599617265516C684012C321065EF4C0708023C606837644AAF92AD5
Malicious:	false
Reputation:	low
Preview:	2024/09/11-13:26:33.895 d2c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/09/11-13:26:33.896 d2c Recovering log #3.2024/09/11-13:26:33.897 d2c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	333
Entropy (8bit):	5.230340945324999
Encrypted:	false
SSDEEP:	6:Ppj4+q2Pwkn2nKuAl9Ombzo2jMGIFUt82pjm8Zmw+2pjfXiVkwOwkn2nKuAl9OmT:Ppk+vYfHAa8uFUt82pC8/+2prSV5JfHA
MD5:	A29B021EB5F2A3C63D28807A8D9047E3
SHA1:	B5F25EC863FB08EAC5DCBD001D85C0BA943CD4A9
SHA-256:	6BA6CE94E3A9F87FF866E3CFFA43887C39A32BD50AA77B50E951EC5B81E24D48
SHA-512:	97B47F7648EE8570B525BDF46764A943DD306155C2C938F62D634D29E25F9695196991FF3599617265516C684012C321065EF4C0708023C606837644AAF92AD5
Malicious:	false
Reputation:	low
Preview:	2024/09/11-13:26:33.895 d2c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/09/11-13:26:33.896 d2c Recovering log #3.2024/09/11-13:26:33.897 d2c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.972695042269216
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqEsBdOg2Hacaq3QYiubInP7E4T3y:Y2sRds0dMHV3QYhbG7nby
MD5:	3D6E4812141879B1E6A03DC3565076BF
SHA1:	11367727C89536F0E4375507CA1F202A86F9A911
SHA-256:	6C9839FE1DEB640AFD14276092AD257DAA17DF93DF0D6282E28A52657AE2F743
SHA-512:	4B9891DDB8536583494AFF6A48226501C8D3A592C6FE9752024D42F0CF7D1AF380F40DD61464C5D563E01A935C78565E868B7F8B3B9FF02D08D550BFB6A7F1C6
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13370635605276833","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":176817},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\de10eb08-25e5-4d1e-89fb-48b950014108.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.972695042269216
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqEsBdOg2Hacaq3QYiubInP7E4T3y:Y2sRds0dMHV3QYhbG7nby
MD5:	3D6E4812141879B1E6A03DC3565076BF
SHA1:	11367727C89536F0E4375507CA1F202A86F9A911
SHA-256:	6C9839FE1DEB640AFD14276092AD257DAA17DF93DF0D6282E28A52657AE2F743
SHA-512:	4B9891DDB8536583494AFF6A48226501C8D3A592C6FE9752024D42F0CF7D1AF380F40DD61464C5D563E01A935C78565E868B7F8B3B9FF02D08D550BFB6A7F1C6
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13370635605276833","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":176817},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.257948453350459
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo7uJpusMZ:etJCV4FiN/jTN/2r8Mta02fEhgO73go9
MD5:	6DC6BAF7A80ECF99C8FD7541D8C4A5EC
SHA1:	C14A21621BE8EE68B6C543651006B6F87F040F5B
SHA-256:	96C2C49CC511FE9989AC948C5A47A59B34E828573CF9F49C355EA15D682CE6AC
SHA-512:	4F65EC469EF8C7EB13E97C197974FB4BB7B45317AA63C2083A893E79E17AE80978096082CC3DEB7598D44D38DC3B8EBF3B4FC2B1FA132F0CC9F10139317C2465
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.209217278125746
Encrypted:	false
SSDEEP:	6:Ppb+q2Pwkn2nKuAl9OmbzNMxIFUt82pZZZmw+2pEmVkwOwkn2nKuAl9OmbzNMFLJ:Ppb+vYfHAa8jFUt82pj/+2pEmV5JfHAo
MD5:	9EF9FD2042484299D842BEFEA7314BE3
SHA1:	B9D5C50814E1EB4558B486F6B4BD2B498A33EE89
SHA-256:	A3A6D7D53A9572EE2962862224A631951095046A539F15E72D558564AA0C2C3B
SHA-512:	2982A0FE447C050A7224F0E95E0A0023B90827D6479B4AEC3F13264AAD4E04DC2095079F4AF3538B2A7B9042898F6E54D8308A8525950F92BC9089C5EB3BC236
Malicious:	false
Reputation:	low
Preview:	2024/09/11-13:26:34.312 d2c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/09/11-13:26:34.356 d2c Recovering log #3.2024/09/11-13:26:34.408 d2c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.209217278125746
Encrypted:	false
SSDEEP:	6:Ppb+q2Pwkn2nKuAl9OmbzNMxIFUt82pZZZmw+2pEmVkwOwkn2nKuAl9OmbzNMFLJ:Ppb+vYfHAa8jFUt82pj/+2pEmV5JfHAo
MD5:	9EF9FD2042484299D842BEFEA7314BE3
SHA1:	B9D5C50814E1EB4558B486F6B4BD2B498A33EE89
SHA-256:	A3A6D7D53A9572EE2962862224A631951095046A539F15E72D558564AA0C2C3B
SHA-512:	2982A0FE447C050A7224F0E95E0A0023B90827D6479B4AEC3F13264AAD4E04DC2095079F4AF3538B2A7B9042898F6E54D8308A8525950F92BC9089C5EB3BC236
Malicious:	false
Reputation:	low
Preview:	2024/09/11-13:26:34.312 d2c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/09/11-13:26:34.356 d2c Recovering log #3.2024/09/11-13:26:34.408 d2c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240911172637Z-169.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	1.5553588984542988
Encrypted:	false
SSDEEP:	384:JaDDnafj0yNkci1E+uNFZqWjKn4XIrvVEN7CVv7s:w/afjRli1E+uNFZqWjq4c2OJs
MD5:	F2344D5FE940F29D666B70D035B14C97
SHA1:	6167460E6C6B2988E81EEEC8ED3FEA857B627C8C
SHA-256:	D507FD3291699D535F14E893B934695B2B1A302D05A4973033C25E01E3EB1043
SHA-512:	F53A9DBE3577057250A70D1A76DBFC5EE39D63A6D364D440926B78B827EF75A75E90C3EA75C40D890CAB44BB1BE8E32770BA320A4CB14091F329FB7CC3973BBE
Malicious:	false
Reputation:	low
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.4452334291186775
Encrypted:	false
SSDEEP:	384:yezci5tsiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rLs3OazzU89UTTgUL
MD5:	1F24408A4DFC4B69B26A3EC2170698EA
SHA1:	012C946A590A50D8025E23DAD7E4D705AAD6C2D1
SHA-256:	01098760611275A0A871A49FF0AFB52B943E605506D2AFDA1523F38ED51049B4
SHA-512:	869374E72084F746F04CF64DCE21CC156213FFB95F58F14D30005BE6637A9D29A13BC585E3AB8F5646C35CCB2124ECF352BE520593E95E5E149B277CCE84916A
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7770213941704514
Encrypted:	false
SSDEEP:	48:7M2p/E2ioyVd0ioy9oWoy1Cwoy12nKOioy1noy1AYoy1Wioy1hioybioyQBoy1nL:7lpjuyFVXKQVYb9IVXEBodRBkw
MD5:	72257113710D537B755E86688411BCDE
SHA1:	C3B29E7200EAE151A40073A6749A24F7BF083926
SHA-256:	51AC495C4540D2B05FFFB91ED2882697D2756F36CFF9E0851D5F7919B219B97A
SHA-512:	665CF3F7A4F0CA49B2D380D3AC766B2E445E416A129D8F74E8F35F2E27AC07FC005356474FCEB288A92308B6592976AC1F430D63DD820E01735951715F74972D
Malicious:	false
Reputation:	low
Preview:	.... .c.....8.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Reputation:	low
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.742553200765872
Encrypted:	false
SSDEEP:	3:kkFklj1c53lltfllXlE/HT8kqUzXNNX8RolJuRdxLlGB9lQRYwpDdt:kKbleT82dNMa8RdWBwRd
MD5:	F16009ACF0C7A46C8362B10AD5086C45
SHA1:	F9C1B8D335E170B49319EEB036A3B523CF5FBA32
SHA-256:	1816E87278997B3F479B7374CADCB0AEA00D2E3F0B46AAD6A0EEC7F5E408A6F9
SHA-512:	F15EACE5947CE1D0C21F739D7D58DBE2767378A8758220D8CF2C9E7E66E6B000460F5BD0C1881C24DEBD9A7516D0F576EAF45EAA6C6C1F3B465715D27757A177
Malicious:	false
Reputation:	low
Preview:	p...... ............o...(....................................................... ..........W.....Q..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.374706139547643
Encrypted:	false
SSDEEP:	6:YEQXJ2HXF6+dDfDI9VoZcg1vRcR0YIXJEoAvJM3g98kUwPeUkwRe9:YvXKXFlDb7Zc0v1ZGMbLUkee9
MD5:	8CBE72DCBBC77C27536A5638C58E685E
SHA1:	96A7B1ED46FD0202A79C74F7A8F7346A5F4A4C11
SHA-256:	324EA1FC48618BFF403F4B2E7870C8DB550E727D2539B830817370621BADB9CB
SHA-512:	3D2E069847CFC3BB87C93A98955BA80F76CA978D13ADE604DED43BC8C45F9F9FA44EBFC4792B341F4D730CF480233665E8584206BF241E51818F658C899664CC
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.32248376074895
Encrypted:	false
SSDEEP:	6:YEQXJ2HXF6+dDfDI9VoZcg1vRcR0YIXJEoAvJfBoTfXpnrPeUkwRe9:YvXKXFlDb7Zc0v1ZGWTfXcUkee9
MD5:	6CA9A58A37B300882407618F3AF41673
SHA1:	B05B92833D1DE3E14645A64C51CD50CC90BD3A2B
SHA-256:	A6246ED5A4F0884698FB2FC3C46F072E68981398CF128EDBD34E92E832D3ED65
SHA-512:	64CD164CBBB483E859689E2F8D02810813FA428DB622F600DC3ED2F05CAE2287ADC5A08DC1CE550BC674717669E931EF065D4851938E6E44BBF8214633F0ADEA
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.300622675494218
Encrypted:	false
SSDEEP:	6:YEQXJ2HXF6+dDfDI9VoZcg1vRcR0YIXJEoAvJfBD2G6UpnrPeUkwRe9:YvXKXFlDb7Zc0v1ZGR22cUkee9
MD5:	AF984B5B0EB7F2CF52B4CF543F7EAF9F
SHA1:	DB4EE809F203458F9B0C516B96E523143E11339E
SHA-256:	43AF6B7084E2D568D2A8E74B0A17A82007AFF8DD4DEF63E157D41365529BBFBF
SHA-512:	D4C9A048DED806CF6D1ECC9A4DDDE9C8B3E4BF7FD56DEA1EF5FEA5E806981D367D91D3B8FA4C44F4F33728C7433BCA5AE15C1CE8C0E9906F51B288E696DD9205
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.362114637084222
Encrypted:	false
SSDEEP:	6:YEQXJ2HXF6+dDfDI9VoZcg1vRcR0YIXJEoAvJfPmwrPeUkwRe9:YvXKXFlDb7Zc0v1ZGH56Ukee9
MD5:	2C4ED9D60B9D9BB491092FD3F690F684
SHA1:	2B77BF8A9D274A38882970E69A335C9A29990875
SHA-256:	F3DBB0EED95DF9768030D4513ABDB3A5551DCF5492D8C4E83AEFC62F6AF39293
SHA-512:	1D6CBBAB86628EE6BF7E6A5139C7AF0207202355FEC1AB803A2D8EB650D00330DB96A3C8E875CA64B5E7BDCB041A26A329CC83E4F48E66B575B8575DC4B6567D
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	5.666559662185851
Encrypted:	false
SSDEEP:	24:Yv6Xj7zv1+pLgEFqciGennl0RCmK8czOCY4w2XVvPY:YvAQhgLtaAh8cvYvGvg
MD5:	B61FF4D82DE101C0C75EF722D14AF8E1
SHA1:	BC11B8E254510EE9CF6F2EDEC824EB8BCC001B33
SHA-256:	1BBB6ED422D9033E7C0E25D155C4056BD61FF3A7B230E682D4C9233A17625911
SHA-512:	2F3986420A644943EBDFF4BB595A44E74CEEC955B947D0900DBB81B55A175AE0A30F6F76E21819BCA1593EE8E49FCB968257D2C06EEEC9FD1761E116A477BA59
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_2","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"afb9c2a3-eaf4-41f9-9d73-768e72f72282","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQgZmlsZXMgdG8gYW5kIGZyb20gUERGXG53aXRob3V0IGxpbWl0cy4ifSwidGNhdElkIjpudWxsfQ==","dataType":"application\/json","encodingSc

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.656114585716637
Encrypted:	false
SSDEEP:	24:Yv6Xj7zv1oVLgEF0c7sbnl0RCmK8czOCYHflEpwiVXVvPY:YvACFg6sGAh8cvYHWpwMvg
MD5:	E607854ECE2071CFD71C02A82850E574
SHA1:	04099767E9E604E7A612E4B4E93F08248068A923
SHA-256:	4D2E022854EF2867FA318E7981305B7C5D186915EA612C1D31D533E7B68E4BE2
SHA-512:	D9C840E4C25A51A2731C84C247F2B489B6B5EF41BA6C9CC30467C647F9B5E4320A63C504A13C04EA9A62030C0EF3DF65068C81B92F38738467066CFFCE134BF1
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.312649272164059
Encrypted:	false
SSDEEP:	6:YEQXJ2HXF6+dDfDI9VoZcg1vRcR0YIXJEoAvJfQ1rPeUkwRe9:YvXKXFlDb7Zc0v1ZGY16Ukee9
MD5:	0F4A768F7B686872837BC82367083DA7
SHA1:	602E3B6F1344E32D3D9EF3A28121485EF2F9A6A0
SHA-256:	5A2150E76115A241971E57E5F1A8EEEECDEE5A7FA7702C5BB177FC45286A7548
SHA-512:	241E0DD74594D4DBEAA9D9B7ED09F517B7F3CAC8D59CD2DBF3DF74458FC695F6709F63E6814474B5915F5D2247C2A8141CE664D65AADF54DA27718FC170C8A8A
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	5.6496506914017655
Encrypted:	false
SSDEEP:	24:Yv6Xj7zv1t2LgEF7cciAXs0nl0RCmK8czOCAPtciBXVvPY:YvAvogc8hAh8cvAbvg
MD5:	71B36BC951391B8F7F488476F74F7E46
SHA1:	D6624CAFC5B70D6E9D0E36E22AD1080EC50B575B
SHA-256:	7786C9C520553B270ADC67FDE41EB5F68866EC9BDFEB56B79C22D2C6BD734352
SHA-512:	2A07AE2B7E4C14F809FE560DBF1963D287EF0D3C914D4DC4E7FD8E97225929EB5C191895CAD6FB5298CFDD01009BBB5E7E042D5F9D20A57A900B12366F796F57
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_1","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"49d2f713-7aa9-44db-aa50-0a7a22add459","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1744

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.700187141716204
Encrypted:	false
SSDEEP:	24:Yv6Xj7zv1FKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5XVvPY:YvADEgqprtrS5OZjSlwTmAfSKvvg
MD5:	1DE79767ADE6982E60FA4F13D1BC4ED3
SHA1:	BC840E36A388EF0150077A6A4BE248D6844970B6
SHA-256:	F8ABB1FB7B491C0F106BDE31611891DC0D59BED375040BC59A1E3A05DA283A34
SHA-512:	B6F213D3EFBD35E0EF4055BBD43DCF7C6DC3EAB6160F62A334689CA8BF5CFB770C480C67ACC7A19A40A14339FED6AD6C4D794FB157922820D71E6B1B5A451628
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.315896786245807
Encrypted:	false
SSDEEP:	6:YEQXJ2HXF6+dDfDI9VoZcg1vRcR0YIXJEoAvJfYdPeUkwRe9:YvXKXFlDb7Zc0v1ZGg8Ukee9
MD5:	ADBF434F655D85E7237B2C6DB0FCC5F1
SHA1:	F207883BB381DA3DBCC0B956FA0280CA3D475830
SHA-256:	F4A985F0306D05D26DFD94A6DB7E05213D39C844ABDCA55C06A494B23AD9063C
SHA-512:	67EAE20216522BF5325FB8C4814E94C3059FE0C685BBE78F71FB207B872EFCA4600C947E1C37EEFE0F97512471B5606F986971E534F87DF50890038BAB9E5486
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.779934175247448
Encrypted:	false
SSDEEP:	24:Yv6Xj7zv14rLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNvVvPY:YvAeHgDv3W2aYQfgB5OUupHrQ9FJvvg
MD5:	46A5AB7508469DA11F142FC7457CEB0E
SHA1:	12BD85E2F6DB266FBCC658A7897336A4865D2238
SHA-256:	75660BF8424816FD14E0E8246DCF362E13F0D77E61F83C2656D75A0949785CF3
SHA-512:	865D2CBA374BDC7BFF845983381FD4A005AEEBA8E8CA5D48F472DE64D120A976A4AE83BC613029488631AD3E82310642D7C91232EB02D12B1DE696CF3677A788
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.299334627656813
Encrypted:	false
SSDEEP:	6:YEQXJ2HXF6+dDfDI9VoZcg1vRcR0YIXJEoAvJfbPtdPeUkwRe9:YvXKXFlDb7Zc0v1ZGDV8Ukee9
MD5:	D3A27F9B2CEDBA44A7D0DE5B0AB75709
SHA1:	EDC95A755786DA2ABD572E6168C4EB8BCBBA84C1
SHA-256:	3A48E60E703C3E4E7DCCF230937AD60FDA59DD43043F82AC005AAF69EFE1890B
SHA-512:	1C1A3D9B8FCBD4A9EF3015F0ABB072B4B267859F5DE77618E2AA4E27F9278FDD5E0DBC614FC25D56927FFB50D7AFF5E6506F5711B6423B9198B4F635015EA482
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.30389173494303
Encrypted:	false
SSDEEP:	6:YEQXJ2HXF6+dDfDI9VoZcg1vRcR0YIXJEoAvJf21rPeUkwRe9:YvXKXFlDb7Zc0v1ZG+16Ukee9
MD5:	DC10EC4E3033B583F2C4C92BAE015468
SHA1:	08A1D69098E4F8C06D6B0F9D9E108BDC7C909FD1
SHA-256:	148E071D8B2B03E78BADEB26DA64E982A62DCD667D1D40BC624F285FF010C51A
SHA-512:	318B7A8C78ABBBAC8A05F5EA84B74732B7584E153B8ED3FD2402D0D7D4AB46BCF36C2565F359BEE7C53CE697FE9E61A0CC0910315D6E2565BD2580F0F093B2A7
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1058
Entropy (8bit):	5.656222457168817
Encrypted:	false
SSDEEP:	24:Yv6Xj7zv1iamXayLgEFRcONaqnl0RCmK8czOC+w2E+tg8BXVvPY:YvASBguOAh8cv+NK+vg
MD5:	B47786D256D361B69E891D262A4DBF60
SHA1:	CD7C315B7F000AA8D4E6CE78BBA06C95628C7FC5
SHA-256:	AE56B3C13B4A30F4E3784F022ABF3B0E28A0CF3EF5154359F14598546A9505F7
SHA-512:	8C26277327E367A1A13AF1C6148AE7283E199BBB2286F3E399A2767940B00A2489A77082F0285F3420A503EA8864EE1FA0E9C18264834BD70BCB53222C591F5F
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_3","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"ece07729-7db6-4f20-9f8d-7976ad373049","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IlNlbmQgZG9jdW1lbnRzICYgZm9ybXNcbmZvciBmYXN0IGUtc2lnbmluZyBvbmxpbmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.280919145523101
Encrypted:	false
SSDEEP:	6:YEQXJ2HXF6+dDfDI9VoZcg1vRcR0YIXJEoAvJfshHHrPeUkwRe9:YvXKXFlDb7Zc0v1ZGUUUkee9
MD5:	F2587CC05C78255F24BAAB5D32F970F6
SHA1:	F8FA1F27A2976E0C9563B854DDAA42FCEA4836B4
SHA-256:	DF4E8FF153B5F2BC298DFAB031B817A695BA162E8F1FCCA721E1330AB2006542
SHA-512:	240B1EAF6B3C5592E547D7559A585F397A30E7EE0F85F2862C3D91C834F0495B9D67EF925737F7DB638F0568AAEF50150D620536218C79162788E67D57974419
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.375311318054431
Encrypted:	false
SSDEEP:	12:YvXKXFlDb7Zc0v1ZGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWzVjTg:Yv6Xj7zv11168CgEXX5kcIfANhUVvPY
MD5:	4AC367F50B9E90CF89A794D694668D82
SHA1:	AC89E31445F49D19F521AAE810D9B30141B8F175
SHA-256:	9FEA2B11DBC091223BF7A64159F26A3B26AEC55D9929335FA2737AD2951CE7BC
SHA-512:	A6D1A91EF7BFFCAB22E81BFC325802D36064C282C3C84D64081C8F98B6228B4C2C615F40910ACF1F06F6F018138C5D7D749B7DCF30D6F5F4A9538ACFF7B0C5C5
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"249a28fe-8bcd-4b47-b216-c5efc1f752bb","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1726253370088,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1726075605118}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Reputation:	low
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.123980361565587
Encrypted:	false
SSDEEP:	48:YAv6v0wvUKvlvbw0K1vGv/WQhzvWvE58vFdpv9lvsz3vbKdvCkh91v8P/Rv6J:ti8wsKNE0ou3WEze8589dp1lOTKdx1UA
MD5:	C755E8F93C93706243832642BF851A3E
SHA1:	F3A8A03DCA0B8D70DED1ACA5612062C47791069E
SHA-256:	8C120413F71CA687467A95C997413BB0344E7124BB1E01808A170E454AA87B2B
SHA-512:	E9ADC5B20735268EB661D2F626CC654645F4F487163266DAA3176ED5A9BE2BDF0CCB2C44DDE8A173217CB14C5FF0AA0FE82EAFAF50F71C80671C64B2D10245FC
Malicious:	false
Reputation:	low
Preview:	{"all":[{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"35507a1e22646f81f74eefc3db6f42cb","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1726075604000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"f1bf8d40b7e2f04ad10d267343d5ab89","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1058,"ts":1726075604000},{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"763ad18027964cf66397257609b1358b","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1726075604000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"69eeec5a3007f53dcd023f6328464770","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1063,"ts":1726075604000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"9702d539957b2a48a8a09d47660f8eac","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1038,"ts":1726075604000},{"id":"Edit_InApp_Aug2020","info":{"dg":"6debcb9090f5b8a570bc1aa11d2e347c","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1891206358029383
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUWSvR9H9vxFGiDIAEkGVvpM:lNVmswUUUUUUUUW+FGSItQ
MD5:	B3CEF08B3ACD8D7B9F73A6BBA5CA1713
SHA1:	3BD1F2F887D21B86192D7FA7CBAE7C7D64754D2B
SHA-256:	4342D02DE0ED00BCAAB99C928E04EA9E9699F664AF5FF00F3E175E0A9FAA982F
SHA-512:	14ABB7DBBDF7421943BE997BCFB6BABC6B3D6EE90AB08D9F5190B57B1A86D7408232537928FB15B4DBB8BE915F132EE690F4A27658A6EC47CA92AE97E4760694
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.607051684638774
Encrypted:	false
SSDEEP:	48:7MFqKUUUUUUUUUU0vR9H9vxFGiDIAEkGVvfAqFl2GL7ms6xm:7AxUUUUUUUUUUkFGSItCKVmsr
MD5:	905389A17045DF51E1808BCAF37255EE
SHA1:	1E8CC508601C1F966422B82AE05AC5A63FD31E58
SHA-256:	90552E9FCD65BB117C6079A3169A87B38A35CD62E8E0BEBE9F640BD1AA073008
SHA-512:	1991412CE301558BBF5ACABF31E1CEE788DE91A9AB4C7F34C72E89B08EF4F7935C9E2572390EEF885FADC643E99434C2B5E9E2E978D3E7215961A5C9425B30E7
Malicious:	false
Reputation:	low
Preview:	.... .c.....A.v.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIb258a.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.53559722477471
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8RpKw:Qw946cPbiOxDlbYnuRKs
MD5:	390A1DFE047A25943E1C68470DE33D75
SHA1:	0E1A24A700B50E5D3659079D1A8F800DC894A22F
SHA-256:	8FDD1228D386B1C817C167DE9EA085358E8881878B5FB740191CE81B2059FD6F
SHA-512:	467C85FF39BCD73407ADF6105E9B68B582CBA19E352D8CE430A30B2701A15CF86B5B48FEFB4F9F1B744EB8FD93C6D3E8D8D9F3BDE23F01A8C469656DECBF1AE2
Malicious:	false
Reputation:	low
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.1./.0.9./.2.0.2.4. . .1.3.:.2.6.:.4.5. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-09-11 13-26-35-629.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Reputation:	low
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15089
Entropy (8bit):	5.361429344894831
Encrypted:	false
SSDEEP:	384:KZN415p+Vleui6hbt1q9sqE44HEWV6R6V6e6J626/6B676P6x6v661MBTGxKEd2k:cYRk4Hcfy0uiECaT4wk23sXQXcW
MD5:	1DA56B7798410AD6A28333ABEEA00196
SHA1:	7F85A65EE2000704C3B1F3E9B82538A230123B9A
SHA-256:	57758D7B27D1AA56A620025B8F7C70361AA9F4729408041017F26C5F50126DAA
SHA-512:	16A802C902853681EB367D43D15D745D1A442BF17A961B25AEFB598B88377561B917F479CDFFC8A9C07B3F1F1E267AB43B15E5C607F8B1CE4A22B7B30936C203
Malicious:	false
Reputation:	low
Preview:	SessionID=d953957e-5031-40fb-8f2c-dc99f1ee4969.1726075595641 Timestamp=2024-09-11T13:26:35:641-0400 ThreadID=708 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=d953957e-5031-40fb-8f2c-dc99f1ee4969.1726075595641 Timestamp=2024-09-11T13:26:35:642-0400 ThreadID=708 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=d953957e-5031-40fb-8f2c-dc99f1ee4969.1726075595641 Timestamp=2024-09-11T13:26:35:642-0400 ThreadID=708 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=d953957e-5031-40fb-8f2c-dc99f1ee4969.1726075595641 Timestamp=2024-09-11T13:26:35:642-0400 ThreadID=708 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=d953957e-5031-40fb-8f2c-dc99f1ee4969.1726075595641 Timestamp=2024-09-11T13:26:35:642-0400 ThreadID=708 Component=ngl-lib_NglAppLib Description="SetConfig: N

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.397948461905218
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2rn:D
MD5:	DB6C542E52E9CB5E0AD91B8737C5EB3E
SHA1:	BECCA4AEB69C6530EF8327B3D766F0DA357A787F
SHA-256:	74341F47AD714408042C091F07F083F5C6BA2E1AD5B7879987E66C70D35BE7B5
SHA-512:	C41EAB75A48B476DC7E691C57D2897BFA928E5FA0A96C7B683698A9966A9384F571931A2C193225855042F1DA5130DFD19CB6125B5C67C30505AE08E78EE82E5
Malicious:	false
Reputation:	low
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\1cfea8e6-cbe2-432e-8bd8-9f4fd29e4c7c.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLaGZDwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVwWLaGZDwZGk3mlind9i4ufFXpAXkru
MD5:	18E3D04537AF72FDBEB3760B2D10C80E
SHA1:	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC
SHA-256:	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
SHA-512:	2A5B9B0A5DC98151AD2346055DF2F7BFDE62F6069A4A6A9AB3377B644D61AE31609B9FC73BEE4A0E929F84BF30DA4C1CDE628915AC37C7542FD170D12DE41298
Malicious:	false
Reputation:	low
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\918f3535-0b99-441e-a30e-532d8b790a40.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Reputation:	low
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\b86297bf-30f7-414a-87e1-3a083527f47d.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Reputation:	low
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\ee4de6c0-06c3-4362-9aef-2405e6d9030b.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Reputation:	low
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\Downloads\57785e1f-8676-4d5f-a30a-6e482afbfd0e.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4
Category:	dropped
Size (bytes):	163343
Entropy (8bit):	7.903307852590344
Encrypted:	false
SSDEEP:	3072:Js5rugu4r4f4D8iH2eZQ6WR1yvPCepke4RDJJEXnrpYRUcYjS0SoF:e5rugFRhOjR0Ce2eqJAnFYWCoF
MD5:	ECF369BEC295E27D8CE5509FB267D259
SHA1:	38AAD1D7F06D9F761CC0545B089950FE2FCDA736
SHA-256:	0CC96496DED6759377C3E6ED608E0471F318ECFB29B5CC52D320F56484ED548E
SHA-512:	19A6F945F47AF83EB81B5F54F7CD567557474D74B2E79B02FC8DAB18E6D61F2E71A1950ACC1937D85D190FF5429B917A6885DDE51BE0C5A6A22CAAE95C48E682
Malicious:	false
Reputation:	low
Preview:	%PDF-1.4..%......5 0 obj.<<./Length 2854./Filter /FlateDecode>>.stream..x......^_.s..Xo.X.....@...m..,69tO....H..$e[..<...i.4_".`.v.>LK...l..d.2k3.......zz.../w1.e.vQ.._//_/.....B1iog;9.g=}.........n.bl...a............SN~..p......Xfa+?.,V,.K.7....K.k.=..pq...r.v.ZLN....,rz........u.P!<4.q9U.A../.."~..]5..u.2v.z....K..wQ.%.....R.{#.hI.F?d.P =Y..nE.U72..6.A..E...H1{.=.#...r1.l4....\|....5.F.Q.....o.EC.......P...#.$......(j....x...^/..:..Jg.....\@h?Y.q0H......H.7....>.?.:#W..Z......`.+....m<".P.H\|0.E..d..g..<..LV.9H..c...d...k^..+fz.IG`..05..u<..WL.U7.f.H./aV-hv.2.$....BuT.'.eL.g.....:H..}...1.\.43....:..^........T.y.8..h..y.uP.....#..C:z.jc..[.W....K0vv.a.^..1e.&..R..U.~.4.i...X.^fcY.J...e-W..6..@..d...\.........E.....6.V......5d[.WG{2u)....L_Y.gS..&.~.......(L....?.`D.;h...;L......sT....+...6i.....Q...k.Z.C}..k......S}.Y..H..%.`..!2o[...6.5..Z..Fs.*.Q4i.@..)..!....8.......0....Ln..4.'.B...-.g..m.L.%..#M@\...Y...C.....Nn<.5Gr....VK........OO..Z

C:\Users\user\Downloads\867cb83b-1d75-4a56-84c1-35593d3ce731.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4
Category:	dropped
Size (bytes):	163343
Entropy (8bit):	7.903307852590344
Encrypted:	false
SSDEEP:	3072:Js5rugu4r4f4D8iH2eZQ6WR1yvPCepke4RDJJEXnrpYRUcYjS0SoF:e5rugFRhOjR0Ce2eqJAnFYWCoF
MD5:	ECF369BEC295E27D8CE5509FB267D259
SHA1:	38AAD1D7F06D9F761CC0545B089950FE2FCDA736
SHA-256:	0CC96496DED6759377C3E6ED608E0471F318ECFB29B5CC52D320F56484ED548E
SHA-512:	19A6F945F47AF83EB81B5F54F7CD567557474D74B2E79B02FC8DAB18E6D61F2E71A1950ACC1937D85D190FF5429B917A6885DDE51BE0C5A6A22CAAE95C48E682
Malicious:	false
Reputation:	low
Preview:	%PDF-1.4..%......5 0 obj.<<./Length 2854./Filter /FlateDecode>>.stream..x......^_.s..Xo.X.....@...m..,69tO....H..$e[..<...i.4_".`.v.>LK...l..d.2k3.......zz.../w1.e.vQ.._//_/.....B1iog;9.g=}.........n.bl...a............SN~..p......Xfa+?.,V,.K.7....K.k.=..pq...r.v.ZLN....,rz........u.P!<4.q9U.A../.."~..]5..u.2v.z....K..wQ.%.....R.{#.hI.F?d.P =Y..nE.U72..6.A..E...H1{.=.#...r1.l4....\|....5.F.Q.....o.EC.......P...#.$......(j....x...^/..:..Jg.....\@h?Y.q0H......H.7....>.?.:#W..Z......`.+....m<".P.H\|0.E..d..g..<..LV.9H..c...d...k^..+fz.IG`..05..u<..WL.U7.f.H./aV-hv.2.$....BuT.'.eL.g.....:H..}...1.\.43....:..^........T.y.8..h..y.uP.....#..C:z.jc..[.W....K0vv.a.^..1e.&..R..U.~.4.i...X.^fcY.J...e-W..6..@..d...\.........E.....6.V......5d[.WG{2u)....L_Y.gS..&.~.......(L....?.`D.;h...;L......sT....+...6i.....Q...k.Z.C}..k......S}.Y..H..%.`..!2o[...6.5..Z..Fs.*.Q4i.@..)..!....8.......0....Ln..4.'.B...-.g..m.L.%..#M@\...Y...C.....Nn<.5Gr....VK........OO..Z

C:\Users\user\Downloads\downloaded.pdf (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4
Category:	dropped
Size (bytes):	163343
Entropy (8bit):	7.903307852590344
Encrypted:	false
SSDEEP:	3072:Js5rugu4r4f4D8iH2eZQ6WR1yvPCepke4RDJJEXnrpYRUcYjS0SoF:e5rugFRhOjR0Ce2eqJAnFYWCoF
MD5:	ECF369BEC295E27D8CE5509FB267D259
SHA1:	38AAD1D7F06D9F761CC0545B089950FE2FCDA736
SHA-256:	0CC96496DED6759377C3E6ED608E0471F318ECFB29B5CC52D320F56484ED548E
SHA-512:	19A6F945F47AF83EB81B5F54F7CD567557474D74B2E79B02FC8DAB18E6D61F2E71A1950ACC1937D85D190FF5429B917A6885DDE51BE0C5A6A22CAAE95C48E682
Malicious:	true
Reputation:	low
Preview:	%PDF-1.4..%......5 0 obj.<<./Length 2854./Filter /FlateDecode>>.stream..x......^_.s..Xo.X.....@...m..,69tO....H..$e[..<...i.4_".`.v.>LK...l..d.2k3.......zz.../w1.e.vQ.._//_/.....B1iog;9.g=}.........n.bl...a............SN~..p......Xfa+?.,V,.K.7....K.k.=..pq...r.v.ZLN....,rz........u.P!<4.q9U.A../.."~..]5..u.2v.z....K..wQ.%.....R.{#.hI.F?d.P =Y..nE.U72..6.A..E...H1{.=.#...r1.l4....\|....5.F.Q.....o.EC.......P...#.$......(j....x...^/..:..Jg.....\@h?Y.q0H......H.7....>.?.:#W..Z......`.+....m<".P.H\|0.E..d..g..<..LV.9H..c...d...k^..+fz.IG`..05..u<..WL.U7.f.H./aV-hv.2.$....BuT.'.eL.g.....:H..}...1.\.43....:..^........T.y.8..h..y.uP.....#..C:z.jc..[.W....K0vv.a.^..1e.&..R..U.~.4.i...X.^fcY.J...e-W..6..@..d...\.........E.....6.V......5d[.WG{2u)....L_Y.gS..&.~.......(L....?.`D.;h...;L......sT....+...6i.....Q...k.Z.C}..k......S}.Y..H..%.`..!2o[...6.5..Z..Fs.*.Q4i.@..)..!....8.......0....Ln..4.'.B...-.g..m.L.%..#M@\...Y...C.....Nn<.5Gr....VK........OO..Z

C:\Users\user\Downloads\downloaded.pdf.crdownload (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4
Category:	dropped
Size (bytes):	163343
Entropy (8bit):	7.903307852590344
Encrypted:	false
SSDEEP:	3072:Js5rugu4r4f4D8iH2eZQ6WR1yvPCepke4RDJJEXnrpYRUcYjS0SoF:e5rugFRhOjR0Ce2eqJAnFYWCoF
MD5:	ECF369BEC295E27D8CE5509FB267D259
SHA1:	38AAD1D7F06D9F761CC0545B089950FE2FCDA736
SHA-256:	0CC96496DED6759377C3E6ED608E0471F318ECFB29B5CC52D320F56484ED548E
SHA-512:	19A6F945F47AF83EB81B5F54F7CD567557474D74B2E79B02FC8DAB18E6D61F2E71A1950ACC1937D85D190FF5429B917A6885DDE51BE0C5A6A22CAAE95C48E682
Malicious:	true
Reputation:	low
Preview:	%PDF-1.4..%......5 0 obj.<<./Length 2854./Filter /FlateDecode>>.stream..x......^_.s..Xo.X.....@...m..,69tO....H..$e[..<...i.4_".`.v.>LK...l..d.2k3.......zz.../w1.e.vQ.._//_/.....B1iog;9.g=}.........n.bl...a............SN~..p......Xfa+?.,V,.K.7....K.k.=..pq...r.v.ZLN....,rz........u.P!<4.q9U.A../.."~..]5..u.2v.z....K..wQ.%.....R.{#.hI.F?d.P =Y..nE.U72..6.A..E...H1{.=.#...r1.l4....\|....5.F.Q.....o.EC.......P...#.$......(j....x...^/..:..Jg.....\@h?Y.q0H......H.7....>.?.:#W..Z......`.+....m<".P.H\|0.E..d..g..<..LV.9H..c...d...k^..+fz.IG`..05..u<..WL.U7.f.H./aV-hv.2.$....BuT.'.eL.g.....:H..}...1.\.43....:..^........T.y.8..h..y.uP.....#..C:z.jc..[.W....K0vv.a.^..1e.&..R..U.~.4.i...X.^fcY.J...e-W..6..@..d...\.........E.....6.V......5d[.WG{2u)....L_Y.gS..&.~.......(L....?.`D.;h...;L......sT....+...6i.....Q...k.Z.C}..k......S}.Y..H..%.`..!2o[...6.5..Z..Fs.*.Q4i.@..)..!....8.......0....Ln..4.'.B...-.g..m.L.%..#M@\...Y...C.....Nn<.5Gr....VK........OO..Z

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4746), with no line terminators
Category:	downloaded
Size (bytes):	4746
Entropy (8bit):	5.799025364276247
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUvO6NDsy1:1DY0hf1bT47OIqWb1e/NDsw
MD5:	63FA86A620B89649320850957B6ACA13
SHA1:	40B290819A8F3110D5D9FCDC6FA496CF562B5CB3
SHA-256:	57E8E5A6600203171C1E2B2D84347B310E192CBAF0E91EFBA3299AA40F5B1A19
SHA-512:	185BD4251A06E1089F84F23075643AAA27C7F7F3D5D7005A64C182E9AA94C9E9F04EB9F1084A4CD33BFC333F6292E3BB32785F7890A6CCECF7591EE7DE9D7649
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/AW-1046165339/?random=1726075564556&cv=11&fst=1726075564556&bg=ffffff&guid=ON&async=1&gtm=45be4990z8864344206za201zb864344206&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftrustarc.com%2Fconsumer-information%2Fprivacy-feedback-button%2F&hn=www.googleadservices.com&frm=0&tiba=Privacy%20Dispute%20Resolution%20Services%20%7C%20TrustArc&npa=0&pscdl=noapi&auid=1873485069.1726075563&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	330319
Entropy (8bit):	5.6365979514381115
Encrypted:	false
SSDEEP:	3072:fk6UM7WVBlR67waZUAL01C+ch8xjBJ2GidxMsfneLlZ7gWj/I39tTMTnMOGXXmkD:r46zXL01C8UXeLT0M4OGnmg
MD5:	C29447B41E5E7FC7DF2EDE897A636A7C
SHA1:	F703629DDA6A2CEB378555E49BABCA44DA0074BA
SHA-256:	B0B9C18FDA6F4523956DA07E77C9225EF2FB567116BF36C96C44AE0AE67AEC49
SHA-512:	51A357651F8D157E2D9FFF0CB68FF7F7B7A59A6D6C99B0A1EB3BFE8DC5B8C96423EF9C832E6469B36D56EAA220EFBDA47E7E27DAD6B79F7B189CC87636D54C66
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/4737-7116baf9e1ba5e68.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4737,2378,1193,7956,4577,8367,2001,4409,9863],{13484:function(e,t,a){var r=a(95627),s=a.n(r),n=a(67294),o=a(44012),i=a(72468),l=a(54623),c=a(58367),d=a(29863),p=a(51245),m=a(85893);t.Z=e=>{let{closeCallback:t,loginCallback:a,isAutoPay:r}=e;return(0,m.jsxs)(n.Fragment,{children:[(0,m.jsx)(i.Z,{"data-cy":"pre-login-splashscreen",children:(0,m.jsxs)("div",{"data-testid":"Pre login splashscreen",className:s().dynamic([["1367718950",[p.colors.gray05,p.breakpoints.sm,p.breakpoints.md,p.breakpoints.md,p.breakpoints.md,p.breakpoints.md]]])+" pre-login dialog",children:[(0,m.jsx)("div",{onClick:t,"aria-label":"Close","data-cy":"pre-login-splash-screen-btn-close",className:s().dynamic([["1367718950",[p.colors.gray05,p.breakpoints.sm,p.breakpoints.md,p.breakpoints.md,p.breakpoints.md,p.breakpoints.md]]])+" close",children:(0,m.jsx)(c.default,{width:20,height:17})}),(0,m.jsx)("div",{className:s().dynamic([["1367718950",[p.colors

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4764), with no line terminators
Category:	dropped
Size (bytes):	4764
Entropy (8bit):	5.810871763079869
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUvO6NDsyN:1DY0hf1bT47OIqWb1e/NDs4
MD5:	AFBAB51E70F34CE6C4ED8EEDE0C9E646
SHA1:	43AB61FA94F63BCC5FA92C2621B6CD23309FF7A2
SHA-256:	1BF314D4C8AA201FC0DAF8B212A02B101C669DACA9FB1905CB41B52D26707F94
SHA-512:	CA1D8DFE6825344C3CE8EFABDA08EF0D07A8268195001F9E6D100131BFEDF36D2F755016792CB7BEEFFE932C4BC061271D2EB7551D436C0684C2E68199430D3E
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5260), with no line terminators
Category:	dropped
Size (bytes):	5260
Entropy (8bit):	5.4026458342312464
Encrypted:	false
SSDEEP:	96:QCBqZql79LsQnB1fjf5FdKFnF2iOCGhPQ+iVNqBkIKJ6QK:QCBqZa7FXTjXkFEinG2+iD3R6QK
MD5:	0EEEFEFE466EDCACEB027950A30D3ED5
SHA1:	5CA4817E0C1BCE29AA0CE8DE24FCC1A056668E64
SHA-256:	7BB27DB1E584977AFC74F35F7699EF29A1B168764F9CE1F9CA2EE20CBEDF631C
SHA-512:	432A839B2A8747FDF945FCCB3AA0A597203BEA9D37DBE307BF6666BC6D656751A271BB0902B75A72CBF35557653C27B58BF7FC610D4140E2E5F37C414F1B9A1E
Malicious:	false
Reputation:	low
Preview:	import{p as e,w as r,d as o,N as n,a as i,b as a}from"./p-3e73ccf5.js";export{s as setNonce}from"./p-3e73ccf5.js";import{g as t}from"./p-8c5cd27e.js";(()=>{e.o=r.__cssshim;const s=Array.from(o.querySelectorAll("script")).find((e=>new RegExp(`/${n}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===n)),a=(s\|\|{})["data-opts"]\|\|{};return"onbeforeload"in s&&!history.scrollRestoration?{then(){}}:(a.resourcesUrl=new URL(".",new URL(s.getAttribute("data-resources-url")\|\|s.src,r.location.href)).href,((s,i)=>{const a=`__sc_import_${n.replace(/\s\|-/g,"_")}`;try{r[a]=new Function("w",`return import(w);//${Math.random()}`)}catch(t){const n=new Map;r[a]=t=>{var l;const d=new URL(t,s).href;let u=n.get(d);if(!u){const s=o.createElement("script");s.type="module",s.crossOrigin=i.crossOrigin,s.src=URL.createObjectURL(new Blob([`import * as m from '${d}'; window.${a}.m = m;`],{type:"application/javascript"}));const t=null!==(l=e.i)&&void 0!==l?l:function(e){var s,r,o;return

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1975
Entropy (8bit):	4.324706007320719
Encrypted:	false
SSDEEP:	48:Ipi195vTpFgwoRX69ZMlegEQzw4CU+Yfi:B9RTpFPoReadzKYfi
MD5:	C398BA7B3F1D301E06C7B3B32C2826D1
SHA1:	0FE50F1AA0DAAC04821FEE4239F4031E144663AA
SHA-256:	FB46BFE47F780F067428CF4F24E9D3EDF14BDB7D6104DE2DDB6276A57170AD83
SHA-512:	1A1519E7F6CBEAEF6BD6EB235D54E2F3A2EBE37CB8D56CCF371D259668EE92B94FA057BD49538737F0ABDE9B3952DA9AFC4DF30B3D5865CD4B72F2C85D800363
Malicious:	false
Reputation:	low
Preview:	<svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M31.7532 21.2197C32.5326 21.2197 33.16 20.5989 33.16 19.8212V2.18203C33.16 1.40432 32.5326 0.783453 31.7532 0.783453H2.2069C1.42749 0.783453 0.800055 1.40432 0.800055 2.18203V19.8212C0.800055 20.5989 1.42749 21.2197 2.2069 21.2197H31.7532Z" fill="white" stroke="#BABEC5" stroke-width="0.439441"/>.<path d="M19.4729 5.92261H13.7612V16.1152H19.4729V5.92261Z" fill="#FF5F00"/>.<path d="M14.1224 11.0183C14.1215 10.0367 14.3455 9.06773 14.7774 8.18479C15.2094 7.30185 15.8379 6.52807 16.6155 5.92203C15.6526 5.17039 14.4961 4.70296 13.2782 4.57315C12.0604 4.44335 10.8304 4.65642 9.7287 5.188C8.62704 5.71959 7.69821 6.54824 7.04838 7.57925C6.39856 8.61025 6.05396 9.80201 6.05396 11.0183C6.05396 12.2346 6.39856 13.4264 7.04838 14.4574C7.69821 15.4884 8.62704 16.317 9.7287 16.8486C10.8304 17.3802 12.0604 17.5933 13.2782 17.4635C14.4961 17.3337 15.6526 16.8662 16.6155 16.1146C15.8379 15.5085 15.2

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1670
Entropy (8bit):	4.45958147487211
Encrypted:	false
SSDEEP:	48:UqFUyh24EZXSVuDHEZR9IEC01Nqgc4EJ0zEjH1u+:zqRpSYDD01Agctf
MD5:	CCA0007B9CC6CAC90E54C8728D5CF76D
SHA1:	A8CCD764D2386BB8018A0A561773475495C8F9BB
SHA-256:	5A760365260CFC151D8A5963EC55B8E9018DDF35153E4C4FCE8D91FF28F01E1C
SHA-512:	5E5092846C57950E837A8BD4B120B750634E0D3DCB5402402D0CF7C5261F8F952A3287C4C2547AA65CCC601C024CE242038A9327F8E11654C8AD98E3C33E8FBC
Malicious:	false
Reputation:	low
Preview:	<svg width="34" height="21" viewBox="0 0 34 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M33.4913 1.40253V2.69045V18.7054V19.6013C33.4913 20.3853 32.8753 21.0012 32.0913 21.0012H2.07734C1.29339 21.0012 0.677429 20.3853 0.677429 19.6013V1.40253C0.677429 0.618584 1.29339 0.00262451 2.07734 0.00262451H32.0913C32.8753 0.00262451 33.4913 0.618584 33.4913 1.40253Z" fill="white"/>.<path d="M30.7474 18.7054L29.2915 17.0815L27.7796 18.7054H24.8118H18.4283V11.1459H15.4604L19.1562 2.69045H22.74L24.0279 5.60225V2.69045H28.5076L29.2915 4.8743L30.0755 2.69045H33.4913V1.40253C33.4913 0.618584 32.8753 0.00262451 32.0913 0.00262451H2.07734C1.29339 0.00262451 0.677429 0.618584 0.677429 1.40253V19.6013C0.677429 20.3853 1.29339 21.0012 2.07734 21.0012H32.0913C32.8753 21.0012 33.4913 20.3853 33.4913 19.6013V18.7054H30.7474Z" fill="#0071CE"/>.<path d="M31.1389 17.8092H33.4906L30.4109 14.5055L33.4906 11.2578H31.1948L29.235 13.3856L27.3312 11.2578H24.9794L28.1151 14.5615L24.9794 17.8092H27.275

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	4.512980258465047
Encrypted:	false
SSDEEP:	48:cq274bQYe3mYGoLRwgNp9yscGL+X+XeK2qq7FA:RQYAm7oL+gP9n4+Oqq7u
MD5:	AA16F5E98058633139B1160E7C3449EF
SHA1:	B0EF114E30EAB9F785AE3705220CBF113B4B6BEC
SHA-256:	00FB6A91F3D2B00ED3397E2941EE6A8DA68BE2EED8E6525E8CDD1BEB6EF13D5B
SHA-512:	0FBF8F3730C937A58360B17E3C1536FAFF68F40DFA1E083373366D73AA2091BCCAD9BEB4459F3F9FEDC7DD88577031D90DB39712CA29669C587AF554A89A2334
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="180" height="36" fill="none">. <g clip-path="url(#clip0_733_5184)">. <path d="M177.595 26.909s-3.139 3.181-7.363 3.181c-4.761 0-7.804-3.621-7.804-7.827 0-4.206 2.995-7.732 7.608-7.732 3.926 0 6.527 2.694 6.527 2.694l2.75-4.258s-3.091-3.718-9.619-3.718c-8.293 0-13.592 5.97-13.592 13.062 0 7.091 5.299 13.062 13.592 13.062 6.725 0 10.306-4.062 10.306-4.062l-2.405-4.402zm-35.596 6.643l-.317 1.216s0 .012-.004.016h4.757v-9.876c0-.844.056-1.653.172-2.425a46.094 46.094 0 00-2.982 6.239 49.67 49.67 0 00-1.626 4.826" fill="#3699F1"></path>. <path d="M146.19 14.936V9.853h-5.981V27.35c.024-.044.04-.088.064-.132 1.694-3.257 3.701-6.379 6.267-9.064 1.268-1.345 2.705-2.557 4.295-3.534 1.357-.832 2.874-1.42 4.428-1.672V9.609s-.538-.1-1.128-.1c-3.826 0-6.817 1.857-7.945 5.427zM0 .053v5.43h11.433v29.301h6.331v-29.3h11.437V.052H0zm61.089 21.229c0 4.45-2.501 8.416-7.018 8.416-3.09 0-3.878-2.053-3.878-5.086V9.837H4

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1145
Entropy (8bit):	5.167172116694424
Encrypted:	false
SSDEEP:	12:Uc6VnP52f4ggO4sd6nXa1SnNrvTBCR26hE555rD4ggO4sdxhu6qOg2rGi+t5h4dF:+VPs1gdnKWrERN6nTgdzaKw57TW8pCq
MD5:	72C80E05F82BF1D14AE5F5286CDCF38E
SHA1:	5CE470F90F6B1677F6F099EE3A83F1E79CF5CD76
SHA-256:	D5A3C6DBF7B0C8EE2ADE3E5E82AD6B5B701140C778BA59E673F10BE5FA40025F
SHA-512:	B8E3A993C2B82ED19CDC6B7305A262261234B9DC91E0C82AD225DD17CE31855C0B6A0AF20B5ECE22D42EE5CB2F377B1CFDEEDE82AE788FAD82AED7725FC9423C
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/css/jquery.ui.autocomplete.css
Preview:	/. jQuery UI Autocomplete 1.8.16. . Copyright 2011, AUTHORS.txt (http://jqueryui.com/about). * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . http://docs.jquery.com/UI/Autocomplete#theming. /..ui-autocomplete { position: absolute; cursor: default; }.../ workarounds /. html .ui-autocomplete { width:1px; } /* without this, the menu expands to 100% in IE6 /../. * jQuery UI Menu 1.8.16. . Copyright 2010, AUTHORS.txt (http://jqueryui.com/about). * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . http://docs.jquery.com/UI/Menu#theming. */..ui-menu {..list-style:none;..padding: 2px;..margin: 0;..display:block;..float: left;.}..ui-menu .ui-menu {..margin-top: -3px;.}..ui-menu .ui-menu-item {..margin:0;..padding: 0;..zoom: 1;..float: left;..clear: left;..font-size: 12px;..text-align: left;..width: 100%;.}..ui-menu .ui-menu-item a {..text-decoration:none;..display:block;..padding:.2em .4em;..line-h

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2785
Entropy (8bit):	7.881347552761523
Encrypted:	false
SSDEEP:	48:6QiI7K89vE9Zqcrv8hp35diA2vo1pho1bUDsLObujVC/een+32nsxaK5DDBzUMDO:6QrK8jXfJd12Q1bNc1jE/e++32cfBoCO
MD5:	7DBE4596B420FF7FDAC169A69E4BBFC9
SHA1:	BE34FF3E7F9DC756178AE0D2A5DA1A34EE559A0E
SHA-256:	F0BE198819B5B8CF7819BB3A89C908AB8648B1196E8EB48418A6746D653A8031
SHA-512:	26B21EE302A25FEACAA6E90D6751407A8F0C2DE0B4CFD70A0AEAB5CB6DFD3F550FF9FE8AC566CD065BA48A87B6A44F54FC1ED29A92E932CDCB1D88408A5C93C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>a.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]Oh.W..Y.J..-.!.........7..K...R.......`.F.`.5..<....b..Z.....=X.j[...-E..4E..K.o\|#.uv...{o..~0lH&;3..}....8..@H/.4>...[..Gw..*...C..`.....]......J...?.g..d..`..!.,.t..f.F..a.$a.(.....B.Q."....gd(...i..;r......-dp-..@....X.S..55np..:..a..mN2P`.iY.K.O7.\... .7......o.......1..H......>...dD(...L.9..6..,.r.0.H......A9Q.......(..../..$......?..l...[...GynO...zU...B...C..$C)YB....U(...3uI....&.K.O7.\.~.I....M..i`.......E2....T..O.1ny.#...aJ.b._]..9-.?.>.&9..%......Qk..M.-.f.LA..E......6I#.......+..s..Ig..MS3.uaW..(..I.>...,]......."..U...i..dq.D...J..<......>.......{l.....G.d..q.9...(.\|V.4.p.2@cj.:x.&.....C...2......[..........TX...A.R.P.w.h....Zg....j....e......yK.}.....\.....'.......w..un?....u....q.%.x!.........w6.c.....y.S7............;......rA...,@Ng.[...E2..Tl..u<3Ut..1.Y.M.6;.01..].2._p.m.(.... .D.).}...`0. ..../..zGZ._....9..;:H j........~........5..!.(3.xH<....

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (29057)
Category:	dropped
Size (bytes):	747837
Entropy (8bit):	5.182247238137487
Encrypted:	false
SSDEEP:	12288:+ZolRLf+/cE0YHGRwfoBjBX8zx9h9XFP4u9qWqmTzymTt6+P/ZKLaODyQrZ:dLf+/cE0YHJoBjBX8zx9J9jqmTzymTzc
MD5:	6960A1485EDC1DB4CAEB35E5C7EF6306
SHA1:	3B754E55668675604EF55D94DE5C3B49787FB593
SHA-256:	AB535E23C034FF08DAEBB567A8A58AC58DE87C58FF95FD011E99F0A081319DD1
SHA-512:	391970E08ED11C1ECEA7661FB791BE294A75A0B5CE92CEB160C3C0752A151DA751951C3FF9E4858921D3A1126C2241B4FAB80FA639916158246A52F279833A13
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" data-locale="en_US"><head domainPrefix="https://static.quickbooks.com"><script type="text/javascript" src="https://lib.intuitcdn.net/libs/onetrust/1.0.1/scripttemplates/otSDKStub.js" data-domain-script="74130b76-29e2-4d72-ab52-09f9ed5818fb" charset="UTF-8" defer=""></script><script type="text/javascript" src="https://uxfabric.intuitcdn.net/gdpr-util/2.9.0/gdprUtilBundle.js" defer=""></script><script type="text/javascript" src="https://lib.intuitcdn.net/libs/onetrust/consent-wrapper/1.0.1/cookies-consent-wrapper.min.js" defer=""></script><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/qbmds-components/styles/sbseg/fonts.css" as="style"/><link rel="preconnect" href="https://static.quickbooks.com"/><link rel="preload" href="https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/payments-product-explainer-brand-video23-still-en-us-desktop-620x620-2x.jpg" as="image" media="(min-w

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 571 x 139, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8227
Entropy (8bit):	7.883761869492875
Encrypted:	false
SSDEEP:	192:3pP+tLzuaQHJE8cuSA3DToQ0Mwx1tI+VW5NJPG+tGIa+0IgF:V+tLgJE8cdWTh0F1hYTGaGR+0IM
MD5:	97A8CA7698449A934BF654AAD0BA8609
SHA1:	21CDB1F73CC0988A895A28C26A6118BA6353AACC
SHA-256:	111631DF2C892BBD6E125F7DA28ED188CE0C007562C809E59B5A9A54CF54EF31
SHA-512:	6EB835A6A5E735B9E8C120EAF2191FA6531D6ADF91E57C38F1BAE2DD6C22E64F510E668A4098F321387C4A4B334E2A2C4EE854EBCCD0FA1EA69C708C92985639
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...;...........X.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..A.[.y.g7B/mm.......p.X.P.6\|.7..bh..sr!2.%..R..K..Esi.z...b.\...(..]...p..X.P..H!:U.'..v.K/.....O...7.........^..f..\|..7+."\._.E?...._._..-a..F......m=.(...........1M.5...$.3.^w.. .?#.......cS.wf.......H............b'..!as..N.. \|.........G?v.WK...1e....[].......i...H....A$z.05...`.....=5.8.".=....2..>QuXa.......,...U...].z............>].S..<...O.f....T@.7.D....1.../......UOB...}..3iF...Z......>.=;.$N...j....ARB.....b...N... ...........X..r.:5Tq&...#....@~...p\|..N>.^1.............j..mi.Q....@6.yv t... o....d.s.:.../l=Q....[.........X.:^.......S.p0..T#.....P9.....c.....C.....C...............G.X..........M...q.D.P. 0.....`..U..\|.....K}...\|[...............9g t.['U..?..'.sO.......'!..0j.!.w.....1.."....0.v.....G......+X.Q........b...W.d'j.:.....x.I..E.b.*\|bQ..l....Q..Y.W..#.c..+++c....@.<.{.vQM....Y...#aCG.iK........-.........L....\.(l_..j.......9y..M~..!.s..S}..>Y.Q......e.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (372), with no line terminators
Category:	downloaded
Size (bytes):	372
Entropy (8bit):	4.884303143471997
Encrypted:	false
SSDEEP:	6:qiADGdA94qrGH4LvGaDzGvdAZdmwZMrWQLbItVFrmGQgJVjAQIL/RyHZk3gB9gBS:GDGelyH4LOaOvC6m0bItVFrQgJB1i/I/
MD5:	1BB89AB1398F700D38C557FD3E30BE53
SHA1:	36664FA3AD91C8C3F8ED1F0206528F6D3F08CBB6
SHA-256:	AC76D8EDF7DEA5AA74F7D7B8668D62D828DCE214C6464F77898992B9A3B5FCFD
SHA-512:	0E72E10199080345B3AE908AAB9BB7CB0F70E4B984FBA1BC2446B19A7A9FF88BD63FAE30499FD11938486437FC40D38F0FB6EE26E2270C41365CAFC7E38E79DB
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/web-portal-components/wp-components/p-0d86e690.js
Preview:	var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function n(e,n,o){return e(o={path:n,exports:{},require:function(){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}()}},o.exports),o.exports}export{n as a,e as c}

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14356, version 1.0
Category:	downloaded
Size (bytes):	14356
Entropy (8bit):	7.984656675017366
Encrypted:	false
SSDEEP:	384:s9FOBvjRzcjOZJMQcbHpGYOMYBomGD5CyiXSin:RRzcjSyHbJGHGD5sXr
MD5:	F5B159D60323327E52BCE8EC08B50A50
SHA1:	08BF83008E685853CE5073175062BA74C6B56CF4
SHA-256:	D6BFEEA1345A77E4B09883A9ED0C40694D713F7F749EBCF352AE32BD005E1C7A
SHA-512:	C2397EE6039A00A5977C2D5DF20B56354BD4041A370468701D9CAEA4C6647B5AE7CAECA594F17D4FB023A930FD28B605985CB3D6B576A2573B6F8A977FF6E8E9
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3
Preview:	wOF2......8...........7.........................?DYNA..?FFTM..$?GDYNy..H.`..\....s.....8.....:..6.$..d. ..S..y....6zu.PV:{0"5..j...T..?........?B..yC@te.=s.{..i..y..6yX.H...Nk....L....qQ#.....(..x...X.2#%...x.?!Jz.Eh?.Jw...%v.....A.\Q_w...f...........y.Q.-.....b..E....L....r.~....XA.......F."&F!......\|.s.\6,..z.J..m..f..Y...I.MYXX.F../;A....\|....3..M.Mx........$t......l^.pTU\."...m...ME\|#..l..c.:...E%}".".W..)z.<.,.w.AF...A.R..zf..;;X.....,....,=p.\|3;.....s..w./cMd\|jl.L....?T.,.....Di.P..L6.Y..mv..$....;.~~.O..^[..B.[^c...V.-.A...,./Z.w.. :..''.....m...3y.9..h...n..?.........t.f.>..0h.....1x...\....`M..\|.e....w..?...x.[".\|..;.Z.y.3..9..Z.9..LW?gvV.4W...9....{...rf...j...j.=.[. +.....9.........Z..r.....f.zYY...e.pfu..{L.....ycK.....>......rZ...6r.o..^._......WF`......\..ZE....z...7..@ .$.Apz...YR.0...d3G..G..).E.P..h$:.,Q":....X(...b.8...^z.h.Df...Y....Z..<'_...k...2...FWc...Xo.5>6.4l..,...j.&.....4...K.......!.}.a..?r.d...'.oB.#"....K......h..

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14340, version 1.0
Category:	downloaded
Size (bytes):	14340
Entropy (8bit):	7.983279366828818
Encrypted:	false
SSDEEP:	384:b8raozPBHIVXFeEvde6+wk9uHbTw4AjfDVvRX6OTgj:b8rRzmdFlvR+t9uf4fDu9
MD5:	C8E23D3873265C37300621C12EAC7262
SHA1:	EABC9FD08CFBAF9F0ADF8A9ADDFA191691621F37
SHA-256:	37B81A6AE440C4667967208039E7FDEDC097C1FCBB59AF3D375D3313F0404298
SHA-512:	0384BFABF5162BF7F75C391AB0EFF37AF7E94215F30DBAD1E82D0BCC160FBCDBE8C46083B52DB510E83B3BFDE758E9485123C2B66F3C120240889E94AECB2FB4
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/620bf8/00000000000000000000e7fe/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n3&v=3
Preview:	wOF2......8...........7.........................?DYNA..?FFTM..$?GDYNy..\.`..\....s..... ..T..:..6.$..d. ..S..y.....yuD.:..2"5..j...T..?........?B..yC..m.sw)!...JE.}.J-n..l....#MlY3...$;..Y..Ha.-i9....-...1..E:..Uz......f.=...C..0^.SKr...I.....TB.).QG~.......gk.QX..`.$.r....I.`b......."u......E../............?...........@..OXG.p...m.^=.jH.4.s.Y....B.P&=p..R...J.V.%.<...;3..^..X.58.Np...}....fW8..6..).i.W,.B.....w.+W.Z)z..x.Yx.....p.E.H>\|.C=3...6V.@......Q_.e.3....p2..9GI.x.....c#oR.OB..~..[...D......C..l?3F.'.k..-.......a..k4......=.2._,.c..#........P.X./...c..O=........U........{.......>.......l....;..T...\|............o....;.?8wS...e....Pp........Z.p...F..=k......]>q...g.^.`..=.wo<.....`....].h...W.....Ys.}......./....Y.w.9p.....].o..k.-.t...K..8.d.Kg.W..2r.i@.....L...%......,.h.8_...{.1\|......\.Z..{.A.....?........:.d..4.M_..6S.rs....h.7...M..1Q.k....@k.....z........[W.>{.=.^m...n.o7Q.^.y.U.s..[.}V.o......y..d.J5..wtP...H'E....0A?.Au-.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	297
Entropy (8bit):	6.751105473446711
Encrypted:	false
SSDEEP:	6:6v/lhPcd0Ek75+FaIBnwHZEsIC/cAFwhh7IuJ/zk2J2cRup:6v/7k0Ek6tG+CFwhxk2scRc
MD5:	A9C53515C332C4DAC495DE3F5661EAF2
SHA1:	1C568F80B9C23E9D233E24984657779803145B9F
SHA-256:	78C8675D65136620B36028006C77BD0509DBB3BF5700AD4A48D27F6E3F38C5BF
SHA-512:	71F0CD2363A21A0781CEE067C247B62F2088F548CC2CE000186AA0B86E192F9626FFE173DD105F2901356D73BBC5B3BBF042E12D3CDDA967D64953292AFFB990
Malicious:	false
Reputation:	low
URL:	https://widget.uservoice.com/pkg/clients/_icons/icon.search.16px-bae686b6ac02e0aff2fa9842d8b09cd0584847bc6351aa04d30a9656b3c01672.png
Preview:	.PNG........IHDR................a....IDATx.c.\@S.X.....=.....@.@... M....V.^.`..y+<...C.J d@.HaW.....w.b. .......PC..........]n...P.....?#+.....P.{'..@5.....o..y.c..@.......(... $,....Y9.;.....;...p........M...p.....x..QAjz.q.w`..c..0.....W.q....0.!....!....#...........U...z....IEND.B`.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35152, version 2.19660
Category:	downloaded
Size (bytes):	35152
Entropy (8bit):	7.994730947875104
Encrypted:	true
SSDEEP:	768:c+fFDW2005JZYl12LA9ew43d87ptxs6LfLZQLX2yZyikzj:fd5tHej2Lg83datxPFMXgikzj
MD5:	476FE09CBBBBF74BA00B93F8595EE5ED
SHA1:	5260DB428DE67799090CB7D2B52DA6E7043F2F8D
SHA-256:	1EDB3E080320B633696D0516B223BCE282EA73951AAE0B24BA806CCE076AFF64
SHA-512:	8D8B3794AB2D351A6CD50524BFAE70B58832A85850B09645DF0CF475CE6D455C9C16FBC5AC4DB0B426D7D39201A18D1CF2BE2E23F5D7289192A80E76B6945E26
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2
Preview:	wOF2.......P..............L........................^....`..`.....d..P...D....6.$..(..,.. .... ../[.qq.=..Hx.m....Q......_.u.;?,..>..E\|..mfD.\|.d...g&.9,.Zr..`..?I..#..c`.c.5..)l.<...}.H.'_.......;.U.N..".=-.^.Kvq....+..t.#.......pw.W...`...U...j..D.....(..H.X....$zK.1....z..u..z.,..q.P..\|.....A6..p..$..p....>...f..8...D..U..8....H/.....xMX..@..4.w~.f..h...,..P......8.r0%'.V.^....\|......s.{....Q. .fm`ca-..q..E.FWF.......U...ca.d._...:..\|...pD..8.+1.[......+]}6...(#.uE.......#s6......be..[... [2.~u........@@......Knw..U..=A......y.nc.'.M..%G..\|....d,P.1........J.c.Pn...{....-._....M.\...l_..l...."!.6E. $Y.S.)..._"........p0......8.WU...,...4...........TR...w....\|?.i......~...Sg..'"K..qh..O..qwu...A..<.w. ...*........e.].. ..Fe....I...-.erW....)..Z......#.H.\.....v......R;.>.....~EN....al@......i..I/c<.B).9#c#E. S.....Uu.t..F.............UU.F......qd9rk}...y...JA.J.&Ju.D.E..R.V...9...`.p...V...G.#...s...'..0ZY .Q...vt.wi.[g.h.-..+z..`.......5;o..;.A.s.?aS.^+

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	236425
Entropy (8bit):	5.531643043963085
Encrypted:	false
SSDEEP:	3072:L+L9pYF+p1FOgKTZtLnq03sUU/COE9v1bfUq4NHTeCTE74VRgk0seAX+o:Ko+p1FNKF8dw41aCWaRgk0seAXv
MD5:	ED7C73E56DA459C7BA33FAFCC25D220D
SHA1:	8C257AF9A9A348B8CCCEA89B0AA5461E0BB5C759
SHA-256:	2956C1A9E79BD2F2CF64E1F70942B996DD071B7C010DF2FEE3A607512ABCF7E2
SHA-512:	D45CEF71F4475459C8A377301280BB98997F7DC5AAF4AAF46954D464877F90D763A73BA4F501F9F61FF4D18CFB829C9FB3F791B19F94AC696E190D8C90CB7A51
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-AW-1046165339&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ba,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	downloaded
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
Reputation:	low
URL:	https://pixel-config.reddit.com/pixels/t2_9ns793lfk/config
Preview:	...........................

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1258)
Category:	dropped
Size (bytes):	1308
Entropy (8bit):	5.452623430840307
Encrypted:	false
SSDEEP:	24:ibj3ia7gsxreZ/kYhSgUnmm9FyZn4FhdhJQHfntXrFt2efntX2QBoFt2efntX0Fv:ibOaheFkYhamSyIhdfQHfnZ58efnZ2Dy
MD5:	F69D3B30A1263332B5A03CD48576C018
SHA1:	DF7304DF5A2D0987DA1BA2DFBFBAC7D1550F3AE3
SHA-256:	0513FB180C36BB8F47AAB335FEC433BD9453F2EA6A73F30015FBA576296A21B5
SHA-512:	4E0145208A02723E9F0773FC41BF6DD16BB30C0731CDB326A59A4CFA7BF83A4921ADA98348BE8A07E1263F3DE5CA03B856A4DDFE30E0D5E3E957AF32ABFBBDCF
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1193],{61193:function(s,e,r){r.r(e);var t=r(95627),o=r.n(t),i=r(67294),n=r(51245),l=r(85893);e.default=s=>{let{width:e=12,height:r=15,color:t=n.colors.black,className:a="",strokeWidth:c=1}=s;return(0,l.jsxs)(i.Fragment,{children:[(0,l.jsx)(o(),{id:"4037661919",children:[".paylink-lock-icon.jsx-4037661919{position:relative;top:2px;}"]}),(0,l.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:e,height:r,viewBox:"0 0 12 15",className:"jsx-4037661919 "+(a\|\|""),children:(0,l.jsxs)("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",className:"jsx-4037661919",children:[(0,l.jsx)("rect",{width:"10.165",height:"9",y:"4",stroke:t,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:c,rx:"2",className:"jsx-4037661919"}),(0,l.jsx)("path",{stroke:t,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:c,d:"M8.132 4V2.963C8.132 1.327 6.767 0 5.082 0 3.399 0 2.034 1.327 2.034 2.963V4",className:"jsx-4037661919"

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21150)
Category:	dropped
Size (bytes):	21200
Entropy (8bit):	4.399918006414408
Encrypted:	false
SSDEEP:	384:JIp+ma4Oh06Ie46eJVA4X6HjE+EiEQCE+EKEP7JOIev5yxqk6LbEwNEpAXv9m86k:0MaPB/BKHYlBIlJPYN8xz7af8xxBf7PI
MD5:	5D3ACBEE67E89B42766E3833A9EF5B9A
SHA1:	7C854709373067CF76CD691BF05DE7AFF54505B6
SHA-256:	FE69199B96A7026EB079FBB450BC8DE06B0D4DAEF58EDCEADB6C18E5CD3E255B
SHA-512:	CA97E2FD8748ABCBED7F17A751FFAC7BA2C74298918052012BD2E5CD020E8234EB7756FA55198A58E1FE295E52085969B306C587545617F24B567214BFB34988
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8482],{88482:function(C,s,e){e.r(s);var a=e(95627),L=e.n(a),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ROUTING_NUMBER",defaultMessage:"Routing number"});return(0,t.jsxs)("div",{className:"jsx-1363339181",children:[(0,t.jsx)("div",{className:"jsx-1363339181 txt",children:(0,t.jsx)(i.Z,{id:"ROUTING_NUMBER_INFO_TEXT",defaultMessage:"Your Routing number is the first set of numbers on the bottom of your checks."})}),(0,t.jsx)("svg",{width:"99px",height:"64px",viewBox:"0 0 99 64",version:"1.1",xmlns:"http://www.w3.org/2000/svg",className:"jsx-1363339181",children:(0,t.jsx)("g",{id:"Web",stroke:"none",strokeWidth:"1",fill:"none",fillRule:"evenodd",className:"jsx-1363339181",children:(0,t.jsx)("g",{id:"Making-full-payment_tool-tip-",transform:"translate(-401.000000, -367.000000)",className:"jsx-1363339181",children:(0,t.jsxs)("g",{id:"Group-4",transform:"trans

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3993), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	376232
Entropy (8bit):	5.101674124303045
Encrypted:	false
SSDEEP:	6144:wcAFNAFBAFYAFEAFZAFXAFdAFHAFIAFHAFT5AFNAFeAF/AFpAF6AFAAFWAFjAFbY:wcAFNAFBAFYAFEAFZAFXAFdAFHAFIAFO
MD5:	5FE8DF0B0046F05D50E34505545029EA
SHA1:	8FE0ACBEF627CE1031D2790D8A3EF31C10549113
SHA-256:	AC102599F5A7B59270C3AC09BBF93C4FC64D349164B37721C46CA74FA25E3F7F
SHA-512:	F1B67E2AD02095007FE621FB864A3F81D05829ECA3B5384C9E36883B68BE464202CCB9194A270905D91EC497AA48C575B763BF1215FF64A4D39A95F740951333
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/forums/920104
Preview:	<!DOCTYPE html>.<html lang="en" class="ltr ">.<head>. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">. <meta charset="utf-8">. <title>QuickBooks Invoice Online Checkout: Hot (2473 ideas) . Customer Feedback for QuickBooks Online</title>. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="csrf-param" content="authenticity_token" />.<meta name="csrf-token" content="p_m12kuNIPfzi6bCbxDnSGJrLWFCkytEUBIe_vojfofNOJ97BM8qfbhvtBfLg8xexVaerUKa5scne_0uvl4p0A" />. <link rel="canonical" href="https://feedback.qbo.intuit.com/forums/920104-quickbooks-invoice-online-checkout" />.. <script type="text/javascript">. (function(window) {. var methods = ['log', 'dir', 'trace'];. . if (typeof window.console === 'undefined') {. window.console = {};. }. . for (var i in methods) {. if (!(methods[i] in window.console)) { . window.console[methods[i]] = function() {};. }. }.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	dropped
Size (bytes):	1083
Entropy (8bit):	7.939822191104927
Encrypted:	false
SSDEEP:	24:dJtIsQAQ8Ic44Yo4bo4Y4ofXQLo4LoXgMXI7gAgXIL1C0Ay5dIXWAQIwl:p3nfXP3nfXfX/HXPX/HXaC0AyDQQR
MD5:	A97BFD93EA9EC02B04D746648FD909D6
SHA1:	7CEEB57C8F327587AC79ED6B8B9B6C334D926ED1
SHA-256:	96AA0E2304D5F823DEFCE8F2EE99EDDF59CAB3A49159B7B7470886D468B66AC1
SHA-512:	063E8267C8245C04FAB3D7E1D239C0DBED2E66E53A8BA5803ADB814491ABF30254D3CBD918359AE2445974F6FE6A0324C122C817FA1ABD041A90729F97F21320
Malicious:	false
Reputation:	low
Preview:	GIF89a....................................................................................................... !!!"""###$$$%%%&&&'''((()))**+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{\|\|\|}}}~~~...................................................................................................................................................................................................................................................................................................................................................................................................!.......,.......................,........H."........6..q.{.O_.a.~.....Cv...I.&.].z...Sd.3..,.3......r.4i/`....W.(.\.1=J.).........b......)._.r.:o^.e..6.Z.`.s..G7W.`..[...\......0^u...v....B..u.\....7U^..h

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 71723
Category:	downloaded
Size (bytes):	21911
Entropy (8bit):	7.990284604228861
Encrypted:	true
SSDEEP:	384:eGzePcKhqp8ppchvs0oqCDAJXULtUlxWlkl5HKQ5Ds+XLowwEYDVcDBC0EFYvncy:eGzekKop0cvs2CDWOulHvHKQ5AYOVlDA
MD5:	C467A63B2E7C3A99BE423ACE649014D8
SHA1:	91A3CB3EBF4F3996512A740FC202E1803828594F
SHA-256:	D070E8B363B2CB1BC55B94F1612A1AF673155DF31773E992007F8952E3661EE5
SHA-512:	956B41FC42B9C3C4E161AF37270D3EAEA9E5936B4A99685727235BF9A46BF05ACAE5A64A4EB9A305EBF1ED5F752DF8FB9912626765DEBF1EB82839DF2124CA92
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz
Preview:	...........i{.8.0...........dFo.N'=.N..>.E.%.b".j...X..~....E.2..<.L."A.P...B-.......5.Xx....a...xs..E....K.0pw.Z..N}....`...[...e..N.......,rn.e.+q.........^yQ..I=......vz.O.QPi....3.\&..j...I..[.Q..i..,../y.....l.W.E.S....d..^.A2..V..S/....f..p....@.e.K>..0...u.&.d....X.i.x.f?...q.z<.G.n.C(..Z..U...lo:.e=....b...s....'..I.Qx]..u...~..0.-.X...Q......q8Z.y.8=...m.....a.i@.\|.].j."Gv8..".]w.%..1....f..3.....1....O.KfY.n.F....Y....r.@......3....4..,..?.x....K7a>.0.....?..~}...=;k..g.....4....$..O...u.6..<Jn.#o6.C.8.p...a..O..,a#............0..WY.....&....~..].5l._...\|w..C..K...[h,..z.y...#6...E.[,x0V.6B.n.....w....t...$.J.j.#=g.........6..%..?<k._.2.......;kx...`.LX.k..\|..".f5..G."\M.....w....m!l..E.U.+M.m.{;....A.Yg....1O.Z..H.,...6$J....".xT8C.Q8+.3...(\.Di.f.P.......>.....a..4a....u/.'c..L.A.Pe.I...%x..pA...............P..3.i.dAG.8.].H..#..:.....'.0L\.aY;a."..g70L..r ....0...h4.............a.D...m>.b..D..6...Yu.at.h7....*W<

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	dropped
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2026)
Category:	downloaded
Size (bytes):	95605
Entropy (8bit):	5.297306156571017
Encrypted:	false
SSDEEP:	1536:A53yD3SBrE6n61lMGBKEaA75CKHBKnCa1z3eol++F5WcQ5tmvvS5s6:NAE661iGBKDmBKCaxeoAU6
MD5:	A9E1301237F7335CBB913C859E415C46
SHA1:	B9503B4B9E88C617FAA39B032D212D90E79C4055
SHA-256:	F2769341FBF31A14E512D5B4138E93597E2EAF57DC58A09748A0515F4D4FD267
SHA-512:	E3B1348918E70A9EACD1530900E0F8746C71227F95F756987B9CBF24F5713BF0D6E55ABA05A7B41F2B9BA13810F42F02917C4281DDFDB467C22570CB8A1F4304
Malicious:	false
Reputation:	low
URL:	https://consent.trustarc.com/asset/notice.js/v/v1.7-230
Preview:	function _truste_eu(){function u(){var g=truste.eu.bindMap;g.feat.isConsentRetrieved=g.feat.crossDomain?g.feat.isConsentRetrieved:!0;if(!u.done&&truste.util.isConsentResolved()){u.done=!0;var k=function(){var a=(new Date).getTime(),c=truste.util.readCookie(truste.eu.COOKIE_REPOP,!0),d=truste.eu.bindMap.popTime;return d&&d!=c&&a>=d}();k&&(g.feat.dropPopCookie=!0);truste.eu.ccpa.initialize();truste.eu.gpp.initialize();truste.eu.gpcDntAutoOptOut();truste.eu.gcm();var a=function(){var a=truste.eu.bindMap;.if(a.feat.consentResolution){var c=truste.util.readCookie(truste.eu.COOKIE_GDPR_PREF_NAME,!0);if(c&&(c=c.split(":"),!RegExp(a.behavior+"."+a.behaviorManager).test(c[2])&&(/(,us\|none)/i.test(c[2])\|\|"eu"==a.behaviorManager&&/implied.eu/i.test(c[2]))))return!0}return!1};truste.util.fireCustomEvent("truste-cookie",g.prefCookie);truste.eu.isGPCDNTEvent()?g.feat.dntShowUI&&"expressed"==g.behavior&&truste.util.executeOnCondition(function(){return g.prefCookie\|\|g.feat.gpp.gppApplies&&null==truste

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11551)
Category:	downloaded
Size (bytes):	11601
Entropy (8bit):	5.582457879974156
Encrypted:	false
SSDEEP:	192:SEWrsOtZLYyWeaGxrbBWvkW2OY3qSsznO7lkl0flUuJbOju3uZMIgjYkbv636dtP:HWQirbB7OY3qSsznO7qglUSLUMIqRL66
MD5:	7991BEBEE72492DE178E3236737B8B96
SHA1:	0878026D338E675474B328FE6631AE8A1128C529
SHA-256:	83BE47927CD0D67100A4706E7CE7AAE0F85B76DC70A1B9650F256CC54774C860
SHA-512:	F7432FABB849D020D29685EB59241CCDCA9555E0E6929E6EF06892F66622B08593EEB67CA24E9654EE90D7984CDA3FCBC865CD9B2EB728DEA4C0A99EBFFCC920
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9661-dfcd811ec7b9d297.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9661],{93429:function(e,i,s){s.d(i,{Z:function(){return w}});var t=s(95627),a=s.n(t),n=s(67294),o=s(34242),l=s(54490),r=s(44012),c=s(57230),d=s(6721),u=s(98343),x=s(85893);var y=e=>{let{currency:i,isPartiallyPaid:s,feeAmount:t}=e;const{0:a,1:o}=(0,n.useState)(!1);return(0,x.jsxs)(x.Fragment,{children:[s&&(0,x.jsx)(d.Z,{idValue:"INVOICE_SUMMARY_PARTIALLY_PAID"}),!!t&&t>0&&(0,x.jsx)("span",{id:"maip-tooltip-w",onMouseEnter:()=>o(!0),onMouseLeave:()=>o(!1),children:(0,x.jsx)(c.Z,{borderBottom:"dotted",idValue:"MAIP_ONLINE_CONVENIENCE_FEE",defaultMessage:"Online convenience fee",value:(0,x.jsx)(l.BK,{value:t,style:"currency",currency:i})})}),(0,x.jsx)(u.Z,{className:"cp-tooltip-wrapper",innerClassName:"cp-tooltip",placement:"top-end",target:"maip-tooltip-w",isOpen:a,children:(0,x.jsx)(r.Z,{id:"MAIP_TOOLTIP_MSG",defaultMessage:"This is just a fee for paying online. You can still pay offline without paying this fee."})})]}

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	downloaded
Size (bytes):	1071
Entropy (8bit):	5.456081951539905
Encrypted:	false
SSDEEP:	24:dmFOmITA4e/k3QkGTqqF3rkuBDFJ8Dvw5iYHcBEDWb:oFOmT1/kcH2M5iYHcBEqb
MD5:	5363D08FC530C3BAE37BE3D4EEA066C7
SHA1:	6F974C9E483A8265D749559DB1C02EFC458559A9
SHA-256:	F3BDD2185C191359C53405A2108EEA8ED242F94B9E87832A23FF703E809F2915
SHA-512:	115EE9F765C986313358A4117B2C1ECE02628D7B1AD5A4105BA533B1EC8A0BBA90E74B6A34CC86C26365C4C2217C0A874DD33660117315A9E9C6688CE5DED2C9
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=sound-disabled-icon
Preview:	GIF89a..................................................................................."................P.-...".....xZ.}.."\...e.0..a.#}...~e..2".N..}0.Z...........Z...a..}..H.....".......R..ea.p}.l..a..c..e.. ..f..i".l..e..................."......0....#.....Z.T..N..}..X...........k........................a........H..........................Z....a..}...p..`.a$.}....................aN.}}...L."N..}......."".................x..}.."............#...e0..(.aP.}}.p..}..".....................(.aP.}}.......".N..}......a..}...x..}.a"N}.}xA~}.."b..}...~..........#..P..O..}......................................#F.P..OL.}............. .w..P.aO.}.h.0....b..}.\.#..P..O..}.............#..P."O..}.............l!..R..O..}..{#.PP.OO.}}T...........40...m......`.......#...s....-..H...!.......,.......................,x.......H.b.......E..(...!A...+...... 00Y.B..8U.`.@...%aR. a..:yJ@0.B.....<. )....@..a.L..(\.k.....(H8. B.W.(. ..,,.@v..L2`......&...`B....8.!....-.X.......X..9......$...^..

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (923)
Category:	dropped
Size (bytes):	973
Entropy (8bit):	5.282462750881302
Encrypted:	false
SSDEEP:	24:ibjBq+sN000pmeIfFkVIFGpZFlNBWnaAZszLmLW:ib1q+h0reIyVDJNBWnC
MD5:	6B64452B69B814FA56DB74365D21D6FE
SHA1:	47126888E8C7DF6596378B1AD65C0DD9F6630CA3
SHA-256:	2E38066FB7FB959C9506D28E33B301C82C09923505E42C6F02E0296067CB77C7
SHA-512:	18642DFF4E6C06F2E5104EDC1E6D2FBBAEEF7D0596DB4E0CE41B90F674E1D0E97C96A1A8C4F46F6237003FD58C8BC94C30BA7055ED2E189B90ED8D57E567D586
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9835],{39835:function(l,c,e){e.r(c);e(67294);var a=e(51245),s=e(85893);c.default=l=>{let{width:c=24,height:e=24,color:h=a.colors.white,className:t=""}=l;return(0,s.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:c,height:e,viewBox:"0 0 24 24",className:t,"aria-label":"Download",children:(0,s.jsx)("path",{fill:h,fillRule:"evenodd","aria-label":"Download path",d:"M20 11c.553 0 1 .448 1 1v6c0 1.654-1.346 3-3 3H6c-1.654 0-3-1.346-3-3v-6c0-.552.447-1 1-1 .553 0 1 .448 1 1v6c0 .55.448 1 1 1h12c.552 0 1-.45 1-1v-6c0-.552.447-1 1-1zm-8-8c.553 0 1 .448 1 1v9.586l2.293-2.293c.391-.391 1.023-.391 1.414 0 .391.39.391 1.023 0 1.414l-3.999 3.999c-.093.093-.203.166-.326.217-.122.051-.252.077-.382.077s-.26-.026-.382-.077c-.123-.051-.233-.124-.326-.217l-3.999-3.999c-.391-.391-.391-1.023 0-1.414s1.023-.391 1.414 0L11 13.586V4c0-.552.447-1 1-1z"})})}}}]);.//# sourceMappingURL=9835.59c20536643b9726.js.map

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 16492, version 1.0
Category:	downloaded
Size (bytes):	16492
Entropy (8bit):	7.9866078263041524
Encrypted:	false
SSDEEP:	384:pa/Ji6yQcegpWe0E7Pi0k2Krmr/5D5XJuDWNyDQ:pa/wXQ/exa03kmr/5D5XJuCND
MD5:	F2E08B84F4C5F23A37EBB14B9123344F
SHA1:	6B91811556013F0BF0D627515CD0A22621C4C7F4
SHA-256:	322A7FD20605F654613453CC1AC70908EB60C9E8858928EEFC929B7C0A3BA63A
SHA-512:	B54AED16F46F72B728C282568C737B5697BFD0F82668204B72336DE96E17A139007B279AC09C5E0874843AB4E33A08D2F5B87729F199950DC165D4FB2F030D60
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/38974e/00000000000000007735993f/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n1&v=3
Preview:	wOF2OTTO..@l......YX..@...........................x?DYNA.#?GDYN......`..R.6.$..8....f. ..Xu.TOZ-..TU...j@.......~G.}N.ew.J.5=..r2.J.N..m>.o.n..=.....;b..:E.X6". ...t.t..h<..8.X..M-.`0!.t.,.....6.......@Me.5b4.:...j..g.......>i..v[^6n.$..PJ..."^.IESjTDC.J..}..3q.......4..B....M%,....5.@..5..].u.S.4..xuyw9....;.u3....{.T.H.q9...H.092..~.......zz.Y=..$#.. /.a3....9'..C...t...w...UU....4...3.....y.O.s.K.0......u:..cG-...........R..R...>...UV..7..Y.....\|..Y....3)&.Iq.."i@a.L.......0...d..p..3....uH 3.$....-..O.....h..".J.0..0..N.....G.M\.hv.....oF...X.m...........a..k.\|}.P.ukB.q..Q.^.....:..o...Q...ul.W....M...^......U..<<CC.`-D..........>.{C!.......t..[....!-..J..v...276..e......dk.;.e.,.U....k4-2.3.2..;.V.4y.\$?.=.....<...J..o.{.A~._...;.....D[.A..vb..#...b.X/.D...'.U.A\|.f...bG.f...8...:.@... ..(..d..=x./.u..........A..ZPwr"7.M#i.M..4...\|ZL.)..(..)......6.n:J.."]..t...[..KO.X...Aw..~}...]_....;..Z....Wz{.a...%...7[...U........=.. ......Aol.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3493440438682995
Encrypted:	false
SSDEEP:	3:yionv//thPltXlfMLts0NyWn/NG8bp:6v/lhP/ZMRHNyWn/NG8bp
MD5:	1B6D2DE2867A3E11063BA25AA1CD4209
SHA1:	BD20B0E089F31F35CBA4D0FA7277E73AA74D944C
SHA-256:	95518CBEC0D55A574A9C8EF72A2A7D62AC0D40A4DE5DFE67A76A7D214DC8B743
SHA-512:	D30AC99B9140393CB2EA8EB09F0C69F6107CA5940DDF208B5EC1DD6D5ABDAB37FC60A892AA397579DA75B450965ADE6D37EE84C55550B42DD86F7AA26D99AB88
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............."......sRGB.........IDAT..c`.......c*......IEND.B`.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (905)
Category:	downloaded
Size (bytes):	955
Entropy (8bit):	5.45203517363015
Encrypted:	false
SSDEEP:	24:ibjfhcpNhvCZDOHNKfntXybFvojrh880ofHZw:ib1Y4DOtKfnZy1oKqfe
MD5:	54378336344B3DE8529083EF5D0707AB
SHA1:	22B2C74ADC2587EFC1D46ACE3A26E061A66F0957
SHA-256:	630257DBFE8089B6F1F41B21F6376B15E0D4AE99D77CD3DD4DD11851A1922FD2
SHA-512:	1D140EBE12316A47874ED69397903B67ADA7EE3D2A22A581360DCCEE492C0883FF3245298A7F851F8E421B06057352F2F5360D6D05039DC557B67783155916D2
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7868.851b65ef7fa1a422.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7868],{77868:function(e,l,c){c.r(l);c(67294);var i=c(51245),r=c(85893);l.default=e=>{let{width:l=24,height:c=24,color:s=i.colors.white,className:t=""}=e;return(0,r.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:l,height:c,viewBox:"0 0 24 24",className:t,"aria-label":"Print",children:(0,r.jsxs)("g",{fill:"none",fillRule:"evenodd",children:[(0,r.jsx)("path",{"aria-label":"Print path",stroke:s,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"2",d:"M7.06 10V4c0-.552.448-1 1-1h8c.552 0 1 .448 1 1v6M7 19H5c-1.105 0-2-.895-2-2v-5c0-1.105.895-2 2-2h14c1.105 0 2 .895 2 2v5c0 1.105-.895 2-2 2h-2m-9.943.016c.002-1.105.898-1.999 2.003-1.997l6 .01c1.105.001 1.999.898 1.997 2.002-.002 1.105-.899 1.999-2.003 1.997l-6-.01c-1.105 0-1.999-.898-1.997-2.002z"}),(0,r.jsx)("circle",{cx:"7.003",cy:"13.933",r:"1",fill:s})]})})}}}]);.//# sourceMappingURL=7868.851b65ef7fa1a422.js.map

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	downloaded
Size (bytes):	1170
Entropy (8bit):	5.892091590438216
Encrypted:	false
SSDEEP:	12:dgPAZcIneL9wbicervWvdbrPkzTz4wGOtbifl4BpU01a7OgC+FQawt:dyhY69GiXSvdUznhGyXIPChv
MD5:	86190A82D56DF324E9C499B07D3AB768
SHA1:	C57C250EFF55C3D02E924F810714893A7ABFEF5C
SHA-256:	7106A845473C9DF48F3C2D4737F9CB2804310AEC8CF1B35BBD15551A3A05BF4E
SHA-512:	D5B974962A293D49C62C58CEB5B3765CFB93E8BC5583FB9B9464E720D005954501538BD63C65BD71370FF323DAE682CEDE6FABBE57A8C31F567FBDA3726F0285
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=reload-icon
Preview:	GIF89a.......000.........666..................SSS..............................DDD.........JJJ.........QQQ.....................NNN......>>>]]].....................qqqjjj...\\\............rrr.......///...VVV@@@...cccRRR...QQQ.........yyysss.......EEEjjj\|\|\|bbbCCCgggZZZ.........^^^.........ggg...PPP@@@......pppIII......\\\...WWW..............fffhhh.......zzz...ccc...ZZZGGG}}}......QQQ...........aaa___................................................................................................................................................................................................................................................................................................................................................................................!.......,..............\........,8.......@.A....X.pDM...,.........H..f..C.Vr. ..H..:D...G.6v...b....;..,.@...a.>e.#..2X..P....._?.U......r-.....h.....B...,@.....1.@9..6x-.u.v....d.H.....x.x.@..Z.$.......D...X.....k

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (372), with no line terminators
Category:	dropped
Size (bytes):	372
Entropy (8bit):	4.884303143471997
Encrypted:	false
SSDEEP:	6:qiADGdA94qrGH4LvGaDzGvdAZdmwZMrWQLbItVFrmGQgJVjAQIL/RyHZk3gB9gBS:GDGelyH4LOaOvC6m0bItVFrQgJB1i/I/
MD5:	1BB89AB1398F700D38C557FD3E30BE53
SHA1:	36664FA3AD91C8C3F8ED1F0206528F6D3F08CBB6
SHA-256:	AC76D8EDF7DEA5AA74F7D7B8668D62D828DCE214C6464F77898992B9A3B5FCFD
SHA-512:	0E72E10199080345B3AE908AAB9BB7CB0F70E4B984FBA1BC2446B19A7A9FF88BD63FAE30499FD11938486437FC40D38F0FB6EE26E2270C41365CAFC7E38E79DB
Malicious:	false
Reputation:	low
Preview:	var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function n(e,n,o){return e(o={path:n,exports:{},require:function(){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}()}},o.exports),o.exports}export{n as a,e as c}

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 571 x 139, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8227
Entropy (8bit):	7.883761869492875
Encrypted:	false
SSDEEP:	192:3pP+tLzuaQHJE8cuSA3DToQ0Mwx1tI+VW5NJPG+tGIa+0IgF:V+tLgJE8cdWTh0F1hYTGaGR+0IM
MD5:	97A8CA7698449A934BF654AAD0BA8609
SHA1:	21CDB1F73CC0988A895A28C26A6118BA6353AACC
SHA-256:	111631DF2C892BBD6E125F7DA28ED188CE0C007562C809E59B5A9A54CF54EF31
SHA-512:	6EB835A6A5E735B9E8C120EAF2191FA6531D6ADF91E57C38F1BAE2DD6C22E64F510E668A4098F321387C4A4B334E2A2C4EE854EBCCD0FA1EA69C708C92985639
Malicious:	false
Reputation:	low
URL:	https://s3.amazonaws.com/uploads.uservoice.com/logo/design_setting/109817/original/logo.png?1385523798
Preview:	.PNG........IHDR...;...........X.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..A.[.y.g7B/mm.......p.X.P.6\|.7..bh..sr!2.%..R..K..Esi.z...b.\...(..]...p..X.P..H!:U.'..v.K/.....O...7.........^..f..\|..7+."\._.E?...._._..-a..F......m=.(...........1M.5...$.3.^w.. .?#.......cS.wf.......H............b'..!as..N.. \|.........G?v.WK...1e....[].......i...H....A$z.05...`.....=5.8.".=....2..>QuXa.......,...U...].z............>].S..<...O.f....T@.7.D....1.../......UOB...}..3iF...Z......>.=;.$N...j....ARB.....b...N... ...........X..r.:5Tq&...#....@~...p\|..N>.^1.............j..mi.Q....@6.yv t... o....d.s.:.../l=Q....[.........X.:^.......S.p0..T#.....P9.....c.....C.....C...............G.X..........M...q.D.P. 0.....`..U..\|.....K}...\|[...............9g t.['U..?..'.sO.......'!..0j.!.w.....1.."....0.v.....G......+X.Q........b...W.d'j.:.....x.I..E.b.*\|bQ..l....Q..Y.W..#.c..+++c....@.<.{.vQM....Y...#aCG.iK........-.........L....\.(l_..j.......9y..M~..!.s..S}..>Y.Q......e.

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9578), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	45330
Entropy (8bit):	5.267171609432377
Encrypted:	false
SSDEEP:	384:/Efc0oW6cE0wMfrno7ZdqZUaAhkWIEz5A3LhSwwLiGCNzx1VheJthxyN9NpqBTht:ccP0+ZdapEdwG6hYHXUPq2VhMohFbveZ
MD5:	BF86F4F22EFF4BE38283146DDF220E37
SHA1:	9046C9D0C65DC094281F7643CEDA93AE47DA7E29
SHA-256:	BE6D527772632D8E112BF83E0533507B4DF5FE25AC46056E951570F4BBD80806
SHA-512:	729FD82BACE67BCDCD2DACC3C783D0E8680B91714D777904208CDC5D276D706B8F4BA0CC213D9D3E6CF651E7E7B3B6C907D54571AAB134110219EFC64392DFB8
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/consumer-information/privacy-feedback-button/
Preview:	<!DOCTYPE html>.<html lang="en-US" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb#">.<head>.<meta charset="UTF-8" />.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />.<link rel="stylesheet" href="https://use.typekit.net/msx7sac.css" />.<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v23.4 (Yoast SEO v23.4) - https://yoast.com/wordpress/plugins/seo/ -->..<title>Privacy Dispute Resolution Services \| TrustArc</title>..<meta name="description" content="Efficiently manage privacy disputes with TrustArc's resolution services. Discover our solutions" />..<link rel="canonical" href="https://trustarc.com/consumer-information/privacy-feedback-button/" />..<script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://trustarc.com/consumer-informat

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16321)
Category:	dropped
Size (bytes):	16371
Entropy (8bit):	5.30148332482575
Encrypted:	false
SSDEEP:	384:TI5d0S96Ij0qFAtyee1qB2UmboM74xnUn1SI83ULBu2X/v5vy:Twd0SEIj9FTe7Xmbo1RMSI838lX5vy
MD5:	5D13835892EA46B380757981208B63E0
SHA1:	1F4F08047B42F3E5D5CE2A31BDAF923CE227B367
SHA-256:	9ABC448600550DDAF7904A2EB135F9F4307E1E3C16E60319F3286A61CC7AA26C
SHA-512:	F5A4B7C991DDD5AB031F9E7E7563571B465B6DEBFB347C7CCD3F5D6C494154CE2FDCF8787D7A970528DCFBD9F76D9FD89D5E3CF365A4A6A95DADB10632A26745
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3161],{23161:function(e,t,n){"use strict";n.d(t,{lj:function(){return H},Pz:function(){return q}});var a=n(59499),i=(n(56859),n(67294)),o=n(49153);const r=e=>{if(e&&e.config){var t,n,a,i;if(o.e((function(t){t.addEventProcessor((function(t){return new Promise((function(n){return t.environment=e.config.env,n(t)}))}))})),o.v("config",{ssrtid:e.config.ssrtid,originatingIp:e.config.originatingIp}),e.sale)o.v("sale",{amount:e.sale.amount,type:e.sale.type,txnDate:e.sale.txnDate,currency:null===(t=e.sale.currencyInfo)\|\|void 0===t?void 0:t.currency,id:e.sale.id,referenceNumber:e.sale.referenceNumber,recipientEmail:e.auth.recipientEmail});if(e.companyInfo)o.v("companyInfo",{companyName:e.companyInfo.companyName,language:e.companyInfo.language,region:e.companyInfo.region,primaryEmail:null===(n=e.companyInfo.contactMethods)\|\|void 0===n\|\|null===(a=n[0])\|\|void 0===a\|\|null===(i=a.primaryEmail)\|\|void 0===i?void 0:i.emailAddress});e.payment&&o.v(

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33713)
Category:	downloaded
Size (bytes):	33763
Entropy (8bit):	5.234729075108849
Encrypted:	false
SSDEEP:	768:JDUfMOfsJTGRN9HLvLdZQB+WTSxPaZTZj+JQs3tkc6Kb:ZUfMasJSb3QIroFqJVtkc6Kb
MD5:	DBA23ED240561ED1D860D0E1189A64F1
SHA1:	D786C992063B4E35601F14389E9B849FD29C7694
SHA-256:	864C196BA9E7F7FAEC1CA59D8B61F01495B4A869463A1DB2AD73BE05F8CCC821
SHA-512:	1E365F4CA9E0C8323E9E9C3CAD088258BE52C34D9257BC20495FFC436EA9B41F26BACAC996AC7D63170081C219D534D77B637C066B97906659E6CE187CD11047
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2332-a40370253963c421.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2332],{60139:function(t){function e(t){return function(){return t}}var r=function(){};r.thatReturns=e,r.thatReturnsFalse=e(!1),r.thatReturnsTrue=e(!0),r.thatReturnsNull=e(null),r.thatReturnsThis=function(){return this},r.thatReturnsArgument=function(t){return t},t.exports=r},63620:function(t,e,r){var n=r(60139);t.exports=n},37437:function(t,e,r){r.d(e,{gN:function(){return pn},l0:function(){return vn},J9:function(){return sn},j0:function(){return dn}});var n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)e.hasOwnProperty(r)&&(t[r]=e[r])},n(t,e)};function o(t,e){function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}var a=function(){return a=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	297
Entropy (8bit):	6.751105473446711
Encrypted:	false
SSDEEP:	6:6v/lhPcd0Ek75+FaIBnwHZEsIC/cAFwhh7IuJ/zk2J2cRup:6v/7k0Ek6tG+CFwhxk2scRc
MD5:	A9C53515C332C4DAC495DE3F5661EAF2
SHA1:	1C568F80B9C23E9D233E24984657779803145B9F
SHA-256:	78C8675D65136620B36028006C77BD0509DBB3BF5700AD4A48D27F6E3F38C5BF
SHA-512:	71F0CD2363A21A0781CEE067C247B62F2088F548CC2CE000186AA0B86E192F9626FFE173DD105F2901356D73BBC5B3BBF042E12D3CDDA967D64953292AFFB990
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....IDATx.c.\@S.X.....=.....@.@... M....V.^.`..y+<...C.J d@.HaW.....w.b. .......PC..........]n...P.....?#+.....P.{'..@5.....o..y.c..@.......(... $,....Y9.;.....;...p........M...p.....x..QAjz.q.w`..c..0.....W.q....0.!....!....#...........U...z....IEND.B`.

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5601), with no line terminators
Category:	downloaded
Size (bytes):	5601
Entropy (8bit):	4.951703804171998
Encrypted:	false
SSDEEP:	48:s7ISFeqBLoax4NVGNV/Yu5AWBP7riR2/NEl20rkTSmAJgeGkJ3og6:HmXcWBTriR2/NEl20rkTSpJ3GkJ4g6
MD5:	7D15192D409EE7A82F5B299C1C081637
SHA1:	8CAD82C8A4BBE698999B9DFB38C1320BF697445B
SHA-256:	4DCE038486D2C71A89D1595AA7E32E2A019783AFF07915D9274616D9F067FCBE
SHA-512:	642B6095879C814F134CDC78F7E2680CFF07F2A6FEE14573AAB9D3BE2F94128009CEB8972D549EFA9260F275FCE5C0D461CAD0C40606AC75A837207BA4CD7967
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/auth-component/uv-auth/uv-auth.css
Preview:	@font-face{font-family:"proxima-nova";font-weight:100;src:url("/auth-component/uv-auth/static/fonts/proxima_nova_thin.woff2") format("woff2"), url("/auth-component/uv-auth/static/fonts/proxima_nova_thin.woff") format("woff")}@font-face{font-family:"proxima-nova";font-weight:300;src:url("/auth-component/uv-auth/static/fonts/proxima_nova_light.woff2") format("woff2"), url("/auth-component/uv-auth/static/fonts/proxima_nova_light.woff") format("woff")}@font-face{font-family:"proxima-nova";font-weight:400;src:url("/auth-component/uv-auth/static/fonts/proxima_nova_regular.woff2") format("woff2"), url("/auth-component/uv-auth/static/fonts/proxima_nova_regular.woff") format("woff")}@font-face{font-family:"proxima-nova";font-weight:600;src:url("/auth-component/uv-auth/static/fonts/proxima_nova_semibold.woff2") format("woff2"), url("/auth-component/uv-auth/static/fonts/proxima_nova_semibold.woff") format("woff")}@font-face{font-family:"proxima-nova";font-weight:700;src:url("/auth-component/uv-au

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58929)
Category:	dropped
Size (bytes):	58979
Entropy (8bit):	5.567721217764403
Encrypted:	false
SSDEEP:	768:G8QY/3Po4VDMCMwDnPnPAr9lEjgNmnQzkW9XebTHOU3Su5rRrPV70C/oor+K:kY//o4VDMkPWXb96BPVQC/oap
MD5:	DBB61563FBE82C516A5DFA738DBFD1D9
SHA1:	E6A370D8EA2A804F8B9196EEAA16FC23AD833826
SHA-256:	AD860383BEC1B388D3A7A23D610F496F5F0E1798CCF0B56144F2598E7FC1B219
SHA-512:	3A29E647B1CD951E6CD3E2F221EBFB5B48B743A32EB26C838AAEAA45B42FD81DAE34C8140D6D0070DA906B55E8DF1CBC220AC1E4F82B2BDBA45349906B5F5D65
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6139],{3619:function(e,t,s){var o=s(59499),a=s(95627),n=s.n(a),i=s(67294),r=s(86896),l=s(44012),c=s(23240),d=s(37004),m=s(51245),p=s(85893);function x(e,t){var s=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),s.push.apply(s,o)}return s}function y(e){for(var t=1;t<arguments.length;t++){var s=null!=arguments[t]?arguments[t]:{};t%2?x(Object(s),!0).forEach((function(t){(0,o.Z)(e,t,s[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(s)):x(Object(s)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(s,t))}))}return e}t.Z=e=>{const t=(0,r.Z)(),{withTOS:s=!0,separator:o="\xa0"}=e,{privacyUrl:a,tosUrl:x}=(0,d.getLegalLinks)(t.locale),_={activity_type:"optional_actions",ui_object:"link",ui_action:"clicked",ui_access_point:"tra

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24171)
Category:	downloaded
Size (bytes):	24221
Entropy (8bit):	5.4158952934428095
Encrypted:	false
SSDEEP:	192:/RdTprtIZ5znG03whUXUJg000RO0hU0zs0ztOD0Eh20EpB2Zxa2bgDPKNQQ4K4/w:/vNCZ5znGxDaQZw3m/zhznpTtVASFfne
MD5:	D80243304AA96AA47F087C7B6FD7D648
SHA1:	404E2DE8D39915D5D166F39BECEB47ECD8521AD0
SHA-256:	0258BD9FE24727CE873C849CE4E63473EF3B5E9E72C47D553DB1E57E43A19CBB
SHA-512:	21E9D9ECF2151D7193DAF087BFE7112DD35897B72CD05C90E15C154D250A0D74EBCB58575948ABD7B4EF4A24300977CB0D0E58A49FD6798E7E8D123497DD5BCB
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8804-0df16ebd6cb32488.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8804],{86553:function(s,e,i){i.d(e,{Z:function(){return b}});var a=i(59499),l=i(95627),t=i.n(l),r=i(67294),o=i(44012),n=i(54490),c=i(51459),u=i(85893);var x=s=>{let{color:e="#6B6C72",width:i=24,height:a=24,className:l=""}=s;return(0,u.jsxs)("svg",{xmlns:"http://www.w3.org/2000/svg",width:i,height:a,className:l,viewBox:"0 0 24 24",fill:"none",children:[(0,u.jsx)("path",{d:"M17 4H15.816C15.6099 3.41709 15.2288 2.91209 14.7247 2.55409C14.2206 2.19608 13.6183 2.00256 13 2H11C10.3817 2.00256 9.77937 2.19608 9.2753 2.55409C8.77123 2.91209 8.39008 3.41709 8.184 4H7C6.20435 4 5.44129 4.31607 4.87868 4.87868C4.31607 5.44129 4 6.20435 4 7V19C4 19.7956 4.31607 20.5587 4.87868 21.1213C5.44129 21.6839 6.20435 22 7 22H17C17.7956 22 18.5587 21.6839 19.1213 21.1213C19.6839 20.5587 20 19.7956 20 19V7C20 6.20435 19.6839 5.44129 19.1213 4.87868C18.5587 4.31607 17.7956 4 17 4ZM11 4H13C13.2652 4 13.5196 4.10536 13.7071 4.29289C13.8946 4.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21168)
Category:	downloaded
Size (bytes):	21218
Entropy (8bit):	5.356201927108739
Encrypted:	false
SSDEEP:	192:Mg3a4HXGX3kWQJuMTI5GlghvndZRTx9z/3S7WMpQx7dJ4vsjnvzls2gd4POs2Wk7:NCHwQZGCvT9z/aQxSDQC3PLaLQ
MD5:	2A7272631CB808B8C16B6C30B24B352E
SHA1:	D437A824C3C33A923FD1D2F55192CC10021C79E3
SHA-256:	C0EB89F63A29A9B7C4A177E87121DAFC7F68F1C0A9CF097615C363D9C9FFE72F
SHA-512:	89C0CBC9F68685D434921F46840ABC5BD94E34F96B211074F405F5CDDA294D8672AC56B1AA48FB0BE35BB98B2B2D996FF18C11DD306E11088432F4F45A9A83D3
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5480-42cda307521b848a.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5480],{72468:function(o,e,t){var r=t(95627),s=t.n(r),i=t(67294),l=t(51245),n=t(85893);e.Z=o=>{let{children:e,removeDefaultBackground:t}=o;return(0,n.jsxs)(i.Fragment,{children:[(0,n.jsx)("div",{role:"dialog","data-testid":"test-modal-dialog",className:s().dynamic([["2451540248",[t?"unset":"rgba(0, 0, 0, 0.5)",l.breakpoints.sm]]])+" overlay",children:(0,n.jsx)("div",{className:s().dynamic([["2451540248",[t?"unset":"rgba(0, 0, 0, 0.5)",l.breakpoints.sm]]])+" modal",children:e})}),(0,n.jsx)(s(),{id:"2451540248",dynamic:[t?"unset":"rgba(0, 0, 0, 0.5)",l.breakpoints.sm],children:[`.overlay.__jsx-style-dynamic-selector{position:fixed;width:100%;height:100%;top:0;left:0;right:0;bottom:0;background-color:${t?"unset":"rgba(0, 0, 0, 0.5)"};z-index:2;}`,`@media screen and (max-width:${l.breakpoints.sm}){.overlay.__jsx-style-dynamic-selector{padding:12px 2px 32px;}}`,".overlay.__jsx-style-dynamic-selector .modal.__jsx-style-dyna

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	236427
Entropy (8bit):	5.5317203797765595
Encrypted:	false
SSDEEP:	3072:L+L9pYF+p1FOgKSZtLnq03sUU/COE9v1bfUq4NHTeCTE74VRgk0seAX+M:Ko+p1FNKO8dw41aCWaRgk0seAX/
MD5:	753BC275A1D29C114D27828078FA2FAB
SHA1:	69EDFC499D7F0F19C5FBDCA362F2D7E7D6DB8BDF
SHA-256:	6238173AB588071DA11F8647634DBC2F0386FCA0866413C7A7B38E7722053A12
SHA-512:	22560AE8339FF0F3037CD59B8285E1BE204BA26456B899D9308FA38DFDC444E1CFE9BCFBDD47BECDC8B886887726BDE07ADE0E72F4B56067CF2E067A39DBF57A
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ba,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.612457348662773
Encrypted:	false
SSDEEP:	3:YTyLV/VfsqPNVcSLQzRE9Ldu1S4:YWLV9soDLQmpdwS4
MD5:	69EE36929D2172DEA5C1763BAC240040
SHA1:	77EF82FC4B7757D445E8901E16D785AA44E3B1DF
SHA-256:	45DA241A91C843B268ADA7481CDECE1AA679F2720931EFFEA28D83E1398D66A9
SHA-512:	FDA2E41AF332441315A0BC6352DD1B9350F92E13447CD1A58CBAA96748271C26780A653EA94F023808F572D1E329C855EF6A0E3B51558BF474ABA614AB26051A
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21150)
Category:	downloaded
Size (bytes):	21200
Entropy (8bit):	4.399918006414408
Encrypted:	false
SSDEEP:	384:JIp+ma4Oh06Ie46eJVA4X6HjE+EiEQCE+EKEP7JOIev5yxqk6LbEwNEpAXv9m86k:0MaPB/BKHYlBIlJPYN8xz7af8xxBf7PI
MD5:	5D3ACBEE67E89B42766E3833A9EF5B9A
SHA1:	7C854709373067CF76CD691BF05DE7AFF54505B6
SHA-256:	FE69199B96A7026EB079FBB450BC8DE06B0D4DAEF58EDCEADB6C18E5CD3E255B
SHA-512:	CA97E2FD8748ABCBED7F17A751FFAC7BA2C74298918052012BD2E5CD020E8234EB7756FA55198A58E1FE295E52085969B306C587545617F24B567214BFB34988
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8482.b28cf868ec59260b.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8482],{88482:function(C,s,e){e.r(s);var a=e(95627),L=e.n(a),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ROUTING_NUMBER",defaultMessage:"Routing number"});return(0,t.jsxs)("div",{className:"jsx-1363339181",children:[(0,t.jsx)("div",{className:"jsx-1363339181 txt",children:(0,t.jsx)(i.Z,{id:"ROUTING_NUMBER_INFO_TEXT",defaultMessage:"Your Routing number is the first set of numbers on the bottom of your checks."})}),(0,t.jsx)("svg",{width:"99px",height:"64px",viewBox:"0 0 99 64",version:"1.1",xmlns:"http://www.w3.org/2000/svg",className:"jsx-1363339181",children:(0,t.jsx)("g",{id:"Web",stroke:"none",strokeWidth:"1",fill:"none",fillRule:"evenodd",className:"jsx-1363339181",children:(0,t.jsx)("g",{id:"Making-full-payment_tool-tip-",transform:"translate(-401.000000, -367.000000)",className:"jsx-1363339181",children:(0,t.jsxs)("g",{id:"Group-4",transform:"trans

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4262)
Category:	downloaded
Size (bytes):	34706
Entropy (8bit):	5.430985750685134
Encrypted:	false
SSDEEP:	768:6jL/4g4R6jzW9uvVfE4DNz0YviFIpmDov4Q3dTIYkX:S4vRazW9uvVfE4DNwYGIpmDov4Q3dTI1
MD5:	CADA79DFAACD3EEC17CC8E3D534487D0
SHA1:	DF53749BA7FBF5A365A9C4654922E2BD805AF379
SHA-256:	81AE9EC2AA53A685DD857BEE66E92B20E658B5C49D4A92DA9836868256DBC266
SHA-512:	DE5B2289232AEA880A4B2384E59B406E59C5FB2F58AF8E90229CF2F611A3F3C9A28E21884A77BFBA906DFB4F8EF10D685BEBC3B83B314F2A26219A3C55BB872E
Malicious:	false
Reputation:	low
URL:	https://consent.trustarc.com/notice?domain=trustarc.com&c=teconsent&js=nj&noticeType=bb&gtm=1&text=true&pcookie&irmc=irmlink
Preview:	var truste=window.truste\|\|{};truste.bn\|\|(truste.bn={});truste.eu\|\|(truste.eu={});truste.util\|\|(truste.util={});.truste.util.error=function(h,d,g){g=g\|\|{};var f=d&&d.toString()\|\|"",c=g.caller\|\|"";if(d&&d.stack){f+="\n"+d.stack.match(/(@\|at)[^\n\r\t]/)[0]+"\n"+d.stack.match(/(@\|at)[^\n\r\t]$/)[0].}truste.util.trace(h,f,g);if(truste.util.debug\|\|!d&&!h){return}var a={apigwlambdaUrl:"https://api-js-log.trustarc.com/error",enableJsLog:false};.if(a.enableJsLog){delete g.caller;delete g.mod;delete g.domain;delete g.authority;g.msg=h;var e=new (self.XMLHttpRequest\|\|self.XDomainRequest\|\|self.ActiveXObject)("MSXML2.XMLHTTP.3.0");.e.open("POST",a.apigwlambdaUrl,true);e.setRequestHeader&&e.setRequestHeader("Content-type","application/json");.e.send(truste.util.getJSON({info:truste.util.getJSON(g)\|\|"",error:f,caller:c}))}};truste.util.trace=function(){if(self.console&&console.log&&(this.debug\|\|this.debug!==false&&(self.location.hostname.indexOf(".")<0\|\|self.location.hostname.indexOf(".truste-svc.n

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21287)
Category:	downloaded
Size (bytes):	21337
Entropy (8bit):	5.558775985611935
Encrypted:	false
SSDEEP:	384:j3Weg6c5b5Prg9obhL7LFLJLKNwq2pvJ505:jmB5tP/hL7LFLJLuwq2JJ505
MD5:	D8C386CD534BB038504DF3AAF6E9357D
SHA1:	F60C9323E42C8B13CEBE904741A257F60E435879
SHA-256:	403663584FE5CC8EBDEEE9F428A08C57B06398DA73367166115D771FC60453F5
SHA-512:	22934C9A97AE56808053BC6FCD37CAE8D6E3EB63675DA6FBF3AF9EA03A1D0F43FE7E3B7E6BB2C798BD2CDBA3F09676772584A2D70F2E7C4A30E00CAE37851718
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5428-18008d1732926864.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5428,6721],{10616:function(e,i,t){var s=t(95627),n=t.n(s),o=t(67294),a=t(44012),c=t(36456),l=t(93429),r=t(10779),d=t(84161),m=t(67214),x=t(54623),y=t(70678),p=t(96554),f=t(71295),h=t(82429),u=t(23240),_=t(93191),g=t(51245),b=t(2870),w=t(85893);const j=e=>(0,w.jsxs)("div",{className:n().dynamic([["791317644",[g.colors.white,g.fontSize.sm]]])+" w",children:[(0,w.jsx)(n(),{id:"791317644",dynamic:[g.colors.white,g.fontSize.sm],children:[".w.__jsx-style-dynamic-selector{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-webkit-justify-content:center;-ms-flex-pack:center;justify-content:center;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;height:100%;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;}",`.w-i.__jsx-style-dynamic-selector{width:320px;height:auto;background-color:${g.colors.white};padding

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14695)
Category:	downloaded
Size (bytes):	323785
Entropy (8bit):	5.564567986021661
Encrypted:	false
SSDEEP:	3072:ziL9pYF+p1FOgoSCtLnq03JUU/COE9v1bfUq4NZTeCTE74tRgk0seASSF2P:uo+p1FNoh5dw4LaCWORgk0seASSG
MD5:	B047D34758C4E616EB7C4D436EDDBF38
SHA1:	9A810336C06F9E33DB634D8CBD020E475DE2BC5A
SHA-256:	45EB79886BEB6D67304FF91FFDD08ADCB10F3069FE428604CB8E7DD21BECAA20
SHA-512:	9E3D94C8CDC15035C4E11C4587491E715779F30DA814D03D4A24346A74C768162B8514F4521AF14EBF7A300C047FEBBB15072DCCCA107B66BEF21704EE45440B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-T3CS5GN
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"44",. . "macros":[{"function":"__e"},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"cmapi_cookie_privacy"},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"notice_behavior"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-4146259-15","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQue

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.612457348662773
Encrypted:	false
SSDEEP:	3:YTyLV/VfsqPNVcSLQzRE9Ldu1S4:YWLV9soDLQmpdwS4
MD5:	69EE36929D2172DEA5C1763BAC240040
SHA1:	77EF82FC4B7757D445E8901E16D785AA44E3B1DF
SHA-256:	45DA241A91C843B268ADA7481CDECE1AA679F2720931EFFEA28D83E1398D66A9
SHA-512:	FDA2E41AF332441315A0BC6352DD1B9350F92E13447CD1A58CBAA96748271C26780A653EA94F023808F572D1E329C855EF6A0E3B51558BF474ABA614AB26051A
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_9ns793lfk_telemetry
Preview:	{"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32035)
Category:	dropped
Size (bytes):	240427
Entropy (8bit):	5.145707923960965
Encrypted:	false
SSDEEP:	3072:AUDKlUUSPVqCqoG3cYI70SDzOyAskRsIcQQ3+SuwC:yUNVEmYIHzQQ3Xu/
MD5:	D935D506AE9C8DD9E0F96706FBB91F65
SHA1:	7F650EE30C6A4D3EEA04032039B20FF72997559B
SHA-256:	C4D8DBE77FEB63E5A61BEE0BEAD4E5F66E8FA6A927599BD1B74ACED52467273C
SHA-512:	0470C258BB5DA745E900571C3F63627C26C97D8A1886C45264E50CDCA9C0C72D9BFC0CB7067F757EBB9DFB703DE5BAC0E300D6577C84399AC9AA057C69945751
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.11.4 - 2015-03-11. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */..(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){function t(t,s){var n,a,o,r=t.nodeName.toLowerCase();return"area"===r?(n=t.parentNode,a=n.name,t.href&&a&&"map"===n.nodeName.toLowerCase()?(o=e("img[usemap='#"+a+"']")[0],!!o&&i(o)):!1):(/^(input\|select\|textarea\|button\|ob

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1258)
Category:	downloaded
Size (bytes):	1308
Entropy (8bit):	5.452623430840307
Encrypted:	false
SSDEEP:	24:ibj3ia7gsxreZ/kYhSgUnmm9FyZn4FhdhJQHfntXrFt2efntX2QBoFt2efntX0Fv:ibOaheFkYhamSyIhdfQHfnZ58efnZ2Dy
MD5:	F69D3B30A1263332B5A03CD48576C018
SHA1:	DF7304DF5A2D0987DA1BA2DFBFBAC7D1550F3AE3
SHA-256:	0513FB180C36BB8F47AAB335FEC433BD9453F2EA6A73F30015FBA576296A21B5
SHA-512:	4E0145208A02723E9F0773FC41BF6DD16BB30C0731CDB326A59A4CFA7BF83A4921ADA98348BE8A07E1263F3DE5CA03B856A4DDFE30E0D5E3E957AF32ABFBBDCF
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/1193.3dd404b7ea3c36c8.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1193],{61193:function(s,e,r){r.r(e);var t=r(95627),o=r.n(t),i=r(67294),n=r(51245),l=r(85893);e.default=s=>{let{width:e=12,height:r=15,color:t=n.colors.black,className:a="",strokeWidth:c=1}=s;return(0,l.jsxs)(i.Fragment,{children:[(0,l.jsx)(o(),{id:"4037661919",children:[".paylink-lock-icon.jsx-4037661919{position:relative;top:2px;}"]}),(0,l.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:e,height:r,viewBox:"0 0 12 15",className:"jsx-4037661919 "+(a\|\|""),children:(0,l.jsxs)("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",className:"jsx-4037661919",children:[(0,l.jsx)("rect",{width:"10.165",height:"9",y:"4",stroke:t,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:c,rx:"2",className:"jsx-4037661919"}),(0,l.jsx)("path",{stroke:t,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:c,d:"M8.132 4V2.963C8.132 1.327 6.767 0 5.082 0 3.399 0 2.034 1.327 2.034 2.963V4",className:"jsx-4037661919"

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (9748)
Category:	dropped
Size (bytes):	9972
Entropy (8bit):	5.577555687334594
Encrypted:	false
SSDEEP:	192:SkLnr8QmxYY72OlfojjuXBacAEkEVg3pXrzTGv6:Sk/8BKrypxPLC3pz46
MD5:	8055E87F2396A627E93C85890189E625
SHA1:	842FF4DB865468086582581A540E5B87A128F5CE
SHA-256:	0B6BAB63E3AA24B4AB6AAB63765A217DB5004961BAB1AB7D74FFEBFA33EFB5C4
SHA-512:	9A18DB6C96EBAE906C28F9F6396818DBE838DB8C32429927755C6D70CA4894A8FE028678B409C3A93790D8A91EE00FF71F761A21D5C746F9F2DE436920617F79
Malicious:	false
Reputation:	low
Preview:	/*. bootbox.js v4.4.0. . http://bootboxjs.com/license.txt. */.!function(a,b){"use strict";"function"==typeof define&&define.amd?define(["jquery"],b):"object"==typeof exports?module.exports=b(require("jquery")):a.bootbox=b(a.jQuery)}(this,function a(b,c){"use strict";function d(a){var b=q[o.locale];return b?b[a]:q.en[a]}function e(a,c,d){a.stopPropagation(),a.preventDefault();var e=b.isFunction(d)&&d.call(c,a)===!1;e\|\|c.modal("hide")}function f(a){var b,c=0;for(b in a)c++;return c}function g(a,c){var d=0;b.each(a,function(a,b){c(a,b,d++)})}function h(a){var c,d;if("object"!=typeof a)throw new Error("Please supply an object of options");if(!a.message)throw new Error("Please specify a message");return a=b.extend({},o,a),a.buttons\|\|(a.buttons={}),c=a.buttons,d=f(c),g(c,function(a,e,f){if(b.isFunction(e)&&(e=c[a]={callback:e}),"object"!==b.type(e))throw new Error("button with key "+a+" must be an object");e.label\|\|(e.label=a),e.className\|\|(e.className=2>=d&&f===d-1?"btn-primary":"btn-

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9962
Entropy (8bit):	5.253434597113599
Encrypted:	false
SSDEEP:	192:cwPDPjqwq5xq3gqv1Q3YQzA1JGxH9MMRSf+z8LUGH/:cwPDPjqF5c3VB1JGxH9MMRSf+z8LUGH/
MD5:	DD9F3030ACC58C1CD10ACF194DEABBFF
SHA1:	284F2E606AD2F198D7BDE440E0925E29579F4BA2
SHA-256:	C1024436B1E1B74CAD8670164DB08E8F995743747C4BCF76258072CCCC633926
SHA-512:	D54FBED6E7CE878442594CB61CE89E3E4382D53F45AAFD6849499BBC8C0467E9E96FA40CEC33244424764257AF3FA92B75905757956F2387A635804D42ED4B31
Malicious:	false
Reputation:	low
Preview:	..function clearError(inputField){. $(inputField).nextAll('.error:first').html("");.}..function validateEmail(inputField, inputFieldName){..var input = $(inputField).val() \|\| $(inputField).html() \|\| $(inputField).text(); ..var emailExp = /^[\w\-\.\+]+\@[a-zA-Z0-9\.\-]+\.[a-zA-z0-9]{2,4}$/;..if (!emailExp.test(input)){...$(inputField).nextAll('.error:first').html("<label>" + inputFieldName + " " + $('#formatNotValid').text() + "</label>");...return false;..}..return true;.}..function validateMinimumLength(inputField, inputFieldName, minLength){..var input = $(inputField).val() \|\| $(inputField).html() \|\| $(inputField).text(); ..if ($.trim(input).length < minLength){...$(inputField).nextAll('.error:first').html("<label>" + inputFieldName + " " + $('#least20Chars').text() + "</label>");...return false;..}..return true;.}..function validateComplaint(){..var validationPassed = true;..validationPassed = validateEmail($('#email'), $('#emailError').text()) && validationPassed;..validationPas

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3073
Entropy (8bit):	5.08024149765094
Encrypted:	false
SSDEEP:	96:WGxQ+AzJZjTFhqHVgCagDiQTdqHeJA5RkaUHO:3xkfIDXY
MD5:	78FFA83362A97FA1D78D33E084636344
SHA1:	7E0103F733B3BF47026130D5DE10DF1949B67BD2
SHA-256:	A11891089BC1F14552DB49E9EC6E9ECD59A1456E607270D92C29BB736AF174CA
SHA-512:	2BF31F4F1EB9A7E2B1D60D9AA1F6AC2305A1220BF91CDF41A4DF745C485A0C7BD35A22DAF6667F652D3C8E6C8AE2DCA42AE1CF64A33BD7A134E2F8D7FE016819
Malicious:	false
Reputation:	low
Preview:	.function populateQA(jsonData, container) {...var html = "";......for (var i=0; i<jsonData.length; i++) {... ... var qa = jsonData[i];...... var question = qa['question'];... var qTextId = question.questionTextId;... var qTypeId = question.questionTypeId;... var answers = qa['answers'];.....html += "<div class='questionAnswer' qTypeId='" + qTypeId + "'>";.... //https://jira.truste.com/browse/DR-140... switch (qTypeId) {.....case 1: //checkbox......html += "<fieldset>";......html += "<legend class='question'>" + $('#' + qTextId).text() + "</legend>"......break;.....case 2: //freetext......break;.....case 3: //radio button......html += "<fieldset>";......html += "<legend class='question'>" + $('#' + qTextId).text() + "</legend>"......break;....}.... for(var j=0; j<answers.length; j++) {... .switch(qTypeId){... ..case 1: //checkbox.......var checkboxId = "surveyCheckboxInputId_" + i + "_" + j;... ...html += "<input class='surveyInput' type='checkbox' id

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43430
Category:	dropped
Size (bytes):	12116
Entropy (8bit):	7.984694744614838
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVH5yGIt9IKyLPlIUjtiXuXTthBR5:+tjRIm6SoITu3khUZS9yLPlIhuDLd
MD5:	71B328AFF914ADA8B774BFA8FFF542C4
SHA1:	3FB33AE4AB66FFFD1BA62BADC661BD910CDF8CF3
SHA-256:	52056C6C133887292D444EB1152DEC3F0A134FB0ED4DC33C2B116AC480455A3C
SHA-512:	933B32DE0C08CB7C7EF44E07F9D74FA5D034B4BC4B350207E343D7E613C56F926AAD4AECF0BEE4F897E4A056F3314E8F5737A9852F9D704FF99F41A4F1C80A17
Malicious:	false
Reputation:	low
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	downloaded
Size (bytes):	89503
Entropy (8bit):	5.290152941028811
Encrypted:	false
SSDEEP:	1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq
MD5:	0732E3EABBF8AA7CE7F69EEDBD07DFDD
SHA1:	4CD5DDC413B3024D7B56331C0D0D0B2BD933F27F
SHA-256:	CE9D07500AD91EC2B524C270764EC4C9A33E78320D8D374EC400EDE488F6251B
SHA-512:	41D24C426ABCF913BE59917591D906318A547661280036B098A2B1B948BCF9FF14F268B140DB10956730D64A857A61B81034D888ED7F857419DEE6B8D327447C
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/themes/trustarc/assets/dist/js/jquery-3.6.0.min.js?ver=1711465976
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}func

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	662
Entropy (8bit):	4.845349337928249
Encrypted:	false
SSDEEP:	12:xsFQVwapr+ihmzkCZu3IGmxU6/RxbRyGDGQiGyyDRWUkEeXf:/FJ+ih+kMurmfvRyGDGJGrRWUnev
MD5:	7D9EF64F75E3B66D345D7314EB1B11DE
SHA1:	B7B0089ECFD79AED5420EED4F740AFE87F1B87A7
SHA-256:	A0EBC6A9CBF4856AD43CF45A50F56A4BD7D2C00D4AE38EEBACE7130E33A30207
SHA-512:	87B9E1AA23EA2E3F4C261C5D5F6D73EB6D32DA2C2F136B358681264EECEE80E2D5F04F00967774650714F977B07DD7FDB25BD3B52107CE277B92F965D3878BB3
Malicious:	false
Reputation:	low
Preview:	. window.__lc = window.__lc \|\| {};. window.__lc.license = 6354551;. window.__lc.ga_version;. window.__lc.chat_between_groups = false;. window.__lc.params = [. { name: 'Business Name', value: 'TrustArc' },. { name: 'Group Id', value: '386' },. { name: 'Client Id', value: '1181' }. ];. (function() {. var lc = document.createElement('script'); lc.type = 'text/javascript'; lc.async = true;. lc.src = ('https:' == document.location.protocol ? 'https://' : 'http://') + 'cdn.livechatinc.com/tracking.js';. var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(lc, s);. })();.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1428)
Category:	dropped
Size (bytes):	1478
Entropy (8bit):	5.327813756723405
Encrypted:	false
SSDEEP:	24:ibj8G9OAXshSd/A8HbUqPWyQhMFnfntb5ChKOhJLJLhgNKNLMhSFw0pfntbLhVcA:ibgGoA8gI8HQqPWl2nfnaIOf1qUNVw05
MD5:	EFA6F902936B7DB194D07237F235321C
SHA1:	2A95BE7635CBCD6CA619C09C476101988E670CF5
SHA-256:	FA5F14CCC5356A1AEE4DCFD4F381BF4A90D5704A53BE1055E218DD5DFF8B6D96
SHA-512:	B2BD746966A17FFEA944EED00FA4B663607EF1B36E825EE8B86505958484D56DF9F8378ADEFC684FF11609D94A665C10489A69C42A15CC4822A85858B3B29989
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8948],{98948:function(t,e,i){i.r(e);i(67294);var s=i(85893);e.default=t=>{let{width:e=32,height:i=24}=t;return(0,s.jsxs)("svg",{width:e,height:i,viewBox:"0 0 36 32",fill:"none",xmlns:"http://www.w3.org/2000/svg",children:[(0,s.jsx)("path",{d:"M1.844 23.9779C1.40488 24.0036 1.02787 23.6609 1 23.2106V1.76861C1.02787 1.31836 1.40488 0.975637 1.844 1.00136H32.156C32.5951 0.975637 32.9721 1.31836 33 1.76861V23.1039C32.9699 23.6284 32.5313 24.0287 32.02 23.9984L1.844 23.9779Z",fill:"#FAFBFF",stroke:"#008481",strokeWidth:"1.55259",strokeLinecap:"round",strokeLinejoin:"round"}),(0,s.jsx)("g",{opacity:"0.15",children:(0,s.jsx)("path",{d:"M31 3V22H12L31 3Z",fill:"#00C1BF"})}),(0,s.jsx)("rect",{x:"5",y:"5",width:"24",height:"4",fill:"#53B700"}),(0,s.jsx)("path",{d:"M11 16.0393C11 17.1222 10.0485 18 8.87466 18L7.22117 17.9268C6.43924 17.958 5.70182 17.5909 5.30078 16.9709C4.89974 16.3508 4.89974 15.5778 5.30078 14.9578C5.70182 1

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	469
Entropy (8bit):	4.857341603215339
Encrypted:	false
SSDEEP:	6:TMVBd/i9mc4slzMmiRI485CkQbZIfeLSCe7+33RY6EFRPKfYozMSFuZz4rrr3EXT:TMHd6Wmiq48Bt7I3faYYozMS0Zz4ww0J
MD5:	D350737C002A5C08056DD05C9EFD47CA
SHA1:	AF990A612C5034869EDB4C7C32F77C0CD037C968
SHA-256:	E80A43E1D44CEB90809E4FB2663E40E564A539B621BAA4494FF1DA64C70E6133
SHA-512:	D7D582D688C5EBD21C44F3809A2802A2162BB93B1066B4C5E7241771D70B8A0662EB4C1C8532F53609D8E7BBC31803A3AC5CEFF389E8D25B20DF9FEDF7455B67
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/uploads/2023/11/fb.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="23" height="23" fill="none">. <path d="M20.406.426H3.22A2.344 2.344 0 00.875 2.769v17.188A2.344 2.344 0 003.219 22.3H9.92v-7.437H6.844v-3.5H9.92V8.695c0-3.035 1.807-4.71 4.574-4.71 1.325 0 2.711.235 2.711.235V7.2h-1.527c-1.504 0-1.973.934-1.973 1.891v2.273h3.358l-.537 3.5h-2.821v7.438h6.701a2.344 2.344 0 002.344-2.344V2.769A2.344 2.344 0 0020.406.426z" fill="#fff"></path>.</svg>.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	130057
Entropy (8bit):	5.263572458960338
Encrypted:	false
SSDEEP:	1536:M3hOCvjwxJZzcXI6+jyXu4KaEV/gbXc20ZHLwD8EaBtrRyX0w:M3hOC0x96ruNiXcvh0jyxRyX7
MD5:	575F0DD2D17BBECE23C4E3266A51A5C2
SHA1:	5E0E3742C130DDA924504E6A0A34C5A999AE46A8
SHA-256:	4AC51FFC4BCA5ED831338CA7656A8446F9DD02FB72C7C70E0440A6CFFD8CDF99
SHA-512:	0537024F5D3211530808C780BEEE8416771FC51B23A5726B3AD1C9ECD08C5BB4B0E81489D86D99E144AA6AD30D291063B1E556B562FD8FA8F52E13348C9C92AB
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/framework-560765ab0625ba27.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{64448:function(e,t,n){var r=n(67294),l=n(96086),a=n(63840);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(i[e]=t,e=0;e<t.length;e++)u.add(t[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64742)
Category:	downloaded
Size (bytes):	64792
Entropy (8bit):	5.539900529634736
Encrypted:	false
SSDEEP:	768:EfPAJZqjqZRLw8MmTPzaeDKikvCO4/owlI1cZT8yyyOfnPZ3kBJxYb+0V:E3jE3V3La
MD5:	B525F837E538A326542620ABD7712E55
SHA1:	0FEA47B937650520F2EAAEC6548301A2313E1D12
SHA-256:	A32CB7E3BF9345B4C312B9C8DCEE8554022AF7B027494672E79A2D09AC98E5A6
SHA-512:	026238D03F37170F180B1C669F22FD5C3BDF3716FA98EDF0BA6B0D79F75FECAAB9F58CCB9D83F2B416F0F409317BFF8771AEBD4BD1D2ECE98AB78C6C45AAD7DA
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6835-37c4d58b85c794a8.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6835,3148],{54459:function(e,t,s){s.d(t,{D:function(){return m}});var r=s(95627),i=s.n(r),a=s(67294),n=s(44012),o=s(72002),c=s(51972),l=s(51245),d=s(85893);const m=e=>{let{autoPayInterval:t=""}=e;return(0,d.jsxs)(a.Fragment,{children:[(0,d.jsxs)(c.Z,{children:[(0,d.jsx)("div",{className:i().dynamic([["3073712088",[l.colors.gray,l.breakpoints.sm,l.colors.gray]]])+" autopay-notice autopay-header",children:(0,d.jsx)(n.Z,{id:"AUTOPAY_SUCCESS_SCREEN_HEADER",defaultMessage:"Next autopay"})}),(0,d.jsxs)("div",{className:i().dynamic([["3073712088",[l.colors.gray,l.breakpoints.sm,l.colors.gray]]])+" autopay-recurring-msg",children:[(0,d.jsx)("div",{"aria-label":"Recurring Icon",className:i().dynamic([["3073712088",[l.colors.gray,l.breakpoints.sm,l.colors.gray]]])+" description-icon",children:(0,d.jsx)(o.Z,{width:24,height:24,color:l.colors.green})}),(0,d.jsx)("div",{className:i().dynamic([["3073712088",[l.colors.gray,l.breakp

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4424
Entropy (8bit):	3.9488854402751046
Encrypted:	false
SSDEEP:	96:SehyjPh+m1Ih1Kh0gHhG0g0hMldGq+hiBqrBch02hh:SQyj5+8W1kTBG0gq2dGxiB8BCTh
MD5:	BFAAEB1CA82BF9541F20AA098F3E7CF2
SHA1:	60EAF90FFD92537EFAB96CA3630AF5F5AA885444
SHA-256:	553867D379DEAAF0D8379531CC1F8EF3002CD13E5E006523DDC49A0204932D6C
SHA-512:	210ACF8514DD16BD2687BA0F5111CD5945DA9B5CB73162EBA7570F4830726DB51D612CBCB634790DDE910071ABE7212B4B9890B69A44A449D91C128838B97BBC
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/flags/us.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" id="flag-icons-us" viewBox="0 0 640 480">. <g fill-rule="evenodd">. <g stroke-width="1pt">. <path fill="#bd3d44" d="M0 0h912v37H0zm0 73.9h912v37H0zm0 73.8h912v37H0zm0 73.8h912v37H0zm0 74h912v36.8H0zm0 73.7h912v37H0zM0 443h912V480H0z"/>. <path fill="#fff" d="M0 37h912v36.9H0zm0 73.8h912v36.9H0zm0 73.8h912v37H0zm0 73.9h912v37H0zm0 73.8h912v37H0zm0 73.8h912v37H0z"/>. </g>. <path fill="#192f5d" d="M0 0h364.8v258.5H0z"/>. <path fill="#fff" d="m30.4 11 3.4 10.3h10.6l-8.6 6.3 3.3 10.3-8.7-6.4-8.6 6.3L25 27.6l-8.7-6.3h10.9zm60.8 0 3.3 10.3h10.8l-8.7 6.3 3.2 10.3-8.6-6.4-8.7 6.3 3.3-10.2-8.6-6.3h10.6zm60.8 0 3.3 10.3H166l-8.6 6.3 3.3 10.3-8.7-6.4-8.7 6.3 3.3-10.2-8.7-6.3h10.8zm60.8 0 3.3 10.3h10.8l-8.7 6.3 3.3 10.3-8.7-6.4-8.7 6.3 3.4-10.2-8.8-6.3h10.7zm60.8 0 3.3 10.3h10.7l-8.6 6.3 3.3 10.3-8.7-6.4-8.7 6.3 3.3-10.2-8.6-6.3h10.7zm60.8 0 3.3 10.3h10.8l-8.8 6.3 3.4 10.3-8.7-6.4-8.7 6.3 3.4-10.2-8.8-6.3h10.8zM60.8 37l3.3 10.2H75l-8.7 6

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5723)
Category:	dropped
Size (bytes):	5776
Entropy (8bit):	5.482479129948742
Encrypted:	false
SSDEEP:	96:bGBCornssEVqZCQshOax2UNMqPIFU5WsGUzkkpJiVss+Vx6JDtGt6yIXR9s:6BCDV0awciUJkYiEPRtOX7s
MD5:	6675B58551F780EA2D2B55BB460C9582
SHA1:	9736B38E8233B755445977C843AE55FEE602ADDE
SHA-256:	A79E810E4E07405EFD10802A565A8649166FE499B78F7D45FC869261DB30B1DE
SHA-512:	12E46EE9700D4F61B433F950666C296DDFC571BD03E93967DD6086FB6DA064F951D5F63F1C6182850BFD7D876D854FD81B5F108144CD50F8C4836AA4B42BF939
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e={},t={};function n(r){var c=t[r];if(void 0!==c)return c.exports;var f=t[r]={id:r,loaded:!1,exports:{}},o=!0;try{e[r].call(f.exports,f,f.exports,n),o=!1}finally{o&&delete t[r]}return f.loaded=!0,f.exports}n.m=e,function(){var e=[];n.O=function(t,r,c,f){if(!r){var o=1/0;for(d=0;d<e.length;d++){r=e[d][0],c=e[d][1],f=e[d][2];for(var a=!0,u=0;u<r.length;u++)(!1&f\|\|o>=f)&&Object.keys(n.O).every((function(e){return n.O[e](r[u])}))?r.splice(u--,1):(a=!1,f<o&&(o=f));if(a){e.splice(d--,1);var i=c();void 0!==i&&(t=i)}}return t}f=f\|\|0;for(var d=e.length;d>0&&e[d-1][2]>f;d--)e[d]=e[d-1];e[d]=[r,c,f]}}(),n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,{a:t}),t},function(){var e,t=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};n.t=function(r,c){if(1&c&&(r=this(r)),8&c)return r;if("object"===typeof r&&r){if(4&c&&r.__esModule)return r;if(16&c&&"function"===typeof r.the

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	18094
Entropy (8bit):	3.590379912299525
Encrypted:	false
SSDEEP:	192:LEuY3xKOrS0Fs0Hm8yAg3qXGs6WkPAkuiMy62ZNUHLE:YuYBzrS4s0HWP60W/kPdY
MD5:	FA140DE179BC4DB805C0478D9FF90922
SHA1:	285609964EBF9B9BB52C8F47718A99241D12AD8F
SHA-256:	3B9CF789A512963BCAC10BA614099FB3C57506514AF3637715823246ED56EF72
SHA-512:	4E6BF81CDB4D03E75A6B510AE0F7A332CB8EE2AB4D3CB6D17EA326AF8A70246CE68B96E5A849709F73ED3D76C6DB25EE8F58FD3706BE313DC060CA8198586838
Malicious:	false
Reputation:	low
Preview:	............ .(...6... .... .(...^...00.... .(-......(....... ..... .............................................#..+...@ ../.........8.....................................#&...&...)...&...%....p.4.=.t.=.}........................"...&......&...&...)...)...!{...b.,.>...?.....................%..y...%...!...&...$..."x.&{...p..;.b.B...=.B................%...)...%..D$...&......%.h.,.j...e...=.6.C...>.................$...&......'%...%........Z...a...[...;.+.B...?..................&..."....m..&...#........L...Y...S...;.+.B...>..................$..~%....U.."...&........?...Q...J...;.+.B...?..................%...%.......&...%........8...H...B...;.+.B...?..................!..5$..T.... ..>!..M.....0...@...>...;.+.B...?..................%..\|&.......&..."....m...&...>...>...;.+.B...?..................%...%.......$...%........(...>...>...<.&.B...?.....................#!..=....#..+ ..7.....0...@...>...>.Q.B...?..................%...%.......$...%........$...?...C...?...D...?.................#.

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1490)
Category:	dropped
Size (bytes):	1559
Entropy (8bit):	5.120755987626891
Encrypted:	false
SSDEEP:	48:iKQKFYYCvoDlgVDyNQ2glkMBaqNTYEZqNF5XmbxDy:jJmYoyGPlkMBa+TrZqp2y
MD5:	3867B2388B619FF7FDDC29EF359FC9AA
SHA1:	511BED0C4D3D57AB4CF1B1D7596FB845ECFBA6AC
SHA-256:	31892C21AE4FB908A875BBE29DBF0DF74C2E84171CFBCAC23540F3AD8222A35A
SHA-512:	7BFD6E6CD2FE7A79F4797439BC7294A36D076D67A3DC5BB8E86FA5AF19B50F0E8FEC18BF33B30588486B231062E43F417708333044207A586AAD999E97E819A5
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n.__default)\|\|void 0===t?void 0:t.enabled)\|\|void 0===i\|\|i}t.d(e,{n:function(){return i}})},5081:function(n,e,t){t.r(e),t.d(e,{schemaFilter:function(){return o}});var i=t(5163),r=t(9254);function o(n,e){function t(t){var o=n,u=t.event.event;if(o&&u){var a=o[u];if(!(0,r.n)(o,a))return t.updateEvent("integrations",(0,i.pi)((0,i.pi)({},t.event.integrations),{All:!1,"Segment.io":!0})),t;var s=function(n,e){var t,i;if(!n\|\|!Object.keys(n))return{};var r=n.integrations?Object.keys(n.integrations).filter((function(e){return!1===n.integrations[e]})):[],o=[];return(null!==(t=e.remotePlugins)&&void 0!==t?t:[]).forEach((function(n){r.forEach((function(e){n.creationName==e&&o.push(n.name)}))})),(null!==(i=e.remotePlugins)&&void 0!==i?i:[]).reduce((fu

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	253985
Entropy (8bit):	5.2642154109350585
Encrypted:	false
SSDEEP:	3072:XYngEndJUGpmJXsUaWlJlWZCeQ9t9iUOAg:IgE5pmJX3acJOOjiUk
MD5:	1E5DAEAF41220CEFF890F155747E27B6
SHA1:	CBFB4D799A226B4E2B4B5C6DBE8C5B35CC123F6A
SHA-256:	26656EAFDB8AC0733FA401486099059BBDACFB9EF575CFE23D51A93614BA75C4
SHA-512:	7C5B6E00DE1221B8F140CFB4ED7C0E05A8F3385620A4FFA3D2D362DC9935B7E90C433FF72C094ADFCB6F3F0F3E3AEC949000AE64AB4BD2D6B064578FA0E7256D
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5439],{24652:function(e,t,n){"use strict";e.exports={number:n(3799),expirationDate:n(64203),expirationMonth:n(40786),expirationYear:n(73786),cvv:n(606),postalCode:n(66937),creditCardType:n(11038)}},3799:function(e,t,n){"use strict";var r=n(18793),o=n(11038);function a(e,t,n){return{card:e,isPotentiallyValid:t,isValid:n}}e.exports=function(e,t){var n,i,u,c,s;if(t=t\|\|{},"number"===typeof e&&(e=String(e)),"string"!==typeof e)return a(null,!1,!1);if(e=e.replace(/\-\|\s/g,""),!/^\d*$/.test(e))return a(null,!1,!1);if(0===(n=o(e)).length)return a(null,!1,!1);if(1!==n.length)return a(null,!0,!1);if(i=n[0],t.maxLength&&e.length>t.maxLength)return a(i,!1,!1);for(u=i.type===o.types.UNIONPAY&&!0!==t.luhnValidateUnionPay\|\|r(e),s=Math.max.apply(null,i.lengths),t.maxLength&&(s=Math.min(t.maxLength,s)),c=0;c<i.lengths.length;c++)if(i.lengths[c]===e.length)return a(i,e.length<s\|\|u,u);return a(i,e.length<s,!1)}},606:function(e){"use strict";functio

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3095), with no line terminators
Category:	downloaded
Size (bytes):	3095
Entropy (8bit):	5.219910230514957
Encrypted:	false
SSDEEP:	48:uTfT/E7jmkuANVEyCt2xglSnbZ/6OrEXN:u//+7KyLl/6qyN
MD5:	A6D46560DF992895F59A39934F1155FE
SHA1:	7B473F65030B9441FE3FFB7BE0B138680E777737
SHA-256:	B04462C064EE4B8306A5441EC26193CFE09A2D4390DD2CF39BF79C51FF59E09B
SHA-512:	C2F7B9E9BFCD26CB0C33B2FEC60C20420A9621DA5028B0D0345E9A53092C3E6B098C8AFAE7838C01A08F4EB31572D37A98E6FF341D15255B0208E192741E2C8D
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/1.30.0-release_1.30.0-80b42f1/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(e,s,c,a,t,i,n,d,r,p,u,f,o,k){return{__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":[e,s,c,a,p,i,u,f,k,"static/chunks/pages/index-b2f2c50861057bc0.js"],"/PaymentBlocked":[e,s,"static/chunks/pages/PaymentBlocked-e462043e1659035f.js"],"/_error":["static/chunks/pages/_error-68f95168e6ffc81e.js"],"/billingAgreement":["static/chunks/pages/billingAgreement-3f39fa3b249bb905.js"],"/depositAccepted":[e,s,c,a,t,"static/chunks/pages/depositAccepted-1134b3e0a3b7f880.js"],"/depositDeclined":[e,s,c,a,t,"static/chunks/pages/depositDeclined-af78020dbf5a77a7.js"],"/depositPending":[e,n,d,s,c,a,t,i,r,"static/chunks/pages/depositPending-cf2b235e7d5497a8.js"],"/error410":[e,s,"static/chunks/pages/error410-7741d19a3075877e.js"],"/error412":[e,s,"static/chunks/pages/error412-476ae41243d19d1c.js"],"/error500":[e,s,"static/chunks/pages/error500-7fa050389a2de8c1.js"],"/errorTokenExpired":[e,s,"static/chunks/pages/errorTokenExpired-e5651ab6b79cfe71.js"],"/estimateAccepte

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (814)
Category:	dropped
Size (bytes):	29373
Entropy (8bit):	5.518886833483292
Encrypted:	false
SSDEEP:	384:zo4zikHOCXHFlfEoYY1xwuKoxjxq+ZxrxvxSpOj0ztxAxGx/hwKNMA4AzI94lBKG:Lzikuqf97xSpO+hw9A4AjI0
MD5:	663D1920E0370115CF813BA0A40BFE20
SHA1:	B7111E90F57622608B41FA057CB79AB887395654
SHA-256:	3FE6A5C41C1F5D9B3B22C636F7201EFE42E93207CCA30B112F4AC63DCA72054F
SHA-512:	3B93C7AF20772704D50FDEF205ECC4FB62FD4C36F024DCF48D63061356C963A2A20229032D146FF9956084F12B88C47E44F31FF271C78A1C4070E42E16D26095
Malicious:	false
Reputation:	low
Preview:	(function(){function a(a){a?(l[0]=l[16]=l[1]=l[2]=l[3]=l[4]=l[5]=l[6]=l[7]=l[8]=l[9]=l[10]=l[11]=l[12]=l[13]=l[14]=l[15]=0,this.blocks=l):this.blocks=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];this.h0=1732584193;this.h1=4023233417;this.h2=2562383102;this.h3=271733878;this.h4=3285377520;this.block=this.start=this.bytes=0;this.finalized=this.hashed=!1;this.first=!0}var b="object"===typeof window?window:{},c="0123456789abcdef".split(""),m=[-2147483648,8388608,32768,128],d=[24,16,8,0],n=["hex","array","digest",."arrayBuffer"],l=[],q=function(b){return function(c){return(new a(!0)).update(c)[b]()}};a.prototype.update=function(a){if(!this.finalized){var c="string"!==typeof a;c&&a.constructor===b.ArrayBuffer&&(a=new Uint8Array(a));for(var p,f=0,e,h=a.length\|\|0,g=this.blocks;f<h;){this.hashed&&(this.hashed=!1,g[0]=this.block,g[16]=g[1]=g[2]=g[3]=g[4]=g[5]=g[6]=g[7]=g[8]=g[9]=g[10]=g[11]=g[12]=g[13]=g[14]=g[15]=0);if(c)for(e=this.start;f<h&&64>e;++f)g[e>>2]\|=a[f]<<d[e++&3];else for(e=this.start;f<h&&6

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=msx7sac&ht=tk&f=1980.1981.8542.2005.2006.2009.2011&a=125797425&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19636)
Category:	downloaded
Size (bytes):	19686
Entropy (8bit):	5.459020690710615
Encrypted:	false
SSDEEP:	192:UyNYN3N5N5AUNfaHYdg4I2ZVY232yoY2yi2wbPZwxGfLwCLTCUifMPI2rSU3rK8P:n6BrvAUlMo3V8TZ6zwrSoiVyR8i
MD5:	1E55A07D6FBC854D8604746B8D20E42B
SHA1:	CFCBA90AE2E3C9F1AB3F34D1110969813F938C8E
SHA-256:	B21AF03D132E6616D43F4DADC2451148FB6009A1F343DE830D0598B2E16D9E55
SHA-512:	B5A7DBC8F3D40E4554AD6B64AFC68ECE62C7B8D1D20C67761EFF2AC8394BADB77356401350111BFD87DDDA901C3AA58E4AFBFCA0D35625C3A2EC1DFF12EAA240
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2352-26b800f7418ab0e8.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2352],{56810:function(e,t,n){var i=n(95627),s=n.n(i),o=n(67294),r=n(44012),a=n(14067),l=n(54623),c=n(70678),d=n(44947),m=n(51245),p=n(85893);t.Z=e=>{let{hide:t,onContinue:n,headerIntl:i,cancelIntl:x={id:"CANCEL",defaultMessage:"cancel"},continueIntl:y,children:b,hideOnContinueFinish:f=!0,continueDisabled:g,bodyContainerWidth:u,removeDefaultBackground:h,withHr:j=!0,customDesignKey:w,withHeader:k=!0,withCancelBtn:_=!0,marginTop:S="72px"}=e;const{0:z,1:$}=(0,o.useState)(!1),v="freeTextModal"===w,N=async()=>{z\|\|t()},O=k?(0,p.jsx)(r.Z,{id:null===i\|\|void 0===i?void 0:i.id,defaultMessage:null===i\|\|void 0===i?void 0:i.defaultMessage,values:null===i\|\|void 0===i?void 0:i.values}):void 0;return(0,p.jsxs)(o.Fragment,{children:[(0,p.jsx)(a.Z,{hide:()=>N(),header:O,removeDefaultBackground:h,customDesignKey:"freeTextModal",children:(0,p.jsxs)("div",{className:s().dynamic([["4197129058",[u\|\|"496px",m.breakpoints.sm,v&&`@media screen

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5966
Entropy (8bit):	7.934026400837519
Encrypted:	false
SSDEEP:	96:41CqtrCisls60A8II7WuW6NHMraxXzyWe68FdYB+/0LWi+qr+rcq7NYqwsIuDidU:W7C7l0AyXwaxXzne6R+Fi+CAIuDidli
MD5:	ACF0C923E1E89C2DEAEEE6846FAD2BB3
SHA1:	977540038616CE40EEDD6ECB629941F5AB7164AA
SHA-256:	E01F1AC4C3D1A4308B1868B54D802F398C8631A5DBBB874FD6B0B5BE21E42C05
SHA-512:	08CE98B3B1218FA00E2967D3B93B09DE3E4F294064397B815B4430756370F8D24805E43DB8F8122DB9E13476CA52146B67CB9CE4C59F5DF6E66957E4089A7924
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/uploads/2024/02/res-square-plus-pink.png
Preview:	RIFFF...WEBPVP8L:.../w...M0h..<...#...!......>......$-.+{.@.z..o~.<.E.t.....$.p.EG..[...pd.V.m......kDH1.1..F'~.....$I.R..T.1.{.ZYk.._S1..6.mUY.C..v.G..4...L...PC..m............I......^....$...x..qHN%...NJ..MY.H2...gj2.8.0......p.....m'.g.=wv)..~ir..3.....(\..sI..P/ %I....J..>6/...i47.....:.n..."....E.....3.a49.........V...x^...2.#..G7.`.6...?._.D..t.Lg..M+.....~..*.".2..O.d.%I.rW. .\].".....\.../l..I...Def.......1.m{.Z..h?.m?c5...Y....#.Vm.......#..........m.n....@..........H....+.j.mE......}233K.%^KEu.k.$1.k..333..8`.....F.Zk.d.Vm..k.s.._2335 k.f8.U...L..../...c..\|.!.......N..qTe.:...!2Mo.....aY.!..-:g......p..1..l.....[..`dN...-.......(..\|..&d.........o...9...@Kfi.0.,.G..%./O...l........l.G>.c_d.8.y.#...H.-c.0<.`..d.%.K..L.y...9..7.i..\|`..W...$..Y.9.....\7R.8.cy@.>p.D.=.)Y..:u.....8......X..yD.@.l.......G....>tt!.f..O>....5.....H.yu.-G!.X......\|.5.a..y..q....H.v..\..E..@.X.(..H...C.`..u...t......u...Pl....Z..R...b7...>6Z.C2..

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21287)
Category:	dropped
Size (bytes):	21337
Entropy (8bit):	5.558775985611935
Encrypted:	false
SSDEEP:	384:j3Weg6c5b5Prg9obhL7LFLJLKNwq2pvJ505:jmB5tP/hL7LFLJLuwq2JJ505
MD5:	D8C386CD534BB038504DF3AAF6E9357D
SHA1:	F60C9323E42C8B13CEBE904741A257F60E435879
SHA-256:	403663584FE5CC8EBDEEE9F428A08C57B06398DA73367166115D771FC60453F5
SHA-512:	22934C9A97AE56808053BC6FCD37CAE8D6E3EB63675DA6FBF3AF9EA03A1D0F43FE7E3B7E6BB2C798BD2CDBA3F09676772584A2D70F2E7C4A30E00CAE37851718
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5428,6721],{10616:function(e,i,t){var s=t(95627),n=t.n(s),o=t(67294),a=t(44012),c=t(36456),l=t(93429),r=t(10779),d=t(84161),m=t(67214),x=t(54623),y=t(70678),p=t(96554),f=t(71295),h=t(82429),u=t(23240),_=t(93191),g=t(51245),b=t(2870),w=t(85893);const j=e=>(0,w.jsxs)("div",{className:n().dynamic([["791317644",[g.colors.white,g.fontSize.sm]]])+" w",children:[(0,w.jsx)(n(),{id:"791317644",dynamic:[g.colors.white,g.fontSize.sm],children:[".w.__jsx-style-dynamic-selector{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-webkit-justify-content:center;-ms-flex-pack:center;justify-content:center;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;height:100%;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;}",`.w-i.__jsx-style-dynamic-selector{width:320px;height:auto;background-color:${g.colors.white};padding

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13492)
Category:	dropped
Size (bytes):	13542
Entropy (8bit):	5.49628234547502
Encrypted:	false
SSDEEP:	384:SdeQ9JG9sNyYzkkgK0ugw7g9UH7Z3+VLg:SdeSJMsN/zk1Fuv7g4B+pg
MD5:	FF073630BDC785112171092880FDB4B9
SHA1:	5D40A57CB7644BD3B3740917116D48C47F858691
SHA-256:	EF882B66C298D18666D78039C27B0E2BCCB9D16C148E253281535D79ABF0434D
SHA-512:	7DBE903DE7C59B568643AD47BD242656C69B105764FF3EECC16F62090F3AECC1DC9A026A0DDCA54E6441501020A9A3FBD412CD92E3C3E5687305D6C100549618
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5669],{99278:function(e,n,s){s.d(n,{Z:function(){return _}});var t=s(67294),o=s(95627),c=s.n(o),i=s(86896),r=s(44012),a=s(23240),l=s(85893),d=e=>{let{cdn:n,intl:s}=e;const t=s.formatMessage({id:"TRUSTE_IMG_ALT",defaultMessage:"Trust's online privacy certification"});return(0,l.jsx)("a",{href:"//privacy.truste.com/privacy-seal/validation?rid=6218d0ea-ee8b-4472-87dd-ba4bf95aab3d",title:"TRUSTe online privacy certification",target:"_blank",rel:"noopener noreferrer",onClick:()=>a.Z.clickTrust(),children:(0,l.jsx)("img",{src:`${n}/truste.svg`,alt:t})})},x=s(55146),m=s(70678),y=s(51245);var p=e=>{let{cdn:n}=e;const s=(0,i.Z)();return(0,l.jsxs)(t.Fragment,{children:[(0,l.jsx)("div",{className:c().dynamic([["755766305",[y.fontSize.xxs]]]),children:(0,l.jsx)(x.Z,{children:(0,l.jsxs)("div",{className:c().dynamic([["755766305",[y.fontSize.xxs]]])+" wrapper",children:[(0,l.jsxs)("div",{className:c().dynamic([["755766305",[y.font

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (551)
Category:	downloaded
Size (bytes):	18120
Entropy (8bit):	5.075248821671763
Encrypted:	false
SSDEEP:	192:GhjaihPhKLPzwsxu40nSr0kI5tundv9i6fG9RhS2KV53skuMaaSQhQz0iIS4JTGv:G1aQpyVu40nSr0kI5tunCzS2Tr4JC759
MD5:	EA2BA6EB3A73349C6F0AE4BA0E28E364
SHA1:	27B5AC340BCEC04B421D39F3151D9DEA02DB7F85
SHA-256:	82538430E27399DC1EC58CDC812F0ED89DA856CE9FFBFB0E0DD2A7514362A503
SHA-512:	9B9E0C3EF45961F42F9A72AEF53F88D4105B40C81D2C99492C03FBF0DD009CCB83C52F4E62192931D2BB10C97D3853F266BCF71AEDFA49E6650F746E799C4558
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/css/jquery.ui.theme.css
Preview:	/. jQuery UI CSS Framework 1.8.16. . Copyright 2011, AUTHORS.txt (http://jqueryui.com/about). * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . http://docs.jquery.com/UI/Theming/API. . To view and modify this theme, visit http://jqueryui.com/themeroller/. /.../ Component containers.----------------------------------/..ui-widget { font-family: Verdana,Arial,sans-serif/{ffDefault}/; font-size: 1.1em/{fsDefault}/; }..ui-widget .ui-widget { font-size: 1em; }..ui-widget input, .ui-widget select, .ui-widget textarea, .ui-widget button { font-family: Verdana,Arial,sans-serif/{ffDefault}/; font-size: 1em; }..ui-widget-content { border: 1px solid #aaaaaa/{borderColorContent}/; background: #ffffff/{bgColorContent}/ url(images/ui-bg_flat_75_ffffff_40x100.png)/{bgImgUrlContent}/ 50%/{bgContentXPos}/ 50%/{bgContentYPos}/ repeat-x/{bgContentRepeat}/; color: #222222/{fcContent}/; }..ui-widget-content a { color: #222222/{fcCont

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 5, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	115
Entropy (8bit):	5.497943208242396
Encrypted:	false
SSDEEP:	3:yionv//thPlOrO/WABnV6FPjtK6M0/Rb0thC3VUeup:6v/lhPghMnQFb86vQthC3Wp
MD5:	A03F116F5E730ADEF99261E2D92528F2
SHA1:	01FA79927EF5D783DECEB6545DC609C6BCD95DD8
SHA-256:	3357336C6815F3FFA97B7A60DE54D79141A80367FFD7C87EB185F5A6BE7FCA04
SHA-512:	7642BD205EEEDBE77906FEB15772EBA4BCFBBA7D0A379D286A3E9805D550871412A99D4FC9A2CF490BAEB513779B91FC987730B5439D46EAFCEA393750EF3306
Malicious:	false
Reputation:	low
URL:	https://widget.uservoice.com/pkg/clients/site2/tab-selected-4eefad526fb67f2b709b1ee705a24f85794b87407331c04ed60b5b38160bae0a.png
Preview:	.PNG........IHDR...............z^...:IDATx.c.?\.\|..._.....5.....G...H......H.......H......p....@..........IEND.B`.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12158), with no line terminators
Category:	downloaded
Size (bytes):	12158
Entropy (8bit):	5.2654271716498116
Encrypted:	false
SSDEEP:	192:ZFpaU1OGX7Wo/GMA92S0RhYtN6BpdtCpB6dm+7UWDb7zeR1RFFhAYLGl6Dw2fmwa:ZFAUHX7zAjYHdsBgZUWrKHR9rK6Dw2f8
MD5:	29421809A4F77F5FC7415A4E8A3BBE8A
SHA1:	73C65D0898BAE786EB6E8771AF6E6C8218C2BCB7
SHA-256:	87C95C571B31ECC246001003DFF0E27C1DCBA3D005B3513C6732C5C6277E8421
SHA-512:	6943FF8A317A34C38D6482D7FF5B977BBA3DE6EC74EA6CD38F6B8474D141FA42F432C25B711650B8C72F6817A07C32A9D3A485EDFEE06C717B2DEED2373A44E2
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/web-portal-components/wp-components/p-5117d167.js
Preview:	const e="wp-components";let t,l,n,s=!1,o=!1,i=!1,c=!1,r=!1;const f="undefined"!=typeof window?window:{},a=f.CSS,u=f.document\|\|{head:{}},d={t:0,l:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,l,n)=>e.addEventListener(t,l,n),rel:(e,t,l,n)=>e.removeEventListener(t,l,n),ce:(e,t)=>new CustomEvent(e,t)},$=e=>Promise.resolve(e),h=(()=>{try{return new CSSStyleSheet,!0}catch(e){}return!1})(),p=(e,t,l)=>{l&&l.map((([l,n,s])=>{const o=m(e,l),i=w(t,s),c=b(l);d.ael(o,n,i,c),(t.o=t.o\|\|[]).push((()=>d.rel(o,n,i,c)))}))},w=(e,t)=>l=>{try{256&e.t?e.i[t](l):(e.u=e.u\|\|[]).push([t,l])}catch(n){ue(n)}},m=(e,t)=>4&t?u:e,b=e=>0!=(2&e),y="http://www.w3.org/1999/xlink",g=new WeakMap,j=e=>"sc-"+e.$,v={},k=e=>"object"==(e=typeof e)\|\|"function"===e,O=(e,t,...l)=>{let n=null,s=null,o=null,i=!1,c=!1,r=[];const f=t=>{for(let l=0;l<t.length;l++)n=t[l],Array.isArray(n)?f(n):null!=n&&"boolean"!=typeof n&&((i="function"!=typeof e&&!k(n))&&(n+=""),i&&c?r[r.length-1].h+=n:r.push(i?S(null,n):n),c=i)};if(f(l),t){t.

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "04e01638.js", last modified: Sun Apr 23 18:39:17 2023, max compression, original size modulo 2^32 794399
Category:	dropped
Size (bytes):	132098
Entropy (8bit):	7.997335674855856
Encrypted:	true
SSDEEP:	3072:Q/ck/k60nhyP+K+5/CewaLJtGBFb2LAM/HZVKv:RTyP+X/CpatIvqLlHLKv
MD5:	B87BF31C73EC4335BBBD7517DA66AF7B
SHA1:	7F83B4FDDE79AF6372E9E5829F53332EE558AE4E
SHA-256:	384479CEC25475A1397AEC8E4354647B1BEBD70202654EF84C82FFDED1E8893F
SHA-512:	9D9350807EC9175DE7BD0BB001F319F99722D509946B352DFB80AE386537B697693C1F6C5E530CB8D6DA04AF1BDFDE6D782B7225249A3427559CE83B4FAA1CDD
Malicious:	false
Reputation:	low
Preview:	....U{Ed..04e01638.js..mW.F.0..>.....}.Q...o.h..`..6.&..eY..i@.A.H.c....~ou.f...{v.+X..]]]]U]]....h.w...?Y.?]}...x..'..=.\|....?K..\|XgE.%.u0.H...lX....O{...$K...'....&9)..z....4;..)V..\A..t.O.O.\|..u..h\.iy.. "yz2&...T{e1$U..gq.N.f...7..X.......l...........%.y]O...#H. ....'...U....%Y.....G.q.`x...Kr....(.Jl.....>a.CHn.0.d.>.=.H>z].Um=..u.,.Ey..\|..5.U.5/<.V..R..%..P.j...B.._..U]\l.....dZ.8..u.zrB.Q0.E......5..I..c)..L.Y>.{...w.@zF............Z...7&.....C:..yIN...y......\|.....}^~.V...iu.7E.[p..[...9$=.I..;.d.....b.:....yoL..\|P....a}..5h;..6uPl.o.....h[.s......a.t.r2.R?.E..N..b7(r_..X......=@9..77.:9<.\|%.:......bQI..O..:........zQ..W....:J.$_^.{.d..I.....r.}3.8.mC.wZ....U..V.........e..n......."../..h.p......5.]NN.K.1.L..?.N_.:.'......G.S.~.5 ..H...<...D...\|..JX..<B.H....&.....2..3...f.F.... .Iv...@'..........OE6...h.e/....f...h-.1..Jk...u....\v.7.Gz.R....\|.-...!...$.....$."..1..`Z.(~._...@..m.;\.g!.....H......Mm.:....$......Dp...A..9.)..

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32025)
Category:	dropped
Size (bytes):	84345
Entropy (8bit):	5.366447824180109
Encrypted:	false
SSDEEP:	1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ
MD5:	F9C7AFD05729F10F55B689F36BB20172
SHA1:	43DC554608DF885A59DDEECE1598C6ACE434D747
SHA-256:	F16AB224BB962910558715C82F58C10C3ED20F153DDFAA199029F141B5B0255C
SHA-512:	3DCAE1FF6E98C64E3586BE3EB14DD486C51F7D4E9FA1B8F9A628BE4FBB6A9AB562F31F9B50E16D2E0C72B942BDBE84EEE8E0EF87FA730DB1428B199A59D88232
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.1.4 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	469
Entropy (8bit):	4.857341603215339
Encrypted:	false
SSDEEP:	6:TMVBd/i9mc4slzMmiRI485CkQbZIfeLSCe7+33RY6EFRPKfYozMSFuZz4rrr3EXT:TMHd6Wmiq48Bt7I3faYYozMS0Zz4ww0J
MD5:	D350737C002A5C08056DD05C9EFD47CA
SHA1:	AF990A612C5034869EDB4C7C32F77C0CD037C968
SHA-256:	E80A43E1D44CEB90809E4FB2663E40E564A539B621BAA4494FF1DA64C70E6133
SHA-512:	D7D582D688C5EBD21C44F3809A2802A2162BB93B1066B4C5E7241771D70B8A0662EB4C1C8532F53609D8E7BBC31803A3AC5CEFF389E8D25B20DF9FEDF7455B67
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="23" height="23" fill="none">. <path d="M20.406.426H3.22A2.344 2.344 0 00.875 2.769v17.188A2.344 2.344 0 003.219 22.3H9.92v-7.437H6.844v-3.5H9.92V8.695c0-3.035 1.807-4.71 4.574-4.71 1.325 0 2.711.235 2.711.235V7.2h-1.527c-1.504 0-1.973.934-1.973 1.891v2.273h3.358l-.537 3.5h-2.821v7.438h6.701a2.344 2.344 0 002.344-2.344V2.769A2.344 2.344 0 0020.406.426z" fill="#fff"></path>.</svg>.

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13492)
Category:	downloaded
Size (bytes):	13542
Entropy (8bit):	5.49628234547502
Encrypted:	false
SSDEEP:	384:SdeQ9JG9sNyYzkkgK0ugw7g9UH7Z3+VLg:SdeSJMsN/zk1Fuv7g4B+pg
MD5:	FF073630BDC785112171092880FDB4B9
SHA1:	5D40A57CB7644BD3B3740917116D48C47F858691
SHA-256:	EF882B66C298D18666D78039C27B0E2BCCB9D16C148E253281535D79ABF0434D
SHA-512:	7DBE903DE7C59B568643AD47BD242656C69B105764FF3EECC16F62090F3AECC1DC9A026A0DDCA54E6441501020A9A3FBD412CD92E3C3E5687305D6C100549618
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5669-3d23076a3a43f159.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5669],{99278:function(e,n,s){s.d(n,{Z:function(){return _}});var t=s(67294),o=s(95627),c=s.n(o),i=s(86896),r=s(44012),a=s(23240),l=s(85893),d=e=>{let{cdn:n,intl:s}=e;const t=s.formatMessage({id:"TRUSTE_IMG_ALT",defaultMessage:"Trust's online privacy certification"});return(0,l.jsx)("a",{href:"//privacy.truste.com/privacy-seal/validation?rid=6218d0ea-ee8b-4472-87dd-ba4bf95aab3d",title:"TRUSTe online privacy certification",target:"_blank",rel:"noopener noreferrer",onClick:()=>a.Z.clickTrust(),children:(0,l.jsx)("img",{src:`${n}/truste.svg`,alt:t})})},x=s(55146),m=s(70678),y=s(51245);var p=e=>{let{cdn:n}=e;const s=(0,i.Z)();return(0,l.jsxs)(t.Fragment,{children:[(0,l.jsx)("div",{className:c().dynamic([["755766305",[y.fontSize.xxs]]]),children:(0,l.jsx)(x.Z,{children:(0,l.jsxs)("div",{className:c().dynamic([["755766305",[y.fontSize.xxs]]])+" wrapper",children:[(0,l.jsxs)("div",{className:c().dynamic([["755766305",[y.font

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28931)
Category:	downloaded
Size (bytes):	28981
Entropy (8bit):	5.581447265572943
Encrypted:	false
SSDEEP:	768:PuPnoo9IGJUVr20j6vEqu5zSTBK9eN/gLAgKe+55usKUiRV1Ob5dafH:GV8eC6kUcV1Oy
MD5:	37EB804273791AF5F1A8ACAC5775FD06
SHA1:	60864D25FDBA719B5B11EA0CEBA1AF018EF95409
SHA-256:	859E7D8C178651B6095C4F7E337C5545037C9B6826A67213207753C0589F3820
SHA-512:	601C38C1530DD31270D2D75648E399B93FD6F32736F55C51CA45D8A34DDEAA41AEF5205A9F4BFA9169B9E02073584DD72DD6930EBABE6DF67D764D9F5D6970A4
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6859-0e318ca24b4b6137.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6859],{18613:function(e,t,r){"use strict";var n=r(34155),s=r(21876).Buffer,i=r(930),o=r(3323);const a=["strategy","src","children","dangerouslySetInnerHTML"],l=["strategy"],c=["crossOrigin","nonce"],u=["strategy","children","dangerouslySetInnerHTML","src"];function d(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function p(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?d(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):d(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}var E,_=function(e){if(e&&e.__esModule)return e;if(null===e\|\|"object"!==typeof e&&"function"!==typeof e)return{

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9198)
Category:	downloaded
Size (bytes):	9270
Entropy (8bit):	5.141086013932976
Encrypted:	false
SSDEEP:	96:jJGAA61T1136GAzxXIzCzXEnMKHTo3Be+ODYTpU9WjfGgCnF8BpXzphl0sLmU:A61D3VAVXIOonMz0+OyjulaHLL
MD5:	00E9C65CBBA11C07C4BF4A6E2727B8EA
SHA1:	AC1A5D9B6FFCDE916A82169CD74C9A734BDF4A39
SHA-256:	129151ED0140041B198CE3B364A11861A3B5BAA5BB60475EBF7BEDB9B0FC94D6
SHA-512:	6C142FA3DE8B0452530D3E0DA7AF3B2CFCA2F0292282E07FF3AEF71426E791B650A8EDE02B5626B7ECF177B45B86630DACDDE9F9480B639E01C7B9D994535D2B
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t.__default)\|\|void 0===i?void 0:i.enabled)\|\|void 0===e\|\|e}i.d(n,{n:function(){return e}})},3162:function(t,n,i){i.r(n),i.d(n,{LegacyDestination:function(){return G},ajsDestinations:function(){return S}});var e=i(5163),r=i(4122),o=i(94),s=i(8404),a=i(1494),u=i(204),c=i(6096),l=i(9254),d=i(5944),h=i(8044),v=i(3098),f=i(3061),p=i(6338),m=i(7566),g=i(7070);function y(t){return t.toLowerCase().replace(".","").replace(/\s+/g,"-")}function w(t,n){return void 0===n&&(n=!1),n?btoa(t).replace(/=/g,""):void 0}function b(t,n,i,r){return(0,e.mG)(this,void 0,Promise,(function(){var o,s,a,u,c,l;return(0,e.Jh)(this,(function(d){switch(d.label){case 0:o=y(n),s=w(o,r),a=(0,m.Kg)(),u="".concat(a,"/integrations/").concat(null!=s?s:o,"/").concat(i,"/").conc

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7176
Entropy (8bit):	7.964451145301178
Encrypted:	false
SSDEEP:	192:oONb2QitM0JnIDwt2VelBuI5ECLrNWRsQ7PnzEWCi:olthpIMt+elBuIfgRsQdV
MD5:	12F4326FEB8660132DC9FFF673C90C89
SHA1:	14417C0AA42E7E00761AF4419922831D3729CF5D
SHA-256:	04846149F658F1D8C5DA197DDC920E7830CEDBC382AB45629AE42AC1BC02E3B9
SHA-512:	BFB3553195EA198EF210A6AE02E653BC2D6EB825F3214E2C0C80898054BB9AE0EDB311436ED158112A38510503230B4E0FD1C648DDCBDFDD7362E786DBC56C17
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sRGB.........gAMA......a.....IDATx..S....3.....]`wy...M...56&(..-.".....j#7,..r......Llk&.=Lj....G..6Gmb..~y..;[7.......w~.,..g...y...i OB..G.......J.N.N.NP....D.s.N..#h....S..'.a.....1..H.+...:....+.W..-fj&G.ql@.q.9.".=...p_#.Er%@.....u.....8.>b...D.$@G...q......^..wYg7.4&@G...G#....R.].....C....X.tx]!.-fB.~@.d.!...U.....L...\|.4]K...t../.................&.5..s4.=O..........#..+.Er......L..4~..l..(.@K!..F...o..&S=y..J.z.w.CG<..>.....f6.....4.G.m.....%...}.u..8.h.q.".....u..~..\....w."h.D..0......L.d.Z.Yi...}o..k..z..1V................@....i.63.('.....8..SL[o2S....k....+...i.N.W.\|.."../....>....y.....L.../9.B>.1.K..\|p7.L2.9r.........a....'...[E..ldl.cy".I&I@..tJ..O.X.@....uF.Z.F>M..R..[.>.......v.9NB.w.h.M.......w.D.2....A.............[.>M...u.G..-b..~3.p?M.o^..&{....4..(.y..gR.sR....'..9.......G..<.......`7....:..}....hz......mI....;.O'..,.?a.Z...._.d.=...9S.#.x.. .h....z.M.\vv{R.w..O..........V....?....

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2674)
Category:	downloaded
Size (bytes):	2724
Entropy (8bit):	5.172874033187636
Encrypted:	false
SSDEEP:	48:ibTOrshzJrNl2dfn3Dh+uSvLCnhdZfEQOjBlGhdZfEmZR+qRCLimLHIWZUK5rfnH:AXrWx3Dh+xoEbBlgEmr+qR7koWT2i2Bo
MD5:	7B6EFEEC50738ADAF197572116B3D96A
SHA1:	9E74F3C863B31BBDB91EDD9AA29BC078102E2171
SHA-256:	A749DD45CA68B2C22C301F48A813C1299FE9503B3FD98415C3B3C9EED275C55B
SHA-512:	D5001ECE76B23B00F0D29868FE034D13EB241177C777C8CD40FE8E2E9441EEE07F69C7747C0AA9CC35087B974CAB99F52DD9AD028AD6AB8FF6F990C040C84761
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2378.40683c6fb386355f.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2378],{52378:function(e,t,o){o.r(t);o(67294);var r=o(85893);t.default=e=>{let{width:t=40,height:o=24}=e;return(0,r.jsxs)("svg",{width:t,height:o,viewBox:"0 0 37 32",fill:"none",xmlns:"http://www.w3.org/2000/svg",children:[(0,r.jsx)("path",{d:"M2.15131 24.8948C1.68233 24.9213 1.28019 24.5676 1.25 24.1028V1.97023C1.28019 1.50435 1.68125 1.1507 2.15131 1.17718H34.508C34.9759 1.1507 35.3791 1.50541 35.4082 1.96918V23.9927C35.3759 24.5348 34.908 24.9478 34.3625 24.916L2.15131 24.8948Z",fill:"white",stroke:"#008481",strokeWidth:"1.556",strokeLinecap:"round",strokeLinejoin:"round"}),(0,r.jsx)("g",{children:(0,r.jsx)("path",{d:"M33.9141 2.87109V23.2005H13.4189L33.9141 2.87109Z",fill:"#D9F6F6"})}),(0,r.jsx)("path",{d:"M5.51953 5.37012H31.1379V9.14376H5.51953V5.37012Z",fill:"#00C1BF"}),(0,r.jsx)("path",{d:"M12.2448 17.5086C12.2448 18.7623 11.2206 19.7788 9.95593 19.7788L8.17595 19.694C7.33393 19.73 6.53936 19.3055 6.10811 18.5

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	5.036353746419716
Encrypted:	false
SSDEEP:	48:Yy/zUVvu7Ojy68cOvJ6pYHdKqHf5TadbS9KddmLOayiHYQmY7YFBbayZahC:dzp7OjTZeheQqQPHE6kBzmC
MD5:	26EE0147B7D243991D94B48A2B8B5675
SHA1:	5B238F8F3BF5EF7404B2BB179C7650D84EFD4467
SHA-256:	3562DD7B75C6C5FE3071732CD91805FCA5E7E3EE08C3F7E75577FEC74F12B545
SHA-512:	35530EDDF3C3149D8429868CE209E16873D356A50BF762A907F1C8E632EA7A7F30CB53094DF97DEA7C77624D0053A52C500CF1886413180B45311634AC3ED016
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings
Preview:	{"integrations":{"Amplitude":{"apiKey":"e1789c803aea5a6e20deca508647bdf6","appendFieldsToEventProps":{},"batchEvents":false,"deviceIdFromUrlParam":false,"enableLocationListening":true,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"forceHttps":false,"groupTypeTrait":"","groupValueTrait":"","mapQueryParams":{},"preferAnonymousIdForDeviceId":false,"saveParamsReferrerOncePerSession":true,"trackAllPages":false,"trackAllPagesV2":false,"trackCategorizedPages":true,"trackGclid":false,"trackNamedPages":true,"trackProductsOnce":false,"trackReferrer":true,"trackRevenuePerProduct":false,"trackSessionEvents":false,"trackUtmProperties":true,"traitsToIncrement":[],"traitsToSetOnce":[],"unsetParamsReferrerOnNewSession":false,"useAdvertisingIdForDeviceId":false,"useCustomAmplitudeProperties":false,"useLogRevenueV2":true,"versionName":"","versionSettings":{"version":"3.3.3","componentTypes":["browser","ios","android","server"]},"type":"browser","bundlingStatus":"unbundled"},"Repeater":{"vers

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7216
Entropy (8bit):	7.938815309608987
Encrypted:	false
SSDEEP:	192:I6mc5i8eolljuLCuFHg/BFk2+zuCyYTViPnaoW:ffi8eo87Vg/By0WVsa3
MD5:	5BF2162AFD1DFF4E1E79487A0CC32B3D
SHA1:	D0285BADB105E22F9B230D5BF1D15B6F96D05DEC
SHA-256:	7DC21EC1EA52133F4E47B7891C9BFB2662370646A39E6718D3DAC0F5A9F10E2B
SHA-512:	8248F796B5B470600E699AFE6CF4204D100FCA6522764C2E9FDD0D34648EAF8B3EA99753B04B5DBC927B79D36409A3615C965735386100C95BFC00DD09C824FB
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/uploads/2024/02/res-square-rect-blue.png
Preview:	RIFF(...WEBPVP8L..../w...M8L.H.X...x.......p..w..{.m.........dTC..j..]...0...P..jg.f.j..A......-j..V.V- ...H..F....;...wuZ.^+ 9..H...@..R.....W.2......_...#d....m.0.{..(B..qa....@..G.pq..Yzjd.. .LY(.6Zz.O.zv....E#;..U#.=.+.%......,.z.wsu...y.H..DpQv.@.>E.(..O&...#....S..Kc.....SG......QU. .mI).............L...zf..P.b.....Y...g7W.......Q...s...W..z..z.yEv..L..} ... .z... -.a...B .(.js4..EC...gt..;J-s.......U..9...._...s.C.;.n.Zn.>..\.g.{..U...9$..A..L......sp...0..._...+.k.....;k....f.^x..g#.Z.87.....k.88..$I.$)Rs....%..} ..$Hr..=...~.........C."9..\|.......$W..<r....q.y\....q..c.....w........8.81q.rE..PO.9.!...8.q.......Kj.M....3.J.i~....Ry...).5.Oc.O..P.....tZ.l....4.I.V.....t.mR.....:...M7_...x.o.]#.j..aMer7X...v.4......!w.@\.]l..j.3....,7..../.I.Vt....i\#T.....x.,.1....a&.g...>....Z.g..n.m......e...b....].`[......#<x{...3.jZbe3..O..1.......v....XG.mT.}.i..<ZwP...\|2v{....k.M0..EiB5w....]..D..._....n...!v.Dz...t.L...(M...Cu......&.....L.

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57765)
Category:	downloaded
Size (bytes):	112419
Entropy (8bit):	4.925253605526406
Encrypted:	false
SSDEEP:	1536:pZeJWfZglWQg5MG7+qehN2pUkxWLPQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LIU3Pq
MD5:	6C5989E44633F1E3F08AD845F9D9CE0B
SHA1:	2B24009FD37E79D4A601E6D53D615FD2CD0A606B
SHA-256:	885C89E82436CFA3D0A0A5A9B2F6BE6E1503457C810CC88ED2C09B4570AE9FD6
SHA-512:	1607A3F2AB27D377D5522BC5B7D0EBC5047E0B9352C7A49978D82D3128EBE13713AF4738D05AD1D32C5A3C54CE0EC787F94BFE25073FEAAF3D5D3BFF8B4DA2E5
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32035)
Category:	downloaded
Size (bytes):	240427
Entropy (8bit):	5.145707923960965
Encrypted:	false
SSDEEP:	3072:AUDKlUUSPVqCqoG3cYI70SDzOyAskRsIcQQ3+SuwC:yUNVEmYIHzQQ3Xu/
MD5:	D935D506AE9C8DD9E0F96706FBB91F65
SHA1:	7F650EE30C6A4D3EEA04032039B20FF72997559B
SHA-256:	C4D8DBE77FEB63E5A61BEE0BEAD4E5F66E8FA6A927599BD1B74ACED52467273C
SHA-512:	0470C258BB5DA745E900571C3F63627C26C97D8A1886C45264E50CDCA9C0C72D9BFC0CB7067F757EBB9DFB703DE5BAC0E300D6577C84399AC9AA057C69945751
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/js/jquery-ui.min.js
Preview:	/! jQuery UI - v1.11.4 - 2015-03-11. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */..(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){function t(t,s){var n,a,o,r=t.nodeName.toLowerCase();return"area"===r?(n=t.parentNode,a=n.name,t.href&&a&&"map"===n.nodeName.toLowerCase()?(o=e("img[usemap='#"+a+"']")[0],!!o&&i(o)):!1):(/^(input\|select\|textarea\|button\|ob

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	81
Entropy (8bit):	4.3493440438682995
Encrypted:	false
SSDEEP:	3:yionv//thPltXlfMLts0NyWn/NG8bp:6v/lhP/ZMRHNyWn/NG8bp
MD5:	1B6D2DE2867A3E11063BA25AA1CD4209
SHA1:	BD20B0E089F31F35CBA4D0FA7277E73AA74D944C
SHA-256:	95518CBEC0D55A574A9C8EF72A2A7D62AC0D40A4DE5DFE67A76A7D214DC8B743
SHA-512:	D30AC99B9140393CB2EA8EB09F0C69F6107CA5940DDF208B5EC1DD6D5ABDAB37FC60A892AA397579DA75B450965ADE6D37EE84C55550B42DD86F7AA26D99AB88
Malicious:	false
Reputation:	low
URL:	https://qfp.intuit.com/fp/clear.png
Preview:	.PNG........IHDR.............."......sRGB.........IDAT..c`.......c*......IEND.B`.

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8352)
Category:	downloaded
Size (bytes):	15399
Entropy (8bit):	5.740907589475125
Encrypted:	false
SSDEEP:	384:nYf/loPJzS1boe6SqfTR781sOe0ps8w4OSpr:YFQJAsuqF78y+1
MD5:	EA95EDD7A0B5814439F99CE8F07A7F6B
SHA1:	534B08466FFBEA111446DF6E37158653A365DE02
SHA-256:	184AF2F1F111FE2DA57AC79EC0105089B2B34EA3C683D0685F76D68B0B8B2FE4
SHA-512:	9040FB1B04BAA8B212E27F7526CA7989A0EE5EE4E49F4B474F8955BE55311DBDCBABBA1E6D339C6FFB7592E4E29D4CB688046486DB38A66FE264E1E6B20480B8
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/css/te-icons.css?v=3.0.0.10
Preview:	@font-face {. font-family: 'icon';. src: url('./images/icon.eot?34307560');. src: url('./images/icon.eot?34307560#iefix') format('embedded-opentype'),. url('./images/icon.svg?34307560#icon') format('svg');. font-weight: normal;. font-style: normal;.}.@font-face {. font-family: 'icon';. src: url('data:application/octet-stream;base64,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

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	dropped
Size (bytes):	1191
Entropy (8bit):	6.4656239153974715
Encrypted:	false
SSDEEP:	12:dr+rJS3NYWFz//w4x1qVG7iyX+Zfw/gIgsydjk1/LAinhjQ3i6YFkQ5FG:drsJS3NrFDY4x1IqX0fw/5cmlhjQ98c
MD5:	FC212AEDF7AA6B680225AB7E9C6A5B8F
SHA1:	BEE6C9E55324D2F0809FF42C9FC283E1FBE1CE39
SHA-256:	F34A3B7A468FE25416791A63831CF9ED92A2985B57C5F5BB4AD30DD7D873B852
SHA-512:	2BFA281F33C9F9A03BD7CC8BD5F3689365DF900507D47D4492906C08D448C3F70DF7DD4A9A6BC6E4584783FFC01864B10D1DCEAC1425E4AC0A1A5B3D2A7DC479
Malicious:	false
Reputation:	low
Preview:	GIF89a.......000.......................................lll............................SSS............EEE...............kkk...888...[[[...........................]]]......vvv.........\|\|\|.................MMM.......fff.................```iii...GGG...........................EEE.........LLL...QQQ.........iiipppqqq555...........sssyyyrrr......QQQ.................rrrJJJ...}}}..........MMM..............>>>.................;;;.............................................___......NNN......www.......{{{........................................................................................................................................................................................................................................................................!.......,............S.L........,(.......@Q.....X..)..C.,........*-X....R+.h. s$....4.....3...P.bEN....`....2@L8..b..(..2MzsS..Bb..C"..=jfDX.)...q.`.....m.x...._.o7t.C......d.R.....:.U..G.,d.....C.. B.P......xXsJ..0}

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:Hd1Y:w
MD5:	FA9C17CE126A76733ACA269345EB7D47
SHA1:	F1D8AA71F281509D55041F671B1A7BD94524AAD8
SHA-256:	15F88A501BBE49A103551BA087FE6FC7E101894E71C3A74A42E8EFC07DCEC0D8
SHA-512:	DD2E08D8D294E24330DDACFCC602D5AB9C9BD65346E0C6540F599725AB711E1F1621D3939318BFC069E67CEF889B80E781DA3E935D61C26E2086DAC79428818C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnMN6lu_LrhHhIFDRM0Cs4=?alt=proto
Preview:	CgkKBw0TNArOGgA=

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	662
Entropy (8bit):	4.845349337928249
Encrypted:	false
SSDEEP:	12:xsFQVwapr+ihmzkCZu3IGmxU6/RxbRyGDGQiGyyDRWUkEeXf:/FJ+ih+kMurmfvRyGDGJGrRWUnev
MD5:	7D9EF64F75E3B66D345D7314EB1B11DE
SHA1:	B7B0089ECFD79AED5420EED4F740AFE87F1B87A7
SHA-256:	A0EBC6A9CBF4856AD43CF45A50F56A4BD7D2C00D4AE38EEBACE7130E33A30207
SHA-512:	87B9E1AA23EA2E3F4C261C5D5F6D73EB6D32DA2C2F136B358681264EECEE80E2D5F04F00967774650714F977B07DD7FDB25BD3B52107CE277B92F965D3878BB3
Malicious:	false
Reputation:	low
URL:	https://chat-application.com/frontend/web/index.php?r=api%2Fload-js&tracker_id=86894795
Preview:	. window.__lc = window.__lc \|\| {};. window.__lc.license = 6354551;. window.__lc.ga_version;. window.__lc.chat_between_groups = false;. window.__lc.params = [. { name: 'Business Name', value: 'TrustArc' },. { name: 'Group Id', value: '386' },. { name: 'Client Id', value: '1181' }. ];. (function() {. var lc = document.createElement('script'); lc.type = 'text/javascript'; lc.async = true;. lc.src = ('https:' == document.location.protocol ? 'https://' : 'http://') + 'cdn.livechatinc.com/tracking.js';. var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(lc, s);. })();.

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	80783
Entropy (8bit):	4.242238625229722
Encrypted:	false
SSDEEP:	768:Enu9o2sm+ODucb+XOFd34N2+Invqh+JEROYtcb/bBy11wyWFzQHi1JZkeZkY:Eufn+Oqad34sxERHSJZkeZkY
MD5:	96BEB541BB120073585B62493F977416
SHA1:	B91F063FC7D2DD15B427FA948CE3B5477D881A65
SHA-256:	280D00982DDF87B70CE1B390E0E8739ECE56A06542D0DA938CC3505F25B31EFC
SHA-512:	4A2C839C3B7BBFD24537D4782B32A16A62F23E8C2B0B43D87C2CBDBB5F9D817A296758D2DC89BB4DADF40D3D014005E5448E2A8AD342E686E255555A78F7FDA0
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/discover.bug.svg
Preview:	<svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M31.7673 21.2158C32.5465 21.2158 33.1738 20.5951 33.1738 19.8175V2.1818C33.1738 1.40424 32.5465 0.783496 31.7673 0.783496H2.22669C1.44743 0.783496 0.820117 1.40424 0.820117 2.1818V19.8175C0.820117 20.5951 1.44743 21.2158 2.22669 21.2158H31.7673Z" fill="white" stroke="#BABEC5" stroke-width="0.439356"/>.<mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="1" y="1" width="32" height="20">.<path d="M32.9542 19.8175C32.9542 20.4723 32.4266 20.9961 31.7673 20.9961H2.22669C1.5673 20.9961 1.03979 20.4723 1.03979 19.8175V2.1818C1.03979 1.52701 1.5673 1.00317 2.22669 1.00317H31.7673C32.4266 1.00317 32.9542 1.52701 32.9542 2.1818V19.8175Z" fill="white"/>.</mask>.<g mask="url(#mask0)">.<path d="M32.9866 12.6725C32.9866 12.6725 24.2021 18.4095 9.09131 20.9959L32.0261 20.9959C32.5566 20.9959 32.9866 20.5659 32.9866 20.0354V12.6725Z" fill="#F58220"/>.<path d="M4.91702 7.85425H3.65723V1

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1082437
Entropy (8bit):	5.443551822674652
Encrypted:	false
SSDEEP:	12288:/xoK0GrrqYt29PIEVAKPi8HoJMGYC2NZqq33L4vNnaa3/Nov7T:/xoK04qYU9PIOAKqX2763/NkT
MD5:	E026539DF2E4F739D8F64B5315599F3C
SHA1:	786F2FC065EA8BEA1B39BCA12B72217CFE3FE5E4
SHA-256:	C54399A932E61E369B22AEC37F6422E77A20AD2E6D9C587BF9BE57282D3F9EDA
SHA-512:	86FE8933A6A545DB97EBB0E736609ED626AE5631877F6E018CAFAB8158DD66AFC993655F46FF6923546E66604263C8292E2347A87B5BE51A906FC6E14BABA2A5
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888,2741],{25687:function(e,t,n){"use strict";n.d(t,{kG:function(){return r}});function r(e,t,n){if(void 0===n&&(n=Error),!e)throw new n(t)}},95957:function(e,t,n){"use strict";function r(e,t){var n=t&&t.cache?t.cache:u,r=t&&t.serializer?t.serializer:c;return(t&&t.strategy?t.strategy:s)(e,{cache:n,serializer:r})}function o(e,t,n,r){var o,i=null==(o=r)\|\|"number"===typeof o\|\|"boolean"===typeof o?r:n(r),a=t.get(i);return"undefined"===typeof a&&(a=e.call(this,r),t.set(i,a)),a}function i(e,t,n){var r=Array.prototype.slice.call(arguments,3),o=n(r),i=t.get(o);return"undefined"===typeof i&&(i=e.apply(this,r),t.set(o,i)),i}function a(e,t,n,r,o){return n.bind(t,e,r,o)}function s(e,t){return a(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}n.d(t,{A:function(){return d},Z:function(){return r}});var c=function(){return JSON.stringify(arguments)};function l(){this.cache=Object.create(null)}l.prototype.get=function(e){return this.cache

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/1.30.0-release_1.30.0-80b42f1/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4424
Entropy (8bit):	3.9488854402751046
Encrypted:	false
SSDEEP:	96:SehyjPh+m1Ih1Kh0gHhG0g0hMldGq+hiBqrBch02hh:SQyj5+8W1kTBG0gq2dGxiB8BCTh
MD5:	BFAAEB1CA82BF9541F20AA098F3E7CF2
SHA1:	60EAF90FFD92537EFAB96CA3630AF5F5AA885444
SHA-256:	553867D379DEAAF0D8379531CC1F8EF3002CD13E5E006523DDC49A0204932D6C
SHA-512:	210ACF8514DD16BD2687BA0F5111CD5945DA9B5CB73162EBA7570F4830726DB51D612CBCB634790DDE910071ABE7212B4B9890B69A44A449D91C128838B97BBC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" id="flag-icons-us" viewBox="0 0 640 480">. <g fill-rule="evenodd">. <g stroke-width="1pt">. <path fill="#bd3d44" d="M0 0h912v37H0zm0 73.9h912v37H0zm0 73.8h912v37H0zm0 73.8h912v37H0zm0 74h912v36.8H0zm0 73.7h912v37H0zM0 443h912V480H0z"/>. <path fill="#fff" d="M0 37h912v36.9H0zm0 73.8h912v36.9H0zm0 73.8h912v37H0zm0 73.9h912v37H0zm0 73.8h912v37H0zm0 73.8h912v37H0z"/>. </g>. <path fill="#192f5d" d="M0 0h364.8v258.5H0z"/>. <path fill="#fff" d="m30.4 11 3.4 10.3h10.6l-8.6 6.3 3.3 10.3-8.7-6.4-8.6 6.3L25 27.6l-8.7-6.3h10.9zm60.8 0 3.3 10.3h10.8l-8.7 6.3 3.2 10.3-8.6-6.4-8.7 6.3 3.3-10.2-8.6-6.3h10.6zm60.8 0 3.3 10.3H166l-8.6 6.3 3.3 10.3-8.7-6.4-8.7 6.3 3.3-10.2-8.7-6.3h10.8zm60.8 0 3.3 10.3h10.8l-8.7 6.3 3.3 10.3-8.7-6.4-8.7 6.3 3.4-10.2-8.8-6.3h10.7zm60.8 0 3.3 10.3h10.7l-8.6 6.3 3.3 10.3-8.7-6.4-8.7 6.3 3.3-10.2-8.6-6.3h10.7zm60.8 0 3.3 10.3h10.8l-8.8 6.3 3.4 10.3-8.7-6.4-8.7 6.3 3.4-10.2-8.8-6.3h10.8zM60.8 37l3.3 10.2H75l-8.7 6

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20915)
Category:	dropped
Size (bytes):	275738
Entropy (8bit):	5.5540486913038665
Encrypted:	false
SSDEEP:	3072:pqODL9pYF+p1FOgK1OtLnq03OUU/COE9v1bfUq4NTTeCTE74VRgk0seASlP:p7o+p1FNK8+dw4BaCWaRgk0seASN
MD5:	8643667261F38679A3256DF1F030C239
SHA1:	2BA2725F21899B5A964D6D3771EA103BF799A434
SHA-256:	6FC590B728CCE9511215FFD2A477584350EA52A7304F4B169995011E9EBCEFBA
SHA-512:	9AA25891F716D07698D738A87F6BB3CCB77F31CDD92F95FF6BE028BBC7C60EC28B9DC92118756E7005317BC5EB8E789A7A15BD532326E535BE944CE760AACCD4
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":22,"vtp_instanceDestinationId":"AW-1051519679","tag_id":119},{"function":"__ogt_cps","priority":12,"vtp_cpsMode":"ALL","tag_id":105},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":""

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 310 x 101, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18516
Entropy (8bit):	7.979975455598495
Encrypted:	false
SSDEEP:	384:9KzcHXb+LYBxfRtIkqp8Cl0hO2oKMf1BtwkelzW9puB6PGFyWrDFe:9KzGiLYjvIF8a0nMtBtDelz6CEGFyWrU
MD5:	BAF6645284D114C014C086F102B73828
SHA1:	B5DA6FBD2085FADA5580EE7244230D29FFF4BFCD
SHA-256:	B0C8F3BE8C509B9136B38C2B389B75BCAF0470DB25EA009EDF4A0AAF82E635C7
SHA-512:	AC0655A83EB2812659CF2E1DF1A04067550123909180381E0292CE8C0934F03291A198BDFABED240E8A63DAECEBDC60AFA7D4C6919D91D7FAF2B4CE83E065638
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...e........D....sRGB.........gAMA......a...G.IDATx....n.Q..q_...JK!......x......W6..DwV}.......0...K...bH..........J..T......INN`N..!............V..\|..-W@.,PW.....tG..........Q....v^9..y..z.{.`..!...../.YC(.......p.....5..p.....z.../..U..h..K..\...V....}5..5...{.wv@D4Nd..>..hv..a..#...n..h..N.....6....i..e....d..n.~.....C..;5"r..-._.a.7..... "r#./......+...""72L..XO.\...[#"w.`....[._.....1lD4Y.4l....Ke......D.V.7...\|c.....K....u......X....OX}..../a!.E......A..3.9.1....cG.b.."R....&..F..._...j....8y..../B..D..X...=".........s....s.......t}..+W..x1.......M.q8......."...(..s.:.i..E..G.a.=..cq.j5.......v.~..TdX...=.q6..6.wn......~.s.AU.g._..\......D....pC.......dq...b..(R5.h.5QH.N...R...f.V.)..3N..ig....U.LF....g......h&3yg.9.{..-..\|..~................7n....^.......?......n..jj....C....h...9.^.>.......C.c.3Y:y..Nb..\|.....~.;.s.2.d"/'.y.d.U.p..,/....r....O>....j...98Qw. }MY-/^.y..8.E.........U_..ui.v.m.6L.?...>....;e.p...

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2234
Entropy (8bit):	4.502147087281308
Encrypted:	false
SSDEEP:	24:2d6Q4qWuXcQIme+IGEpdDebl/HXHm71HYjrXes5UFvNJd4mWkZq6PhcfcIDbu3xb:cFsDme+oxY13mJMrRKNbZHPAfu3qDA
MD5:	714ECAE101F812EBB9B4ECA807B8898D
SHA1:	9A2BE748D79E49B9FE0BD03439DA37778469FC2E
SHA-256:	95985F938AEB888BC77273149270C6CA8E7303F7F8A97B6F3879BEA801C3C7BD
SHA-512:	7CE3F7C229CDA14D17CD77944275279621A39A18080485AC78619D83ED315D12770F08B3E1262D7FF5D893B386D7EE7080AC54E3FCE4816C69150CCDE3F0D8BC
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/uploads/2023/11/logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="180" height="36" fill="none">. <g clip-path="url(#clip0_943_2394)">. <path d="M177.595 26.909s-3.139 3.181-7.362 3.181c-4.761 0-7.804-3.621-7.804-7.827 0-4.206 2.994-7.732 7.607-7.732 3.926 0 6.528 2.694 6.528 2.694l2.749-4.258s-3.091-3.718-9.618-3.718c-8.294 0-13.593 5.97-13.593 13.062 0 7.091 5.299 13.062 13.593 13.062 6.724 0 10.305-4.062 10.305-4.062l-2.405-4.402zm-35.596 6.643l-.317 1.216s0 .012-.004.016h4.757v-9.876c0-.844.056-1.653.173-2.425a46.1 46.1 0 00-2.983 6.239 49.941 49.941 0 00-1.626 4.826" fill="#3699F1"></path>. <path d="M146.19 14.935V9.853h-5.981V27.35c.024-.044.04-.088.064-.132 1.694-3.258 3.701-6.379 6.267-9.064 1.268-1.345 2.705-2.557 4.295-3.534 1.357-.832 2.874-1.42 4.428-1.672V9.609s-.538-.1-1.128-.1c-3.826 0-6.817 1.857-7.945 5.426zM0 .053v5.43h11.433v29.301h6.331v-29.3h11.437V.052H0zm61.088 21.229c0 4.45-2.501 8.416-7.017 8.416-3.091 0-3.878-2.053-3.878-5.086V9.837h-

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	150
Entropy (8bit):	4.800676840971259
Encrypted:	false
SSDEEP:	3:JSO+V506LBUyKteGQC+GJBGQWMNsNRJYnMvNKyquGQJJDenMpFuR/:riHKtZQC+GJwQWMsCmYyppdenMaR/
MD5:	B10FA552403ECF64E7A2F371D17FD42E
SHA1:	2250179D5D4B4FE2B59BC82B0277C4B0079C27EC
SHA-256:	5BFCBB218C41F9309B180B215B628D51E83703BE08A2676056E9792EEB3E24E3
SHA-512:	AEF6E6F7D5A29190C8C4D58ABEC832A21B2B85DA099516A530861FB9B9A550CDA75585D68F71B3FC475CD0E522BE9185E24D2682A1499CD579EC7732A911DBF9
Malicious:	false
Reputation:	low
Preview:	import{r,h as s,H as o}from"./p-5117d167.js";const t=class{constructor(s){r(this,s)}render(){return s(o,null,s("slot",null))}};export{t as wp_loading}

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4262)
Category:	dropped
Size (bytes):	34706
Entropy (8bit):	5.4329863199871
Encrypted:	false
SSDEEP:	768:6jL/4U4R6jzW9uvVfE4DNz0YviFIpmDov4Q3dTIYkX:S4LRazW9uvVfE4DNwYGIpmDov4Q3dTI1
MD5:	87ED6F130E50B9EBA35103F9C3FA44C4
SHA1:	F05D0B0D05365B017E4C5161DD773788C78FB4B1
SHA-256:	737BC2D49CC799CE8EA78A280E1714CC6E8A7EAC1E078E022771C4E8D208D751
SHA-512:	1239DD0F7D7A31E468A10253B0374D36249004BD7925A3E061D03DBE868B255C1F2E9C0D22BB64B16515F93DA6A3C974B094A0EA9F7FC4D93DC72AC451FC19F5
Malicious:	false
Reputation:	low
Preview:	var truste=window.truste\|\|{};truste.bn\|\|(truste.bn={});truste.eu\|\|(truste.eu={});truste.util\|\|(truste.util={});.truste.util.error=function(h,d,g){g=g\|\|{};var f=d&&d.toString()\|\|"",c=g.caller\|\|"";if(d&&d.stack){f+="\n"+d.stack.match(/(@\|at)[^\n\r\t]/)[0]+"\n"+d.stack.match(/(@\|at)[^\n\r\t]$/)[0].}truste.util.trace(h,f,g);if(truste.util.debug\|\|!d&&!h){return}var a={apigwlambdaUrl:"https://api-js-log.trustarc.com/error",enableJsLog:false};.if(a.enableJsLog){delete g.caller;delete g.mod;delete g.domain;delete g.authority;g.msg=h;var e=new (self.XMLHttpRequest\|\|self.XDomainRequest\|\|self.ActiveXObject)("MSXML2.XMLHTTP.3.0");.e.open("POST",a.apigwlambdaUrl,true);e.setRequestHeader&&e.setRequestHeader("Content-type","application/json");.e.send(truste.util.getJSON({info:truste.util.getJSON(g)\|\|"",error:f,caller:c}))}};truste.util.trace=function(){if(self.console&&console.log&&(this.debug\|\|this.debug!==false&&(self.location.hostname.indexOf(".")<0\|\|self.location.hostname.indexOf(".truste-svc.n

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	319551
Entropy (8bit):	5.607280181756608
Encrypted:	false
SSDEEP:	6144:14MNo+p1FNnl/MdHlgq9k0seA3XCi4XuR9KJTVKr:OMqU1FNl/MmrR9KJTVG
MD5:	314042C99305A14E5D41831E57597BFD
SHA1:	5873BCF5F73088EED8F4E9EEF103C4EC4711A32E
SHA-256:	AB944BF2385E8FD87B0B94DDD37F95BDC77050D47FC7B3913369F3DF6E66EE04
SHA-512:	1D49CDE67EA02633567A29C8C69CC1400A8628BF3B27E1C2DCC5F6BFDFCC4582541B1382F5814C8EB1FC361D6DABC7E6E90B17F2653220D5243E86BA5B3E6436
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-GC23DHTMEC&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":17,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ISO-8859 text, with very long lines (893), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	53847
Entropy (8bit):	4.645868686807573
Encrypted:	false
SSDEEP:	768:xpj4Ypntd57JY3m3w4sK20X5m4/1gKG0Q5:xpjbt+I1gz
MD5:	CCA05AC87A8D1C79283F7630228196E5
SHA1:	41034ED7BFF88292F5696376C65D227D58B67666
SHA-256:	4711D86093ACE403557BE2EE4894786071AA381C1E1D8642EB792614F756CF3A
SHA-512:	F940E247EFE8907B61E4F3B4B716C1EEDD4DEB188EE3C69BC7224CD26B272E3C6528098675A2EEA92221310FF14B9D90CEB8FF68E3D0F8452901CF35D6CA5B04
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/request
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">.<html lang="en">.<head>..<title>Submit a Report - Watchdog</title>..<link type="text/css" href="/watchdog/resources/css/watchdog.css?v=3.0.0.26" rel="stylesheet" />..<link type="text/css" href="/watchdog/resources/css/te-icons.css?v=3.0.0.10" rel="stylesheet" />...<link type="text/css" href="/watchdog/resources/css/jquery.ui.autocomplete.css" rel="stylesheet" />...<link type="text/css" href="/watchdog/resources/css/jquery.ui.theme.css" rel="stylesheet" />...<link type="text/css" href="/watchdog/resources/css/bootstrap.min.css" rel="stylesheet" />....<script type="text/javascript" src="/watchdog/resources/js/jquery-2.1.4.min.js"></script>...<script type="text/javascript" src="/watchdog/resources/js/jquery-ui.min.js"></script>...<script type="text/javascript" src="/watchdog/resources/js/validate.js?v=3.0.0.11"></script>...<script type="text/javascript" src="/watchdog/resources/js/survey

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 7 x 6, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	139
Entropy (8bit):	5.911157381206696
Encrypted:	false
SSDEEP:	3:yionv//thPly5tjllU+K/zUN9lM82kXrkAlRtm6GRdU/83p/lsup:6v/lhPSpozQ2+JZNIdt3Djp
MD5:	61B702E83ABB3D36A6183EF98CA5E24E
SHA1:	6BE4FF9201BD65E18008FEF2322BD01B767EDEBB
SHA-256:	068321A5B83F937DA067DFEB427794DE7690DF2568432A564E4345BE7981568C
SHA-512:	CB634B0773B993CED4A6E6DBED5FD8FA29A2D41DF3A6D9C6FF801ED22D9A10C006099BBD07BA78780BA776506D61EBE7DFCC8AC16A3AD1E8B33CF177ADEB2100
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................v...RIDATx.cX.i....6.G. q&[....X.X.....Wo.C..........{..%@4..b........?.F...V... .&..V.R.s.......IEND.B`.

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (814)
Category:	downloaded
Size (bytes):	29373
Entropy (8bit):	5.518886833483292
Encrypted:	false
SSDEEP:	384:zo4zikHOCXHFlfEoYY1xwuKoxjxq+ZxrxvxSpOj0ztxAxGx/hwKNMA4AzI94lBKG:Lzikuqf97xSpO+hw9A4AjI0
MD5:	663D1920E0370115CF813BA0A40BFE20
SHA1:	B7111E90F57622608B41FA057CB79AB887395654
SHA-256:	3FE6A5C41C1F5D9B3B22C636F7201EFE42E93207CCA30B112F4AC63DCA72054F
SHA-512:	3B93C7AF20772704D50FDEF205ECC4FB62FD4C36F024DCF48D63061356C963A2A20229032D146FF9956084F12B88C47E44F31FF271C78A1C4070E42E16D26095
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=script-include&c=captchaResponse&t=4c5dd4bea6b24fd4b9a76777f67f61cb
Preview:	(function(){function a(a){a?(l[0]=l[16]=l[1]=l[2]=l[3]=l[4]=l[5]=l[6]=l[7]=l[8]=l[9]=l[10]=l[11]=l[12]=l[13]=l[14]=l[15]=0,this.blocks=l):this.blocks=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];this.h0=1732584193;this.h1=4023233417;this.h2=2562383102;this.h3=271733878;this.h4=3285377520;this.block=this.start=this.bytes=0;this.finalized=this.hashed=!1;this.first=!0}var b="object"===typeof window?window:{},c="0123456789abcdef".split(""),m=[-2147483648,8388608,32768,128],d=[24,16,8,0],n=["hex","array","digest",."arrayBuffer"],l=[],q=function(b){return function(c){return(new a(!0)).update(c)[b]()}};a.prototype.update=function(a){if(!this.finalized){var c="string"!==typeof a;c&&a.constructor===b.ArrayBuffer&&(a=new Uint8Array(a));for(var p,f=0,e,h=a.length\|\|0,g=this.blocks;f<h;){this.hashed&&(this.hashed=!1,g[0]=this.block,g[16]=g[1]=g[2]=g[3]=g[4]=g[5]=g[6]=g[7]=g[8]=g[9]=g[10]=g[11]=g[12]=g[13]=g[14]=g[15]=0);if(c)for(e=this.start;f<h&&64>e;++f)g[e>>2]\|=a[f]<<d[e++&3];else for(e=this.start;f<h&&6

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	178318
Entropy (8bit):	4.72138946527399
Encrypted:	false
SSDEEP:	1536:5yl9jC9wPIt82SuMpvDGSAETC4ldLnQNlGMvUNr0hEIIsUBOAhUhPaTQsGxPoVxo:QM8iMpvDGSAETC4ldsuMvUNCEIOo
MD5:	F57C545FFBB7A4D70BBF2574A13C907B
SHA1:	166E450E3E829C545C1E9F5F2E86A8CBC0A9A03C
SHA-256:	F0F8DCD15AB2C36EFF7378AE624BE4CC2A774D13D99A2FFF9B84C0F05F657E93
SHA-512:	25D7668F03EDB2A6B3F68552A05C23457884817C293E6DC01CB227950024DCE84B7B41D54C2A2A58A25E0D6A582EE6F12F0EA68488E041BFD5E2C6D09053ABFC
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/themes/trustarc/assets/dist/js/app.js?ver=1711465976
Preview:	jQuery(function () {.. initSlickCarousel();.. initAccordion();.. customizeAccordion();.. initHoverButton();.. initFocusCycle();.. initHeightCalc();.. initOpenClose();.. initHeaderScroll();.. initMobileNav();.. initTabs();.. initTabFocus();.. initMouseFocusRemover();.. initCustomForms();.. initAjaxPosts();.. initInputs();.. initCopyURL();.. initInlineModalLinks();..});....// inline modal links for cookie prefs..function initInlineModalLinks() {.. .. jQuery('.opt-out-inline').on('click', function() {.. truste.eu.irmClickListener();.. });.... jQuery('.cookie-consent-inline').on('click', function() {.. truste.eu && truste.eu.clickListener();.. });....}....// copy URL function..function initCopyURL() {.. jQuery('#copy-url').click(function(){.. var copyText = window.location.href;.. let temp = document.createElement('textarea');.. temp.value = copyText;.. document.body.appendChild(temp);.. temp.select();.. document.execCommand('copy');.. docu

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3073
Entropy (8bit):	5.08024149765094
Encrypted:	false
SSDEEP:	96:WGxQ+AzJZjTFhqHVgCagDiQTdqHeJA5RkaUHO:3xkfIDXY
MD5:	78FFA83362A97FA1D78D33E084636344
SHA1:	7E0103F733B3BF47026130D5DE10DF1949B67BD2
SHA-256:	A11891089BC1F14552DB49E9EC6E9ECD59A1456E607270D92C29BB736AF174CA
SHA-512:	2BF31F4F1EB9A7E2B1D60D9AA1F6AC2305A1220BF91CDF41A4DF745C485A0C7BD35A22DAF6667F652D3C8E6C8AE2DCA42AE1CF64A33BD7A134E2F8D7FE016819
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/js/survey.js?v=3.0.0.9
Preview:	.function populateQA(jsonData, container) {...var html = "";......for (var i=0; i<jsonData.length; i++) {... ... var qa = jsonData[i];...... var question = qa['question'];... var qTextId = question.questionTextId;... var qTypeId = question.questionTypeId;... var answers = qa['answers'];.....html += "<div class='questionAnswer' qTypeId='" + qTypeId + "'>";.... //https://jira.truste.com/browse/DR-140... switch (qTypeId) {.....case 1: //checkbox......html += "<fieldset>";......html += "<legend class='question'>" + $('#' + qTextId).text() + "</legend>"......break;.....case 2: //freetext......break;.....case 3: //radio button......html += "<fieldset>";......html += "<legend class='question'>" + $('#' + qTextId).text() + "</legend>"......break;....}.... for(var j=0; j<answers.length; j++) {... .switch(qTypeId){... ..case 1: //checkbox.......var checkboxId = "surveyCheckboxInputId_" + i + "_" + j;... ...html += "<input class='surveyInput' type='checkbox' id

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.039148671903071
Encrypted:	false
SSDEEP:	3:VCkyVgWY:VClgWY
MD5:	EF261110077E2404B12D385BCE13DC33
SHA1:	1342C7D018BCC2F413EDBEDA7BFA28419885057F
SHA-256:	E496B3193E59EA19A560448E53B86654395ADF973CB6F35AB05380F61061D4FB
SHA-512:	B54E74E0B7EDAE02616A47919010BD5B8441ECA28A67BA44C635F4A84D1DC25F32D5F7DA630C6DD44A3D699C1C6E859442EEC3A8DEC4DD03DCC424E9C6D4C131
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlRaDYHj-RSJhIFDQnTALISBQ0epENz?alt=proto
Preview:	ChIKBw0J0wCyGgAKBw0epENzGgA=

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23429)
Category:	downloaded
Size (bytes):	23482
Entropy (8bit):	5.5576204046870075
Encrypted:	false
SSDEEP:	384:bnR+uKd7eEUDVcbj0df9RuYgK/3tH0kAUxGgG8YEwO3:bSeEM6U5gKVUkv4swO3
MD5:	C688C797224F889413A44BE90805F57F
SHA1:	6EB076A3C22BD4BB20803938DFC8726C449D1B67
SHA-256:	C39F73F9D9162EBBC61C023C41EE3164E1D891555E30D29897E8F18267CAA2E8
SHA-512:	029A21A01DB10217E8D7136572B431F7A23A149371C642405A1BDF8B2B478F8E48882BCCF38E72F9C485B1AE77DB2E4363BA0F13229ADDF772F02188E4EA2890
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/payable-f99486b740249e9c.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7908,712],{60712:function(e,t,a){"use strict";a.r(t);a(67294);var o=a(51245),n=a(85893);t.default=e=>{let{width:t=20,height:a=20,color:s=o.colors.lightBlue}=e;return(0,n.jsx)("svg",{width:t,height:a,viewBox:"0 0 20 20",fill:"none",xmlns:"http://www.w3.org/2000/svg",children:(0,n.jsx)("path",{fillRule:"evenodd",clipRule:"evenodd",fill:s,d:"M9.99935 1.66797C14.6017 1.66797 18.3327 5.39893 18.3327 10.0013C18.3327 14.6036 14.6017 18.3346 9.99935 18.3346C5.39697 18.3346 1.66602 14.6036 1.66602 10.0013C1.66602 5.39893 5.39697 1.66797 9.99935 1.66797ZM9.99935 9.16797C9.5391 9.16797 9.16602 9.54105 9.16602 10.0013V12.5013L9.1716 12.5985C9.21977 13.013 9.57202 13.3346 9.99935 13.3346C10.4596 13.3346 10.8327 12.9616 10.8327 12.5013V10.0013L10.8271 9.90414C10.7789 9.48964 10.4267 9.16797 9.99935 9.16797ZM9.99935 6.66797C9.5391 6.66797 9.16602 7.04106 9.16602 7.5013C9.16602 7.96154 9.5391 8.33464 9.99935 8.33464C10.4596 8.33464 10.8327 7.961

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11551)
Category:	dropped
Size (bytes):	11601
Entropy (8bit):	5.582457879974156
Encrypted:	false
SSDEEP:	192:SEWrsOtZLYyWeaGxrbBWvkW2OY3qSsznO7lkl0flUuJbOju3uZMIgjYkbv636dtP:HWQirbB7OY3qSsznO7qglUSLUMIqRL66
MD5:	7991BEBEE72492DE178E3236737B8B96
SHA1:	0878026D338E675474B328FE6631AE8A1128C529
SHA-256:	83BE47927CD0D67100A4706E7CE7AAE0F85B76DC70A1B9650F256CC54774C860
SHA-512:	F7432FABB849D020D29685EB59241CCDCA9555E0E6929E6EF06892F66622B08593EEB67CA24E9654EE90D7984CDA3FCBC865CD9B2EB728DEA4C0A99EBFFCC920
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9661],{93429:function(e,i,s){s.d(i,{Z:function(){return w}});var t=s(95627),a=s.n(t),n=s(67294),o=s(34242),l=s(54490),r=s(44012),c=s(57230),d=s(6721),u=s(98343),x=s(85893);var y=e=>{let{currency:i,isPartiallyPaid:s,feeAmount:t}=e;const{0:a,1:o}=(0,n.useState)(!1);return(0,x.jsxs)(x.Fragment,{children:[s&&(0,x.jsx)(d.Z,{idValue:"INVOICE_SUMMARY_PARTIALLY_PAID"}),!!t&&t>0&&(0,x.jsx)("span",{id:"maip-tooltip-w",onMouseEnter:()=>o(!0),onMouseLeave:()=>o(!1),children:(0,x.jsx)(c.Z,{borderBottom:"dotted",idValue:"MAIP_ONLINE_CONVENIENCE_FEE",defaultMessage:"Online convenience fee",value:(0,x.jsx)(l.BK,{value:t,style:"currency",currency:i})})}),(0,x.jsx)(u.Z,{className:"cp-tooltip-wrapper",innerClassName:"cp-tooltip",placement:"top-end",target:"maip-tooltip-w",isOpen:a,children:(0,x.jsx)(r.Z,{id:"MAIP_TOOLTIP_MSG",defaultMessage:"This is just a fee for paying online. You can still pay offline without paying this fee."})})]}

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	20028
Entropy (8bit):	4.319049804109463
Encrypted:	false
SSDEEP:	384:j16CvHqWF4OOOP0y+nCaESSxm0OCSWuyiwwd1EsCje7xf/jBUFn+9Pyap08ple:juW+O90ymCaEnPOhPd12G/jBUB+9Hk
MD5:	6DCC0DB5446AC677D011C9E531400A08
SHA1:	824D51B43005AAB359B700E43E2FC64F57B2DF43
SHA-256:	F42ABCD844DD443999483304AD956BB3E784FD0F8493EC0C96E72D3BC3EED083
SHA-512:	27AD56B1A765027AB1B378B689C25782040A49C6928504C1D3D17AE96C537D0870C9EB2DDBD2376D1C599E18413FF79680B694D5BF5EAA30EF273C48D7403371
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="88px" height="28px" viewBox="0 0 88 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 53.2 (72643) - https://sketchapp.com -->. <title>Group 44</title>. <desc>Created with Sketch.</desc>. <defs>. <polygon id="path-1" points="0.0001 0.0002 87.808 0.0002 87.808 28 0.0001 28"></polygon>. <polygon id="path-3" points="0 28 87.808 28 87.808 0 0 0"></polygon>. </defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="company-logo" transform="translate(-75.000000, -88.000000)">. <g id="Group-44" transform="translate(75.000000, 88.000000)">. <path d="M16.2428,27.8943 C11.4518,27.8943 7.3678,24.6403 6.2898,19.9793 L6.2718,19.8993 L5.4038,19.8553 C2.4358,19.7003 0.1048,17.2483 0.1048,14.2683 L0.1048,0.1123 L84.3058,0.1123 C86.1788,0.1123 87.6958,1.6363 87.6958,3.5153 L87.6958

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28931)
Category:	dropped
Size (bytes):	28981
Entropy (8bit):	5.581447265572943
Encrypted:	false
SSDEEP:	768:PuPnoo9IGJUVr20j6vEqu5zSTBK9eN/gLAgKe+55usKUiRV1Ob5dafH:GV8eC6kUcV1Oy
MD5:	37EB804273791AF5F1A8ACAC5775FD06
SHA1:	60864D25FDBA719B5B11EA0CEBA1AF018EF95409
SHA-256:	859E7D8C178651B6095C4F7E337C5545037C9B6826A67213207753C0589F3820
SHA-512:	601C38C1530DD31270D2D75648E399B93FD6F32736F55C51CA45D8A34DDEAA41AEF5205A9F4BFA9169B9E02073584DD72DD6930EBABE6DF67D764D9F5D6970A4
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6859],{18613:function(e,t,r){"use strict";var n=r(34155),s=r(21876).Buffer,i=r(930),o=r(3323);const a=["strategy","src","children","dangerouslySetInnerHTML"],l=["strategy"],c=["crossOrigin","nonce"],u=["strategy","children","dangerouslySetInnerHTML","src"];function d(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function p(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?d(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):d(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}var E,_=function(e){if(e&&e.__esModule)return e;if(null===e\|\|"object"!==typeof e&&"function"!==typeof e)return{

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19636)
Category:	dropped
Size (bytes):	19686
Entropy (8bit):	5.459020690710615
Encrypted:	false
SSDEEP:	192:UyNYN3N5N5AUNfaHYdg4I2ZVY232yoY2yi2wbPZwxGfLwCLTCUifMPI2rSU3rK8P:n6BrvAUlMo3V8TZ6zwrSoiVyR8i
MD5:	1E55A07D6FBC854D8604746B8D20E42B
SHA1:	CFCBA90AE2E3C9F1AB3F34D1110969813F938C8E
SHA-256:	B21AF03D132E6616D43F4DADC2451148FB6009A1F343DE830D0598B2E16D9E55
SHA-512:	B5A7DBC8F3D40E4554AD6B64AFC68ECE62C7B8D1D20C67761EFF2AC8394BADB77356401350111BFD87DDDA901C3AA58E4AFBFCA0D35625C3A2EC1DFF12EAA240
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2352],{56810:function(e,t,n){var i=n(95627),s=n.n(i),o=n(67294),r=n(44012),a=n(14067),l=n(54623),c=n(70678),d=n(44947),m=n(51245),p=n(85893);t.Z=e=>{let{hide:t,onContinue:n,headerIntl:i,cancelIntl:x={id:"CANCEL",defaultMessage:"cancel"},continueIntl:y,children:b,hideOnContinueFinish:f=!0,continueDisabled:g,bodyContainerWidth:u,removeDefaultBackground:h,withHr:j=!0,customDesignKey:w,withHeader:k=!0,withCancelBtn:_=!0,marginTop:S="72px"}=e;const{0:z,1:$}=(0,o.useState)(!1),v="freeTextModal"===w,N=async()=>{z\|\|t()},O=k?(0,p.jsx)(r.Z,{id:null===i\|\|void 0===i?void 0:i.id,defaultMessage:null===i\|\|void 0===i?void 0:i.defaultMessage,values:null===i\|\|void 0===i?void 0:i.values}):void 0;return(0,p.jsxs)(o.Fragment,{children:[(0,p.jsx)(a.Z,{hide:()=>N(),header:O,removeDefaultBackground:h,customDesignKey:"freeTextModal",children:(0,p.jsxs)("div",{className:s().dynamic([["4197129058",[u\|\|"496px",m.breakpoints.sm,v&&`@media screen

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	4.871908089278848
Encrypted:	false
SSDEEP:	3:4WLQifQe6EkExVzdo4hen:bLQYxGExVzSmen
MD5:	C90C6DCB97ACEBA9BA27E1575F31D4AC
SHA1:	B22883BC253581E1886E943E40717309C3812D28
SHA-256:	CC0B88E48B5E2015DD0C862A23C6AD6313DE4193B89D492A58CC5CFDBE627E35
SHA-512:	E938F97E433E814F51477FF508EE3683DF50F49B3B90A1B6275050AB54441BD2B25671AEAF16624918CD5CB95DFBE6C12183BFAD2C53F6C455571B2E87AAB35A
Malicious:	false
Reputation:	low
Preview:	__uvSessionData0({"uvts":"96c6edab-de53-4a8b-572b-d15fd749f9a2"});

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
Reputation:	low
Preview:	...........................

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32772)
Category:	dropped
Size (bytes):	283645
Entropy (8bit):	5.340099594147338
Encrypted:	false
SSDEEP:	6144:jN/qr0kVXC1LQ9uHP9b8Yi1WCjcS8cnP5yROd6qUtxjitvGgWZg:Za0GCLQ9uHPe91WCjcS8cMRsikGgWZg
MD5:	134DF3331B4414EBE3026F548837089B
SHA1:	B4FF87AD24E79A24EA103737320070012AEE6D86
SHA-256:	4D5E5366848AD2D8E3621058840315FAB85CF070D00E5A1229DEBD2483A1609A
SHA-512:	7D1F016153D9754AE27D17C1B52A41BE8D22929538970F678CBED052265506FD70560DF5A80E59CD712731A10BB99A4609345957633AC247F3E8FB9F6013E0BC
Malicious:	false
Reputation:	low
Preview:	function hex_sha1(e){return binb2hex(core_sha1(str2binb(e),e.lengthchrsz))}function b64_sha1(e){return binb2b64(core_sha1(str2binb(e),e.lengthchrsz))}function str_sha1(e){return binb2str(core_sha1(str2binb(e),e.length*chrsz))}function hex_hmac_sha1(e,t){return binb2hex(core_hmac_sha1(e,t))}function b64_hmac_sha1(e,t){return binb2b64(core_hmac_sha1(e,t))}function str_hmac_sha1(e,t){return binb2str(core_hmac_sha1(e,t))}function sha1_vm_test(){return"a9993e364706816aba3e25717850c26c9cd0d89d"==hex_sha1("abc")}function core_sha1(e,t){e[t>>5]\|=128<<24-t%32,e[(t+64>>9<<4)+15]=t;for(var n=Array(80),r=1732584193,i=-271733879,o=-1732584194,a=271733878,s=-1009589776,u=0;u<e.length;u+=16){for(var c=r,l=i,d=o,f=a,h=s,p=0;80>p;p++){16>p?n[p]=e[u+p]:n[p]=rol(n[p-3]^n[p-8]^n[p-14]^n[p-16],1);var m=safe_add(safe_add(rol(r,5),sha1_ft(p,i,o,a)),safe_add(safe_add(s,n[p]),sha1_kt(p)));s=a,a=o,o=rol(i,30),i=r,r=m}r=safe_add(r,c),i=safe_add(i,l),o=safe_add(o,d),a=safe_add(a,f),s=safe_add(s,h)}return Array(

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 13 tables, 1st "GDEF", 20 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	248132
Entropy (8bit):	5.559839726947361
Encrypted:	false
SSDEEP:	6144:faqOW3zZ/mESa3nrzUyiGpxYE5AESOTa/gRrsufkHm:faqOYwEl3tkHm
MD5:	47DBE5824A2D82B794EF1F52809699A5
SHA1:	48D6928E08BA5E2CA1E15D754C146580B1C8FEBD
SHA-256:	E0ACACED3F5686390C4C2ED8D3B447C725660252D1A20A71FDAB5110A435C463
SHA-512:	57407DAC8EAC548BD397E9BE11F550F1C261A4F5C6B308AD64A623C480484F2617E8C8BA8B8ADF9DF2CD12D2B00ED56FC09C1AE4FDD648E4EA7A3B8657CC6EBB
Malicious:	false
Reputation:	low
URL:	https://consent.trustarc.com/get?name=SourceSansPro-Regular.ttf
Preview:	...........PGDEF............GPOS.x`......QhGSUB..k...p...H\|OS/2].....X...`cmap.x.\..<$..4.glyf.X....UD..t.head....... ...6hhea...v.......$hmtx.4.....T....loca.fW0.......jmaxp........... name..UM........post.}...T..J............f.................................:.:.o..........................3.X._.<..........].......f/6.:...o...........................X...K...X...^.2.#............`...............ADBO.@. ............ .............. .......j...........9.^...\|.........................................................................................5...K.L...M.M...N.N...n.o...p.p...z.z...{.{.................................................................................).)...>.?...@.@...G.G...J.J...Y.Z...\.\...c.c...i.i...........................................................$...%.%...(.).......6.6...8.9...O.P...R.R...W.W...[.[...e.g...h.h...l.l...n.n...p.p...v.v...x.x...{.{..............................................................................................................

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45588), with no line terminators
Category:	dropped
Size (bytes):	45588
Entropy (8bit):	5.161898024143399
Encrypted:	false
SSDEEP:	768:1a6RbVxFkIgS6Hs1OWZN3je7C5jYKQyN3kfYeVIL59OuTyqpQ0Ofe2+7K/WwmO:tRHreMTyh0Ofe28KewmO
MD5:	83A66FDF76DC0B301EB7E7AE1E6E0FF8
SHA1:	94BE9EFA81E46B1833C7A385EEFE7431AE7F0D73
SHA-256:	EC1872C62C3223CCCB979E149AE435D94AD7F63CEBABB32DBAE163DC45863827
SHA-512:	3A3E69EB311F28091FFD948491298A27F9467798A99C99694CD62B0CE52EFA272F16703F64BC899FF3F931EBC7E88FBB9C51A14446EBC6702EBAD3C69CC7A663
Malicious:	false
Reputation:	low
Preview:	var jsonObj='{"mapping":[{"URL":"forrester.com","SC":" analyst","LS":"forrester"},{"URL":"forrester.co.uk","SC":" analyst","LS":"forrester"},{"URL":"teknowlogy.com","SC":" analyst","LS":"teknowlogy"},{"URL":"nelson-hall.com","SC":" analyst","LS":"nelson-hall"},{"URL":"everestgrp.com","SC":" analyst","LS":"everestgrp"},{"URL":"hfsresearch.com","SC":" analyst","LS":"hfsresearch"},{"URL":"cognilytica.com","SC":" analyst","LS":"cognilytica"},{"URL":"stlpartners.com","SC":" analyst","LS":"stlpartners"},{"URL":"globaldata.com","SC":" analyst","LS":"globaldata"},{"URL":"ccsinsight.com","SC":" analyst","LS":"ccsinsight"},{"URL":"barc.de","SC":" analyst","LS":"barc"},{"URL":"omdia.tech.informa.com","SC":" analyst","LS":"omdia"},{"URL":"dmgconsult.com","SC":" analyst","LS":"dmgconsult"},{"URL":"novarica.com","SC":" analyst","LS":"novarica"},{"URL":"arete.net","SC":" analyst","LS":"arete"},{"URL":"aragonresearch.com","SC":" analyst","LS":"aragonresearch"},{"URL":"info-source.com","SC":" analyst",

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	downloaded
Size (bytes):	177247
Entropy (8bit):	5.437233002434605
Encrypted:	false
SSDEEP:	3072:Rergya5g02uB0HkyOjb4Z3tzlBpWyFPSY:E8y/+jb4NdSY
MD5:	51D08F3067ACA89163B8237038C47140
SHA1:	3A8DBF9F4F5D75540BA334DE8BC13FD93A618E40
SHA-256:	82600AE2CEDFF0FDC42CEF12D82B456C9027DD9C393B861C91BC6D3CC8F4D5C6
SHA-512:	B2A562CCAB1D72352216CE260632CB40A2D7D7ED7B345C6F9B681496FCD02C65E21611234C000A69CC696E709F4B42E5011DAF65C66C3083782CBFDB24F58A89
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/auth-component/uv-auth/p-8c5cd27e.js
Preview:	import{c as t,e as r,g as n,f as e,i,h as o,j as a,k as u,o as f,l as c,m as s,n as v,q as h,r as l,t as d,u as g,v as p,x as y,y as b,z as m,A as w,B as S,C as E,D as O}from"./p-3e73ccf5.js";var A,R,I=function(t){return t&&t.Math==Math&&t},M=I("object"==typeof globalThis&&globalThis)\|\|I("object"==typeof window&&window)\|\|I("object"==typeof self&&self)\|\|I("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),j=function(t){try{return!!t()}catch(r){return!0}},k=!j((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),T=!j((function(){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")})),N=Function.prototype.call,x=T?N.bind(N):function(){return N.apply(N,arguments)},D={}.propertyIsEnumerable,_=Object.getOwnPropertyDescriptor,P=_&&!D.call({1:2},1)?function(t){var r=_(this,t);return!!r&&r.enumerable}:D,F={f:P},C=function(t,r){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:r}},L=Function.p

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	311
Entropy (8bit):	4.990108380365325
Encrypted:	false
SSDEEP:	6:tnrsnlaAumc4sldMXljiq9/diqVQ6mqZllNJ9/diqVQ6mqZllWYsC6/:trI8AuCdiqJVQ6hllLJVQ6hllL6/
MD5:	8DEC37F5247DD11A180E81A33BD62F10
SHA1:	A39C0AD6CE9DB18763C09AC8F66B71C935EF21C9
SHA-256:	00BBC7C1CD5DB9DA26FDD6FA5668D7D6334B5025ED2616B85A13C1616DFA1028
SHA-512:	67AED88A99B94EE9D2B98F627190F04491FC3E42EC4F5ED6B696264E34951BF447CAEBCFF82E542F20A7136D722A2E228D43455DC23C4BDAA981454047B8FAAB
Malicious:	false
Reputation:	low
Preview:	<svg width="19" height="20" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="8" cy="8" r="7.25" stroke="#000239" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/><path stroke="#000239" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" d="M13.061 14L18 18.939"/></svg>

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45588), with no line terminators
Category:	downloaded
Size (bytes):	45588
Entropy (8bit):	5.161898024143399
Encrypted:	false
SSDEEP:	768:1a6RbVxFkIgS6Hs1OWZN3je7C5jYKQyN3kfYeVIL59OuTyqpQ0Ofe2+7K/WwmO:tRHreMTyh0Ofe28KewmO
MD5:	83A66FDF76DC0B301EB7E7AE1E6E0FF8
SHA1:	94BE9EFA81E46B1833C7A385EEFE7431AE7F0D73
SHA-256:	EC1872C62C3223CCCB979E149AE435D94AD7F63CEBABB32DBAE163DC45863827
SHA-512:	3A3E69EB311F28091FFD948491298A27F9467798A99C99694CD62B0CE52EFA272F16703F64BC899FF3F931EBC7E88FBB9C51A14446EBC6702EBAD3C69CC7A663
Malicious:	false
Reputation:	low
URL:	https://info.trustarc.com/rs/846-LLZ-652/images/rwtsmin_minified.js
Preview:	var jsonObj='{"mapping":[{"URL":"forrester.com","SC":" analyst","LS":"forrester"},{"URL":"forrester.co.uk","SC":" analyst","LS":"forrester"},{"URL":"teknowlogy.com","SC":" analyst","LS":"teknowlogy"},{"URL":"nelson-hall.com","SC":" analyst","LS":"nelson-hall"},{"URL":"everestgrp.com","SC":" analyst","LS":"everestgrp"},{"URL":"hfsresearch.com","SC":" analyst","LS":"hfsresearch"},{"URL":"cognilytica.com","SC":" analyst","LS":"cognilytica"},{"URL":"stlpartners.com","SC":" analyst","LS":"stlpartners"},{"URL":"globaldata.com","SC":" analyst","LS":"globaldata"},{"URL":"ccsinsight.com","SC":" analyst","LS":"ccsinsight"},{"URL":"barc.de","SC":" analyst","LS":"barc"},{"URL":"omdia.tech.informa.com","SC":" analyst","LS":"omdia"},{"URL":"dmgconsult.com","SC":" analyst","LS":"dmgconsult"},{"URL":"novarica.com","SC":" analyst","LS":"novarica"},{"URL":"arete.net","SC":" analyst","LS":"arete"},{"URL":"aragonresearch.com","SC":" analyst","LS":"aragonresearch"},{"URL":"info-source.com","SC":" analyst",

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.111805827624859
Encrypted:	false
SSDEEP:	3:Od6iyPAD+XsCAcV/mtXuCGSEL8RCszKYo0+fZLsJGN:a6iofjAcONGIksmpZYJ4
MD5:	DF75419A48ABDE17A6A9AC8A2250AD32
SHA1:	2CF591083969F8D5F1BCB7BD0A8EDF3F809EFA72
SHA-256:	7EB6D38BC6FBCF3BB002E131C95732F625DD174792523810E4729FB1481DE7AD
SHA-512:	3F64F65505C7E76AC31B15A986B9A813C2B490F379E03F99CCB169766E0B4E461862A2CC95D0C5697B03E3C1BCA78AC8A8C8342CB4D83E9F2B018666E60A349D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISVgmziR6QBVi1OBIFDQ5LEYESBQ0OxDZTEgUNXR6pChIFDbfSJVoSBQ09LLzYEgUNh4wlUBIFDUTRJ8wSBQ29R-2HEgUNeG8SGRIFDZRU-s8SBQ1IlcCc?alt=proto
Preview:	Cm8KBw0OSxGBGgAKBw0OxDZTGgAKCw1dHqkKGgQIJBgBCgcNt9IlWhoACgcNPSy82BoACgcNh4wlUBoACgcNRNEnzBoACgcNvUfthxoACgsNeG8SGRoECAkYAQoLDZRU+s8aBAgHGAEKBw1IlcCcGgA=

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3095), with no line terminators
Category:	dropped
Size (bytes):	3095
Entropy (8bit):	5.219910230514957
Encrypted:	false
SSDEEP:	48:uTfT/E7jmkuANVEyCt2xglSnbZ/6OrEXN:u//+7KyLl/6qyN
MD5:	A6D46560DF992895F59A39934F1155FE
SHA1:	7B473F65030B9441FE3FFB7BE0B138680E777737
SHA-256:	B04462C064EE4B8306A5441EC26193CFE09A2D4390DD2CF39BF79C51FF59E09B
SHA-512:	C2F7B9E9BFCD26CB0C33B2FEC60C20420A9621DA5028B0D0345E9A53092C3E6B098C8AFAE7838C01A08F4EB31572D37A98E6FF341D15255B0208E192741E2C8D
Malicious:	false
Reputation:	low
Preview:	self.__BUILD_MANIFEST=function(e,s,c,a,t,i,n,d,r,p,u,f,o,k){return{__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":[e,s,c,a,p,i,u,f,k,"static/chunks/pages/index-b2f2c50861057bc0.js"],"/PaymentBlocked":[e,s,"static/chunks/pages/PaymentBlocked-e462043e1659035f.js"],"/_error":["static/chunks/pages/_error-68f95168e6ffc81e.js"],"/billingAgreement":["static/chunks/pages/billingAgreement-3f39fa3b249bb905.js"],"/depositAccepted":[e,s,c,a,t,"static/chunks/pages/depositAccepted-1134b3e0a3b7f880.js"],"/depositDeclined":[e,s,c,a,t,"static/chunks/pages/depositDeclined-af78020dbf5a77a7.js"],"/depositPending":[e,n,d,s,c,a,t,i,r,"static/chunks/pages/depositPending-cf2b235e7d5497a8.js"],"/error410":[e,s,"static/chunks/pages/error410-7741d19a3075877e.js"],"/error412":[e,s,"static/chunks/pages/error412-476ae41243d19d1c.js"],"/error500":[e,s,"static/chunks/pages/error500-7fa050389a2de8c1.js"],"/errorTokenExpired":[e,s,"static/chunks/pages/errorTokenExpired-e5651ab6b79cfe71.js"],"/estimateAccepte

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24171)
Category:	dropped
Size (bytes):	24221
Entropy (8bit):	5.4158952934428095
Encrypted:	false
SSDEEP:	192:/RdTprtIZ5znG03whUXUJg000RO0hU0zs0ztOD0Eh20EpB2Zxa2bgDPKNQQ4K4/w:/vNCZ5znGxDaQZw3m/zhznpTtVASFfne
MD5:	D80243304AA96AA47F087C7B6FD7D648
SHA1:	404E2DE8D39915D5D166F39BECEB47ECD8521AD0
SHA-256:	0258BD9FE24727CE873C849CE4E63473EF3B5E9E72C47D553DB1E57E43A19CBB
SHA-512:	21E9D9ECF2151D7193DAF087BFE7112DD35897B72CD05C90E15C154D250A0D74EBCB58575948ABD7B4EF4A24300977CB0D0E58A49FD6798E7E8D123497DD5BCB
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8804],{86553:function(s,e,i){i.d(e,{Z:function(){return b}});var a=i(59499),l=i(95627),t=i.n(l),r=i(67294),o=i(44012),n=i(54490),c=i(51459),u=i(85893);var x=s=>{let{color:e="#6B6C72",width:i=24,height:a=24,className:l=""}=s;return(0,u.jsxs)("svg",{xmlns:"http://www.w3.org/2000/svg",width:i,height:a,className:l,viewBox:"0 0 24 24",fill:"none",children:[(0,u.jsx)("path",{d:"M17 4H15.816C15.6099 3.41709 15.2288 2.91209 14.7247 2.55409C14.2206 2.19608 13.6183 2.00256 13 2H11C10.3817 2.00256 9.77937 2.19608 9.2753 2.55409C8.77123 2.91209 8.39008 3.41709 8.184 4H7C6.20435 4 5.44129 4.31607 4.87868 4.87868C4.31607 5.44129 4 6.20435 4 7V19C4 19.7956 4.31607 20.5587 4.87868 21.1213C5.44129 21.6839 6.20435 22 7 22H17C17.7956 22 18.5587 21.6839 19.1213 21.1213C19.6839 20.5587 20 19.7956 20 19V7C20 6.20435 19.6839 5.44129 19.1213 4.87868C18.5587 4.31607 17.7956 4 17 4ZM11 4H13C13.2652 4 13.5196 4.10536 13.7071 4.29289C13.8946 4.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (53475)
Category:	downloaded
Size (bytes):	100473
Entropy (8bit):	5.298729234337115
Encrypted:	false
SSDEEP:	1536:QFSD07QK1KCx0RG+wpJ8G848AxCmJgRU8+4AFQerbxXG2X+:QFOwOVgJ8V48AvJgm8+4AFQerN22O
MD5:	0B8EE913490DCCCCAECEF3584294847E
SHA1:	54DE42DB583175848B7D24E6214007837F5E067C
SHA-256:	B2A01E1ACCC2C7127645D036596A652D368240BACBFB9EE99B72815FCD44ADBB
SHA-512:	9A7841671885D4E20874654F682FCD2EDABBE7D642E8D94992F414D966CF11EB4C8C93EB054D633FAA30683ACED7E39F2B1FE982A861B981CEBA82F591315F56
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/auth-component/uv-auth/p-3e73ccf5.js
Preview:	const t="uv-auth";let n,e,r,o=!1,i=!1,u=!1,s=!1;const a=t=>{const n=new URL(t,vt.t);return n.origin!==lt.location.origin?n.href:n.pathname},c="http://www.w3.org/1999/xlink",f={},l=t=>"object"==(t=typeof t)\|\|"function"===t;function d(t){var n,e,r;return null!==(r=null===(e=null===(n=t.head)\|\|void 0===n?void 0:n.querySelector('meta[name="csp-nonce"]'))\|\|void 0===e?void 0:e.getAttribute("content"))&&void 0!==r?r:void 0}const h=(t,n,...e)=>{let r=null,o=null,i=null,u=!1,s=!1;const a=[],c=n=>{for(let e=0;e<n.length;e++)r=n[e],Array.isArray(r)?c(r):null!=r&&"boolean"!=typeof r&&((u="function"!=typeof t&&!l(r))&&(r+=""),u&&s?a[a.length-1].o+=r:a.push(u?v(null,r):r),s=u)};if(c(e),n){n.key&&(o=n.key),n.name&&(i=n.name);{const t=n.className\|\|n.class;t&&(n.class="object"!=typeof t?t:Object.keys(t).filter((n=>t[n])).join(" "))}}if("function"==typeof t)return t(null===n?{}:n,a,b);const f=v(t,null);return f.i=n,a.length>0&&(f.u=a),f.l=o,f.h=i,f},v=(t,n)=>({v:0,p:t,o:n,m:null,u:null,i:null,l:null,h:n

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2234
Entropy (8bit):	4.502147087281308
Encrypted:	false
SSDEEP:	24:2d6Q4qWuXcQIme+IGEpdDebl/HXHm71HYjrXes5UFvNJd4mWkZq6PhcfcIDbu3xb:cFsDme+oxY13mJMrRKNbZHPAfu3qDA
MD5:	714ECAE101F812EBB9B4ECA807B8898D
SHA1:	9A2BE748D79E49B9FE0BD03439DA37778469FC2E
SHA-256:	95985F938AEB888BC77273149270C6CA8E7303F7F8A97B6F3879BEA801C3C7BD
SHA-512:	7CE3F7C229CDA14D17CD77944275279621A39A18080485AC78619D83ED315D12770F08B3E1262D7FF5D893B386D7EE7080AC54E3FCE4816C69150CCDE3F0D8BC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="180" height="36" fill="none">. <g clip-path="url(#clip0_943_2394)">. <path d="M177.595 26.909s-3.139 3.181-7.362 3.181c-4.761 0-7.804-3.621-7.804-7.827 0-4.206 2.994-7.732 7.607-7.732 3.926 0 6.528 2.694 6.528 2.694l2.749-4.258s-3.091-3.718-9.618-3.718c-8.294 0-13.593 5.97-13.593 13.062 0 7.091 5.299 13.062 13.593 13.062 6.724 0 10.305-4.062 10.305-4.062l-2.405-4.402zm-35.596 6.643l-.317 1.216s0 .012-.004.016h4.757v-9.876c0-.844.056-1.653.173-2.425a46.1 46.1 0 00-2.983 6.239 49.941 49.941 0 00-1.626 4.826" fill="#3699F1"></path>. <path d="M146.19 14.935V9.853h-5.981V27.35c.024-.044.04-.088.064-.132 1.694-3.258 3.701-6.379 6.267-9.064 1.268-1.345 2.705-2.557 4.295-3.534 1.357-.832 2.874-1.42 4.428-1.672V9.609s-.538-.1-1.128-.1c-3.826 0-6.817 1.857-7.945 5.426zM0 .053v5.43h11.433v29.301h6.331v-29.3h11.437V.052H0zm61.088 21.229c0 4.45-2.501 8.416-7.017 8.416-3.091 0-3.878-2.053-3.878-5.086V9.837h-

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15096, version 1.0
Category:	downloaded
Size (bytes):	15096
Entropy (8bit):	7.9868533869477645
Encrypted:	false
SSDEEP:	192:qehyTfz1bOuz7zTyBscFo7aBxYchbc+HmvnmrBcW5eH9w3ULth5DFEd3I8WXZY7M:Puz7qB18aBGIQtmqW5yu4tXBCed
MD5:	328B6CD9E53D6587FC68FBBCAF7F3FAC
SHA1:	4AB2BE99AB90626163A21F110FB0842F974EF78B
SHA-256:	F8D2F7002561DD005D24267B25EC481EEC6750D6C4F2BD803EA57E78DBA4B5D8
SHA-512:	7BC53B344AA12FA1D1CD16164E9629413E977F38EF59FDF80611A208940E99734E31996F45CCDBFD03FE42EABB7B66F8986FF294786D6AAC36E29974148A23E0
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/5cca6d/00000000000000000000e802/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i3&v=3
Preview:	wOF2......:...........:.........................?DYNA..?FFTM..$?GDYNy..p.`..\....s.....H..m..:..6.$..d. ..b..y....2\|..r............L ..W5""""""....BBwDL.NHI..9....tW........FF....^XY..;....t...._nn.......u......~...\...h..-=.....{.qK...!.. ..$..%1M&..P..[...(.x........BK.&..'..........{u.C.......[k.V...[{...n..h..FU.. ........D..].k.+b...d..5.t.A..=.......+p.....C. .6FDE....oQ8.H....;...o.H.UQ5M..,...4.^tw..."V.nC-tB..%..^......... .7....#%HT.7.P(..<.........}..../`D.Mc..L)..)....B.$..y......uJ...@......~n....\ ^.\|R....u..-Z....m......v.7QD.1t2.....T7=R0...V!%..........).t..........C..RBz...h\...&.C.R.4.7...p.......8.NKG...Y`.....w..f.Y...8...H.L.b.........q:...41=B..!A...tJP.[.....7H!/=tN..'...9)yf.J.....QH.Xg.n{p._V.C....dL\...M...uQ7F..+q4...vq..ec.VZu.l..Q.6H..p..t.....Pzz.8...m.L..KR.y...t.....&..D<..&...#...q`.R..?.h.BS.. L..6!T..N...p.#.........{...LL.......%..!_v...\|I3.o......_Z(..8...P$E1.U<...G......q.f... $a..0:Q.m.uk.....{".7.Zy?)!M.

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-GC23DHTMEC&gacid=1116691183.1726075565&gtm=45je4990v876577859z8864344206za200zb864344206&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=0&z=523045096
Preview:	<html></html>

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2674)
Category:	dropped
Size (bytes):	2724
Entropy (8bit):	5.172874033187636
Encrypted:	false
SSDEEP:	48:ibTOrshzJrNl2dfn3Dh+uSvLCnhdZfEQOjBlGhdZfEmZR+qRCLimLHIWZUK5rfnH:AXrWx3Dh+xoEbBlgEmr+qR7koWT2i2Bo
MD5:	7B6EFEEC50738ADAF197572116B3D96A
SHA1:	9E74F3C863B31BBDB91EDD9AA29BC078102E2171
SHA-256:	A749DD45CA68B2C22C301F48A813C1299FE9503B3FD98415C3B3C9EED275C55B
SHA-512:	D5001ECE76B23B00F0D29868FE034D13EB241177C777C8CD40FE8E2E9441EEE07F69C7747C0AA9CC35087B974CAB99F52DD9AD028AD6AB8FF6F990C040C84761
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2378],{52378:function(e,t,o){o.r(t);o(67294);var r=o(85893);t.default=e=>{let{width:t=40,height:o=24}=e;return(0,r.jsxs)("svg",{width:t,height:o,viewBox:"0 0 37 32",fill:"none",xmlns:"http://www.w3.org/2000/svg",children:[(0,r.jsx)("path",{d:"M2.15131 24.8948C1.68233 24.9213 1.28019 24.5676 1.25 24.1028V1.97023C1.28019 1.50435 1.68125 1.1507 2.15131 1.17718H34.508C34.9759 1.1507 35.3791 1.50541 35.4082 1.96918V23.9927C35.3759 24.5348 34.908 24.9478 34.3625 24.916L2.15131 24.8948Z",fill:"white",stroke:"#008481",strokeWidth:"1.556",strokeLinecap:"round",strokeLinejoin:"round"}),(0,r.jsx)("g",{children:(0,r.jsx)("path",{d:"M33.9141 2.87109V23.2005H13.4189L33.9141 2.87109Z",fill:"#D9F6F6"})}),(0,r.jsx)("path",{d:"M5.51953 5.37012H31.1379V9.14376H5.51953V5.37012Z",fill:"#00C1BF"}),(0,r.jsx)("path",{d:"M12.2448 17.5086C12.2448 18.7623 11.2206 19.7788 9.95593 19.7788L8.17595 19.694C7.33393 19.73 6.53936 19.3055 6.10811 18.5

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35228, version 2.19660
Category:	downloaded
Size (bytes):	35228
Entropy (8bit):	7.995183642239223
Encrypted:	true
SSDEEP:	768:yDgSpSDLuESkBB/e/Y/OzfNt++ZdvZpzdPgVkswbXPP0KI30lt:yDyLuExX2/YwVtlzvZ3sX3a
MD5:	0ACD962351F0B06E9A1F472E692ED680
SHA1:	AA8E984BDB4490B0344845A9A0B5B4DC4B72018C
SHA-256:	5291CBB4481ACB60681D554CDD9E736912DF36C26264961EBDD003B67A65E1DE
SHA-512:	908AF480952117311ED9836BD6554D9E095EA9FDCADC5183AEF0048E515486AC1B3B81FBB3FEC51E0F30042F2401F291235AF439F4F8814C10D3C05F49FEA13C
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2
Preview:	wOF2...................8..L.............................`..`.....d..P...\..\|.6.$..(..,.. ..3. ../[.qq@..W...h[.......(x....z.....32../?....q.1.T..Q...5.....>k....;f}..;.K.7(..._.......Y..P.O....(.R....U..&>.w..@......!..MW...u>5..lJi................Q.../>......=...R.!........6.l`......^....bLZ....z..?.......B...V.j@S(.l...vDW.3._LtT2@7.n.g..~.......~m>..k.2.E$.q..ia$:..BW6........Y............s.$.-..?SQ.[@..y\|....%S...)._n.H&&<B:...._.....T8...j.q`,.<..mY.ZG'>.O.0..a.iT.t..%.....> ..g wW.......h..H$.%D,mB7m..Y.e....X...V...[I.3...4.../+e....iKWv.X.l.k~Xa.]m.D..vF>.@..T....T@.p........."..~....}?. ..4+zM.UEL&.4... @.O....{M0.*I...2.L..9.m(W..d6........\|.{;..&..f.f.2.:.\..N.'.\.pq.D....JR...L...^...D..UD.d..{.o{f.}!.r@b..{6;....14f.......Q.g...6..K..N.;...,`.KO.$.Ia..@....l.~U......[.,.YH._.l..".d...bp..DI........Q...}..Fh..Y.N..Js_"4^._...AN.=.h.F...0..(..fYj..(...%.RvHQR.~U.^.T.P..z..Y...jI>..1......4u.xU@.5..dY.......u....w....n.[.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7546
Entropy (8bit):	7.954394093271657
Encrypted:	false
SSDEEP:	192:oV0Z2rHAXPwoFNNMQULEsFA8mlo6qjE5oDDhNbwz:oViwgf5FNNMF2hlo6EE5oDDvbwz
MD5:	93024B553283250136C0D4638DBF3D5F
SHA1:	732D8972BF63508EA85617FF980E11D362198FF6
SHA-256:	02DF7A9953158C7379CC1405B4737E02F33D1A08BD6ECFF823EB1A60E231174B
SHA-512:	7F6AB18269EA44C6AA5F563A098BB7FABBF0E98CDC6EDB99E3D1EC6E69907280E265D7A8392F95E2C96F3282337E68B5031235AE3325E7434D7E8CDB0F5D3D5A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sRGB.........gAMA......a....$IDATx...STe.../..ve..M.qw......x.(.........y.+/.)V...A.A.....fr.j.k0.$S...R.A.s..{.2...f..Y.s...<.s.sF..W...+..+.....y.::..D?YcIC.......-.t.Lr.Gh.p.}...(..J5..i..3{..yQ9..H...A.#0...."..'.-.F."~..h..6..I......A.\|.}.\..n.4..-...[.....p...p.1\..F.-.W.. ..4Z.\|ZR.#=e..-..Q.r......O...{...B.0W.ad.r7K..\\|........z..hQ.5..'....T..........'.=.a.ZSF.zG...4.....n..Z.....~..s......`..V.u.jl...N....q$.4>h.l...9.d..Z.......IM.....xV...n`.R..-e[r...K...b.5.>.:9....6.....;.....~..WtJ.aA.d...R.3.._.0...x;........zX......7......>H)...../(a.....u.....~J.?..5......4.;........j..Z...j...e7.9o..M..?.+....M..;.3Q...d6X.k..N\.8b.....{.....AK..........c..../.Cw.oRI.)&.......g...3.~..F.}.....&.!.{t...C..]...t&.............m..>..-.Y.....U./h.CM._...b.......L.-iF..%0<...,o.....^..?<.....YO.v.R.O...=.PC.. .!h....-...ni.B....R..4h*...Y`...m.Zf..@.......I.m......!........Lz.w...t..G.<....4,.5z..

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	253985
Entropy (8bit):	5.2642154109350585
Encrypted:	false
SSDEEP:	3072:XYngEndJUGpmJXsUaWlJlWZCeQ9t9iUOAg:IgE5pmJX3acJOOjiUk
MD5:	1E5DAEAF41220CEFF890F155747E27B6
SHA1:	CBFB4D799A226B4E2B4B5C6DBE8C5B35CC123F6A
SHA-256:	26656EAFDB8AC0733FA401486099059BBDACFB9EF575CFE23D51A93614BA75C4
SHA-512:	7C5B6E00DE1221B8F140CFB4ED7C0E05A8F3385620A4FFA3D2D362DC9935B7E90C433FF72C094ADFCB6F3F0F3E3AEC949000AE64AB4BD2D6B064578FA0E7256D
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5439-f4c5699a82de3c8e.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5439],{24652:function(e,t,n){"use strict";e.exports={number:n(3799),expirationDate:n(64203),expirationMonth:n(40786),expirationYear:n(73786),cvv:n(606),postalCode:n(66937),creditCardType:n(11038)}},3799:function(e,t,n){"use strict";var r=n(18793),o=n(11038);function a(e,t,n){return{card:e,isPotentiallyValid:t,isValid:n}}e.exports=function(e,t){var n,i,u,c,s;if(t=t\|\|{},"number"===typeof e&&(e=String(e)),"string"!==typeof e)return a(null,!1,!1);if(e=e.replace(/\-\|\s/g,""),!/^\d*$/.test(e))return a(null,!1,!1);if(0===(n=o(e)).length)return a(null,!1,!1);if(1!==n.length)return a(null,!0,!1);if(i=n[0],t.maxLength&&e.length>t.maxLength)return a(i,!1,!1);for(u=i.type===o.types.UNIONPAY&&!0!==t.luhnValidateUnionPay\|\|r(e),s=Math.max.apply(null,i.lengths),t.maxLength&&(s=Math.min(t.maxLength,s)),c=0;c<i.lengths.length;c++)if(i.lengths[c]===e.length)return a(i,e.length<s\|\|u,u);return a(i,e.length<s,!1)}},606:function(e){"use strict";functio

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	623
Entropy (8bit):	4.718934622168899
Encrypted:	false
SSDEEP:	12:TMHd6FfmiqfZvGsdQlMsY1YOGCTN5MPlWnyyKqtGRFvTdIXYN+pWC/K7w0J:2d69mles7njcdWnbKXfvT6TQrJ
MD5:	5F749E09E48B95F21A66D8A439C32679
SHA1:	8DBAD90E056A4595762C1E692162A546B0A57794
SHA-256:	60F4AF8C3780B7E156346FA19438CC3E28AD022E9FF46F4359F3DE07372CA914
SHA-512:	F371C8340E16DA868EED6EF8DEC93DF1C36278296F276C2101F76A3C1903EE1A5CF9DE350695AF4C17A0FE25061972088E0064A92F709A365DABEA9551987EB6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="22" height="23" fill="none">. <path d="M20.313.426H1.558A1.57 1.57 0 000 2.003v18.72c0 .87.698 1.578 1.558 1.578h18.755c.859 0 1.562-.708 1.562-1.578V2.003c0-.87-.703-1.577-1.563-1.577zM6.61 19.176H3.37V8.736h3.247v10.44h-.005zM4.991 7.31a1.88 1.88 0 010-3.76c1.034 0 1.88.845 1.88 1.88 0 1.04-.84 1.88-1.88 1.88zm13.774 11.866h-3.242v-5.079c0-1.21-.025-2.768-1.685-2.768-1.69 0-1.948 1.318-1.948 2.68v5.166H8.647V8.736h3.11v1.426h.045c.434-.82 1.494-1.685 3.071-1.685 3.281 0 3.892 2.163 3.892 4.976v5.723z" fill="#fff"></path>.</svg>.

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=3435538&time=1726075559076&url=https%3A%2F%2Ftrustarc.com%2Fconsumer-information%2Fprivacy-feedback-button%2F&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	112
Entropy (8bit):	5.00225679393774
Encrypted:	false
SSDEEP:	3:9xgrCcth7F1BBOk21R/rf24c1h0IvCGzbYn:LWh7zrK24c1h097
MD5:	D269557A4FBB3199F4F1F313F811F058
SHA1:	287C30AA093788B5A99404B65A73C91AA23EF8A3
SHA-256:	463E44A911BE2ABA2E7E6CD20045CD9A718034212A0BEC6A82DB20F14535FDB0
SHA-512:	0D3237EA96FF49E9E7FCCA440CF44FF3EE056E274978ADA9B3A85836C9E7A166695888207F6B17144B3E4FB2CC0E19EE5D3CB767072BAF8850300126E02C971B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwlHAjYaN0BOnRIFDbYmeQQSBQ1t-mbJEgUNPV8RqRIFDZRU-s8SBQ29hYMPEgUNoDimZQ==?alt=proto
Preview:	ClAKCw22JnkEGgQINBgBCgsNbfpmyRoECDgYAQoNDT1fEakaBgg7EAEYAwoLDZRU+s8aBAgzGAEKCw29hYMPGgQIJBgBCgsNoDimZRoECCMYAQ==

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	4.990108380365325
Encrypted:	false
SSDEEP:	6:tnrsnlaAumc4sldMXljiq9/diqVQ6mqZllNJ9/diqVQ6mqZllWYsC6/:trI8AuCdiqJVQ6hllLJVQ6hllL6/
MD5:	8DEC37F5247DD11A180E81A33BD62F10
SHA1:	A39C0AD6CE9DB18763C09AC8F66B71C935EF21C9
SHA-256:	00BBC7C1CD5DB9DA26FDD6FA5668D7D6334B5025ED2616B85A13C1616DFA1028
SHA-512:	67AED88A99B94EE9D2B98F627190F04491FC3E42EC4F5ED6B696264E34951BF447CAEBCFF82E542F20A7136D722A2E228D43455DC23C4BDAA981454047B8FAAB
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/themes/trustarc/assets/dist/images/icon-search.svg
Preview:	<svg width="19" height="20" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="8" cy="8" r="7.25" stroke="#000239" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/><path stroke="#000239" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" d="M13.061 14L18 18.939"/></svg>

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	117306
Entropy (8bit):	5.102674229766923
Encrypted:	false
SSDEEP:	768:byzGxw/jyBQWlJxtQDINHHlgmqITm8qAdwFKbv2ctBDI35UPyu8psYvS1Fd:/w/GLiINHHlgmC8p5b5ZPUpG
MD5:	602DB3CD420F79CA13590A4AC2A555C3
SHA1:	06B388FAEB8DAEF91F26CB81F1A84D60F2C8BB9A
SHA-256:	98B12D3932A2CCAD06AEFB66A29ADB9D16D9A061C10A7D20926A6F07B1595CF2
SHA-512:	17169FD6D58E9D5AFFC8E1100C9C6863753D7F7E876E004F0F69827C761747DC88ACA97FF4ECC07F3024E9631E169FD66BC6B5C3BB3D36C0F9BEA89306A53DDB
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.4 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.2 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webki

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	dropped
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32025)
Category:	dropped
Size (bytes):	35956
Entropy (8bit):	5.180496710005102
Encrypted:	false
SSDEEP:	768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1R6:oe78+S1KlvlK3Zr6
MD5:	2A31A1B1310822663D1CC537A9B4B147
SHA1:	0FD95C3CDDDA1A87D8CC075576A898538A8A70FA
SHA-256:	117CB25D98E6E239E6C1CB243357C7CE44469FD399921BF4D25130503AC60072
SHA-512:	2A81D9528C3D6B946649209B676F1E545E6E12B460D71A5FDC39BE259AF7FF01DF0D11615D3DBDF95569ACCBEDCC3CA91B1A62972D159582F32E37BA90C9E7E0
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v3.3.4 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	178
Entropy (8bit):	5.025257364822932
Encrypted:	false
SSDEEP:	3:yionv//thPlVbtr/dyxNk5A6IWXMzLCn1cn1cn1cn1cn1cn1cn1cn1cn1cn1cn1e:6v/lhPyk5IkgLCCCCCCCCCCCCowp
MD5:	8692E6EFDDF882ACBFF144C38EA7DFDF
SHA1:	A9BB131C4ACFF0D07FA7B7F21BEF05179C28D13B
SHA-256:	39AB7CCD9F4E82579DA78A9241265DF288D8EB65DBBD7CF48AED2D0129887DF5
SHA-512:	9B895122B4E33060548380E9B5FB866BB3A26E8F1B8F75AD936DAC8A25D7FA0B1AD117F168A50D1F1825FC8F345170DB948C64BFB17B8D5337DF05917B9E62AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...d......drz...yIDATh...1.. ...R.....7..(.........V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V.j...)2.N....IEND.B`.

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	5.020074367121572
Encrypted:	false
SSDEEP:	3:tRBRNq6FNpO+hHSK7SLvDmJS4RKb5KVErcHnEYqqUlaOA9gUnAA8cVKOAmYHZAA9:tnrLhyKumc4slmnE2n9Rl/qmqZll7
MD5:	578D18E5A9906E024FE6A55DDB94219D
SHA1:	40EF2E5CCCBE27E55B19564C2C9293015BD7AB7A
SHA-256:	B78B603D9BAB0B368B22F1627F6F36A36BCD14447E82B05AF61018617F78E113
SHA-512:	3211AECEE11389C438DE48FA54BBBF998A63DFAA80CE9B1C4AE61F2913AB67725001FC136C06B4F6E0B121C7C1659D298B28FE44E0CD22B669D9F85865DC47B2
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/themes/trustarc/assets/dist/images/icon-arrow.svg
Preview:	<svg width="14" height="24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1.871 22.129L12 12 1.871 1.871" stroke="#E11A77" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/></svg>

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 47 x 50
Category:	downloaded
Size (bytes):	1555
Entropy (8bit):	7.437195246839826
Encrypted:	false
SSDEEP:	48:0qJKCWtqTNvHoK9KKBBD2AGoO+kwF4qQNbd:ZACGzK9KyD2noObw4q4
MD5:	5FEFA8F526E2AE1F6CB58E7A3600F49B
SHA1:	5A4437CF4AA5C15CA3311A23604956F90161A638
SHA-256:	2822D3A1B9E41D608DB999C4E00D8289995E6187AE54775F1CA1EDFEFEEFC394
SHA-512:	C69A504809936BD7F79E207F4F6D4BF59159DF973BF9F8FD10B4E18ED7358624646D2E768775EA3C3F172D13A1E14F41083322659354825D10AC89EB139183C8
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/css/images/logo-truste.gif
Preview:	GIF89a/.2..........!..$!!)&&-*1..522866=;;A>>DBBHFFLJJQNNTRRYWW[YY`^^dbbhggmkkpoouttyww}{{.....=..C..F..F..J..P..U..[..d..k..s..x..{..\|............................................................................................................................................................................................................................................................!.......,..../.2.....^.........UIF..TN.FT.TG.^UFM]^T88M^..FZ.7.....++..../Z4.4.8..U5..........B.B......,.......B/./.5..I.............BM77..\U..4...1^.X. .o^j..0d...T.0..E...Vn%.0`.(B......&6...a....L&.8.AE.AFhr9......T..R...... .I....B..$.3..F...%..-.=....H...D........,.r.QK.$Un((p...].".P!.......C...Z....A...I.4..t...].(H.#F.#..X0PC...2.$awCK....L.B.....R.2.`......0..o.&E.O1....)...A..E&5f...E......@?....A...O.~.....?...A9p.....h`.........A.Y.R...Vh..f..$D(...V.A.$f.. .......j.".3.a...x. '.h!.-...^...B...!.F*..."...&....B.."......Yp!..\d!E.%\|..#.h..?....p.D...H.+R...W..E.

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9198)
Category:	dropped
Size (bytes):	9270
Entropy (8bit):	5.141086013932976
Encrypted:	false
SSDEEP:	96:jJGAA61T1136GAzxXIzCzXEnMKHTo3Be+ODYTpU9WjfGgCnF8BpXzphl0sLmU:A61D3VAVXIOonMz0+OyjulaHLL
MD5:	00E9C65CBBA11C07C4BF4A6E2727B8EA
SHA1:	AC1A5D9B6FFCDE916A82169CD74C9A734BDF4A39
SHA-256:	129151ED0140041B198CE3B364A11861A3B5BAA5BB60475EBF7BEDB9B0FC94D6
SHA-512:	6C142FA3DE8B0452530D3E0DA7AF3B2CFCA2F0292282E07FF3AEF71426E791B650A8EDE02B5626B7ECF177B45B86630DACDDE9F9480B639E01C7B9D994535D2B
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t.__default)\|\|void 0===i?void 0:i.enabled)\|\|void 0===e\|\|e}i.d(n,{n:function(){return e}})},3162:function(t,n,i){i.r(n),i.d(n,{LegacyDestination:function(){return G},ajsDestinations:function(){return S}});var e=i(5163),r=i(4122),o=i(94),s=i(8404),a=i(1494),u=i(204),c=i(6096),l=i(9254),d=i(5944),h=i(8044),v=i(3098),f=i(3061),p=i(6338),m=i(7566),g=i(7070);function y(t){return t.toLowerCase().replace(".","").replace(/\s+/g,"-")}function w(t,n){return void 0===n&&(n=!1),n?btoa(t).replace(/=/g,""):void 0}function b(t,n,i,r){return(0,e.mG)(this,void 0,Promise,(function(){var o,s,a,u,c,l;return(0,e.Jh)(this,(function(d){switch(d.label){case 0:o=y(n),s=w(o,r),a=(0,m.Kg)(),u="".concat(a,"/integrations/").concat(null!=s?s:o,"/").concat(i,"/").conc

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3894), with no line terminators
Category:	dropped
Size (bytes):	3894
Entropy (8bit):	5.339961323332285
Encrypted:	false
SSDEEP:	96:jYNC2qKS0OSnIIaxchUJ+GJq1TXfzATiL7uqQ6U/90PA:aC2qKS0OjKk+Gg1zfsTiL7LQ6U/9kA
MD5:	7889868A96A0464011C5281EBE915739
SHA1:	7CEEC76AAD56D079EFE353502E697D0E5D19198A
SHA-256:	07F0126FE3A2B7F47C6FBD68D20DE29E87B345063E846B3FF8732600B2180E9B
SHA-512:	721EF40839E6515FC6950907E41517E9D9AA4AC4A24ECA63AE91050FB8839CD4357D647DED941AC5AFF9B7F5C5AA9CF568454E6ECDC3DE9BB14C927E286B9BE8
Malicious:	false
Reputation:	low
Preview:	import{p as e,w as n,d as t,N as o,a as i,b as a}from"./p-5117d167.js";import"./p-0d86e690.js";import"./p-0d33de92.js";(()=>{e.t=n.__cssshim;const a=Array.from(t.querySelectorAll("script")).find((e=>new RegExp(`/${o}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===o)),l=a["data-opts"]\|\|{};return"onbeforeload"in a&&!history.scrollRestoration?{then(){}}:(l.resourcesUrl=new URL(".",new URL(a.getAttribute("data-resources-url")\|\|a.src,n.location.href)).href,((e,i)=>{const a="__sc_import_"+o.replace(/\s\|-/g,"_");try{n[a]=new Function("w","return import(w);//"+Math.random())}catch(l){const o=new Map;n[a]=l=>{const s=new URL(l,e).href;let r=o.get(s);if(!r){const e=t.createElement("script");e.type="module",e.crossOrigin=i.crossOrigin,e.src=URL.createObjectURL(new Blob([`import * as m from '${s}'; window.${a}.m = m;`],{type:"application/javascript"})),r=new Promise((t=>{e.onload=()=>{t(n[a].m),e.remove()}})),o.set(s,r),t.head.appendChild(e)}return r}}})(l.resourc

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14695)
Category:	dropped
Size (bytes):	323785
Entropy (8bit):	5.564567986021661
Encrypted:	false
SSDEEP:	3072:ziL9pYF+p1FOgoSCtLnq03JUU/COE9v1bfUq4NZTeCTE74tRgk0seASSF2P:uo+p1FNoh5dw4LaCWORgk0seASSG
MD5:	B047D34758C4E616EB7C4D436EDDBF38
SHA1:	9A810336C06F9E33DB634D8CBD020E475DE2BC5A
SHA-256:	45EB79886BEB6D67304FF91FFDD08ADCB10F3069FE428604CB8E7DD21BECAA20
SHA-512:	9E3D94C8CDC15035C4E11C4587491E715779F30DA814D03D4A24346A74C768162B8514F4521AF14EBF7A300C047FEBBB15072DCCCA107B66BEF21704EE45440B
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"44",. . "macros":[{"function":"__e"},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"cmapi_cookie_privacy"},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"notice_behavior"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-4146259-15","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQue

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64742)
Category:	dropped
Size (bytes):	64792
Entropy (8bit):	5.539900529634736
Encrypted:	false
SSDEEP:	768:EfPAJZqjqZRLw8MmTPzaeDKikvCO4/owlI1cZT8yyyOfnPZ3kBJxYb+0V:E3jE3V3La
MD5:	B525F837E538A326542620ABD7712E55
SHA1:	0FEA47B937650520F2EAAEC6548301A2313E1D12
SHA-256:	A32CB7E3BF9345B4C312B9C8DCEE8554022AF7B027494672E79A2D09AC98E5A6
SHA-512:	026238D03F37170F180B1C669F22FD5C3BDF3716FA98EDF0BA6B0D79F75FECAAB9F58CCB9D83F2B416F0F409317BFF8771AEBD4BD1D2ECE98AB78C6C45AAD7DA
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6835,3148],{54459:function(e,t,s){s.d(t,{D:function(){return m}});var r=s(95627),i=s.n(r),a=s(67294),n=s(44012),o=s(72002),c=s(51972),l=s(51245),d=s(85893);const m=e=>{let{autoPayInterval:t=""}=e;return(0,d.jsxs)(a.Fragment,{children:[(0,d.jsxs)(c.Z,{children:[(0,d.jsx)("div",{className:i().dynamic([["3073712088",[l.colors.gray,l.breakpoints.sm,l.colors.gray]]])+" autopay-notice autopay-header",children:(0,d.jsx)(n.Z,{id:"AUTOPAY_SUCCESS_SCREEN_HEADER",defaultMessage:"Next autopay"})}),(0,d.jsxs)("div",{className:i().dynamic([["3073712088",[l.colors.gray,l.breakpoints.sm,l.colors.gray]]])+" autopay-recurring-msg",children:[(0,d.jsx)("div",{"aria-label":"Recurring Icon",className:i().dynamic([["3073712088",[l.colors.gray,l.breakpoints.sm,l.colors.gray]]])+" description-icon",children:(0,d.jsx)(o.Z,{width:24,height:24,color:l.colors.green})}),(0,d.jsx)("div",{className:i().dynamic([["3073712088",[l.colors.gray,l.breakp

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (516)
Category:	downloaded
Size (bytes):	5436
Entropy (8bit):	5.179253320042806
Encrypted:	false
SSDEEP:	48:35Y2zQVc7Ckqh7yJyqyXMYkLFOMbCSIFsXnMba8hEphOMs5HhFEnMbzmbiM79IEz:pbzQThNMQMb3Im3MnMsZvKMbMnM1o
MD5:	5032592B969809F4EFAF264B19A94AC5
SHA1:	39D737BC03715E31425D5B7FD9DE6D24EF0C6B73
SHA-256:	2387B4BE0140F3D96640A8803FCD486241943DCD60B41B9D00D0966B336AA785
SHA-512:	1F51C21AA5ECC31AB60C5B912DA710A530E7BD265B026D4E9455BCB1E6C81396B3D4DDE13A3BB09BFBF0F2FF3B8015092D13E6213E15E9D3BF46AC4D7EFBD03D
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/msx7sac.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . museo:. * - http://typekit.com/eulas/00000000000000007735993f. * - http://typekit.com/eulas/000000000000000000011b23. * - http://typekit.com/eulas/000000000000000077359969. * museo-sans:. * - http://typekit.com/eulas/00000000000000000000e7fe. * - http://typekit.com/eulas/00000000000000000000e802. * - http://typekit.com/eulas/00000000000000000000e805. * - http://typekit.com/eulas/00000000000000000000e807. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2024-08-28 15:45:51 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=msx7sac&ht=tk&f=1980.1981.8542.2005.2006.2009.2011&a=125797425&app=typekit&e=css");..@font-face {.font-family:"museo";.src:url("https://use.typekit.net/af/38

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 7 x 6, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	5.911157381206696
Encrypted:	false
SSDEEP:	3:yionv//thPly5tjllU+K/zUN9lM82kXrkAlRtm6GRdU/83p/lsup:6v/lhPSpozQ2+JZNIdt3Djp
MD5:	61B702E83ABB3D36A6183EF98CA5E24E
SHA1:	6BE4FF9201BD65E18008FEF2322BD01B767EDEBB
SHA-256:	068321A5B83F937DA067DFEB427794DE7690DF2568432A564E4345BE7981568C
SHA-512:	CB634B0773B993CED4A6E6DBED5FD8FA29A2D41DF3A6D9C6FF801ED22D9A10C006099BBD07BA78780BA776506D61EBE7DFCC8AC16A3AD1E8B33CF177ADEB2100
Malicious:	false
Reputation:	low
URL:	https://widget.uservoice.com/pkg/clients/_shared/field_select-d895064f3513fbd6ca8294037e3a30201cc96fae499b8d6e742a5efe3b1dd438.png
Preview:	.PNG........IHDR................v...RIDATx.cX.i....6.G. q&[....X.X.....Wo.C..........{..%@4..b........?.F...V... .&..V.R.s.......IEND.B`.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 71723
Category:	dropped
Size (bytes):	21911
Entropy (8bit):	7.990284604228861
Encrypted:	true
SSDEEP:	384:eGzePcKhqp8ppchvs0oqCDAJXULtUlxWlkl5HKQ5Ds+XLowwEYDVcDBC0EFYvncy:eGzekKop0cvs2CDWOulHvHKQ5AYOVlDA
MD5:	C467A63B2E7C3A99BE423ACE649014D8
SHA1:	91A3CB3EBF4F3996512A740FC202E1803828594F
SHA-256:	D070E8B363B2CB1BC55B94F1612A1AF673155DF31773E992007F8952E3661EE5
SHA-512:	956B41FC42B9C3C4E161AF37270D3EAEA9E5936B4A99685727235BF9A46BF05ACAE5A64A4EB9A305EBF1ED5F752DF8FB9912626765DEBF1EB82839DF2124CA92
Malicious:	false
Reputation:	low
Preview:	...........i{.8.0...........dFo.N'=.N..>.E.%.b".j...X..~....E.2..<.L."A.P...B-.......5.Xx....a...xs..E....K.0pw.Z..N}....`...[...e..N.......,rn.e.+q.........^yQ..I=......vz.O.QPi....3.\&..j...I..[.Q..i..,../y.....l.W.E.S....d..^.A2..V..S/....f..p....@.e.K>..0...u.&.d....X.i.x.f?...q.z<.G.n.C(..Z..U...lo:.e=....b...s....'..I.Qx]..u...~..0.-.X...Q......q8Z.y.8=...m.....a.i@.\|.].j."Gv8..".]w.%..1....f..3.....1....O.KfY.n.F....Y....r.@......3....4..,..?.x....K7a>.0.....?..~}...=;k..g.....4....$..O...u.6..<Jn.#o6.C.8.p...a..O..,a#............0..WY.....&....~..].5l._...\|w..C..K...[h,..z.y...#6...E.[,x0V.6B.n.....w....t...$.J.j.#=g.........6..%..?<k._.2.......;kx...`.LX.k..\|..".f5..G."\M.....w....m!l..E.U.+M.m.{;....A.Yg....1O.Z..H.,...6$J....".xT8C.Q8+.3...(\.Di.f.P.......>.....a..4a....u/.'c..L.A.Pe.I...%x..pA...............P..3.i.dAG.8.].H..#..:.....'.0L\.aY;a."..g70L..r ....0...h4.............a.D...m>.b..D..6...Yu.at.h7....*W<

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	dropped
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	18094
Entropy (8bit):	3.590379912299525
Encrypted:	false
SSDEEP:	192:LEuY3xKOrS0Fs0Hm8yAg3qXGs6WkPAkuiMy62ZNUHLE:YuYBzrS4s0HWP60W/kPdY
MD5:	FA140DE179BC4DB805C0478D9FF90922
SHA1:	285609964EBF9B9BB52C8F47718A99241D12AD8F
SHA-256:	3B9CF789A512963BCAC10BA614099FB3C57506514AF3637715823246ED56EF72
SHA-512:	4E6BF81CDB4D03E75A6B510AE0F7A332CB8EE2AB4D3CB6D17EA326AF8A70246CE68B96E5A849709F73ED3D76C6DB25EE8F58FD3706BE313DC060CA8198586838
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/favicon.ico
Preview:	............ .(...6... .... .(...^...00.... .(-......(....... ..... .............................................#..+...@ ../.........8.....................................#&...&...)...&...%....p.4.=.t.=.}........................"...&......&...&...)...)...!{...b.,.>...?.....................%..y...%...!...&...$..."x.&{...p..;.b.B...=.B................%...)...%..D$...&......%.h.,.j...e...=.6.C...>.................$...&......'%...%........Z...a...[...;.+.B...?..................&..."....m..&...#........L...Y...S...;.+.B...>..................$..~%....U.."...&........?...Q...J...;.+.B...?..................%...%.......&...%........8...H...B...;.+.B...?..................!..5$..T.... ..>!..M.....0...@...>...;.+.B...?..................%..\|&.......&..."....m...&...>...>...;.+.B...?..................%...%.......$...%........(...>...>...<.&.B...?.....................#!..=....#..+ ..7.....0...@...>...>.Q.B...?..................%...%.......$...%........$...?...C...?...D...?.................#.

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32025)
Category:	downloaded
Size (bytes):	84345
Entropy (8bit):	5.366447824180109
Encrypted:	false
SSDEEP:	1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ
MD5:	F9C7AFD05729F10F55B689F36BB20172
SHA1:	43DC554608DF885A59DDEECE1598C6ACE434D747
SHA-256:	F16AB224BB962910558715C82F58C10C3ED20F153DDFAA199029F141B5B0255C
SHA-512:	3DCAE1FF6E98C64E3586BE3EB14DD486C51F7D4E9FA1B8F9A628BE4FBB6A9AB562F31F9B50E16D2E0C72B942BDBE84EEE8E0EF87FA730DB1428B199A59D88232
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/js/jquery-2.1.4.min.js
Preview:	/! jQuery v2.1.4 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	150
Entropy (8bit):	4.800676840971259
Encrypted:	false
SSDEEP:	3:JSO+V506LBUyKteGQC+GJBGQWMNsNRJYnMvNKyquGQJJDenMpFuR/:riHKtZQC+GJwQWMsCmYyppdenMaR/
MD5:	B10FA552403ECF64E7A2F371D17FD42E
SHA1:	2250179D5D4B4FE2B59BC82B0277C4B0079C27EC
SHA-256:	5BFCBB218C41F9309B180B215B628D51E83703BE08A2676056E9792EEB3E24E3
SHA-512:	AEF6E6F7D5A29190C8C4D58ABEC832A21B2B85DA099516A530861FB9B9A550CDA75585D68F71B3FC475CD0E522BE9185E24D2682A1499CD579EC7732A911DBF9
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/web-portal-components/wp-components/p-2250179d.entry.js
Preview:	import{r,h as s,H as o}from"./p-5117d167.js";const t=class{constructor(s){r(this,s)}render(){return s(o,null,s("slot",null))}};export{t as wp_loading}

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	648
Entropy (8bit):	7.508738286963058
Encrypted:	false
SSDEEP:	12:6v/7ibQBe5w+iH+MIDjZxyzdt6g68uXRD2koHIScvuTPyM1os/5xG1O7zHh0fP4x:NwF+ilejZkt6g6dXi8Qy0f/5x5yI
MD5:	BCD69BF127C8C80DBF170CBD25DEDA0B
SHA1:	B9FA3743B7562CDA9599D8F0FA83BFE7E2F4EC45
SHA-256:	9CA1A96CA34F970ADF70AACAEEF53EF3D6A9FDC16C2F7D9355F836CFE0592FA5
SHA-512:	B700CEC9D8A9A4CC6971572443B05BBEEF9FB0EA1C9AC46B61FD2E1563DB25C5B51E91026AAFE090FD5CE64639B7A60320C23E1FC6A11FF543B2EFDF05DAD20D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....OIDATx...K.a....sL(C.SAt..".UH...C.".$...J.....u.Pvi#.C.%..:.Vc.p%(....)...[x........e`..y..>.cE...........P....0......^2...,..0...;..I.lc...."...p....M.........7..?..].....\..E...Nb.k..'...{....3x...B......G...!.\|&F..<......Q..Q....c..\|..8.6..{X.89G...F....A.....~...>}......]).........Kv........%\|..A$TF..5....Q.Jx......aK.vQ.K.....]..4.VH.y..@x3.`...<KY.T.q$.n..K..R.47....@..W...,..sh..;..?...J...VM..34.TC.)3..o..D.<K..o..V)y._...gx...U......pi3d7.:{.<~Ad`.9....DF.p.......G.?.C%.p.#pL..Ad...Sx3&...6.....&...c.,`...K.GI.....Q,...#..f.U...(.....c.p8.]H'.Q.W.x^..8...X.H...,y....IEND.B`.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	CSV text
Category:	downloaded
Size (bytes):	225533
Entropy (8bit):	4.989066998671679
Encrypted:	false
SSDEEP:	6144:SQQh+YXHPsXm5iM6fZ3inerC7ywIDwzbyv68bPYdZeGO/VX6V2QYAdgi7ciGO2BV:SQQh+YXHPsXm5iM6fZ3inerC7ywIDwzQ
MD5:	7351A0B6B8EE2663C216C6CC2ACBA9B2
SHA1:	5275DCE41C2444CB573C9CF1ACA6005E7FA04C60
SHA-256:	550FC740745AD2550383DAD647E58E528778B89F76A128A9DA9626B0FE3E3C21
SHA-512:	32C434F4EF8EE6C58950B9AE4E1E2080DE4A72B8AEDCE65F2B630A59675FD1E5D505EA1AC175E272A378040D14FC08E584857A3062F2FAB1DF21BB40756A01DD
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/themes/trustarc/assets/dist/style.css?ver=1711660746
Preview:	.accordion,..accordion-w-img,..callouts-section .btn-list,..column-three .btn-list,..column-w-image .btn-list,..columns-content .btn-list,..columns-one .btn-list,..columns-two .btn-list,..cta-box .btn-list,..cta-section .btn-list,..dots-container .slick-dots,..drop .left-col ul,..drop .left-nav,..feature-list,..footer-links,..footer-nav ul,..hero-section-colors .btn-list,..hero-side-image .btn-list,..hero-slider .slick-dots,..hosts-list,..key-takeaways .takeaway-list,..key-topics ul,..left-tabs,..link-list,..links,..links-desc,..links-list,..list-check,..list-check-simple,..list-w-links,..logo-carousel,..logo-list,..main-nav,..news-archive,..paging,..resource-intro .meta,..resource-list,..resource-lists,..result-list,..section-404 .btn-list,..social,..super-nav ul,..team-list,..team-single .btn-list,..video-section .btn-list,..videos-two-cols .btn-list {..margin: 0;..padding: 0;..list-style: none;.}..accordion-w-img > li,..accordion > li,..callouts-section .btn-list > li,..column-three

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21168)
Category:	dropped
Size (bytes):	21218
Entropy (8bit):	5.356201927108739
Encrypted:	false
SSDEEP:	192:Mg3a4HXGX3kWQJuMTI5GlghvndZRTx9z/3S7WMpQx7dJ4vsjnvzls2gd4POs2Wk7:NCHwQZGCvT9z/aQxSDQC3PLaLQ
MD5:	2A7272631CB808B8C16B6C30B24B352E
SHA1:	D437A824C3C33A923FD1D2F55192CC10021C79E3
SHA-256:	C0EB89F63A29A9B7C4A177E87121DAFC7F68F1C0A9CF097615C363D9C9FFE72F
SHA-512:	89C0CBC9F68685D434921F46840ABC5BD94E34F96B211074F405F5CDDA294D8672AC56B1AA48FB0BE35BB98B2B2D996FF18C11DD306E11088432F4F45A9A83D3
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5480],{72468:function(o,e,t){var r=t(95627),s=t.n(r),i=t(67294),l=t(51245),n=t(85893);e.Z=o=>{let{children:e,removeDefaultBackground:t}=o;return(0,n.jsxs)(i.Fragment,{children:[(0,n.jsx)("div",{role:"dialog","data-testid":"test-modal-dialog",className:s().dynamic([["2451540248",[t?"unset":"rgba(0, 0, 0, 0.5)",l.breakpoints.sm]]])+" overlay",children:(0,n.jsx)("div",{className:s().dynamic([["2451540248",[t?"unset":"rgba(0, 0, 0, 0.5)",l.breakpoints.sm]]])+" modal",children:e})}),(0,n.jsx)(s(),{id:"2451540248",dynamic:[t?"unset":"rgba(0, 0, 0, 0.5)",l.breakpoints.sm],children:[`.overlay.__jsx-style-dynamic-selector{position:fixed;width:100%;height:100%;top:0;left:0;right:0;bottom:0;background-color:${t?"unset":"rgba(0, 0, 0, 0.5)"};z-index:2;}`,`@media screen and (max-width:${l.breakpoints.sm}){.overlay.__jsx-style-dynamic-selector{padding:12px 2px 32px;}}`,".overlay.__jsx-style-dynamic-selector .modal.__jsx-style-dyna

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	4.283091465836075
Encrypted:	false
SSDEEP:	24:td8OubOpmGowscWkeMIFfFPc4m7TNWc1Yf31V/mXDBiV1nCSHnE86cbYVWe0YV0w:Ip8owshf5c9d2fFwliNHs1J0ZkpocnS8
MD5:	7351ACCF267DF64DA10B802E00A8467E
SHA1:	A5E226FE0160529A4218A4F6AF76357491C98C6C
SHA-256:	C9F1D99468015BCE01E2D15B6A0EBDC090FE309AF43F40CDFEAA6A00B3D4A3E2
SHA-512:	582054FB3CB2A79D46E5145FF819257201DB3916C9866D895F3D2841D91EC18A3EE2910BF0FC5B269B3F87A323B78056DF0DEDA50AB0BEE4B8C2713AB9CF4367
Malicious:	false
Reputation:	low
Preview:	<svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M31.7275 21.2158C32.5067 21.2158 33.134 20.5951 33.134 19.8175V2.1818C33.134 1.40424 32.5067 0.783496 31.7275 0.783496H2.1869C1.40763 0.783496 0.780322 1.40424 0.780322 2.1818V19.8175C0.780322 20.5951 1.40764 21.2158 2.1869 21.2158H31.7275Z" fill="white" stroke="#BABEC5" stroke-width="0.439356"/>.<path d="M13.1317 6.80894L9.57098 15.2339H7.24115L5.48278 8.5114C5.39486 8.11852 5.26298 7.94391 4.95527 7.7693C4.42776 7.50738 3.54858 7.20181 2.80127 7.07085L2.84523 6.80894H6.58176C7.06531 6.80894 7.5049 7.11451 7.59282 7.68199L8.51596 12.5711L10.8018 6.85259H13.1317V6.80894ZM22.2312 12.4838C22.2312 10.2575 19.1541 10.1265 19.1541 9.16619C19.1541 8.86062 19.4618 8.55505 20.0772 8.46774C20.3849 8.42409 21.2641 8.38044 22.2312 8.86062L22.6269 7.07085C22.0993 6.89624 21.44 6.67798 20.5608 6.67798C18.4068 6.67798 16.8682 7.81295 16.8682 9.47176C16.8682 10.694 17.9672 11.3488 18.8024 11.7417C

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20968)
Category:	dropped
Size (bytes):	21018
Entropy (8bit):	4.374254271081485
Encrypted:	false
SSDEEP:	384:BIp0m4FZoeLVA4X6/jEsEhRE22yL7W8c6/Ea2EyEvnHE42GA5SSHw3dEnOEXyhmR:7nPhBK/Yzhm22yL7W8c68adxPE42GAnn
MD5:	9507D9BD19EF23CFA07CF7346001111B
SHA1:	E640C21A8C5A74B583826DF6EC7250FBF51CB557
SHA-256:	957A4209F18B1304BA4DBEFA8E9C430FE8CFF0374D7553ED5CF821DBBCB04659
SHA-512:	D84BDDAA8E00243E7700CACD131E975DDD77C06963B5653C10A3CDCEFB29B7F66F610742BDB894C312AE4096865820DB120DA8CE7E2739DD820E26E248B5E314
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2766],{32766:function(C,s,e){e.r(s);var L=e(95627),a=e.n(L),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ACCOUNT_NUMBER",defaultMessage:"Account number"});return(0,t.jsxs)("div",{className:"jsx-1363339181",children:[(0,t.jsx)("div",{className:"jsx-1363339181 txt",children:(0,t.jsx)(i.Z,{id:"ACCOUNT_NUMBER_INFO_TEXT",defaultMessage:"Your Account number is the second set of numbers on the bottom of your checks."})}),(0,t.jsx)("svg",{width:"109px",height:"61px",viewBox:"0 0 109 61",version:"1.1",xmlns:"http://www.w3.org/2000/svg",className:"jsx-1363339181",children:(0,t.jsx)("g",{id:"Web",stroke:"none",strokeWidth:"1",fill:"none",fillRule:"evenodd",className:"jsx-1363339181",children:(0,t.jsxs)("g",{id:"Group-54",className:"jsx-1363339181",children:[(0,t.jsxs)("g",{id:"Group-8",className:"jsx-1363339181",children:[(0,t.jsx)("g",{id:"Group-9",transform:"tran

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38132)
Category:	downloaded
Size (bytes):	38182
Entropy (8bit):	5.474062059820002
Encrypted:	false
SSDEEP:	384:B2g7+ptujTNcqTRD+RhHwpZJ74squw7wNJ16fv3E3p9DrwN4vxvHKzqRhWteG8:B2gqptuvrD+RVw7B4v7wI3ErwNcxhe8
MD5:	3CBDE6309CB722A79008599DA2FC97EF
SHA1:	7F6C52355ECC1205F26CF7EEA528A0465CBD39DD
SHA-256:	0E656D7F3DCB9BC46230F6CB1D1D4DF8408796C55CC11AACB1394AEE43349125
SHA-512:	35C91DBFA509ED0ECCB90A832C160C5B66602D29769282B2B0A993BB98163B84B17ADC1AE086F065464BA49E779290E394AF3D7DD1D4EFA3B7E9EAA5894C3C49
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/5544-4c8425f3484e6d6d.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5544],{59596:function(e,t,n){var o=n(95627),s=n.n(o),a=n(41664),r=n.n(a),i=n(67294),l=n(44012),c=n(23240),d=n(51245),p=n(2870),m=n(85893);const y="https://security.intuit.com/index.php/privacy",u="/termsOfService";t.ZP=e=>{let{redesign:t,companyLocale:n,isPayable:o,bottomPadding:a=0,topPadding:x=8}=e;const f=(new Date).getFullYear(),g=n.split("_")[1];return(0,m.jsxs)(i.Fragment,{children:[(0,m.jsxs)("div",{className:s().dynamic([["2870485114",[t?d.fontSize.xxxs:d.fontSize.xxs,d.colors.ghostGray,x,a,d.breakpoints.md]]])+" main-footer",children:[(0,m.jsx)(l.Z,{id:"INVOICE_ALL_RIGHT_RESERVED",values:{0:f},defaultMessage:`\xa9 ${f} Intuit Inc. All right reserved`}),(()=>{if(!o){const e=()=>{c.Z.clickPrivacy(),c.Z.transactionEngaged({activity_type:"optional_actions",ui_object:"link",ui_action:"clicked",ui_access_point:"transaction_flow",ui_object_detail:"privacy_statement"}),window.open(y,"_blank","noopener,noreferrer")};

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1082437
Entropy (8bit):	5.443551822674652
Encrypted:	false
SSDEEP:	12288:/xoK0GrrqYt29PIEVAKPi8HoJMGYC2NZqq33L4vNnaa3/Nov7T:/xoK04qYU9PIOAKqX2763/NkT
MD5:	E026539DF2E4F739D8F64B5315599F3C
SHA1:	786F2FC065EA8BEA1B39BCA12B72217CFE3FE5E4
SHA-256:	C54399A932E61E369B22AEC37F6422E77A20AD2E6D9C587BF9BE57282D3F9EDA
SHA-512:	86FE8933A6A545DB97EBB0E736609ED626AE5631877F6E018CAFAB8158DD66AFC993655F46FF6923546E66604263C8292E2347A87B5BE51A906FC6E14BABA2A5
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/_app-7d82d00ca8a38f1d.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888,2741],{25687:function(e,t,n){"use strict";n.d(t,{kG:function(){return r}});function r(e,t,n){if(void 0===n&&(n=Error),!e)throw new n(t)}},95957:function(e,t,n){"use strict";function r(e,t){var n=t&&t.cache?t.cache:u,r=t&&t.serializer?t.serializer:c;return(t&&t.strategy?t.strategy:s)(e,{cache:n,serializer:r})}function o(e,t,n,r){var o,i=null==(o=r)\|\|"number"===typeof o\|\|"boolean"===typeof o?r:n(r),a=t.get(i);return"undefined"===typeof a&&(a=e.call(this,r),t.set(i,a)),a}function i(e,t,n){var r=Array.prototype.slice.call(arguments,3),o=n(r),i=t.get(o);return"undefined"===typeof i&&(i=e.apply(this,r),t.set(o,i)),i}function a(e,t,n,r,o){return n.bind(t,e,r,o)}function s(e,t){return a(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}n.d(t,{A:function(){return d},Z:function(){return r}});var c=function(){return JSON.stringify(arguments)};function l(){this.cache=Object.create(null)}l.prototype.get=function(e){return this.cache

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 9 icons, 16x16, 16 colors, 16x16
Category:	dropped
Size (bytes):	21630
Entropy (8bit):	4.195918238980776
Encrypted:	false
SSDEEP:	192:yH0NZsp7JpVPpmcClKs+OzR16MwEyOX/tz7:K0K7J3PpCvR1VyQ/tX
MD5:	4644F2D45601037B8423D45E13194C93
SHA1:	DCFDC7B05CB629F3B91A7267C7F304306F461724
SHA-256:	64A3170A912786E9EECE7E347B58F36471CB9D0BC790697B216C61050E6B1F08
SHA-512:	1C300F2A8C71615AB8B4DF72801A3C77B245CA6199FEE3FF3775553E1418D895CA336326AE687A4584A8F68645F9938E4DE76511062D260A66818959C952DEEE
Malicious:	false
Reputation:	low
Preview:	..............(...............h...............h...&... .............. ..........v... ..............00......h...."..00...........)..00...........7..(....... ............................................................................................................................................x....x.x....w.w.w........x....w.xx...x..wx...............x.........................................................................................(....... ...........@.......................................................................................................................q...e...l...n...f...s...n...n...y...p...q...n...y...u...n.......q...\|...n...k...d...]...W...]...X...C...J...N...V...O...<...5...*...,.......\|}~.uz}.ft~.\mw.YYY. "$...........................................................................................................................................................................................................................................................

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20028
Entropy (8bit):	4.319049804109463
Encrypted:	false
SSDEEP:	384:j16CvHqWF4OOOP0y+nCaESSxm0OCSWuyiwwd1EsCje7xf/jBUFn+9Pyap08ple:juW+O90ymCaEnPOhPd12G/jBUB+9Hk
MD5:	6DCC0DB5446AC677D011C9E531400A08
SHA1:	824D51B43005AAB359B700E43E2FC64F57B2DF43
SHA-256:	F42ABCD844DD443999483304AD956BB3E784FD0F8493EC0C96E72D3BC3EED083
SHA-512:	27AD56B1A765027AB1B378B689C25782040A49C6928504C1D3D17AE96C537D0870C9EB2DDBD2376D1C599E18413FF79680B694D5BF5EAA30EF273C48D7403371
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/truste.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="88px" height="28px" viewBox="0 0 88 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 53.2 (72643) - https://sketchapp.com -->. <title>Group 44</title>. <desc>Created with Sketch.</desc>. <defs>. <polygon id="path-1" points="0.0001 0.0002 87.808 0.0002 87.808 28 0.0001 28"></polygon>. <polygon id="path-3" points="0 28 87.808 28 87.808 0 0 0"></polygon>. </defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="company-logo" transform="translate(-75.000000, -88.000000)">. <g id="Group-44" transform="translate(75.000000, 88.000000)">. <path d="M16.2428,27.8943 C11.4518,27.8943 7.3678,24.6403 6.2898,19.9793 L6.2718,19.8993 L5.4038,19.8553 C2.4358,19.7003 0.1048,17.2483 0.1048,14.2683 L0.1048,0.1123 L84.3058,0.1123 C86.1788,0.1123 87.6958,1.6363 87.6958,3.5153 L87.6958

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	dropped
Size (bytes):	1170
Entropy (8bit):	5.892091590438216
Encrypted:	false
SSDEEP:	12:dgPAZcIneL9wbicervWvdbrPkzTz4wGOtbifl4BpU01a7OgC+FQawt:dyhY69GiXSvdUznhGyXIPChv
MD5:	86190A82D56DF324E9C499B07D3AB768
SHA1:	C57C250EFF55C3D02E924F810714893A7ABFEF5C
SHA-256:	7106A845473C9DF48F3C2D4737F9CB2804310AEC8CF1B35BBD15551A3A05BF4E
SHA-512:	D5B974962A293D49C62C58CEB5B3765CFB93E8BC5583FB9B9464E720D005954501538BD63C65BD71370FF323DAE682CEDE6FABBE57A8C31F567FBDA3726F0285
Malicious:	false
Reputation:	low
Preview:	GIF89a.......000.........666..................SSS..............................DDD.........JJJ.........QQQ.....................NNN......>>>]]].....................qqqjjj...\\\............rrr.......///...VVV@@@...cccRRR...QQQ.........yyysss.......EEEjjj\|\|\|bbbCCCgggZZZ.........^^^.........ggg...PPP@@@......pppIII......\\\...WWW..............fffhhh.......zzz...ccc...ZZZGGG}}}......QQQ...........aaa___................................................................................................................................................................................................................................................................................................................................................................................!.......,..............\........,8.......@.A....X.pDM...,.........H..f..C.Vr. ..H..:D...G.6v...b....;..,.@...a.>e.#..2X..P....._?.U......r-.....h.....B...,@.....1.@9..6x-.u.v....d.H.....x.x.@..Z.$.......D...X.....k

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	89140
Entropy (8bit):	5.295248552931732
Encrypted:	false
SSDEEP:	1536:BFCNqdV/iXAmVHv+iUf1lJxIp4/ZeWCcgdC8BID30bs6qkUaKgZeZIqwlZgi0Nal:TCNwV/kRv+iUf1bxi4/ZeWCcgdC8Bq3u
MD5:	E5E0B60A2C5930FF23B677CA31397673
SHA1:	8C9B2B9DEB3005B91C74A74A3E17BA639B613F91
SHA-256:	3226D0051AF924EB2646F02816D7A869F328355BEDCCA204E4E0120F1E09F3B1
SHA-512:	F79CA3CB5230FF5A0FB466863A4D363B638B06792CFA9728B90C3CA17A9D6742E486FA524F84E7A0B95AF62AAF0F5F36A87D604724C5C1B5DB8052DC45B4B390
Malicious:	false
Reputation:	low
URL:	https://assets.uvcdn.com/pkg/clients/site2/index-3226d0051af924eb2646f02816d7a869f328355bedcca204e4e0120f1e09f3b1.css
Preview:	html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}ol,ul,menu{list-style:none}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:'';content:none}table{border-collapse:collapse;border-spacing:0}.uvField{background-color:#FCFDFF;border:1px solid #8F9BB3;-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;-moz-box-shadow:inset rgba(0,0,0,0.1) 0 1px 1px 0,rgba(0,0,0,0.1) 0 1px 1px;-webkit-box-shadow:i

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	330319
Entropy (8bit):	5.6365979514381115
Encrypted:	false
SSDEEP:	3072:fk6UM7WVBlR67waZUAL01C+ch8xjBJ2GidxMsfneLlZ7gWj/I39tTMTnMOGXXmkD:r46zXL01C8UXeLT0M4OGnmg
MD5:	C29447B41E5E7FC7DF2EDE897A636A7C
SHA1:	F703629DDA6A2CEB378555E49BABCA44DA0074BA
SHA-256:	B0B9C18FDA6F4523956DA07E77C9225EF2FB567116BF36C96C44AE0AE67AEC49
SHA-512:	51A357651F8D157E2D9FFF0CB68FF7F7B7A59A6D6C99B0A1EB3BFE8DC5B8C96423EF9C832E6469B36D56EAA220EFBDA47E7E27DAD6B79F7B189CC87636D54C66
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4737,2378,1193,7956,4577,8367,2001,4409,9863],{13484:function(e,t,a){var r=a(95627),s=a.n(r),n=a(67294),o=a(44012),i=a(72468),l=a(54623),c=a(58367),d=a(29863),p=a(51245),m=a(85893);t.Z=e=>{let{closeCallback:t,loginCallback:a,isAutoPay:r}=e;return(0,m.jsxs)(n.Fragment,{children:[(0,m.jsx)(i.Z,{"data-cy":"pre-login-splashscreen",children:(0,m.jsxs)("div",{"data-testid":"Pre login splashscreen",className:s().dynamic([["1367718950",[p.colors.gray05,p.breakpoints.sm,p.breakpoints.md,p.breakpoints.md,p.breakpoints.md,p.breakpoints.md]]])+" pre-login dialog",children:[(0,m.jsx)("div",{onClick:t,"aria-label":"Close","data-cy":"pre-login-splash-screen-btn-close",className:s().dynamic([["1367718950",[p.colors.gray05,p.breakpoints.sm,p.breakpoints.md,p.breakpoints.md,p.breakpoints.md,p.breakpoints.md]]])+" close",children:(0,m.jsx)(c.default,{width:20,height:17})}),(0,m.jsx)("div",{className:s().dynamic([["1367718950",[p.colors

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1670
Entropy (8bit):	4.45958147487211
Encrypted:	false
SSDEEP:	48:UqFUyh24EZXSVuDHEZR9IEC01Nqgc4EJ0zEjH1u+:zqRpSYDD01Agctf
MD5:	CCA0007B9CC6CAC90E54C8728D5CF76D
SHA1:	A8CCD764D2386BB8018A0A561773475495C8F9BB
SHA-256:	5A760365260CFC151D8A5963EC55B8E9018DDF35153E4C4FCE8D91FF28F01E1C
SHA-512:	5E5092846C57950E837A8BD4B120B750634E0D3DCB5402402D0CF7C5261F8F952A3287C4C2547AA65CCC601C024CE242038A9327F8E11654C8AD98E3C33E8FBC
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/american-express.bug.svg
Preview:	<svg width="34" height="21" viewBox="0 0 34 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M33.4913 1.40253V2.69045V18.7054V19.6013C33.4913 20.3853 32.8753 21.0012 32.0913 21.0012H2.07734C1.29339 21.0012 0.677429 20.3853 0.677429 19.6013V1.40253C0.677429 0.618584 1.29339 0.00262451 2.07734 0.00262451H32.0913C32.8753 0.00262451 33.4913 0.618584 33.4913 1.40253Z" fill="white"/>.<path d="M30.7474 18.7054L29.2915 17.0815L27.7796 18.7054H24.8118H18.4283V11.1459H15.4604L19.1562 2.69045H22.74L24.0279 5.60225V2.69045H28.5076L29.2915 4.8743L30.0755 2.69045H33.4913V1.40253C33.4913 0.618584 32.8753 0.00262451 32.0913 0.00262451H2.07734C1.29339 0.00262451 0.677429 0.618584 0.677429 1.40253V19.6013C0.677429 20.3853 1.29339 21.0012 2.07734 21.0012H32.0913C32.8753 21.0012 33.4913 20.3853 33.4913 19.6013V18.7054H30.7474Z" fill="#0071CE"/>.<path d="M31.1389 17.8092H33.4906L30.4109 14.5055L33.4906 11.2578H31.1948L29.235 13.3856L27.3312 11.2578H24.9794L28.1151 14.5615L24.9794 17.8092H27.275

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1490)
Category:	downloaded
Size (bytes):	1559
Entropy (8bit):	5.120755987626891
Encrypted:	false
SSDEEP:	48:iKQKFYYCvoDlgVDyNQ2glkMBaqNTYEZqNF5XmbxDy:jJmYoyGPlkMBa+TrZqp2y
MD5:	3867B2388B619FF7FDDC29EF359FC9AA
SHA1:	511BED0C4D3D57AB4CF1B1D7596FB845ECFBA6AC
SHA-256:	31892C21AE4FB908A875BBE29DBF0DF74C2E84171CFBCAC23540F3AD8222A35A
SHA-512:	7BFD6E6CD2FE7A79F4797439BC7294A36D076D67A3DC5BB8E86FA5AF19B50F0E8FEC18BF33B30588486B231062E43F417708333044207A586AAD999E97E819A5
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n.__default)\|\|void 0===t?void 0:t.enabled)\|\|void 0===i\|\|i}t.d(e,{n:function(){return i}})},5081:function(n,e,t){t.r(e),t.d(e,{schemaFilter:function(){return o}});var i=t(5163),r=t(9254);function o(n,e){function t(t){var o=n,u=t.event.event;if(o&&u){var a=o[u];if(!(0,r.n)(o,a))return t.updateEvent("integrations",(0,i.pi)((0,i.pi)({},t.event.integrations),{All:!1,"Segment.io":!0})),t;var s=function(n,e){var t,i;if(!n\|\|!Object.keys(n))return{};var r=n.integrations?Object.keys(n.integrations).filter((function(e){return!1===n.integrations[e]})):[],o=[];return(null!==(t=e.remotePlugins)&&void 0!==t?t:[]).forEach((function(n){r.forEach((function(e){n.creationName==e&&o.push(n.name)}))})),(null!==(i=e.remotePlugins)&&void 0!==i?i:[]).reduce((fu

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5260), with no line terminators
Category:	downloaded
Size (bytes):	5260
Entropy (8bit):	5.4026458342312464
Encrypted:	false
SSDEEP:	96:QCBqZql79LsQnB1fjf5FdKFnF2iOCGhPQ+iVNqBkIKJ6QK:QCBqZa7FXTjXkFEinG2+iD3R6QK
MD5:	0EEEFEFE466EDCACEB027950A30D3ED5
SHA1:	5CA4817E0C1BCE29AA0CE8DE24FCC1A056668E64
SHA-256:	7BB27DB1E584977AFC74F35F7699EF29A1B168764F9CE1F9CA2EE20CBEDF631C
SHA-512:	432A839B2A8747FDF945FCCB3AA0A597203BEA9D37DBE307BF6666BC6D656751A271BB0902B75A72CBF35557653C27B58BF7FC610D4140E2E5F37C414F1B9A1E
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/auth-component/uv-auth/uv-auth.esm.js
Preview:	import{p as e,w as r,d as o,N as n,a as i,b as a}from"./p-3e73ccf5.js";export{s as setNonce}from"./p-3e73ccf5.js";import{g as t}from"./p-8c5cd27e.js";(()=>{e.o=r.__cssshim;const s=Array.from(o.querySelectorAll("script")).find((e=>new RegExp(`/${n}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===n)),a=(s\|\|{})["data-opts"]\|\|{};return"onbeforeload"in s&&!history.scrollRestoration?{then(){}}:(a.resourcesUrl=new URL(".",new URL(s.getAttribute("data-resources-url")\|\|s.src,r.location.href)).href,((s,i)=>{const a=`__sc_import_${n.replace(/\s\|-/g,"_")}`;try{r[a]=new Function("w",`return import(w);//${Math.random()}`)}catch(t){const n=new Map;r[a]=t=>{var l;const d=new URL(t,s).href;let u=n.get(d);if(!u){const s=o.createElement("script");s.type="module",s.crossOrigin=i.crossOrigin,s.src=URL.createObjectURL(new Blob([`import * as m from '${d}'; window.${a}.m = m;`],{type:"application/javascript"}));const t=null!==(l=e.i)&&void 0!==l?l:function(e){var s,r,o;return

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1975
Entropy (8bit):	4.324706007320719
Encrypted:	false
SSDEEP:	48:Ipi195vTpFgwoRX69ZMlegEQzw4CU+Yfi:B9RTpFPoReadzKYfi
MD5:	C398BA7B3F1D301E06C7B3B32C2826D1
SHA1:	0FE50F1AA0DAAC04821FEE4239F4031E144663AA
SHA-256:	FB46BFE47F780F067428CF4F24E9D3EDF14BDB7D6104DE2DDB6276A57170AD83
SHA-512:	1A1519E7F6CBEAEF6BD6EB235D54E2F3A2EBE37CB8D56CCF371D259668EE92B94FA057BD49538737F0ABDE9B3952DA9AFC4DF30B3D5865CD4B72F2C85D800363
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/mastercard.bug.svg
Preview:	<svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M31.7532 21.2197C32.5326 21.2197 33.16 20.5989 33.16 19.8212V2.18203C33.16 1.40432 32.5326 0.783453 31.7532 0.783453H2.2069C1.42749 0.783453 0.800055 1.40432 0.800055 2.18203V19.8212C0.800055 20.5989 1.42749 21.2197 2.2069 21.2197H31.7532Z" fill="white" stroke="#BABEC5" stroke-width="0.439441"/>.<path d="M19.4729 5.92261H13.7612V16.1152H19.4729V5.92261Z" fill="#FF5F00"/>.<path d="M14.1224 11.0183C14.1215 10.0367 14.3455 9.06773 14.7774 8.18479C15.2094 7.30185 15.8379 6.52807 16.6155 5.92203C15.6526 5.17039 14.4961 4.70296 13.2782 4.57315C12.0604 4.44335 10.8304 4.65642 9.7287 5.188C8.62704 5.71959 7.69821 6.54824 7.04838 7.57925C6.39856 8.61025 6.05396 9.80201 6.05396 11.0183C6.05396 12.2346 6.39856 13.4264 7.04838 14.4574C7.69821 15.4884 8.62704 16.317 9.7287 16.8486C10.8304 17.3802 12.0604 17.5933 13.2782 17.4635C14.4961 17.3337 15.6526 16.8662 16.6155 16.1146C15.8379 15.5085 15.2

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	dropped
Size (bytes):	319557
Entropy (8bit):	5.607306349854771
Encrypted:	false
SSDEEP:	6144:14MNo+p1FNnlRMdHlgq9k0seA3XCi4XuR9KJTVKr:OMqU1FNlRMmrR9KJTVG
MD5:	7BBA2F914AD31022BA7A8B0F1766B82B
SHA1:	EA81C990A3901E8DD772F94039046BB74DAA6976
SHA-256:	C4BB0C2890A2AC78004E63ED6D4EE161C2BF4A4C0AF536A8A05ECEC6DAA055E7
SHA-512:	C1563203EF55BC1C9D3C1119223424FCD1F2D3EC3DC5A21C734CAB55EA07F1F8439A316D4E62B27E81322D758BC8192BE7E4E7E28E640129B095699E3D385276
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":17,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	735
Entropy (8bit):	4.722835205925827
Encrypted:	false
SSDEEP:	12:TMHd6WmOHjZRGfnlmw0XAGaqJIxKTwGjlw5TensLVXgYPSsvbCrx/2tFUhgxQtg4:2d6WmojkYrXBIxKTllTsLpPSsuxu3HQ/
MD5:	AC05FF10A28AEFB3D21A915912D41AEF
SHA1:	434679B258A082E4269E9EFE5E164058BAF97EC0
SHA-256:	6B5A90A511AE69CF2AA0538C6FA3E54E0D3DEE6FB70EEB5D7D02B76B285632DD
SHA-512:	4DF5BD59976B739E37CCDE29A744371AC5A37E9685AB38ABD11286FE69804F3DD4050C58E458D982AB97F716D6B3B22B4B947327E88C044B2ADF1447A911448D
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/uploads/2023/11/x.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="23" height="23" fill="none">. <rect x=".875" y=".426" width="22" height="22" rx="2" fill="#fff"></rect>. <path d="M8.9 4.461l3.525 4.473 4.085-4.485h2.405l-5.36 5.9c.493.7 1.044 1.343 1.562 2.01.526.68 1.063 1.352 1.594 2.028l1.573 2.003 1.591 2.029h-4.922l-3.883-4.882c-.568.513-1.018 1.093-1.524 1.625-.502.527-.984 1.073-1.473 1.612-.496.548-.99 1.097-1.492 1.651h-2.41l5.735-6.306c-.105-.151-.192-.291-.294-.42-.694-.875-1.393-1.747-2.088-2.62L4.08 4.75c-.069-.087-.135-.176-.205-.267.242-.061 4.481-.081 5.025-.022zM6.617 5.735l8.993 11.31c.545.059 1.165.04 1.41-.048L8.166 5.736a70.811 70.811 0 00-1.548-.001z" fill="#000239"></path>.</svg>.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3611
Entropy (8bit):	4.90892673332111
Encrypted:	false
SSDEEP:	48:eylnenIUqn1D17rFT/A5eKi1fZd1YOypxU:eyleIlagKKBd1YO2xU
MD5:	78141454F16AC3DB94FB912285AAB253
SHA1:	2B647A5570AFE9C7E10F6B103487708C9A5035C0
SHA-256:	26502ECAD502D81B20A0F6AC7F5724F8711F5E26FD7589A73D1CD155B97A878C
SHA-512:	65DC02912F3399FD62DB245A08C0FE7350398D9FBCAE69FF88B7AA8C2AE6CDBEB34BCF8024FE35B5EC1F6316726A22CC3F6AA95AD6FE15A15BF66196FBF2494A
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=layout-stylesheet&t=1726074000
Preview:	.BDC_CaptchaDiv {. padding: 0 !important;. margin: 0 !important;. overflow: visible !important;.}...BDC_CaptchaImageDiv {. margin: 0 !important;. padding: 0 !important;. display: -moz-inline-stack;. display: inline-block !important;. vertical-align: top !important;. zoom: 1 !important;. display: inline !important;.}...BDC_CaptchaIconsDiv {. text-align: left !important;. margin: 0 2px -4px 2px !important;. padding: 0 !important;. display: -moz-inline-stack;. display: inline-block !important;. vertical-align: top !important;. zoom: 1 !important;. display: inline !important;.}...BDC_CaptchaDiv a:link, .BDC_CaptchaDiv a:visited, .BDC_CaptchaDiv a:focus, .BDC_CaptchaDiv a:hover, .BDC_CaptchaDiv a:active {. margin: 0 !important;. padding: 0 !important;. background-color: transparent !important;. border: none !important;. text-decoration: none !important;. outline: none !important;. -moz-outline-style: none !important;. display: -moz-inline-stack;. display: inline

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16321)
Category:	downloaded
Size (bytes):	16371
Entropy (8bit):	5.30148332482575
Encrypted:	false
SSDEEP:	384:TI5d0S96Ij0qFAtyee1qB2UmboM74xnUn1SI83ULBu2X/v5vy:Twd0SEIj9FTe7Xmbo1RMSI838lX5vy
MD5:	5D13835892EA46B380757981208B63E0
SHA1:	1F4F08047B42F3E5D5CE2A31BDAF923CE227B367
SHA-256:	9ABC448600550DDAF7904A2EB135F9F4307E1E3C16E60319F3286A61CC7AA26C
SHA-512:	F5A4B7C991DDD5AB031F9E7E7563571B465B6DEBFB347C7CCD3F5D6C494154CE2FDCF8787D7A970528DCFBD9F76D9FD89D5E3CF365A4A6A95DADB10632A26745
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3161-f0b07e6689a822c1.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3161],{23161:function(e,t,n){"use strict";n.d(t,{lj:function(){return H},Pz:function(){return q}});var a=n(59499),i=(n(56859),n(67294)),o=n(49153);const r=e=>{if(e&&e.config){var t,n,a,i;if(o.e((function(t){t.addEventProcessor((function(t){return new Promise((function(n){return t.environment=e.config.env,n(t)}))}))})),o.v("config",{ssrtid:e.config.ssrtid,originatingIp:e.config.originatingIp}),e.sale)o.v("sale",{amount:e.sale.amount,type:e.sale.type,txnDate:e.sale.txnDate,currency:null===(t=e.sale.currencyInfo)\|\|void 0===t?void 0:t.currency,id:e.sale.id,referenceNumber:e.sale.referenceNumber,recipientEmail:e.auth.recipientEmail});if(e.companyInfo)o.v("companyInfo",{companyName:e.companyInfo.companyName,language:e.companyInfo.language,region:e.companyInfo.region,primaryEmail:null===(n=e.companyInfo.contactMethods)\|\|void 0===n\|\|null===(a=n[0])\|\|void 0===a\|\|null===(i=a.primaryEmail)\|\|void 0===i?void 0:i.emailAddress});e.payment&&o.v(

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	4.871908089278848
Encrypted:	false
SSDEEP:	3:4WLQifQe6EkExVzdo4hen:bLQYxGExVzSmen
MD5:	C90C6DCB97ACEBA9BA27E1575F31D4AC
SHA1:	B22883BC253581E1886E943E40717309C3812D28
SHA-256:	CC0B88E48B5E2015DD0C862A23C6AD6313DE4193B89D492A58CC5CFDBE627E35
SHA-512:	E938F97E433E814F51477FF508EE3683DF50F49B3B90A1B6275050AB54441BD2B25671AEAF16624918CD5CB95DFBE6C12183BFAD2C53F6C455571B2E87AAB35A
Malicious:	false
Reputation:	low
URL:	https://by2.uservoice.com/t2/141454/portal/track.js?_=1726075569859&s=0&c=__uvSessionData0
Preview:	__uvSessionData0({"uvts":"96c6edab-de53-4a8b-572b-d15fd749f9a2"});

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12158), with no line terminators
Category:	dropped
Size (bytes):	12158
Entropy (8bit):	5.2654271716498116
Encrypted:	false
SSDEEP:	192:ZFpaU1OGX7Wo/GMA92S0RhYtN6BpdtCpB6dm+7UWDb7zeR1RFFhAYLGl6Dw2fmwa:ZFAUHX7zAjYHdsBgZUWrKHR9rK6Dw2f8
MD5:	29421809A4F77F5FC7415A4E8A3BBE8A
SHA1:	73C65D0898BAE786EB6E8771AF6E6C8218C2BCB7
SHA-256:	87C95C571B31ECC246001003DFF0E27C1DCBA3D005B3513C6732C5C6277E8421
SHA-512:	6943FF8A317A34C38D6482D7FF5B977BBA3DE6EC74EA6CD38F6B8474D141FA42F432C25B711650B8C72F6817A07C32A9D3A485EDFEE06C717B2DEED2373A44E2
Malicious:	false
Reputation:	low
Preview:	const e="wp-components";let t,l,n,s=!1,o=!1,i=!1,c=!1,r=!1;const f="undefined"!=typeof window?window:{},a=f.CSS,u=f.document\|\|{head:{}},d={t:0,l:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,l,n)=>e.addEventListener(t,l,n),rel:(e,t,l,n)=>e.removeEventListener(t,l,n),ce:(e,t)=>new CustomEvent(e,t)},$=e=>Promise.resolve(e),h=(()=>{try{return new CSSStyleSheet,!0}catch(e){}return!1})(),p=(e,t,l)=>{l&&l.map((([l,n,s])=>{const o=m(e,l),i=w(t,s),c=b(l);d.ael(o,n,i,c),(t.o=t.o\|\|[]).push((()=>d.rel(o,n,i,c)))}))},w=(e,t)=>l=>{try{256&e.t?e.i[t](l):(e.u=e.u\|\|[]).push([t,l])}catch(n){ue(n)}},m=(e,t)=>4&t?u:e,b=e=>0!=(2&e),y="http://www.w3.org/1999/xlink",g=new WeakMap,j=e=>"sc-"+e.$,v={},k=e=>"object"==(e=typeof e)\|\|"function"===e,O=(e,t,...l)=>{let n=null,s=null,o=null,i=!1,c=!1,r=[];const f=t=>{for(let l=0;l<t.length;l++)n=t[l],Array.isArray(n)?f(n):null!=n&&"boolean"!=typeof n&&((i="function"!=typeof e&&!k(n))&&(n+=""),i&&c?r[r.length-1].h+=n:r.push(i?S(null,n):n),c=i)};if(f(l),t){t.

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (42303), with NEL line terminators
Category:	dropped
Size (bytes):	133404
Entropy (8bit):	5.383478646224453
Encrypted:	false
SSDEEP:	1536:ktOCocEEBe+5wPVaSWgegMGCfly/zuBS7VkK9s+:ktPocPe+5tSWge9M/zuBS7VkK9s+
MD5:	0F297DCF2E145B0E1C3E9753EABC448F
SHA1:	D402218719A40FCFC9CDF2BEB684B1D0AD52CABD
SHA-256:	A4CA6146CF84A3583F3820C5F0B5F7965066E99B02EBEE455618AEB8C7354499
SHA-512:	D3B6DB405E8AEC588E7BE37A24C5C818DC72F8E4E8EAE7C4CCBF5488F907D141DBE51A5DAAC8EA71C77E1B2AA80E9D7D046FD4A3587F2EB7729CE82CA36F9C68
Malicious:	false
Reputation:	low
Preview:	import{c as t,a as r}from"./p-0d86e690.js";var n=function(t){return t&&t.Math==Math&&t},e=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),i=function(t){try{return!!t()}catch(r){return!0}},o=!i((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),u={}.propertyIsEnumerable,a=Object.getOwnPropertyDescriptor,f={f:a&&!u.call({1:2},1)?function(t){var r=a(this,t);return!!r&&r.enumerable}:u},c=function(t,r){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:r}},s={}.toString,v=function(t){return s.call(t).slice(8,-1)},h="".split,l=i((function(){return!Object("z").propertyIsEnumerable(0)}))?function(t){return"String"==v(t)?h.call(t,""):Object(t)}:Object,d=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},g=function(t){return l(d(t))},p=function(t){return"object"==typeof t?null!==t:"f

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	178
Entropy (8bit):	5.025257364822932
Encrypted:	false
SSDEEP:	3:yionv//thPlVbtr/dyxNk5A6IWXMzLCn1cn1cn1cn1cn1cn1cn1cn1cn1cn1cn1e:6v/lhPyk5IkgLCCCCCCCCCCCCowp
MD5:	8692E6EFDDF882ACBFF144C38EA7DFDF
SHA1:	A9BB131C4ACFF0D07FA7B7F21BEF05179C28D13B
SHA-256:	39AB7CCD9F4E82579DA78A9241265DF288D8EB65DBBD7CF48AED2D0129887DF5
SHA-512:	9B895122B4E33060548380E9B5FB866BB3A26E8F1B8F75AD936DAC8A25D7FA0B1AD117F168A50D1F1825FC8F345170DB948C64BFB17B8D5337DF05917B9E62AE
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/css/images/ui-bg_flat_75_ffffff_40x100.png
Preview:	.PNG........IHDR...(...d......drz...yIDATh...1.. ...R.....7..(.........V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V..`%X.V.j...)2.N....IEND.B`.

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4158
Category:	downloaded
Size (bytes):	1655
Entropy (8bit):	7.8783859431231225
Encrypted:	false
SSDEEP:	48:XM1lkFklJCQZmr4qx0Z2w9bQSQMd9exLzc/cNau:yLbZmr4OO2f3MaPj
MD5:	D151CB0874ED5E13006E5F38364EC01E
SHA1:	3155596C3845863DD4138F3B354D4BA379F083A2
SHA-256:	C1C09BC9842129EE1D81812F0513F63BB8AD246442CFF41C9C55E5AE56ECDE3C
SHA-512:	48E8F94CFB8F1B47EED462DA514EB645A459A71BF4C014ABA6BE5BBDD0ED381C205C60D38D1DE0B34F2C23D2B1FED3819F54EBAAB363E1A1B663E9D0A97B6D46
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz
Preview:	...........Wmo.6..._.p.+!.mwm.Y.....Z...0.Fd.&2..T.....z...]?m@....x..VRq..>]h.....+m.=Qb.Z...,.....rba..Z....3..r.[.N...`_...x.._.~Kn,...../4....W...8....4j..C.[E.v.:Y..H..v..w.D.3l...f...x.3.y6.%..NgiyfI...]...q...3...Fd..F;...A..}.R....q.$cy.....L.l0.IQ...o......^..I...Dr,@d..bF9.K..b0(..4o5Mrb...8I....aE....g.......s.l:.h.@?u&[....n..S5..........z:O...Y::..L9. ..qR.XIb.\f"V''x.`MY...pNR5...+l....dTa..i.\|0.U,@....k"..q6...Gt-'..1n.'.j..=Sp.ky...5.W...U.,..d...^.a.].fD.e..4...J.F4......\L@.B.......E...9:.>=.U..~y.....%N.tF..l1..z.!-.`..w...@U..1..\..e;.....CP...s.B....3Pm.t....-..)D[..`.....-S..F.... ..<O.8pX....0..V...{..B...B6.e.d.tX..T'.i.'pg...K..\.:...V..s.Gj'.^..{.~..Nit.&.\v...R.1....?..B..~..x./.....[Z..Y..e.?Y...bK1....y....5 .w.$..T..Xb.8..._....-.g.1....._....\<E..-o..5....~._...".!..Lk.q1....O......)`-...<.f~}....k.h............s..w..g.B..Ex..,.ro9.wl.w~`...j\|4..dZ..ca}!.0{...W..E....-@.o....../oiv5....9...V+.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	downloaded
Size (bytes):	1083
Entropy (8bit):	7.939822191104927
Encrypted:	false
SSDEEP:	24:dJtIsQAQ8Ic44Yo4bo4Y4ofXQLo4LoXgMXI7gAgXIL1C0Ay5dIXWAQIwl:p3nfXP3nfXfX/HXPX/HXaC0AyDQQR
MD5:	A97BFD93EA9EC02B04D746648FD909D6
SHA1:	7CEEB57C8F327587AC79ED6B8B9B6C334D926ED1
SHA-256:	96AA0E2304D5F823DEFCE8F2EE99EDDF59CAB3A49159B7B7470886D468B66AC1
SHA-512:	063E8267C8245C04FAB3D7E1D239C0DBED2E66E53A8BA5803ADB814491ABF30254D3CBD918359AE2445974F6FE6A0324C122C817FA1ABD041A90729F97F21320
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=reload-disabled-icon
Preview:	GIF89a....................................................................................................... !!!"""###$$$%%%&&&'''((()))**+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{\|\|\|}}}~~~...................................................................................................................................................................................................................................................................................................................................................................................................!.......,.......................,........H."........6..q.{.O_.a.~.....Cv...I.&.].z...Sd.3..,.3......r.4i/`....W.(.\.1=J.).........b......)._.r.:o^.e..6.Z.`.s..G7W.`..[...\......0^u...v....B..u.\....7U^..h

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	downloaded
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-includes/js/wp-emoji-release.min.js?ver=6.6.1
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20968)
Category:	downloaded
Size (bytes):	21018
Entropy (8bit):	4.374254271081485
Encrypted:	false
SSDEEP:	384:BIp0m4FZoeLVA4X6/jEsEhRE22yL7W8c6/Ea2EyEvnHE42GA5SSHw3dEnOEXyhmR:7nPhBK/Yzhm22yL7W8c68adxPE42GAnn
MD5:	9507D9BD19EF23CFA07CF7346001111B
SHA1:	E640C21A8C5A74B583826DF6EC7250FBF51CB557
SHA-256:	957A4209F18B1304BA4DBEFA8E9C430FE8CFF0374D7553ED5CF821DBBCB04659
SHA-512:	D84BDDAA8E00243E7700CACD131E975DDD77C06963B5653C10A3CDCEFB29B7F66F610742BDB894C312AE4096865820DB120DA8CE7E2739DD820E26E248B5E314
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2766.b29c036bad593b19.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2766],{32766:function(C,s,e){e.r(s);var L=e(95627),a=e.n(L),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ACCOUNT_NUMBER",defaultMessage:"Account number"});return(0,t.jsxs)("div",{className:"jsx-1363339181",children:[(0,t.jsx)("div",{className:"jsx-1363339181 txt",children:(0,t.jsx)(i.Z,{id:"ACCOUNT_NUMBER_INFO_TEXT",defaultMessage:"Your Account number is the second set of numbers on the bottom of your checks."})}),(0,t.jsx)("svg",{width:"109px",height:"61px",viewBox:"0 0 109 61",version:"1.1",xmlns:"http://www.w3.org/2000/svg",className:"jsx-1363339181",children:(0,t.jsx)("g",{id:"Web",stroke:"none",strokeWidth:"1",fill:"none",fillRule:"evenodd",className:"jsx-1363339181",children:(0,t.jsxs)("g",{id:"Group-54",className:"jsx-1363339181",children:[(0,t.jsxs)("g",{id:"Group-8",className:"jsx-1363339181",children:[(0,t.jsx)("g",{id:"Group-9",transform:"tran

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.020074367121572
Encrypted:	false
SSDEEP:	3:tRBRNq6FNpO+hHSK7SLvDmJS4RKb5KVErcHnEYqqUlaOA9gUnAA8cVKOAmYHZAA9:tnrLhyKumc4slmnE2n9Rl/qmqZll7
MD5:	578D18E5A9906E024FE6A55DDB94219D
SHA1:	40EF2E5CCCBE27E55B19564C2C9293015BD7AB7A
SHA-256:	B78B603D9BAB0B368B22F1627F6F36A36BCD14447E82B05AF61018617F78E113
SHA-512:	3211AECEE11389C438DE48FA54BBBF998A63DFAA80CE9B1C4AE61F2913AB67725001FC136C06B4F6E0B121C7C1659D298B28FE44E0CD22B669D9F85865DC47B2
Malicious:	false
Reputation:	low
Preview:	<svg width="14" height="24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1.871 22.129L12 12 1.871 1.871" stroke="#E11A77" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/></svg>

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	4.283091465836075
Encrypted:	false
SSDEEP:	24:td8OubOpmGowscWkeMIFfFPc4m7TNWc1Yf31V/mXDBiV1nCSHnE86cbYVWe0YV0w:Ip8owshf5c9d2fFwliNHs1J0ZkpocnS8
MD5:	7351ACCF267DF64DA10B802E00A8467E
SHA1:	A5E226FE0160529A4218A4F6AF76357491C98C6C
SHA-256:	C9F1D99468015BCE01E2D15B6A0EBDC090FE309AF43F40CDFEAA6A00B3D4A3E2
SHA-512:	582054FB3CB2A79D46E5145FF819257201DB3916C9866D895F3D2841D91EC18A3EE2910BF0FC5B269B3F87A323B78056DF0DEDA50AB0BEE4B8C2713AB9CF4367
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/visa.bug.svg
Preview:	<svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M31.7275 21.2158C32.5067 21.2158 33.134 20.5951 33.134 19.8175V2.1818C33.134 1.40424 32.5067 0.783496 31.7275 0.783496H2.1869C1.40763 0.783496 0.780322 1.40424 0.780322 2.1818V19.8175C0.780322 20.5951 1.40764 21.2158 2.1869 21.2158H31.7275Z" fill="white" stroke="#BABEC5" stroke-width="0.439356"/>.<path d="M13.1317 6.80894L9.57098 15.2339H7.24115L5.48278 8.5114C5.39486 8.11852 5.26298 7.94391 4.95527 7.7693C4.42776 7.50738 3.54858 7.20181 2.80127 7.07085L2.84523 6.80894H6.58176C7.06531 6.80894 7.5049 7.11451 7.59282 7.68199L8.51596 12.5711L10.8018 6.85259H13.1317V6.80894ZM22.2312 12.4838C22.2312 10.2575 19.1541 10.1265 19.1541 9.16619C19.1541 8.86062 19.4618 8.55505 20.0772 8.46774C20.3849 8.42409 21.2641 8.38044 22.2312 8.86062L22.6269 7.07085C22.0993 6.89624 21.44 6.67798 20.5608 6.67798C18.4068 6.67798 16.8682 7.81295 16.8682 9.47176C16.8682 10.694 17.9672 11.3488 18.8024 11.7417C

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/AW-1046165339?random=1726075564556&cv=11&fst=1726075564556&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4990z8864344206za201zb864344206&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftrustarc.com%2Fconsumer-information%2Fprivacy-feedback-button%2F&hn=www.googleadservices.com&frm=0&tiba=Privacy%20Dispute%20Resolution%20Services%20%7C%20TrustArc&npa=0&pscdl=noapi&auid=1873485069.1726075563&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	130057
Entropy (8bit):	5.263572458960338
Encrypted:	false
SSDEEP:	1536:M3hOCvjwxJZzcXI6+jyXu4KaEV/gbXc20ZHLwD8EaBtrRyX0w:M3hOC0x96ruNiXcvh0jyxRyX7
MD5:	575F0DD2D17BBECE23C4E3266A51A5C2
SHA1:	5E0E3742C130DDA924504E6A0A34C5A999AE46A8
SHA-256:	4AC51FFC4BCA5ED831338CA7656A8446F9DD02FB72C7C70E0440A6CFFD8CDF99
SHA-512:	0537024F5D3211530808C780BEEE8416771FC51B23A5726B3AD1C9ECD08C5BB4B0E81489D86D99E144AA6AD30D291063B1E556B562FD8FA8F52E13348C9C92AB
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{64448:function(e,t,n){var r=n(67294),l=n(96086),a=n(63840);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(i[e]=t,e=0;e<t.length;e++)u.add(t[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "04e01638.js", last modified: Sun Apr 23 18:39:17 2023, max compression, original size modulo 2^32 794399
Category:	downloaded
Size (bytes):	132098
Entropy (8bit):	7.997335674855856
Encrypted:	true
SSDEEP:	3072:Q/ck/k60nhyP+K+5/CewaLJtGBFb2LAM/HZVKv:RTyP+X/CpatIvqLlHLKv
MD5:	B87BF31C73EC4335BBBD7517DA66AF7B
SHA1:	7F83B4FDDE79AF6372E9E5829F53332EE558AE4E
SHA-256:	384479CEC25475A1397AEC8E4354647B1BEBD70202654EF84C82FFDED1E8893F
SHA-512:	9D9350807EC9175DE7BD0BB001F319F99722D509946B352DFB80AE386537B697693C1F6C5E530CB8D6DA04AF1BDFDE6D782B7225249A3427559CE83B4FAA1CDD
Malicious:	false
Reputation:	low
URL:	https://bcdn-god.we-stats.com/scripts/04e01638/04e01638.js
Preview:	....U{Ed..04e01638.js..mW.F.0..>.....}.Q...o.h..`..6.&..eY..i@.A.H.c....~ou.f...{v.+X..]]]]U]]....h.w...?Y.?]}...x..'..=.\|....?K..\|XgE.%.u0.H...lX....O{...$K...'....&9)..z....4;..)V..\A..t.O.O.\|..u..h\.iy.. "yz2&...T{e1$U..gq.N.f...7..X.......l...........%.y]O...#H. ....'...U....%Y.....G.q.`x...Kr....(.Jl.....>a.CHn.0.d.>.=.H>z].Um=..u.,.Ey..\|..5.U.5/<.V..R..%..P.j...B.._..U]\l.....dZ.8..u.zrB.Q0.E......5..I..c)..L.Y>.{...w.@zF............Z...7&.....C:..yIN...y......\|.....}^~.V...iu.7E.[p..[...9$=.I..;.d.....b.:....yoL..\|P....a}..5h;..6uPl.o.....h[.s......a.t.r2.R?.E..N..b7(r_..X......=@9..77.:9<.\|%.:......bQI..O..:........zQ..W....:J.$_^.{.d..I.....r.}3.8.mC.wZ....U..V.........e..n......."../..h.p......5.]NN.K.1.L..?.N_.:.'......G.S.~.5 ..H...<...D...\|..JX..<B.H....&.....2..3...f.F.... .Iv...@'..........OE6...h.e/....f...h-.1..Jk...u....\v.7.Gz.R....\|.-...!...$.....$."..1..`Z.(~._...@..m.;\.g!.....H......Mm.:....$......Dp...A..9.)..

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34852)
Category:	dropped
Size (bytes):	72432
Entropy (8bit):	5.4419288340961955
Encrypted:	false
SSDEEP:	1536:yHvmeA6MqUEwGKmBJw2s9keLR85qGNyrbftmqEeTcVZ4Ci8WHqaQV0uZKum+RwdG:yPmhE3yrbfCeTG2CEHgKum8wdQQFk
MD5:	D2BC3BDA79F380CB81296B0960060E03
SHA1:	9F3A85EB072205471D57583D2B60E0F37E0CAE2F
SHA-256:	86EA021028B7D590AFA70FD0725F62D10D031496A6F681F0B7F8E41858ACEC9B
SHA-512:	1C0BB6677DFF4CE01ECA15BC30406A9827A65C8C67C77246CB16B263C50C5E780D94AE0E8D693E0FCCFCBC56C7EDFB2E947007FD4738B000F841BDD7F342BC60
Malicious:	false
Reputation:	low
Preview:	window.UserVoice = {events:window.UserVoice\|\|[],push:function(x){window.UserVoice.events.push(x)},account:{"active_widgets":[],"campaign":null,"name":"QuickBooks Online","white_labeled":true,"widget2_domain":"qbo.uservoice.com","subdomain_ssl_host":"feedback.qbo.intuit.com","subdomain_site_host":"feedback.qbo.intuit.com","subdomain_key":"qbo","subdomain_id":141454,"client_key":"5SytiYyrEoStsXof7g09w","client_options":null,"satisfaction_autoprompt_enabled":false,"messages":{"Loading":"Loading","OpenContactWidget":"Open Contact Widget","OpenFeedbackWidget":"Open Feedback Widget"},"has_ticketing_system":true,"has_feedback_system":true,"has_satisfaction":false,"private_site_enabled":false,"source_version":1725550972,"deactivated":false},client_widgets:{},manifest:{"tab-left-dark-no-bullhorn":"/pkg/clients/widget2/tab-left-dark-no-bullhorn-9669fb4a9d79416e9dc17618c9ed226faf8171ce461449f1282d6fcc2d6aa338.png","tab-left-light-no-bullhorn":"/pkg/clients/widget2/tab-left-light-no-bullhorn-22005

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19232, version 1.0
Category:	downloaded
Size (bytes):	19232
Entropy (8bit):	7.987316458602093
Encrypted:	false
SSDEEP:	384:qK8RYdw94XeqwVA4XOLJv9DXFtRjOx4bfJ7wL:EiXny+FFDV64Tu
MD5:	2ED68565A79FB073E78B944E227760EB
SHA1:	325007DF856F2ED3BE92821B151282CECCA06287
SHA-256:	3438D3C132C2608D9DFD356A8E914449949DD0E18740905E8C89102BC10F1970
SHA-512:	130B550A2A0ED0CAC5E950B280377A2B60221378CD3B3DE5392DBB27F5DD683A0D5B5D6A79A8CE50A70DE39A80E62989244CCC07CB196250EB07E02E989B5FE7
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/f7c91f/000000000000000000011b23/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n3&v=3
Preview:	wOF2......K ..........J.........................?DYNAu?FFTM.?GDYNQ..B..^.`..:..l..-h..s.....@..Z..6...\.6.$..h. ..D..a..%.j.uDWj.=$...."...PU......._~..........u.o(..Z./>.Il@x.`.@.........Uy.AN...Z.E.7........E.tV..k\E..E.k...Qy..S./..T...8X7u...%}..u...M..)a.S...].....p..m39.l.,..(A.1..().$l0..k.t.n.nm........\\|.\.}..{....'......!X.+J...hw.iH.Z....gbCR4I_...,....'...h&..n>.a......XV...W_.@.........f..n.V..Q}..pMty,.....t...~.l~&.....3&..P.!......].-....P:@....n.. 2p..q.:L.....g.2.N#..D.2Q..m.6./u..~U..t.W.F....#iQs82T....9 ..@......ug.C....C;..#.Y..$..X%.........>mM.O.i}.....3].Y..o..6@.v.?f6].z.H @.......;.S...K...&....Me.......d.b......b0%...{...08....{ 3_..I.k.'o.....<.............jn...i....7..s...'..{.W.<v.....S7jrY..{.(.p.....F.[U?.....tkC...e.....r..J.r..[Y}.%Do....}....p\|....T...5.....5.1.inL..P........D...I..c....x..G..j.-..<K<...>.}.x5>..6..........^._...........@[0+...a.pw..'.U..G{.....?k..f.-..cP..7..O.nt'B..d.M..D.

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/163/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	dropped
Size (bytes):	89503
Entropy (8bit):	5.290152941028811
Encrypted:	false
SSDEEP:	1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq
MD5:	0732E3EABBF8AA7CE7F69EEDBD07DFDD
SHA1:	4CD5DDC413B3024D7B56331C0D0D0B2BD933F27F
SHA-256:	CE9D07500AD91EC2B524C270764EC4C9A33E78320D8D374EC400EDE488F6251B
SHA-512:	41D24C426ABCF913BE59917591D906318A547661280036B098A2B1B948BCF9FF14F268B140DB10956730D64A857A61B81034D888ED7F857419DEE6B8D327447C
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}func

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	downloaded
Size (bytes):	1191
Entropy (8bit):	6.4656239153974715
Encrypted:	false
SSDEEP:	12:dr+rJS3NYWFz//w4x1qVG7iyX+Zfw/gIgsydjk1/LAinhjQ3i6YFkQ5FG:drsJS3NrFDY4x1IqX0fw/5cmlhjQ98c
MD5:	FC212AEDF7AA6B680225AB7E9C6A5B8F
SHA1:	BEE6C9E55324D2F0809FF42C9FC283E1FBE1CE39
SHA-256:	F34A3B7A468FE25416791A63831CF9ED92A2985B57C5F5BB4AD30DD7D873B852
SHA-512:	2BFA281F33C9F9A03BD7CC8BD5F3689365DF900507D47D4492906C08D448C3F70DF7DD4A9A6BC6E4584783FFC01864B10D1DCEAC1425E4AC0A1A5B3D2A7DC479
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/botdetectcaptcha?get=sound-icon
Preview:	GIF89a.......000.......................................lll............................SSS............EEE...............kkk...888...[[[...........................]]]......vvv.........\|\|\|.................MMM.......fff.................```iii...GGG...........................EEE.........LLL...QQQ.........iiipppqqq555...........sssyyyrrr......QQQ.................rrrJJJ...}}}..........MMM..............>>>.................;;;.............................................___......NNN......www.......{{{........................................................................................................................................................................................................................................................................!.......,............S.L........,(.......@Q.....X..)..C.,........*-X....R+.h. s$....4.....3...P.bEN....`....2@L8..b..(..2MzsS..Bb..C"..=jfDX.)...q.`.....m.x...._.o7t.C......d.R.....:.U..G.,d.....C.. B.P......xXsJ..0}

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32025)
Category:	downloaded
Size (bytes):	35956
Entropy (8bit):	5.180496710005102
Encrypted:	false
SSDEEP:	768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1R6:oe78+S1KlvlK3Zr6
MD5:	2A31A1B1310822663D1CC537A9B4B147
SHA1:	0FD95C3CDDDA1A87D8CC075576A898538A8A70FA
SHA-256:	117CB25D98E6E239E6C1CB243357C7CE44469FD399921BF4D25130503AC60072
SHA-512:	2A81D9528C3D6B946649209B676F1E545E6E12B460D71A5FDC39BE259AF7FF01DF0D11615D3DBDF95569ACCBEDCC3CA91B1A62972D159582F32E37BA90C9E7E0
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.4 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19249)
Category:	downloaded
Size (bytes):	19311
Entropy (8bit):	5.285309248968572
Encrypted:	false
SSDEEP:	384:JLCxJa2CqCxJazztMv0X/TVdI0tOd6Jchhnd2X8Wt5jcIqhUwGni:5CxJa2CqCxJalz9I8J2dhWtohUwGi
MD5:	478DDE649950572DEC1960BD9E5FBBE5
SHA1:	F9AD8C69EA8687A4228432CEAA8B003FBCC539BA
SHA-256:	62B584E435B2612D42E7948F6ADC1255BCBF976A5ECDCB8865F65F956F1D135E
SHA-512:	43103B256B706230CF0C05C5078BF5CC7F9B4A933E008D73864FE25564CBBBE7CF43BBACBC93F4214F1A2CB1B3E48B572196B413E2841B5F91602CED71CB5438
Malicious:	false
Reputation:	low
URL:	https://consent.trustarc.com/autoblockasset/core.min.39652c2.js?domain=trustarc.com
Preview:	/! . Cookie Auto Blocker by TrustArc. version: 39652c2./.this.trustarc=this.trustarc\|\|{},this.trustarc.ccm=this.trustarc.ccm\|\|{},this.trustarc.ccm.cab=function(t){"use strict";function e(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}var r,n,o="data-ta-blocked",c="data-ta-domain",u="ta-blocked",i="data-ta-src",a="data-ta-type",l="ignore";t.BlockStatus=void 0,(r=t.BlockStatus\|\|(t.BlockStatus={})).UNBLOCKED="0",r.BLOCKED="1",t.Preference=void 0,(n=t.Preference\|\|(t.Preference={})).OPTED_OUT="0",n.OPTED_IN="1",n.NONE="2";var s,f,d="optout_domains",b="notice_gdpr_prefs";function v(t,e){t.forEach((function(t){var r=t.nodeName.toLowerCase();"script"===r\|\|"img"===r\|\|"iframe"===r?e(t,t.nodeName):t.hasChildNodes()&&v(t.childNodes,e)}))}t.SourceConsent=void 0,(s=t.SourceConsent\|\|(t.SourceConsent={})).DEFAULT="default",s.DNT="dnt",s.GPC="gpc",s.USER="user";var g=function(){f.disconnect()};function p(t){return(f=new MutationObserver(

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23429)
Category:	dropped
Size (bytes):	23482
Entropy (8bit):	5.5576204046870075
Encrypted:	false
SSDEEP:	384:bnR+uKd7eEUDVcbj0df9RuYgK/3tH0kAUxGgG8YEwO3:bSeEM6U5gKVUkv4swO3
MD5:	C688C797224F889413A44BE90805F57F
SHA1:	6EB076A3C22BD4BB20803938DFC8726C449D1B67
SHA-256:	C39F73F9D9162EBBC61C023C41EE3164E1D891555E30D29897E8F18267CAA2E8
SHA-512:	029A21A01DB10217E8D7136572B431F7A23A149371C642405A1BDF8B2B478F8E48882BCCF38E72F9C485B1AE77DB2E4363BA0F13229ADDF772F02188E4EA2890
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7908,712],{60712:function(e,t,a){"use strict";a.r(t);a(67294);var o=a(51245),n=a(85893);t.default=e=>{let{width:t=20,height:a=20,color:s=o.colors.lightBlue}=e;return(0,n.jsx)("svg",{width:t,height:a,viewBox:"0 0 20 20",fill:"none",xmlns:"http://www.w3.org/2000/svg",children:(0,n.jsx)("path",{fillRule:"evenodd",clipRule:"evenodd",fill:s,d:"M9.99935 1.66797C14.6017 1.66797 18.3327 5.39893 18.3327 10.0013C18.3327 14.6036 14.6017 18.3346 9.99935 18.3346C5.39697 18.3346 1.66602 14.6036 1.66602 10.0013C1.66602 5.39893 5.39697 1.66797 9.99935 1.66797ZM9.99935 9.16797C9.5391 9.16797 9.16602 9.54105 9.16602 10.0013V12.5013L9.1716 12.5985C9.21977 13.013 9.57202 13.3346 9.99935 13.3346C10.4596 13.3346 10.8327 12.9616 10.8327 12.5013V10.0013L10.8271 9.90414C10.7789 9.48964 10.4267 9.16797 9.99935 9.16797ZM9.99935 6.66797C9.5391 6.66797 9.16602 7.04106 9.16602 7.5013C9.16602 7.96154 9.5391 8.33464 9.99935 8.33464C10.4596 8.33464 10.8327 7.961

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	75858
Entropy (8bit):	5.3482850912409114
Encrypted:	false
SSDEEP:	768:GtYBkJX7gbQzg6BVcevBgt3yLnsoCtAbWiDsBdERRHIDF4ee5XdBXtGVujNHBs5b:GSINhvcm7dxzvHbK0aB62X1
MD5:	650F21AC4FD9546E505724ABE1DB85E7
SHA1:	9882E3FAE26B0015E7A83A84D2B1808830B0BA22
SHA-256:	21CCAA43F628E9DC521F0E75E6DB23AFC7B63E9A9403D1E610AFE676C02BC0E1
SHA-512:	86E34BA42A67B3002FCF87A22921B6934787169F67DF65334B5DC330A442D0686C1158C69785F84E0C802D9C083018767304FC96074541BDC2A22752C6DB452B
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{60932:function(e,t){"use strict";function r(e,t,r,n,o,a,i){try{var s=e[a](i),l=s.value}catch(u){return void r(u)}s.done?t(l):Promise.resolve(l).then(n,o)}t.Z=function(e){return function(){var t=this,n=arguments;return new Promise((function(o,a){var i=e.apply(t,n);function s(e){r(i,o,a,s,l,"next",e)}function l(e){r(i,o,a,s,l,"throw",e)}s(void 0)}))}}},6495:function(e,t){"use strict";function r(){return r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},r.apply(this,arguments)}t.Z=function(){return r.apply(this,arguments)}},92648:function(e,t){"use strict";t.Z=function(e){return e&&e.__esModule?e:{default:e}}},91598:function(e,t){"use strict";function r(e){if("function"!==typeof WeakMap)return null;var t=new WeakMap,n=new WeakMap;return(r=function(e){return e?n:t})(e)}t.Z=function(e,t){if(!t&&e&&e.__esModule)return

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5723)
Category:	downloaded
Size (bytes):	5776
Entropy (8bit):	5.482479129948742
Encrypted:	false
SSDEEP:	96:bGBCornssEVqZCQshOax2UNMqPIFU5WsGUzkkpJiVss+Vx6JDtGt6yIXR9s:6BCDV0awciUJkYiEPRtOX7s
MD5:	6675B58551F780EA2D2B55BB460C9582
SHA1:	9736B38E8233B755445977C843AE55FEE602ADDE
SHA-256:	A79E810E4E07405EFD10802A565A8649166FE499B78F7D45FC869261DB30B1DE
SHA-512:	12E46EE9700D4F61B433F950666C296DDFC571BD03E93967DD6086FB6DA064F951D5F63F1C6182850BFD7D876D854FD81B5F108144CD50F8C4836AA4B42BF939
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/webpack-3dbe3e04f86f6c11.js
Preview:	!function(){"use strict";var e={},t={};function n(r){var c=t[r];if(void 0!==c)return c.exports;var f=t[r]={id:r,loaded:!1,exports:{}},o=!0;try{e[r].call(f.exports,f,f.exports,n),o=!1}finally{o&&delete t[r]}return f.loaded=!0,f.exports}n.m=e,function(){var e=[];n.O=function(t,r,c,f){if(!r){var o=1/0;for(d=0;d<e.length;d++){r=e[d][0],c=e[d][1],f=e[d][2];for(var a=!0,u=0;u<r.length;u++)(!1&f\|\|o>=f)&&Object.keys(n.O).every((function(e){return n.O[e](r[u])}))?r.splice(u--,1):(a=!1,f<o&&(o=f));if(a){e.splice(d--,1);var i=c();void 0!==i&&(t=i)}}return t}f=f\|\|0;for(var d=e.length;d>0&&e[d-1][2]>f;d--)e[d]=e[d-1];e[d]=[r,c,f]}}(),n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,{a:t}),t},function(){var e,t=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};n.t=function(r,c){if(1&c&&(r=this(r)),8&c)return r;if("object"===typeof r&&r){if(4&c&&r.__esModule)return r;if(16&c&&"function"===typeof r.the

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20915)
Category:	downloaded
Size (bytes):	275726
Entropy (8bit):	5.553901376408092
Encrypted:	false
SSDEEP:	3072:pqODL9pYF+p1FOgKSGtLnq03OUU/COE9v1bfUq4NTTeCTE74VRgk0seASlP:p7o+p1FNKZ+dw4BaCWaRgk0seASN
MD5:	6219EF1BF656FA19DF9FF6B17D456917
SHA1:	5EAC0EAB0D98A4A49CC04162A0E8D7D76A6649C5
SHA-256:	D417CFD7B395D5284DDC43D1459C9A7FE31899082E43073F19D4D6D049F30603
SHA-512:	1649B4184B8B9C06B6A502BB28AD9EE6C9B02A9EC9401CE8558A53DBAC7859D6A00DCBB6B66EE3929607532042FD24C3D1A5B7FC3C86B33D0541D9F296FB0990
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-1051519679
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":22,"vtp_instanceDestinationId":"AW-1051519679","tag_id":119},{"function":"__ogt_cps","priority":12,"vtp_cpsMode":"ALL","tag_id":105},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":""

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33713)
Category:	dropped
Size (bytes):	33763
Entropy (8bit):	5.234729075108849
Encrypted:	false
SSDEEP:	768:JDUfMOfsJTGRN9HLvLdZQB+WTSxPaZTZj+JQs3tkc6Kb:ZUfMasJSb3QIroFqJVtkc6Kb
MD5:	DBA23ED240561ED1D860D0E1189A64F1
SHA1:	D786C992063B4E35601F14389E9B849FD29C7694
SHA-256:	864C196BA9E7F7FAEC1CA59D8B61F01495B4A869463A1DB2AD73BE05F8CCC821
SHA-512:	1E365F4CA9E0C8323E9E9C3CAD088258BE52C34D9257BC20495FFC436EA9B41F26BACAC996AC7D63170081C219D534D77B637C066B97906659E6CE187CD11047
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2332],{60139:function(t){function e(t){return function(){return t}}var r=function(){};r.thatReturns=e,r.thatReturnsFalse=e(!1),r.thatReturnsTrue=e(!0),r.thatReturnsNull=e(null),r.thatReturnsThis=function(){return this},r.thatReturnsArgument=function(t){return t},t.exports=r},63620:function(t,e,r){var n=r(60139);t.exports=n},37437:function(t,e,r){r.d(e,{gN:function(){return pn},l0:function(){return vn},J9:function(){return sn},j0:function(){return dn}});var n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)e.hasOwnProperty(r)&&(t[r]=e[r])},n(t,e)};function o(t,e){function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}var a=function(){return a=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	5.036353746419716
Encrypted:	false
SSDEEP:	48:Yy/zUVvu7Ojy68cOvJ6pYHdKqHf5TadbS9KddmLOayiHYQmY7YFBbayZahC:dzp7OjTZeheQqQPHE6kBzmC
MD5:	26EE0147B7D243991D94B48A2B8B5675
SHA1:	5B238F8F3BF5EF7404B2BB179C7650D84EFD4467
SHA-256:	3562DD7B75C6C5FE3071732CD91805FCA5E7E3EE08C3F7E75577FEC74F12B545
SHA-512:	35530EDDF3C3149D8429868CE209E16873D356A50BF762A907F1C8E632EA7A7F30CB53094DF97DEA7C77624D0053A52C500CF1886413180B45311634AC3ED016
Malicious:	false
Reputation:	low
Preview:	{"integrations":{"Amplitude":{"apiKey":"e1789c803aea5a6e20deca508647bdf6","appendFieldsToEventProps":{},"batchEvents":false,"deviceIdFromUrlParam":false,"enableLocationListening":true,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"forceHttps":false,"groupTypeTrait":"","groupValueTrait":"","mapQueryParams":{},"preferAnonymousIdForDeviceId":false,"saveParamsReferrerOncePerSession":true,"trackAllPages":false,"trackAllPagesV2":false,"trackCategorizedPages":true,"trackGclid":false,"trackNamedPages":true,"trackProductsOnce":false,"trackReferrer":true,"trackRevenuePerProduct":false,"trackSessionEvents":false,"trackUtmProperties":true,"traitsToIncrement":[],"traitsToSetOnce":[],"unsetParamsReferrerOnNewSession":false,"useAdvertisingIdForDeviceId":false,"useCustomAmplitudeProperties":false,"useLogRevenueV2":true,"versionName":"","versionSettings":{"version":"3.3.3","componentTypes":["browser","ios","android","server"]},"type":"browser","bundlingStatus":"unbundled"},"Repeater":{"vers

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	623
Entropy (8bit):	4.718934622168899
Encrypted:	false
SSDEEP:	12:TMHd6FfmiqfZvGsdQlMsY1YOGCTN5MPlWnyyKqtGRFvTdIXYN+pWC/K7w0J:2d69mles7njcdWnbKXfvT6TQrJ
MD5:	5F749E09E48B95F21A66D8A439C32679
SHA1:	8DBAD90E056A4595762C1E692162A546B0A57794
SHA-256:	60F4AF8C3780B7E156346FA19438CC3E28AD022E9FF46F4359F3DE07372CA914
SHA-512:	F371C8340E16DA868EED6EF8DEC93DF1C36278296F276C2101F76A3C1903EE1A5CF9DE350695AF4C17A0FE25061972088E0064A92F709A365DABEA9551987EB6
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/uploads/2023/11/li.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="22" height="23" fill="none">. <path d="M20.313.426H1.558A1.57 1.57 0 000 2.003v18.72c0 .87.698 1.578 1.558 1.578h18.755c.859 0 1.562-.708 1.562-1.578V2.003c0-.87-.703-1.577-1.563-1.577zM6.61 19.176H3.37V8.736h3.247v10.44h-.005zM4.991 7.31a1.88 1.88 0 010-3.76c1.034 0 1.88.845 1.88 1.88 0 1.04-.84 1.88-1.88 1.88zm13.774 11.866h-3.242v-5.079c0-1.21-.025-2.768-1.685-2.768-1.69 0-1.948 1.318-1.948 2.68v5.166H8.647V8.736h3.11v1.426h.045c.434-.82 1.494-1.685 3.071-1.685 3.281 0 3.892 2.163 3.892 4.976v5.723z" fill="#fff"></path>.</svg>.

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 5, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	115
Entropy (8bit):	5.497943208242396
Encrypted:	false
SSDEEP:	3:yionv//thPlOrO/WABnV6FPjtK6M0/Rb0thC3VUeup:6v/lhPghMnQFb86vQthC3Wp
MD5:	A03F116F5E730ADEF99261E2D92528F2
SHA1:	01FA79927EF5D783DECEB6545DC609C6BCD95DD8
SHA-256:	3357336C6815F3FFA97B7A60DE54D79141A80367FFD7C87EB185F5A6BE7FCA04
SHA-512:	7642BD205EEEDBE77906FEB15772EBA4BCFBBA7D0A379D286A3E9805D550871412A99D4FC9A2CF490BAEB513779B91FC987730B5439D46EAFCEA393750EF3306
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............z^...:IDATx.c.?\.\|..._.....5.....G...H......H.......H......p....@..........IEND.B`.

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3800)
Category:	downloaded
Size (bytes):	3801
Entropy (8bit):	5.1305233962335945
Encrypted:	false
SSDEEP:	96:xN9omJsoDWEBXlCmEtY7tAXDmhNH/TiJT5fyh6qU2o9tRaKz:xctoDZCztY7w6niJT5C6qU2o9tR7
MD5:	CDD686B9F4EF82C6826F140DDC968AAD
SHA1:	D6951C93A591064AE08CA3C6CD6F1D2284E77C65
SHA-256:	0DCA271D1D9C673CF0264027291BADC59211ADC1CC7BDE442C93A701F9560EC4
SHA-512:	97FE84D90C93315890900550317C7C28F5096FC72311069DC6E97AB7B1BD9D018A7965FEDC353784A5D37ADF6464C438A143AB32C8154852A08B75B34740BF9D
Malicious:	false
Reputation:	low
URL:	https://consent.trustarc.com/autoblockoptout?domain=trustarc.com
Preview:	!function(e){'use strict';function n(e){if(e&&e.__esModule)return e;var n=Object.create(null);return e&&Object.keys(e).forEach((function(t){if('default'!==t){var o=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(n,t,o.get?o:{enumerable:!0,get:function(){return e[t]}})}})),n.default=e,Object.freeze(n)}var t=n(e),o=function(e){return!!e&&'true'===e.toLowerCase()},r=function(e){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:/[\|,]+/;return e?new Set(e.split(n)):new Set},a=function(e){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:/[\|,]+/;return e=e.replace(/^\{[a-zA-Z]+\}$/,''),r(e,n)},l=function(e,n){var t=new Set;return e.forEach((function(e){n.has(e)&&t.add(e)})),t};if(t&&'function'==typeof t.init){var c=function(e){var n=arguments.length>1&&void 0!==arguments[1]&&arguments[1];if(e)try{return JSON.parse(e)}catch(n){console.error('[Bindings] Could not convert value as object:',e),console.error('[Bindings] '.concat(n.message))}return n?[]:{}}('{"Requ

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2273
Entropy (8bit):	5.019104053853831
Encrypted:	false
SSDEEP:	48:DZXPVWNjPvUiXNTyqg0VGFzypnAYAothHm5e1V11+eaCUaQd:D5UzvUiXVyqg0VGF+/p+eqd
MD5:	3182F2F560FC2E9A2C2A895AA4BDF207
SHA1:	27A27D5D244A814B14AFE3A0C0BDF37B3C323579
SHA-256:	072B8A2AE8785C751FA7DE95E0210BF4A43E350F589E6C504206EE2380884B7B
SHA-512:	F681C00391888A57A2521B6E3E2781BF3B789139032C18F5F0733DDC5D3174D12063424E9EEE5970C371D1BF5746CDA5272F8BB3FC7958662653FD5D39567D77
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/css/watchdog.css?v=3.0.0.26
Preview:	.* {...margin: 0;..}...html, body {...color: #000000;...background-color: #FFFFFF;...font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;...text-align: center;..}...h1, h2 {.. color: #158AA4 !important;.. font-size: 20px;.. font-weight: bold;..}.. h2 {. font-size: 16px;. }...#logo {...margin: 10px 10px;...vertical-align: text-top;..}...#header {...margin: 0 0;...position: relative;..}.....button {...margin: 20px 0px 10px 0px;..}....#content {...padding: 10px 10px;..}...label {...font-size: 12px;..}...hr {...border: 0;...margin: 40px auto;...width: 88%;...height: 1px;...background-color: #999;...color: #999;..}...#wrapper {...background-color: white;...min-height: 100%;...height: auto !important;...height: 100%;...text-align: left;...width: 1200px;...margin: 0 auto;...margin-bottom: 30px;...padding: 0 15px 15px 15px;.. border-bottom-left-radius: 5px;.. border-bottom-right-radius: 5px;.. -moz-border-radius-bottomleft: 5px;.. .-moz-border-radius-bott

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38132)
Category:	dropped
Size (bytes):	38182
Entropy (8bit):	5.474062059820002
Encrypted:	false
SSDEEP:	384:B2g7+ptujTNcqTRD+RhHwpZJ74squw7wNJ16fv3E3p9DrwN4vxvHKzqRhWteG8:B2gqptuvrD+RVw7B4v7wI3ErwNcxhe8
MD5:	3CBDE6309CB722A79008599DA2FC97EF
SHA1:	7F6C52355ECC1205F26CF7EEA528A0465CBD39DD
SHA-256:	0E656D7F3DCB9BC46230F6CB1D1D4DF8408796C55CC11AACB1394AEE43349125
SHA-512:	35C91DBFA509ED0ECCB90A832C160C5B66602D29769282B2B0A993BB98163B84B17ADC1AE086F065464BA49E779290E394AF3D7DD1D4EFA3B7E9EAA5894C3C49
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5544],{59596:function(e,t,n){var o=n(95627),s=n.n(o),a=n(41664),r=n.n(a),i=n(67294),l=n(44012),c=n(23240),d=n(51245),p=n(2870),m=n(85893);const y="https://security.intuit.com/index.php/privacy",u="/termsOfService";t.ZP=e=>{let{redesign:t,companyLocale:n,isPayable:o,bottomPadding:a=0,topPadding:x=8}=e;const f=(new Date).getFullYear(),g=n.split("_")[1];return(0,m.jsxs)(i.Fragment,{children:[(0,m.jsxs)("div",{className:s().dynamic([["2870485114",[t?d.fontSize.xxxs:d.fontSize.xxs,d.colors.ghostGray,x,a,d.breakpoints.md]]])+" main-footer",children:[(0,m.jsx)(l.Z,{id:"INVOICE_ALL_RIGHT_RESERVED",values:{0:f},defaultMessage:`\xa9 ${f} Intuit Inc. All right reserved`}),(()=>{if(!o){const e=()=>{c.Z.clickPrivacy(),c.Z.transactionEngaged({activity_type:"optional_actions",ui_object:"link",ui_action:"clicked",ui_access_point:"transaction_flow",ui_object_detail:"privacy_statement"}),window.open(y,"_blank","noopener,noreferrer")};

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16536, version 2.983
Category:	downloaded
Size (bytes):	16536
Entropy (8bit):	7.98851158284685
Encrypted:	false
SSDEEP:	384:7ERqk6v5PzAAZimTdv8Dpxf4oTj4jWg640JWP9dJC2QwzCxvixA:IfC5PsAepxf98jWg63rwzCx6xA
MD5:	04CE97B5C32C68A4F8FF54FA40C2D880
SHA1:	481CE41AD5A5C46234112C6C02426D00D0262E76
SHA-256:	8D261CA68CB21FC81D628D0013160FC9F0EDBB73C9241C727684F6B065DCE297
SHA-512:	F23E24B5BB0A71366C13D181B2108289D7221E1DACCA0433550FCD81B65763491E99AD9589EA91C25372F121C252F1AF2C09850C40C70F7C94890350D8040A76
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/auth-component/uv-auth/static/fonts/proxima_nova_regular.woff2
Preview:	wOF2......@...........@<..........................z.`..$.(........P..,.6.$..t..x.. ..W. ....{..........<&....Qk.V.L7w...j.......!.......l.....k.ug4...".s...<.k.eP.....-T....8..Wc(.,>.._n..O....UX>l.....S.R.\|...... .Z:z...m,..Qc..Y."..E.TJ)....._....../..........<.......u.....F...BBp..........AFI.Dm...]/..@y............qyz.^...5.@....N...b..Y..>../[.%H.S`.W.j.....#<aO7D...CN..tc.....N...[..R&......q@...0jw..`....$.....o......LY...G.XF_..-.....m.?.o..;.n.V.......\|......v.<..PA..EiRV.>...M..`.g...A.Nm.]\|.&h..].....O......S..l.aC.M.b.R.;3.q1..G...B.....g..M$H.C..kC......\........j..9k.._\.<.K..q&.o-K\|n..aH..J.u}~.....v.B.....=.u.,MM...;.......&.3....7..j.k.B.j....3......#.~..C.=q.>.Y....T.gRZ$@Lv#....i......e..EVul.h.......:.v..W}1 ...V......0......>...`.,.....JC..~*O.pAg.$..{.."1..['.......A.U..3.#P.q..-..ENAT.....A..(....n..^....N}.>C../.....-.......0..............e\....K...H...e..h.....>[.;k.....7..X......1..V....=?.!..$

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35236, version 2.19660
Category:	downloaded
Size (bytes):	35236
Entropy (8bit):	7.9948931922381945
Encrypted:	true
SSDEEP:	768:Tm1hlQRCJ8WHFEHdwAxpm8C7sOoFyqCazhQdlEsFOsZHwL/kCrU:+hlXJ8WHSH6Axpm8C7sOoFy/lzFLQACY
MD5:	4451062C2D96D0EB928E7A55A7C7DA34
SHA1:	14F55C3E48227598F5BE2EA14AEA1FB8056DBA9D
SHA-256:	063208866C888AD85F806C644A7944C729A9E81693AD1BC7979EB752D97442BC
SHA-512:	8722936631BF4A0926C8C28A0D8379CA11600A94D38946896D168FAFCA0FA3E2F15B412133E1B8121AF1A498AC617607FB2FB1E8308B44B2B4BFEAD4963F39E6
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2
Preview:	wOF2...................A..L........................l....`..`.....d..P...@..V.6.$..(..,.. ..K. ../[.sq.O6z.@.m3.b..7prK..=.L Fo....m3B;....Y.f...OP2n.q[......%#jL..>1.qjE)zMw.3(......`.2}7......{..C.j.....T..?0.t..]f.w..Y.....1... ..`.C,..o%p...n......p>....m.[.."5c9v..g...'q...^...1..R..".l9....w..;."M~.<.....a.U.\......d..n.4..%E.i.6v1....mRM.."..........l..1a.....J.9..c.cR.. B".. .(%k).B.].!.._.gT....c....$...?'..Tm].+.](.^.._.N..&Z.........kz.L....SB.....]...Q.A#....F.V.q.A......=6.^..!@KE.Ofr.s..!.,)..E%......1..\w[.z.....E;.m.TrM.g.X..7.........O..+f..vfB.%..6ms.k.....Q.Z....i.H.....+...i.,h.L...=iq..N..{[.]~...Ut.@p...P...9.....#.#...0..ox..?.......~.PT...`...'.i"WZ....^..l.E~....a....7......bp.Q......,.Q.......ZY-.....;.."e..E..V...O...:?;:o#.`...... .w/.....&%.....7.^0.o..h..=.0.....N.^0..5Db.x....../Tl.........[..H`,~..&.@.Z..........-&....PX2..+..........I..7...<.q.?K...z....H$./......N...!.=...kR...-...#&.q.$.....L?Sbwe.I

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1428)
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.327813756723405
Encrypted:	false
SSDEEP:	24:ibj8G9OAXshSd/A8HbUqPWyQhMFnfntb5ChKOhJLJLhgNKNLMhSFw0pfntbLhVcA:ibgGoA8gI8HQqPWl2nfnaIOf1qUNVw05
MD5:	EFA6F902936B7DB194D07237F235321C
SHA1:	2A95BE7635CBCD6CA619C09C476101988E670CF5
SHA-256:	FA5F14CCC5356A1AEE4DCFD4F381BF4A90D5704A53BE1055E218DD5DFF8B6D96
SHA-512:	B2BD746966A17FFEA944EED00FA4B663607EF1B36E825EE8B86505958484D56DF9F8378ADEFC684FF11609D94A665C10489A69C42A15CC4822A85858B3B29989
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8948.2692353fb3048aa0.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8948],{98948:function(t,e,i){i.r(e);i(67294);var s=i(85893);e.default=t=>{let{width:e=32,height:i=24}=t;return(0,s.jsxs)("svg",{width:e,height:i,viewBox:"0 0 36 32",fill:"none",xmlns:"http://www.w3.org/2000/svg",children:[(0,s.jsx)("path",{d:"M1.844 23.9779C1.40488 24.0036 1.02787 23.6609 1 23.2106V1.76861C1.02787 1.31836 1.40488 0.975637 1.844 1.00136H32.156C32.5951 0.975637 32.9721 1.31836 33 1.76861V23.1039C32.9699 23.6284 32.5313 24.0287 32.02 23.9984L1.844 23.9779Z",fill:"#FAFBFF",stroke:"#008481",strokeWidth:"1.55259",strokeLinecap:"round",strokeLinejoin:"round"}),(0,s.jsx)("g",{opacity:"0.15",children:(0,s.jsx)("path",{d:"M31 3V22H12L31 3Z",fill:"#00C1BF"})}),(0,s.jsx)("rect",{x:"5",y:"5",width:"24",height:"4",fill:"#53B700"}),(0,s.jsx)("path",{d:"M11 16.0393C11 17.1222 10.0485 18 8.87466 18L7.22117 17.9268C6.43924 17.958 5.70182 17.5909 5.30078 16.9709C4.89974 16.3508 4.89974 15.5778 5.30078 14.9578C5.70182 1

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3800)
Category:	dropped
Size (bytes):	3801
Entropy (8bit):	5.1305233962335945
Encrypted:	false
SSDEEP:	96:xN9omJsoDWEBXlCmEtY7tAXDmhNH/TiJT5fyh6qU2o9tRaKz:xctoDZCztY7w6niJT5C6qU2o9tR7
MD5:	CDD686B9F4EF82C6826F140DDC968AAD
SHA1:	D6951C93A591064AE08CA3C6CD6F1D2284E77C65
SHA-256:	0DCA271D1D9C673CF0264027291BADC59211ADC1CC7BDE442C93A701F9560EC4
SHA-512:	97FE84D90C93315890900550317C7C28F5096FC72311069DC6E97AB7B1BD9D018A7965FEDC353784A5D37ADF6464C438A143AB32C8154852A08B75B34740BF9D
Malicious:	false
Reputation:	low
Preview:	!function(e){'use strict';function n(e){if(e&&e.__esModule)return e;var n=Object.create(null);return e&&Object.keys(e).forEach((function(t){if('default'!==t){var o=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(n,t,o.get?o:{enumerable:!0,get:function(){return e[t]}})}})),n.default=e,Object.freeze(n)}var t=n(e),o=function(e){return!!e&&'true'===e.toLowerCase()},r=function(e){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:/[\|,]+/;return e?new Set(e.split(n)):new Set},a=function(e){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:/[\|,]+/;return e=e.replace(/^\{[a-zA-Z]+\}$/,''),r(e,n)},l=function(e,n){var t=new Set;return e.forEach((function(e){n.has(e)&&t.add(e)})),t};if(t&&'function'==typeof t.init){var c=function(e){var n=arguments.length>1&&void 0!==arguments[1]&&arguments[1];if(e)try{return JSON.parse(e)}catch(n){console.error('[Bindings] Could not convert value as object:',e),console.error('[Bindings] '.concat(n.message))}return n?[]:{}}('{"Requ

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19249)
Category:	dropped
Size (bytes):	19311
Entropy (8bit):	5.285309248968572
Encrypted:	false
SSDEEP:	384:JLCxJa2CqCxJazztMv0X/TVdI0tOd6Jchhnd2X8Wt5jcIqhUwGni:5CxJa2CqCxJalz9I8J2dhWtohUwGi
MD5:	478DDE649950572DEC1960BD9E5FBBE5
SHA1:	F9AD8C69EA8687A4228432CEAA8B003FBCC539BA
SHA-256:	62B584E435B2612D42E7948F6ADC1255BCBF976A5ECDCB8865F65F956F1D135E
SHA-512:	43103B256B706230CF0C05C5078BF5CC7F9B4A933E008D73864FE25564CBBBE7CF43BBACBC93F4214F1A2CB1B3E48B572196B413E2841B5F91602CED71CB5438
Malicious:	false
Reputation:	low
Preview:	/! . Cookie Auto Blocker by TrustArc. version: 39652c2./.this.trustarc=this.trustarc\|\|{},this.trustarc.ccm=this.trustarc.ccm\|\|{},this.trustarc.ccm.cab=function(t){"use strict";function e(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}var r,n,o="data-ta-blocked",c="data-ta-domain",u="ta-blocked",i="data-ta-src",a="data-ta-type",l="ignore";t.BlockStatus=void 0,(r=t.BlockStatus\|\|(t.BlockStatus={})).UNBLOCKED="0",r.BLOCKED="1",t.Preference=void 0,(n=t.Preference\|\|(t.Preference={})).OPTED_OUT="0",n.OPTED_IN="1",n.NONE="2";var s,f,d="optout_domains",b="notice_gdpr_prefs";function v(t,e){t.forEach((function(t){var r=t.nodeName.toLowerCase();"script"===r\|\|"img"===r\|\|"iframe"===r?e(t,t.nodeName):t.hasChildNodes()&&v(t.childNodes,e)}))}t.SourceConsent=void 0,(s=t.SourceConsent\|\|(t.SourceConsent={})).DEFAULT="default",s.DNT="dnt",s.GPC="gpc",s.USER="user";var g=function(){f.disconnect()};function p(t){return(f=new MutationObserver(

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 9 icons, 16x16, 16 colors, 16x16
Category:	downloaded
Size (bytes):	21630
Entropy (8bit):	4.195918238980776
Encrypted:	false
SSDEEP:	192:yH0NZsp7JpVPpmcClKs+OzR16MwEyOX/tz7:K0K7J3PpCvR1VyQ/tX
MD5:	4644F2D45601037B8423D45E13194C93
SHA1:	DCFDC7B05CB629F3B91A7267C7F304306F461724
SHA-256:	64A3170A912786E9EECE7E347B58F36471CB9D0BC790697B216C61050E6B1F08
SHA-512:	1C300F2A8C71615AB8B4DF72801A3C77B245CA6199FEE3FF3775553E1418D895CA336326AE687A4584A8F68645F9938E4DE76511062D260A66818959C952DEEE
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/favicon.ico
Preview:	..............(...............h...............h...&... .............. ..........v... ..............00......h...."..00...........)..00...........7..(....... ............................................................................................................................................x....x.x....w.w.w........x....w.xx...x..wx...............x.........................................................................................(....... ...........@.......................................................................................................................q...e...l...n...f...s...n...n...y...p...q...n...y...u...n.......q...\|...n...k...d...]...W...]...X...C...J...N...V...O...<...5...*...,.......\|}~.uz}.ft~.\mw.YYY. "$...........................................................................................................................................................................................................................................................

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (905)
Category:	dropped
Size (bytes):	955
Entropy (8bit):	5.45203517363015
Encrypted:	false
SSDEEP:	24:ibjfhcpNhvCZDOHNKfntXybFvojrh880ofHZw:ib1Y4DOtKfnZy1oKqfe
MD5:	54378336344B3DE8529083EF5D0707AB
SHA1:	22B2C74ADC2587EFC1D46ACE3A26E061A66F0957
SHA-256:	630257DBFE8089B6F1F41B21F6376B15E0D4AE99D77CD3DD4DD11851A1922FD2
SHA-512:	1D140EBE12316A47874ED69397903B67ADA7EE3D2A22A581360DCCEE492C0883FF3245298A7F851F8E421B06057352F2F5360D6D05039DC557B67783155916D2
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7868],{77868:function(e,l,c){c.r(l);c(67294);var i=c(51245),r=c(85893);l.default=e=>{let{width:l=24,height:c=24,color:s=i.colors.white,className:t=""}=e;return(0,r.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:l,height:c,viewBox:"0 0 24 24",className:t,"aria-label":"Print",children:(0,r.jsxs)("g",{fill:"none",fillRule:"evenodd",children:[(0,r.jsx)("path",{"aria-label":"Print path",stroke:s,strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"2",d:"M7.06 10V4c0-.552.448-1 1-1h8c.552 0 1 .448 1 1v6M7 19H5c-1.105 0-2-.895-2-2v-5c0-1.105.895-2 2-2h14c1.105 0 2 .895 2 2v5c0 1.105-.895 2-2 2h-2m-9.943.016c.002-1.105.898-1.999 2.003-1.997l6 .01c1.105.001 1.999.898 1.997 2.002-.002 1.105-.899 1.999-2.003 1.997l-6-.01c-1.105 0-1.999-.898-1.997-2.002z"}),(0,r.jsx)("circle",{cx:"7.003",cy:"13.933",r:"1",fill:s})]})})}}}]);.//# sourceMappingURL=7868.851b65ef7fa1a422.js.map

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3894), with no line terminators
Category:	downloaded
Size (bytes):	3894
Entropy (8bit):	5.339961323332285
Encrypted:	false
SSDEEP:	96:jYNC2qKS0OSnIIaxchUJ+GJq1TXfzATiL7uqQ6U/90PA:aC2qKS0OjKk+Gg1zfsTiL7LQ6U/9kA
MD5:	7889868A96A0464011C5281EBE915739
SHA1:	7CEEC76AAD56D079EFE353502E697D0E5D19198A
SHA-256:	07F0126FE3A2B7F47C6FBD68D20DE29E87B345063E846B3FF8732600B2180E9B
SHA-512:	721EF40839E6515FC6950907E41517E9D9AA4AC4A24ECA63AE91050FB8839CD4357D647DED941AC5AFF9B7F5C5AA9CF568454E6ECDC3DE9BB14C927E286B9BE8
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/web-portal-components/wp-components/wp-components.esm.js
Preview:	import{p as e,w as n,d as t,N as o,a as i,b as a}from"./p-5117d167.js";import"./p-0d86e690.js";import"./p-0d33de92.js";(()=>{e.t=n.__cssshim;const a=Array.from(t.querySelectorAll("script")).find((e=>new RegExp(`/${o}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===o)),l=a["data-opts"]\|\|{};return"onbeforeload"in a&&!history.scrollRestoration?{then(){}}:(l.resourcesUrl=new URL(".",new URL(a.getAttribute("data-resources-url")\|\|a.src,n.location.href)).href,((e,i)=>{const a="__sc_import_"+o.replace(/\s\|-/g,"_");try{n[a]=new Function("w","return import(w);//"+Math.random())}catch(l){const o=new Map;n[a]=l=>{const s=new URL(l,e).href;let r=o.get(s);if(!r){const e=t.createElement("script");e.type="module",e.crossOrigin=i.crossOrigin,e.src=URL.createObjectURL(new Blob([`import * as m from '${s}'; window.${a}.m = m;`],{type:"application/javascript"})),r=new Promise((t=>{e.onload=()=>{t(n[a].m),e.remove()}})),o.set(s,r),t.head.appendChild(e)}return r}}})(l.resourc

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34852)
Category:	downloaded
Size (bytes):	72432
Entropy (8bit):	5.4419288340961955
Encrypted:	false
SSDEEP:	1536:yHvmeA6MqUEwGKmBJw2s9keLR85qGNyrbftmqEeTcVZ4Ci8WHqaQV0uZKum+RwdG:yPmhE3yrbfCeTG2CEHgKum8wdQQFk
MD5:	D2BC3BDA79F380CB81296B0960060E03
SHA1:	9F3A85EB072205471D57583D2B60E0F37E0CAE2F
SHA-256:	86EA021028B7D590AFA70FD0725F62D10D031496A6F681F0B7F8E41858ACEC9B
SHA-512:	1C0BB6677DFF4CE01ECA15BC30406A9827A65C8C67C77246CB16B263C50C5E780D94AE0E8D693E0FCCFCBC56C7EDFB2E947007FD4738B000F841BDD7F342BC60
Malicious:	false
Reputation:	low
URL:	https://qbo.uservoice.com/widget_environment/5SytiYyrEoStsXof7g09w.js
Preview:	window.UserVoice = {events:window.UserVoice\|\|[],push:function(x){window.UserVoice.events.push(x)},account:{"active_widgets":[],"campaign":null,"name":"QuickBooks Online","white_labeled":true,"widget2_domain":"qbo.uservoice.com","subdomain_ssl_host":"feedback.qbo.intuit.com","subdomain_site_host":"feedback.qbo.intuit.com","subdomain_key":"qbo","subdomain_id":141454,"client_key":"5SytiYyrEoStsXof7g09w","client_options":null,"satisfaction_autoprompt_enabled":false,"messages":{"Loading":"Loading","OpenContactWidget":"Open Contact Widget","OpenFeedbackWidget":"Open Feedback Widget"},"has_ticketing_system":true,"has_feedback_system":true,"has_satisfaction":false,"private_site_enabled":false,"source_version":1725550972,"deactivated":false},client_widgets:{},manifest:{"tab-left-dark-no-bullhorn":"/pkg/clients/widget2/tab-left-dark-no-bullhorn-9669fb4a9d79416e9dc17618c9ed226faf8171ce461449f1282d6fcc2d6aa338.png","tab-left-light-no-bullhorn":"/pkg/clients/widget2/tab-left-light-no-bullhorn-22005

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	480
Entropy (8bit):	7.5042125576680725
Encrypted:	false
SSDEEP:	12:opdaINx35UAne/84SdHHSvvaFCiY7PcMhmtvRsYfIfGHR:ENNBmayOdnSXagiYtcFjpHR
MD5:	A623BCC3D87FAB92E3D3B8771C37267A
SHA1:	6D499479F56B2D435A6F6DEE59EE3CA936E184D8
SHA-256:	68D7F1BC57BD141320C3EFD41AC1B43E2E567D7CF3123978A0B13BA2AA20E915
SHA-512:	ECDFDCD2DF9523452F5B9C8A6DA664FB2EB130732F98AAB25BB4FE240660D46746CABDBE45D33A6DFFF4FF38277A314B878F207CD7B0BC3E9DBA5C94ED927FA5
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/uploads/2024/02/cropped-favicon-32x32.png
Preview:	RIFF....WEBPVP8L..../.......m.?..........m.d%'.8.j.a..3o`......!....H...i....P(.!.."x...zh';...........S.P?..i...h.v!.N.m.m.=.N...$.O....@........k.......g....L.0...O6.WC9d.>.l..7..uPE._..../.4.F.o.IA..l.1_......Jr...ap..I..c.~..gR.....]..VN....."B..d..Z8s.}.M..w.l. J.5.m.@..{\|.......^b..<# mV...;.I....0{...........`f~i".y.l....@.I;..SI....V..\|....kl.v.\m..6.... i.....r....X..o.-..U........q..e...P...\W.&...u.A..-...J..r&......E..SL.{....,J.6o.....b.=

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105589
Entropy (8bit):	5.174814108773161
Encrypted:	false
SSDEEP:	768:MLMeCBCBkbC/MFRo43esRdLyWQL9XJYOLBOiDYdveR2CjRBKF2FTm7L/PTDFlIs4:0CBN2/E1D82vnCjRBKFgTmbRFnOoh2
MD5:	8F973AC4BDF60F81FBDAE9B37E78047B
SHA1:	E25CED1F2DDAE34FC9C5BCAE43CD437B9F8D5C98
SHA-256:	D4BE509C23CAC1BFE3D0522FDFC45AEA18798162E3064C7244D06213386E2A7F
SHA-512:	75062783F85FBA2C00BA0632991FC6BABD0206A714B26A7132D940359294B0A745BF321F7F205655056E80F697539762B1264330AF5276D51C12F47F4437DB86
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js
Preview:	!function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.traits(),r=this.properties?this.properties():{};return i.default(n,"address."+t)\|\|i.default(n,t)\|\|(e?i.default(n,"address."+e):null)\|\|(e?i.default(n,e):null)\|\|i.default(r,"address."+t)\|\|i.default(r,t)\|\|(e?i.default(r,"address."+e):null)\|\|(e?i.default(r,e):null)}}e.default=function(t){t.zip=o("postalCode","zip"),t.country=o("country"),t.street=o("street"),t.state=o("state"),t.city=o("city"),t.region=o("region")}},4780:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0}),e.Alias=void 0;var i=r(n(1285)),o=n(9512);function s(t,e){o.Facade.call(this,t,e)}e.Alias=s,i.default(s,o.Facade),s.prototype.action=function(){return"alias"},s.p

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 47 x 50
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	7.437195246839826
Encrypted:	false
SSDEEP:	48:0qJKCWtqTNvHoK9KKBBD2AGoO+kwF4qQNbd:ZACGzK9KyD2noObw4q4
MD5:	5FEFA8F526E2AE1F6CB58E7A3600F49B
SHA1:	5A4437CF4AA5C15CA3311A23604956F90161A638
SHA-256:	2822D3A1B9E41D608DB999C4E00D8289995E6187AE54775F1CA1EDFEFEEFC394
SHA-512:	C69A504809936BD7F79E207F4F6D4BF59159DF973BF9F8FD10B4E18ED7358624646D2E768775EA3C3F172D13A1E14F41083322659354825D10AC89EB139183C8
Malicious:	false
Reputation:	low
Preview:	GIF89a/.2..........!..$!!)&&-*1..522866=;;A>>DBBHFFLJJQNNTRRYWW[YY`^^dbbhggmkkpoouttyww}{{.....=..C..F..F..J..P..U..[..d..k..s..x..{..\|............................................................................................................................................................................................................................................................!.......,..../.2.....^.........UIF..TN.FT.TG.^UFM]^T88M^..FZ.7.....++..../Z4.4.8..U5..........B.B......,.......B/./.5..I.............BM77..\U..4...1^.X. .o^j..0d...T.0..E...Vn%.0`.(B......&6...a....L&.8.AE.AFhr9......T..R...... .I....B..$.3..F...%..-.=....H...D........,.r.QK.$Un((p...].".P!.......C...Z....A...I.4..t...].(H.#F.#..X0PC...2.$awCK....L.B.....R.2.`......0..o.&E.O1....)...A..E&5f...E......@?....A...O.~.....?...A9p.....h`.........A.Y.R...Vh..f..$D(...V.A.$f.. .......j.".3.a...x. '.h!.-...^...B...!.F*..."...&....B.."......Yp!..\d!E.%\|..#.h..?....p.D...H.+R...W..E.

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	75858
Entropy (8bit):	5.3482850912409114
Encrypted:	false
SSDEEP:	768:GtYBkJX7gbQzg6BVcevBgt3yLnsoCtAbWiDsBdERRHIDF4ee5XdBXtGVujNHBs5b:GSINhvcm7dxzvHbK0aB62X1
MD5:	650F21AC4FD9546E505724ABE1DB85E7
SHA1:	9882E3FAE26B0015E7A83A84D2B1808830B0BA22
SHA-256:	21CCAA43F628E9DC521F0E75E6DB23AFC7B63E9A9403D1E610AFE676C02BC0E1
SHA-512:	86E34BA42A67B3002FCF87A22921B6934787169F67DF65334B5DC330A442D0686C1158C69785F84E0C802D9C083018767304FC96074541BDC2A22752C6DB452B
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/main-593e743601aca717.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{60932:function(e,t){"use strict";function r(e,t,r,n,o,a,i){try{var s=e[a](i),l=s.value}catch(u){return void r(u)}s.done?t(l):Promise.resolve(l).then(n,o)}t.Z=function(e){return function(){var t=this,n=arguments;return new Promise((function(o,a){var i=e.apply(t,n);function s(e){r(i,o,a,s,l,"next",e)}function l(e){r(i,o,a,s,l,"throw",e)}s(void 0)}))}}},6495:function(e,t){"use strict";function r(){return r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},r.apply(this,arguments)}t.Z=function(){return r.apply(this,arguments)}},92648:function(e,t){"use strict";t.Z=function(e){return e&&e.__esModule?e:{default:e}}},91598:function(e,t){"use strict";function r(e){if("function"!==typeof WeakMap)return null;var t=new WeakMap,n=new WeakMap;return(r=function(e){return e?n:t})(e)}t.Z=function(e,t){if(!t&&e&&e.__esModule)return

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16304
Entropy (8bit):	7.978780236580139
Encrypted:	false
SSDEEP:	384:5FBMLYDswVbJ37H0YU/jyDJ9qSE9JTf3eGVxSdpiKeiMNCNU:vDVVB7H0YU/pNJTfuGVxKiliM1
MD5:	A7B80E02316CAEDCB93CE3CE8AD7859F
SHA1:	AE2CEF37E6D935E5A8324CF21494885ADFD18A32
SHA-256:	9C596CF94C1C08815DAEADCEA273EF8CADEAEF4485C327B448C77A53BAB54DF2
SHA-512:	BA89EEAC416A89D173148856CD55FBD2931EAFD4715060E4A2B6A9D83CEA0A3310B08E1E04A173267AEEAEB320DB94C7B38EE9291B9397DB13BE2884AAC69C3E
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/uploads/2024/02/seal-truste-privacy-feedback.png
Preview:	RIFF.?..WEBPVP8L.?../5...M@l.H...{..Ns..<so.....;......{.q.......H.Z.l......B..v\|..6.}sc..I.....V....\|.o..I...j.u]..G...If...o.amWFt3Q...j.Q....s^$.S.-.$.+.&k.1.6.....LUw.L.tMu.s..D....\|.p.....)...@D./..x".....m..N.x..w.......$I..a_..?.0.`...?.m#.I...G...!.:...........S..>.....>...}...zV!.5...I.]. .d&...R....@..,...@.@F1..d..K.o......"......h.B.B. .@h"Bh.. ..k.X...U...UX."5.1VJ9.c.R..q..c.s..........\.>......Q....4.[iK3.y.{\.Cc......r.7..RU(bdK...P)clK!....R..U.=..)G.#eL..).l)..U)..)......W...6.Z.......a..m#IRR.Y...w."b.@...K \|R...Pl.L... ....%.....7G.$}..$......h.....qQ..\..]..jw..m.4..m.m{.9.i.=..{..].......V..Y1....;.......s.....vP.b.3.A....v.7F...r..U\|X1...Z..X..^....b[.r..Q..H...V"........C.]!..$I..s..XB.#.U..B...L.Vi.m...m...0..Bd5....N<....8V....9..+..y..V-7...%...6.K.~....\|2 9q..!..9k0n..o..C...+.UE.b..>.*..b\|..'.`cY'....Ir$.<{f^K.X.V......:.F.$[.......L........~b.}..vL.&h.W[.......U....o....\.J..........We.K..<.m...b...

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58929)
Category:	downloaded
Size (bytes):	58979
Entropy (8bit):	5.567721217764403
Encrypted:	false
SSDEEP:	768:G8QY/3Po4VDMCMwDnPnPAr9lEjgNmnQzkW9XebTHOU3Su5rRrPV70C/oor+K:kY//o4VDMkPWXb96BPVQC/oap
MD5:	DBB61563FBE82C516A5DFA738DBFD1D9
SHA1:	E6A370D8EA2A804F8B9196EEAA16FC23AD833826
SHA-256:	AD860383BEC1B388D3A7A23D610F496F5F0E1798CCF0B56144F2598E7FC1B219
SHA-512:	3A29E647B1CD951E6CD3E2F221EBFB5B48B743A32EB26C838AAEAA45B42FD81DAE34C8140D6D0070DA906B55E8DF1CBC220AC1E4F82B2BDBA45349906B5F5D65
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6139-309dee1860ca094e.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6139],{3619:function(e,t,s){var o=s(59499),a=s(95627),n=s.n(a),i=s(67294),r=s(86896),l=s(44012),c=s(23240),d=s(37004),m=s(51245),p=s(85893);function x(e,t){var s=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),s.push.apply(s,o)}return s}function y(e){for(var t=1;t<arguments.length;t++){var s=null!=arguments[t]?arguments[t]:{};t%2?x(Object(s),!0).forEach((function(t){(0,o.Z)(e,t,s[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(s)):x(Object(s)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(s,t))}))}return e}t.Z=e=>{const t=(0,r.Z)(),{withTOS:s=!0,separator:o="\xa0"}=e,{privacyUrl:a,tosUrl:x}=(0,d.getLegalLinks)(t.locale),_={activity_type:"optional_actions",ui_object:"link",ui_action:"clicked",ui_access_point:"tra

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (42303), with NEL line terminators
Category:	downloaded
Size (bytes):	133404
Entropy (8bit):	5.383478646224453
Encrypted:	false
SSDEEP:	1536:ktOCocEEBe+5wPVaSWgegMGCfly/zuBS7VkK9s+:ktPocPe+5tSWge9M/zuBS7VkK9s+
MD5:	0F297DCF2E145B0E1C3E9753EABC448F
SHA1:	D402218719A40FCFC9CDF2BEB684B1D0AD52CABD
SHA-256:	A4CA6146CF84A3583F3820C5F0B5F7965066E99B02EBEE455618AEB8C7354499
SHA-512:	D3B6DB405E8AEC588E7BE37A24C5C818DC72F8E4E8EAE7C4CCBF5488F907D141DBE51A5DAAC8EA71C77E1B2AA80E9D7D046FD4A3587F2EB7729CE82CA36F9C68
Malicious:	false
Reputation:	low
URL:	https://feedback.qbo.intuit.com/web-portal-components/wp-components/p-0d33de92.js
Preview:	import{c as t,a as r}from"./p-0d86e690.js";var n=function(t){return t&&t.Math==Math&&t},e=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),i=function(t){try{return!!t()}catch(r){return!0}},o=!i((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),u={}.propertyIsEnumerable,a=Object.getOwnPropertyDescriptor,f={f:a&&!u.call({1:2},1)?function(t){var r=a(this,t);return!!r&&r.enumerable}:u},c=function(t,r){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:r}},s={}.toString,v=function(t){return s.call(t).slice(8,-1)},h="".split,l=i((function(){return!Object("z").propertyIsEnumerable(0)}))?function(t){return"String"==v(t)?h.call(t,""):Object(t)}:Object,d=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},g=function(t){return l(d(t))},p=function(t){return"object"==typeof t?null!==t:"f

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4158
Category:	dropped
Size (bytes):	1655
Entropy (8bit):	7.8783859431231225
Encrypted:	false
SSDEEP:	48:XM1lkFklJCQZmr4qx0Z2w9bQSQMd9exLzc/cNau:yLbZmr4OO2f3MaPj
MD5:	D151CB0874ED5E13006E5F38364EC01E
SHA1:	3155596C3845863DD4138F3B354D4BA379F083A2
SHA-256:	C1C09BC9842129EE1D81812F0513F63BB8AD246442CFF41C9C55E5AE56ECDE3C
SHA-512:	48E8F94CFB8F1B47EED462DA514EB645A459A71BF4C014ABA6BE5BBDD0ED381C205C60D38D1DE0B34F2C23D2B1FED3819F54EBAAB363E1A1B663E9D0A97B6D46
Malicious:	false
Reputation:	low
Preview:	...........Wmo.6..._.p.+!.mwm.Y.....Z...0.Fd.&2..T.....z...]?m@....x..VRq..>]h.....+m.=Qb.Z...,.....rba..Z....3..r.[.N...`_...x.._.~Kn,...../4....W...8....4j..C.[E.v.:Y..H..v..w.D.3l...f...x.3.y6.%..NgiyfI...]...q...3...Fd..F;...A..}.R....q.$cy.....L.l0.IQ...o......^..I...Dr,@d..bF9.K..b0(..4o5Mrb...8I....aE....g.......s.l:.h.@?u&[....n..S5..........z:O...Y::..L9. ..qR.XIb.\f"V''x.`MY...pNR5...+l....dTa..i.\|0.U,@....k"..q6...Gt-'..1n.'.j..=Sp.ky...5.W...U.,..d...^.a.].fD.e..4...J.F4......\L@.B.......E...9:.>=.U..~y.....%N.tF..l1..z.!-.`..w...@U..1..\..e;.....CP...s.B....3Pm.t....-..)D[..`.....-S..F.... ..<O.8pX....0..V...{..B...B6.e.d.tX..T'.i.'pg...K..\.:...V..s.Gj'.^..{.~..Nit.&.\v...R.1....?..B..~..x./.....[Z..Y..e.?Y...bK1....y....5 .w.$..T..Xb.8..._....-.g.1....._....\<E..-o..5....~._...".!..Lk.q1....O......)`-...<.f~}....k.h............s..w..g.B..Ex..,.ro9.wl.w~`...j\|4..dZ..ca}!.0{...W..E....-@.o....../oiv5....9...V+.

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (923)
Category:	downloaded
Size (bytes):	973
Entropy (8bit):	5.282462750881302
Encrypted:	false
SSDEEP:	24:ibjBq+sN000pmeIfFkVIFGpZFlNBWnaAZszLmLW:ib1q+h0reIyVDJNBWnC
MD5:	6B64452B69B814FA56DB74365D21D6FE
SHA1:	47126888E8C7DF6596378B1AD65C0DD9F6630CA3
SHA-256:	2E38066FB7FB959C9506D28E33B301C82C09923505E42C6F02E0296067CB77C7
SHA-512:	18642DFF4E6C06F2E5104EDC1E6D2FBBAEEF7D0596DB4E0CE41B90F674E1D0E97C96A1A8C4F46F6237003FD58C8BC94C30BA7055ED2E189B90ED8D57E567D586
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9835.59c20536643b9726.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9835],{39835:function(l,c,e){e.r(c);e(67294);var a=e(51245),s=e(85893);c.default=l=>{let{width:c=24,height:e=24,color:h=a.colors.white,className:t=""}=l;return(0,s.jsx)("svg",{xmlns:"http://www.w3.org/2000/svg",width:c,height:e,viewBox:"0 0 24 24",className:t,"aria-label":"Download",children:(0,s.jsx)("path",{fill:h,fillRule:"evenodd","aria-label":"Download path",d:"M20 11c.553 0 1 .448 1 1v6c0 1.654-1.346 3-3 3H6c-1.654 0-3-1.346-3-3v-6c0-.552.447-1 1-1 .553 0 1 .448 1 1v6c0 .55.448 1 1 1h12c.552 0 1-.45 1-1v-6c0-.552.447-1 1-1zm-8-8c.553 0 1 .448 1 1v9.586l2.293-2.293c.391-.391 1.023-.391 1.414 0 .391.39.391 1.023 0 1.414l-3.999 3.999c-.093.093-.203.166-.326.217-.122.051-.252.077-.382.077s-.26-.026-.382-.077c-.123-.051-.233-.124-.326-.217l-3.999-3.999c-.391-.391-.391-1.023 0-1.414s1.023-.391 1.414 0L11 13.586V4c0-.552.447-1 1-1z"})})}}}]);.//# sourceMappingURL=9835.59c20536643b9726.js.map

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1726075563807&id=t2_9ns793lfk&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=6ec303c8-1691-4af5-bc7a-25f17f3544b7&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_e9773deb&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	105589
Entropy (8bit):	5.174814108773161
Encrypted:	false
SSDEEP:	768:MLMeCBCBkbC/MFRo43esRdLyWQL9XJYOLBOiDYdveR2CjRBKF2FTm7L/PTDFlIs4:0CBN2/E1D82vnCjRBKFgTmbRFnOoh2
MD5:	8F973AC4BDF60F81FBDAE9B37E78047B
SHA1:	E25CED1F2DDAE34FC9C5BCAE43CD437B9F8D5C98
SHA-256:	D4BE509C23CAC1BFE3D0522FDFC45AEA18798162E3064C7244D06213386E2A7F
SHA-512:	75062783F85FBA2C00BA0632991FC6BABD0206A714B26A7132D940359294B0A745BF321F7F205655056E80F697539762B1264330AF5276D51C12F47F4437DB86
Malicious:	false
Reputation:	low
Preview:	!function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.traits(),r=this.properties?this.properties():{};return i.default(n,"address."+t)\|\|i.default(n,t)\|\|(e?i.default(n,"address."+e):null)\|\|(e?i.default(n,e):null)\|\|i.default(r,"address."+t)\|\|i.default(r,t)\|\|(e?i.default(r,"address."+e):null)\|\|(e?i.default(r,e):null)}}e.default=function(t){t.zip=o("postalCode","zip"),t.country=o("country"),t.street=o("street"),t.state=o("state"),t.city=o("city"),t.region=o("region")}},4780:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0}),e.Alias=void 0;var i=r(n(1285)),o=n(9512);function s(t,e){o.Facade.call(this,t,e)}e.Alias=s,i.default(s,o.Facade),s.prototype.action=function(){return"alias"},s.p

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (53475)
Category:	dropped
Size (bytes):	100473
Entropy (8bit):	5.298729234337115
Encrypted:	false
SSDEEP:	1536:QFSD07QK1KCx0RG+wpJ8G848AxCmJgRU8+4AFQerbxXG2X+:QFOwOVgJ8V48AvJgm8+4AFQerN22O
MD5:	0B8EE913490DCCCCAECEF3584294847E
SHA1:	54DE42DB583175848B7D24E6214007837F5E067C
SHA-256:	B2A01E1ACCC2C7127645D036596A652D368240BACBFB9EE99B72815FCD44ADBB
SHA-512:	9A7841671885D4E20874654F682FCD2EDABBE7D642E8D94992F414D966CF11EB4C8C93EB054D633FAA30683ACED7E39F2B1FE982A861B981CEBA82F591315F56
Malicious:	false
Reputation:	low
Preview:	const t="uv-auth";let n,e,r,o=!1,i=!1,u=!1,s=!1;const a=t=>{const n=new URL(t,vt.t);return n.origin!==lt.location.origin?n.href:n.pathname},c="http://www.w3.org/1999/xlink",f={},l=t=>"object"==(t=typeof t)\|\|"function"===t;function d(t){var n,e,r;return null!==(r=null===(e=null===(n=t.head)\|\|void 0===n?void 0:n.querySelector('meta[name="csp-nonce"]'))\|\|void 0===e?void 0:e.getAttribute("content"))&&void 0!==r?r:void 0}const h=(t,n,...e)=>{let r=null,o=null,i=null,u=!1,s=!1;const a=[],c=n=>{for(let e=0;e<n.length;e++)r=n[e],Array.isArray(r)?c(r):null!=r&&"boolean"!=typeof r&&((u="function"!=typeof t&&!l(r))&&(r+=""),u&&s?a[a.length-1].o+=r:a.push(u?v(null,r):r),s=u)};if(c(e),n){n.key&&(o=n.key),n.name&&(i=n.name);{const t=n.className\|\|n.class;t&&(n.class="object"!=typeof t?t:Object.keys(t).filter((n=>t[n])).join(" "))}}if("function"==typeof t)return t(null===n?{}:n,a,b);const f=v(t,null);return f.i=n,a.length>0&&(f.u=a),f.l=o,f.h=i,f},v=(t,n)=>({v:0,p:t,o:n,m:null,u:null,i:null,l:null,h:n

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	178318
Entropy (8bit):	4.72138946527399
Encrypted:	false
SSDEEP:	1536:5yl9jC9wPIt82SuMpvDGSAETC4ldLnQNlGMvUNr0hEIIsUBOAhUhPaTQsGxPoVxo:QM8iMpvDGSAETC4ldsuMvUNCEIOo
MD5:	F57C545FFBB7A4D70BBF2574A13C907B
SHA1:	166E450E3E829C545C1E9F5F2E86A8CBC0A9A03C
SHA-256:	F0F8DCD15AB2C36EFF7378AE624BE4CC2A774D13D99A2FFF9B84C0F05F657E93
SHA-512:	25D7668F03EDB2A6B3F68552A05C23457884817C293E6DC01CB227950024DCE84B7B41D54C2A2A58A25E0D6A582EE6F12F0EA68488E041BFD5E2C6D09053ABFC
Malicious:	false
Reputation:	low
Preview:	jQuery(function () {.. initSlickCarousel();.. initAccordion();.. customizeAccordion();.. initHoverButton();.. initFocusCycle();.. initHeightCalc();.. initOpenClose();.. initHeaderScroll();.. initMobileNav();.. initTabs();.. initTabFocus();.. initMouseFocusRemover();.. initCustomForms();.. initAjaxPosts();.. initInputs();.. initCopyURL();.. initInlineModalLinks();..});....// inline modal links for cookie prefs..function initInlineModalLinks() {.. .. jQuery('.opt-out-inline').on('click', function() {.. truste.eu.irmClickListener();.. });.... jQuery('.cookie-consent-inline').on('click', function() {.. truste.eu && truste.eu.clickListener();.. });....}....// copy URL function..function initCopyURL() {.. jQuery('#copy-url').click(function(){.. var copyText = window.location.href;.. let temp = document.createElement('textarea');.. temp.value = copyText;.. document.body.appendChild(temp);.. temp.select();.. document.execCommand('copy');.. docu

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43430
Category:	downloaded
Size (bytes):	12116
Entropy (8bit):	7.984694744614838
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVH5yGIt9IKyLPlIUjtiXuXTthBR5:+tjRIm6SoITu3khUZS9yLPlIhuDLd
MD5:	71B328AFF914ADA8B774BFA8FFF542C4
SHA1:	3FB33AE4AB66FFFD1BA62BADC661BD910CDF8CF3
SHA-256:	52056C6C133887292D444EB1152DEC3F0A134FB0ED4DC33C2B116AC480455A3C
SHA-512:	933B32DE0C08CB7C7EF44E07F9D74FA5D034B4BC4B350207E343D7E613C56F926AAD4AECF0BEE4F897E4A056F3314E8F5737A9852F9D704FF99F41A4F1C80A17
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (9748)
Category:	downloaded
Size (bytes):	9972
Entropy (8bit):	5.577555687334594
Encrypted:	false
SSDEEP:	192:SkLnr8QmxYY72OlfojjuXBacAEkEVg3pXrzTGv6:Sk/8BKrypxPLC3pz46
MD5:	8055E87F2396A627E93C85890189E625
SHA1:	842FF4DB865468086582581A540E5B87A128F5CE
SHA-256:	0B6BAB63E3AA24B4AB6AAB63765A217DB5004961BAB1AB7D74FFEBFA33EFB5C4
SHA-512:	9A18DB6C96EBAE906C28F9F6396818DBE838DB8C32429927755C6D70CA4894A8FE028678B409C3A93790D8A91EE00FF71F761A21D5C746F9F2DE436920617F79
Malicious:	false
Reputation:	low
URL:	https://feedback-form.trustarc.com/watchdog/resources/js/bootbox.min.js
Preview:	/*. bootbox.js v4.4.0. . http://bootboxjs.com/license.txt. */.!function(a,b){"use strict";"function"==typeof define&&define.amd?define(["jquery"],b):"object"==typeof exports?module.exports=b(require("jquery")):a.bootbox=b(a.jQuery)}(this,function a(b,c){"use strict";function d(a){var b=q[o.locale];return b?b[a]:q.en[a]}function e(a,c,d){a.stopPropagation(),a.preventDefault();var e=b.isFunction(d)&&d.call(c,a)===!1;e\|\|c.modal("hide")}function f(a){var b,c=0;for(b in a)c++;return c}function g(a,c){var d=0;b.each(a,function(a,b){c(a,b,d++)})}function h(a){var c,d;if("object"!=typeof a)throw new Error("Please supply an object of options");if(!a.message)throw new Error("Please specify a message");return a=b.extend({},o,a),a.buttons\|\|(a.buttons={}),c=a.buttons,d=f(c),g(c,function(a,e,f){if(b.isFunction(e)&&(e=c[a]={callback:e}),"object"!==b.type(e))throw new Error("button with key "+a+" must be an object");e.label\|\|(e.label=a),e.className\|\|(e.className=2>=d&&f===d-1?"btn-primary":"btn-

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2026)
Category:	dropped
Size (bytes):	95605
Entropy (8bit):	5.297306156571017
Encrypted:	false
SSDEEP:	1536:A53yD3SBrE6n61lMGBKEaA75CKHBKnCa1z3eol++F5WcQ5tmvvS5s6:NAE661iGBKDmBKCaxeoAU6
MD5:	A9E1301237F7335CBB913C859E415C46
SHA1:	B9503B4B9E88C617FAA39B032D212D90E79C4055
SHA-256:	F2769341FBF31A14E512D5B4138E93597E2EAF57DC58A09748A0515F4D4FD267
SHA-512:	E3B1348918E70A9EACD1530900E0F8746C71227F95F756987B9CBF24F5713BF0D6E55ABA05A7B41F2B9BA13810F42F02917C4281DDFDB467C22570CB8A1F4304
Malicious:	false
Reputation:	low
Preview:	function _truste_eu(){function u(){var g=truste.eu.bindMap;g.feat.isConsentRetrieved=g.feat.crossDomain?g.feat.isConsentRetrieved:!0;if(!u.done&&truste.util.isConsentResolved()){u.done=!0;var k=function(){var a=(new Date).getTime(),c=truste.util.readCookie(truste.eu.COOKIE_REPOP,!0),d=truste.eu.bindMap.popTime;return d&&d!=c&&a>=d}();k&&(g.feat.dropPopCookie=!0);truste.eu.ccpa.initialize();truste.eu.gpp.initialize();truste.eu.gpcDntAutoOptOut();truste.eu.gcm();var a=function(){var a=truste.eu.bindMap;.if(a.feat.consentResolution){var c=truste.util.readCookie(truste.eu.COOKIE_GDPR_PREF_NAME,!0);if(c&&(c=c.split(":"),!RegExp(a.behavior+"."+a.behaviorManager).test(c[2])&&(/(,us\|none)/i.test(c[2])\|\|"eu"==a.behaviorManager&&/implied.eu/i.test(c[2]))))return!0}return!1};truste.util.fireCustomEvent("truste-cookie",g.prefCookie);truste.eu.isGPCDNTEvent()?g.feat.dntShowUI&&"expressed"==g.behavior&&truste.util.executeOnCondition(function(){return g.prefCookie\|\|g.feat.gpp.gppApplies&&null==truste

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2785
Entropy (8bit):	7.881347552761523
Encrypted:	false
SSDEEP:	48:6QiI7K89vE9Zqcrv8hp35diA2vo1pho1bUDsLObujVC/een+32nsxaK5DDBzUMDO:6QrK8jXfJd12Q1bNc1jE/e++32cfBoCO
MD5:	7DBE4596B420FF7FDAC169A69E4BBFC9
SHA1:	BE34FF3E7F9DC756178AE0D2A5DA1A34EE559A0E
SHA-256:	F0BE198819B5B8CF7819BB3A89C908AB8648B1196E8EB48418A6746D653A8031
SHA-512:	26B21EE302A25FEACAA6E90D6751407A8F0C2DE0B4CFD70A0AEAB5CB6DFD3F550FF9FE8AC566CD065BA48A87B6A44F54FC1ED29A92E932CDCB1D88408A5C93C3
Malicious:	false
Reputation:	low
URL:	https://static.cns-icn-prod.a.intuit.com/favicon.png
Preview:	.PNG........IHDR..............>a.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]Oh.W..Y.J..-.!.........7..K...R.......`.F.`.5..<....b..Z.....=X.j[...-E..4E..K.o\|#.uv...{o..~0lH&;3..}....8..@H/.4>...[..Gw..*...C..`.....]......J...?.g..d..`..!.,.t..f.F..a.$a.(.....B.Q."....gd(...i..;r......-dp-..@....X.S..55np..:..a..mN2P`.iY.K.O7.\... .7......o.......1..H......>...dD(...L.9..6..,.r.0.H......A9Q.......(..../..$......?..l...[...GynO...zU...B...C..$C)YB....U(...3uI....&.K.O7.\.~.I....M..i`.......E2....T..O.1ny.#...aJ.b._]..9-.?.>.&9..%......Qk..M.-.f.LA..E......6I#.......+..s..Ig..MS3.uaW..(..I.>...,]......."..U...i..dq.D...J..<......>.......{l.....G.d..q.9...(.\|V.4.p.2@cj.:x.&.....C...2......[..........TX...A.R.P.w.h....Zg....j....e......yK.}.....\.....'.......w..un?....u....q.%.x!.........w6.c.....y.S7............;......rA...,@Ng.[...E2..Tl..u<3Ut..1.Y.M.6;.01..].2._p.m.(.... .D.).}...`0. ..../..zGZ._....9..;:H j........~........5..!.(3.xH<....

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	dropped
Size (bytes):	1071
Entropy (8bit):	5.456081951539905
Encrypted:	false
SSDEEP:	24:dmFOmITA4e/k3QkGTqqF3rkuBDFJ8Dvw5iYHcBEDWb:oFOmT1/kcH2M5iYHcBEqb
MD5:	5363D08FC530C3BAE37BE3D4EEA066C7
SHA1:	6F974C9E483A8265D749559DB1C02EFC458559A9
SHA-256:	F3BDD2185C191359C53405A2108EEA8ED242F94B9E87832A23FF703E809F2915
SHA-512:	115EE9F765C986313358A4117B2C1ECE02628D7B1AD5A4105BA533B1EC8A0BBA90E74B6A34CC86C26365C4C2217C0A874DD33660117315A9E9C6688CE5DED2C9
Malicious:	false
Reputation:	low
Preview:	GIF89a..................................................................................."................P.-...".....xZ.}.."\...e.0..a.#}...~e..2".N..}0.Z...........Z...a..}..H.....".......R..ea.p}.l..a..c..e.. ..f..i".l..e..................."......0....#.....Z.T..N..}..X...........k........................a........H..........................Z....a..}...p..`.a$.}....................aN.}}...L."N..}......."".................x..}.."............#...e0..(.aP.}}.p..}..".....................(.aP.}}.......".N..}......a..}...x..}.a"N}.}xA~}.."b..}...~..........#..P..O..}......................................#F.P..OL.}............. .w..P.aO.}.h.0....b..}.\.#..P..O..}.............#..P."O..}.............l!..R..O..}..{#.PP.OO.}}T...........40...m......`.......#...s....-..H...!.......,.......................,x.......H.b.......E..(...!A...+...... 00Y.B..8U.`.@...%aR. a..:yJ@0.B.....<. )....@..a.L..(\.k.....(H8. B.W.(. ..,,.@v..L2`......&...`B....8.!....-.X.......X..9......$...^..

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	4.512980258465047
Encrypted:	false
SSDEEP:	48:cq274bQYe3mYGoLRwgNp9yscGL+X+XeK2qq7FA:RQYAm7oL+gP9n4+Oqq7u
MD5:	AA16F5E98058633139B1160E7C3449EF
SHA1:	B0EF114E30EAB9F785AE3705220CBF113B4B6BEC
SHA-256:	00FB6A91F3D2B00ED3397E2941EE6A8DA68BE2EED8E6525E8CDD1BEB6EF13D5B
SHA-512:	0FBF8F3730C937A58360B17E3C1536FAFF68F40DFA1E083373366D73AA2091BCCAD9BEB4459F3F9FEDC7DD88577031D90DB39712CA29669C587AF554A89A2334
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/uploads/2023/11/footer-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="180" height="36" fill="none">. <g clip-path="url(#clip0_733_5184)">. <path d="M177.595 26.909s-3.139 3.181-7.363 3.181c-4.761 0-7.804-3.621-7.804-7.827 0-4.206 2.995-7.732 7.608-7.732 3.926 0 6.527 2.694 6.527 2.694l2.75-4.258s-3.091-3.718-9.619-3.718c-8.293 0-13.592 5.97-13.592 13.062 0 7.091 5.299 13.062 13.592 13.062 6.725 0 10.306-4.062 10.306-4.062l-2.405-4.402zm-35.596 6.643l-.317 1.216s0 .012-.004.016h4.757v-9.876c0-.844.056-1.653.172-2.425a46.094 46.094 0 00-2.982 6.239 49.67 49.67 0 00-1.626 4.826" fill="#3699F1"></path>. <path d="M146.19 14.936V9.853h-5.981V27.35c.024-.044.04-.088.064-.132 1.694-3.257 3.701-6.379 6.267-9.064 1.268-1.345 2.705-2.557 4.295-3.534 1.357-.832 2.874-1.42 4.428-1.672V9.609s-.538-.1-1.128-.1c-3.826 0-6.817 1.857-7.945 5.427zM0 .053v5.43h11.433v29.301h6.331v-29.3h11.437V.052H0zm61.089 21.229c0 4.45-2.501 8.416-7.018 8.416-3.09 0-3.878-2.053-3.878-5.086V9.837H4

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3275
Entropy (8bit):	5.155678986307572
Encrypted:	false
SSDEEP:	48:XRU/jshQQe31CA4m4Zyy/mCfy1Syj1KyUIO6cBrsypvyXt:XRU/jshQJlCwRCf7JQO/ro
MD5:	1886FB28425A67641EC22DE9CE53D135
SHA1:	8DDF9AA1F74A577FEDCDBCD93E947656A80E939D
SHA-256:	4EE8BEBEC50DA1892B3C8D316AB12C6A0AC0D2673AE743AD6BBAD8C6FA6217A9
SHA-512:	28778327802E1781635C4AA4FAFF9742C37A8BC0AD700A450F3639EDD02377CE1A789325CAFCC9F8C1CB1F074AC54A0A1B770EC5FC5689B4F06DFBFD0F51BE5E
Malicious:	false
Reputation:	low
URL:	https://trustarc.com/wp-content/themes/trustarc/style.css?ver=1711465962
Preview:	/.Theme Name: TrustArc.Theme URI:.Author: The Honor Roll.Author URI: https://www.thehonorroll.com/.Version: 1.0.Description: TrustArc theme for WordPress.License: GNU General Public License v2 or later.License URI: http://www.gnu.org/licenses/gpl-2.0.html.Text Domain: trustarc.Tags: custom-background, custom-colors, custom-header, custom-logo, custom-menu./../* marketo form overrides */..mktoForm {..width: 100% !important;.}..mktoTextField,..mktoEmailField,..mktoTelField,..mktoHtmlText,..mktoForm select.mktoField,..mktoForm textarea.mktoField {..display: block;..width: 100% !important;..padding: 20px !important;.}..mktoHtmlText {..padding-left: 0 !important;..padding-right: 0 !important;.}..mktoForm .mktoFieldWrap,..mktoForm .mktoFormCol {..width: 100% !important;.}..mktoForm .mktoLabel {..width: auto !important;..padding-bottom: 8px;.}..mktoForm .mktoLabel {..font-family: museo-sans, Helvetica Neue, Arial, Noto Sans, sans-serif !important;..font-size: 18px !important;..font-style: n

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32772)
Category:	downloaded
Size (bytes):	283645
Entropy (8bit):	5.340099594147338
Encrypted:	false
SSDEEP:	6144:jN/qr0kVXC1LQ9uHP9b8Yi1WCjcS8cnP5yROd6qUtxjitvGgWZg:Za0GCLQ9uHPe91WCjcS8cMRsikGgWZg
MD5:	134DF3331B4414EBE3026F548837089B
SHA1:	B4FF87AD24E79A24EA103737320070012AEE6D86
SHA-256:	4D5E5366848AD2D8E3621058840315FAB85CF070D00E5A1229DEBD2483A1609A
SHA-512:	7D1F016153D9754AE27D17C1B52A41BE8D22929538970F678CBED052265506FD70560DF5A80E59CD712731A10BB99A4609345957633AC247F3E8FB9F6013E0BC
Malicious:	false
Reputation:	low
URL:	https://assets.uvcdn.com/pkg/clients/site2/index-4d5e5366848ad2d8e3621058840315fab85cf070d00e5a1229debd2483a1609a.js
Preview:	function hex_sha1(e){return binb2hex(core_sha1(str2binb(e),e.lengthchrsz))}function b64_sha1(e){return binb2b64(core_sha1(str2binb(e),e.lengthchrsz))}function str_sha1(e){return binb2str(core_sha1(str2binb(e),e.length*chrsz))}function hex_hmac_sha1(e,t){return binb2hex(core_hmac_sha1(e,t))}function b64_hmac_sha1(e,t){return binb2b64(core_hmac_sha1(e,t))}function str_hmac_sha1(e,t){return binb2str(core_hmac_sha1(e,t))}function sha1_vm_test(){return"a9993e364706816aba3e25717850c26c9cd0d89d"==hex_sha1("abc")}function core_sha1(e,t){e[t>>5]\|=128<<24-t%32,e[(t+64>>9<<4)+15]=t;for(var n=Array(80),r=1732584193,i=-271733879,o=-1732584194,a=271733878,s=-1009589776,u=0;u<e.length;u+=16){for(var c=r,l=i,d=o,f=a,h=s,p=0;80>p;p++){16>p?n[p]=e[u+p]:n[p]=rol(n[p-3]^n[p-8]^n[p-14]^n[p-16],1);var m=safe_add(safe_add(rol(r,5),sha1_ft(p,i,o,a)),safe_add(safe_add(s,n[p]),sha1_kt(p)));s=a,a=o,o=rol(i,30),i=r,r=m}r=safe_add(r,c),i=safe_add(i,l),o=safe_add(o,d),a=safe_add(a,f),s=safe_add(s,h)}return Array(

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	735
Entropy (8bit):	4.722835205925827
Encrypted:	false
SSDEEP:	12:TMHd6WmOHjZRGfnlmw0XAGaqJIxKTwGjlw5TensLVXgYPSsvbCrx/2tFUhgxQtg4:2d6WmojkYrXBIxKTllTsLpPSsuxu3HQ/
MD5:	AC05FF10A28AEFB3D21A915912D41AEF
SHA1:	434679B258A082E4269E9EFE5E164058BAF97EC0
SHA-256:	6B5A90A511AE69CF2AA0538C6FA3E54E0D3DEE6FB70EEB5D7D02B76B285632DD
SHA-512:	4DF5BD59976B739E37CCDE29A744371AC5A37E9685AB38ABD11286FE69804F3DD4050C58E458D982AB97F716D6B3B22B4B947327E88C044B2ADF1447A911448D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="23" height="23" fill="none">. <rect x=".875" y=".426" width="22" height="22" rx="2" fill="#fff"></rect>. <path d="M8.9 4.461l3.525 4.473 4.085-4.485h2.405l-5.36 5.9c.493.7 1.044 1.343 1.562 2.01.526.68 1.063 1.352 1.594 2.028l1.573 2.003 1.591 2.029h-4.922l-3.883-4.882c-.568.513-1.018 1.093-1.524 1.625-.502.527-.984 1.073-1.473 1.612-.496.548-.99 1.097-1.492 1.651h-2.41l5.735-6.306c-.105-.151-.192-.291-.294-.42-.694-.875-1.393-1.747-2.088-2.62L4.08 4.75c-.069-.087-.135-.176-.205-.267.242-.061 4.481-.081 5.025-.022zM6.617 5.735l8.993 11.31c.545.059 1.165.04 1.41-.048L8.166 5.736a70.811 70.811 0 00-1.548-.001z" fill="#000239"></path>.</svg>.

Static File Info

⊘No static file info

File Icon


Icon Hash:	b29a8a8e86868381

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 11, 2024 19:25:16.944118977 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 11, 2024 19:25:20.033277035 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.033325911 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.033415079 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.033942938 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.033998966 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.034218073 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.034231901 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.034252882 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.034508944 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.034532070 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.894881964 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.895152092 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.895189047 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.895584106 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.895664930 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.896305084 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.896378040 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.899785995 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.899863005 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.900396109 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.900408983 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.927892923 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.935703993 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.935720921 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.936258078 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.936333895 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.936983109 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.937025070 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.939625025 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.939690113 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:20.951837063 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.975590944 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:20.975625992 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:20.975709915 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:20.978029013 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:20.978044987 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:20.989690065 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:20.989698887 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.036875010 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:21.076482058 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.076560020 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.076679945 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:21.079350948 CEST	49736	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:21.079375029 CEST	443	49736	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.081402063 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:21.127424955 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.679723978 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:21.680016041 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:21.680036068 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:21.681130886 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:21.681188107 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:21.983716011 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.983772039 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.983778000 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.983792067 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.983798981 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.983818054 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:21.983829975 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.983839989 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:21.983869076 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:21.983891010 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.001837015 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.001847982 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.001864910 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.001890898 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.001904011 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.001910925 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.001951933 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.075932026 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.075953007 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.076003075 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.076010942 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.076072931 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.081763983 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:22.081931114 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:22.093178988 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.093208075 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.093261957 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.093269110 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.093314886 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.095032930 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.095069885 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.095123053 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.095128059 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.095155001 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.095191956 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.097547054 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.097563982 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.097625971 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.097632885 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.097677946 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.127413988 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:22.127433062 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:22.168848991 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.168881893 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.168946981 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.168947935 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.168961048 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.169018984 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.182826042 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:22.185803890 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.185834885 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.185899019 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.185914040 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.185950041 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.186902046 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.186918974 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.186954975 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.186964989 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.186983109 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.187000036 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.187666893 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.187710047 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.187737942 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.187745094 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.187757969 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.187768936 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.187783957 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.187809944 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.208931923 CEST	49735	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:22.208956957 CEST	443	49735	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:22.417426109 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.417459965 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.417515993 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.417896032 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.417942047 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.417999029 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.418484926 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.418503046 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.418787956 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.418801069 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.438050032 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.438088894 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.438266039 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.439357996 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.439413071 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.439662933 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.439804077 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.439856052 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.439912081 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.440362930 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.440403938 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.440466881 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.449222088 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.449259043 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.449357033 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.449600935 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.449618101 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.449691057 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.451406956 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.451453924 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.451529026 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.455063105 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.455079079 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.455755949 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.455773115 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.456393957 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.456412077 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.456757069 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.456770897 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.457209110 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.457220078 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.457775116 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.457789898 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:22.458386898 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:22.458409071 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.055856943 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:23.055912971 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:23.056003094 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:23.059449911 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:23.059463978 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:23.140181065 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.140753984 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.141771078 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.141799927 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.142088890 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.142102957 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.142827034 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.142888069 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.143110991 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.143201113 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.148529053 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.148684025 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.148861885 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.148888111 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.149171114 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.149254084 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.149549961 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.149561882 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.167637110 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.168051004 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.168076992 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.169261932 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.169320107 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.169907093 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.170154095 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.170254946 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.170299053 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.170563936 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.170593977 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.171804905 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.171857119 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.172204971 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.172306061 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.172394037 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.172400951 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.174695015 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.174937010 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.175138950 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.175146103 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.175359011 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.175368071 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.176466942 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.176522017 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.176968098 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.177020073 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.177122116 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.177223921 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.177478075 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.177620888 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.177627087 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.177736044 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.177902937 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.177913904 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.178339958 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.178436041 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.178586960 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.178591967 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.178919077 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.178976059 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.179045916 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.179054022 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.179306030 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.179620981 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.179682970 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.179891109 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.179899931 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.180063963 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.180114985 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.180430889 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.180448055 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.180790901 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.180852890 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.181047916 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.181052923 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.181865931 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.181931973 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.182343960 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.182406902 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.182523012 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.182528973 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.193718910 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.193877935 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.211394072 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.224878073 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.224879026 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.224885941 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.224890947 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.224914074 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.224915981 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.224915981 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.224984884 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.271332979 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.407366037 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.407495022 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.407546997 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.407565117 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.407581091 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.407643080 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.408478975 CEST	49741	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.408497095 CEST	443	49741	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.408730984 CEST	49751	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.408775091 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.408837080 CEST	49751	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.409188032 CEST	49751	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.409202099 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.410038948 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.420003891 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.420012951 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.420031071 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.420084000 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.420095921 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.420124054 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.420156956 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.440718889 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.448290110 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.450766087 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.450776100 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.450805902 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.450826883 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.450834990 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.450835943 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.450862885 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.450889111 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.450896025 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.450912952 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.451194048 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.451220989 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.451227903 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.451251030 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.451261997 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.451271057 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.451280117 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.451289892 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.451297998 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.451312065 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.451347113 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.451746941 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.489548922 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.504770994 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.504786015 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.504796982 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.552118063 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.684477091 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.684607029 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.684684992 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.684746981 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.685255051 CEST	49744	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.685270071 CEST	443	49744	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.685370922 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.685385942 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.685417891 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.685431004 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.685451031 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.685463905 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.685483932 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.685518026 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.685540915 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.685949087 CEST	49752	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.685987949 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686006069 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686028957 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686052084 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686077118 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686090946 CEST	49752	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.686100006 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.686137915 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686151028 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.686189890 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.686816931 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686829090 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686846972 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686897993 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.686908960 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.686944962 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.686944962 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.687093019 CEST	49752	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.687114954 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.687731028 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.687763929 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.687891006 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.687897921 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.687946081 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.688817024 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.688824892 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.688880920 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.688900948 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.688910961 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.688935995 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.688946009 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.688947916 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.688965082 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.688987017 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.689008951 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.689476967 CEST	49746	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.689490080 CEST	443	49746	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.690376997 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.690391064 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.690422058 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.690468073 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.690475941 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.690500021 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.690525055 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.690557003 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.691478968 CEST	49747	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.691490889 CEST	443	49747	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.691695929 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.691778898 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.691867113 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.692367077 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.692384005 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.692425013 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.692433119 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.692467928 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.692467928 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.692754030 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.692830086 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.692845106 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.692876101 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.692905903 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.692922115 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.692931890 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.692934990 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.692979097 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.692985058 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.693053007 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.693111897 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.693837881 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.693855047 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.693954945 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.693962097 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.694060087 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.694693089 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:23.694713116 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:23.694808006 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:23.694823027 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.694856882 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.694905996 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.695671082 CEST	49742	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.695688963 CEST	443	49742	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.696408033 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.696445942 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.696513891 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.697175026 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:23.697186947 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:23.697491884 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.697521925 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.697788000 CEST	49740	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.697807074 CEST	443	49740	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.698858976 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.698879957 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.698950052 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.700258970 CEST	49748	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.700270891 CEST	443	49748	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.701129913 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:23.701149940 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:23.737514019 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:23.737627983 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:23.742465973 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:23.742486954 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:23.742785931 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:23.786117077 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:23.799477100 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:23.843461037 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.008826971 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.008898973 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.009103060 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:24.046749115 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.046781063 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.046868086 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.046879053 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.046943903 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.046996117 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.049961090 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.050116062 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.050173998 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.050199032 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.050256014 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.051167011 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.179646969 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.180577993 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:24.180609941 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.181881905 CEST	49751	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.181899071 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.183067083 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.191873074 CEST	49751	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.191941023 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.196856976 CEST	49751	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.212414980 CEST	49745	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.212444067 CEST	443	49745	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.213356018 CEST	49758	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.213416100 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.213500023 CEST	49758	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.214579105 CEST	49758	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.214595079 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.241926908 CEST	49743	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.241945982 CEST	443	49743	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.243118048 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.243185997 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.243243933 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.243403912 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.246346951 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.246366024 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.269830942 CEST	49760	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:24.269867897 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.269953966 CEST	49760	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:24.270390987 CEST	49760	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:24.270410061 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.392888069 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.392926931 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.392990112 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.393460989 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.393496037 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.393543959 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.393920898 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.393954992 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.394057989 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.394474983 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.394503117 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.394578934 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.395256042 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.395265102 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.395314932 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.396886110 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.396898985 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.397875071 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.397881985 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.398682117 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.398699999 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.399477959 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.399493933 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.400289059 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.400302887 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.402602911 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.402951956 CEST	49752	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.402965069 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.403323889 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.404119015 CEST	49752	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.404186964 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.404571056 CEST	49752	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.416152954 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.416394949 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.416410923 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.417443991 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.417730093 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.418050051 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.418097973 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.418281078 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.418288946 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.425753117 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.426043987 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.426057100 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.427072048 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.427120924 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.428205967 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.428257942 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.428730965 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.428736925 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.448465109 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.448781967 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:24.448801994 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.449806929 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.449872971 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:24.451397896 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.457182884 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:24.457242012 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.457509041 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:24.457520962 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.460937977 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.473761082 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.505117893 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:24.917057991 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.920830011 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.920905113 CEST	49760	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:24.923015118 CEST	49760	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:24.923038006 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.923307896 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.924563885 CEST	49760	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:24.927587986 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.927598953 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.927614927 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.927676916 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:24.927709103 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.927757025 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:24.930289030 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.930955887 CEST	49758	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.930967093 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.931323051 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.932111025 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:24.932164907 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:24.932646036 CEST	49758	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.932704926 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.932867050 CEST	49758	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:24.971406937 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:24.975419044 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:24.989985943 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.002213001 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.002249002 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.003410101 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.003475904 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.004199982 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.004281998 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.004580975 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.004596949 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.008164883 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.008215904 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.008243084 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.008275032 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.008289099 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.008421898 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.027514935 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.027560949 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.027594090 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.027605057 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.027632952 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.027652025 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.054521084 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.063190937 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.063282013 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.063411951 CEST	49751	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.065095901 CEST	49751	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.065116882 CEST	443	49751	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.071825027 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.071908951 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.071990967 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.072349072 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.072371006 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.075952053 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.075990915 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.076066017 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.076659918 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.076674938 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.097443104 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.097492933 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.097531080 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.097589970 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.097605944 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.097692013 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.098498106 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.098539114 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.098587036 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.098597050 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.098653078 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.099029064 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.101794004 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.101840973 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.101870060 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.101882935 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.101927996 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.101953983 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.105603933 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.105675936 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.105678082 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.105952024 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.106044054 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.106060028 CEST	443	49753	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.106070042 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.106190920 CEST	49753	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.125469923 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.125509977 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.125654936 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.125945091 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.125965118 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.126327991 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.126862049 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.126873016 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.127759933 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.127989054 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.128123999 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.128757954 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.129030943 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.129048109 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.129049063 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.130165100 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.130219936 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.130585909 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.131273031 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.131290913 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.131411076 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.131437063 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.132066011 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.132136106 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.132543087 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.132623911 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.133307934 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.133316040 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.133418083 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.133501053 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.133517981 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.135375023 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.135611057 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.135637999 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.136701107 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.136765957 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.137075901 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.137129068 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.137178898 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.137188911 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.140064955 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:25.140095949 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:25.140160084 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:25.140486956 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:25.140501022 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:25.148452044 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.148753881 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.148765087 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.149816990 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.149880886 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.150222063 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.150294065 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.150356054 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.150362015 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.176480055 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.176480055 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.177120924 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.177135944 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.178916931 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.191590071 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.196858883 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:25.196922064 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:25.196985006 CEST	49760	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:25.197808981 CEST	49760	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:25.197829008 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:25.197849989 CEST	49760	443	192.168.2.4	184.28.90.27
Sep 11, 2024 19:25:25.197854996 CEST	443	49760	184.28.90.27	192.168.2.4
Sep 11, 2024 19:25:25.223954916 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.288817883 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.289093018 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.289221048 CEST	49752	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.289719105 CEST	49752	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.289763927 CEST	443	49752	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.290934086 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.290983915 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.291035891 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.291282892 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.291297913 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.293097973 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.294223070 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.294323921 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.294589996 CEST	49754	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.294608116 CEST	443	49754	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.295924902 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.295963049 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.296196938 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.296401024 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.296416044 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.357901096 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.357928991 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.357997894 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.358001947 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.358275890 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.359287977 CEST	49755	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.359328985 CEST	443	49755	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.399084091 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.399199963 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.399344921 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.399413109 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.399947882 CEST	49765	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.399964094 CEST	443	49765	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.405467033 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.405514956 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.405579090 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.405592918 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.405611038 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.405657053 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.406198025 CEST	49762	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.406209946 CEST	443	49762	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.410567999 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.410619974 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.410712004 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.410779953 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.410881042 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.410933971 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.411127090 CEST	49764	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.411158085 CEST	443	49764	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.415214062 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.415241003 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.415249109 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.415277004 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.415307045 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.415307045 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.415354967 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.415416002 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.415416002 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.415416002 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.427225113 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.427333117 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.427408934 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.427419901 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.427828074 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.427973032 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.428107023 CEST	443	49766	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.428153038 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.428153038 CEST	49766	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.496876955 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.496965885 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.496969938 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.497020960 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.497348070 CEST	49763	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.497380018 CEST	443	49763	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.601712942 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.601739883 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.601856947 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.604304075 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.604319096 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.607194901 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.607204914 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.607332945 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.607857943 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.607872963 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.610721111 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.610757113 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.610830069 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.611145020 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.611160994 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.825598955 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.825623035 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.825690985 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.825690031 CEST	49758	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.825742960 CEST	49758	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.856725931 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.868033886 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.869849920 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.869859934 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.869915009 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.869925022 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.869982004 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.873596907 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.879892111 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.887927055 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:25.907299995 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.916487932 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:25.916501999 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:25.916722059 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.916759014 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.916881084 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.916903973 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.917232037 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.917263031 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.917681932 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:25.917715073 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.917746067 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:25.918031931 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.918078899 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.918528080 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.918615103 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.919085026 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:25.919151068 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:25.919483900 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.919547081 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.919962883 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.920131922 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:25.920147896 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:25.920180082 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.920188904 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.920458078 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:25.920531034 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:25.967395067 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:25.971848011 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:25.972444057 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.045821905 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.046396017 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.099847078 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.099848986 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.137636900 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.147224903 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.147238016 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.147255898 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.147313118 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.147365093 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.147427082 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.147427082 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.151937008 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.152539015 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.152611971 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.184395075 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.184426069 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.184433937 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.184484005 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.184508085 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.184519053 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.184881926 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.184910059 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.184957027 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.231082916 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.231108904 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.231178045 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.231205940 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.231271029 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.231303930 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.235727072 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.235743046 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.235790014 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.235801935 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.235830069 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.235852003 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.236557961 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:26.236933947 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:26.238256931 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.238275051 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.238629103 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.238645077 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.239079952 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.239486933 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.239500999 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.239535093 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.240844965 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.240921974 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.241565943 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.241632938 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.241873026 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:26.241919994 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:26.242073059 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.242136955 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.242149115 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.253937006 CEST	49758	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.253961086 CEST	443	49758	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.266237020 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.266247034 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.266288042 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.266310930 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.266324997 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.266362906 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.266386986 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.287409067 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.287605047 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.287631035 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.287707090 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.287724972 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.287753105 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.287771940 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.287870884 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.287931919 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.293087006 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:26.293987989 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.319255114 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.319292068 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.319354057 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.319365025 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.319406033 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.320198059 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.320214987 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.320259094 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.320267916 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.320306063 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.322460890 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.323884964 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.323915958 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.324002981 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.324012041 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.328579903 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.328594923 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.328638077 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.328663111 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.328682899 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.360914946 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.360948086 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.361123085 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.361182928 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.362006903 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.364542961 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.364561081 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.364651918 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.364665985 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.365936041 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.366301060 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.366317987 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.366384029 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.366393089 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.366925955 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.366974115 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.366978884 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.367011070 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.367072105 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.373092890 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.373991966 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.382708073 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.387423038 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.410711050 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.410737038 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.410795927 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.410820961 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.410845995 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.410850048 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.410870075 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.410897017 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.437122107 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.437129021 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.552150965 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.552171946 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.552865982 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.552885056 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.553323030 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.553335905 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.553404093 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.603569031 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.784408092 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.784629107 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.784714937 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.784744978 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.785489082 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.785784006 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.785815954 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.785836935 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.785984039 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.786000967 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.786040068 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.827405930 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.829024076 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.829040051 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.829061031 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.831414938 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.856381893 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.856542110 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.857012987 CEST	49768	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.857038975 CEST	443	49768	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.857573032 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.857681990 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.858417988 CEST	49759	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.858460903 CEST	443	49759	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.859889984 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.859919071 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.860016108 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.862267017 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.862277985 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.862860918 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.862895012 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.879220009 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.903875113 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.908281088 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.908344030 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.908396006 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.912549019 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.915570021 CEST	49767	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.915596962 CEST	443	49767	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.916208029 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.916224957 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.916656971 CEST	49770	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:26.916673899 CEST	443	49770	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:26.923141956 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.923175097 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.923222065 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.923784971 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.923799038 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.975933075 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.975974083 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.976248026 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.976296902 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.976840973 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.976934910 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.982727051 CEST	49775	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.982742071 CEST	443	49775	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:26.983112097 CEST	49773	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:26.983130932 CEST	443	49773	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.033813000 CEST	49782	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.033891916 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.033965111 CEST	49782	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.034384012 CEST	49782	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.034400940 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.038752079 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.042412043 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.042450905 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.042506933 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.042897940 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.042910099 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.045661926 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.045698881 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.045785904 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.046122074 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.046132088 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.049093962 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.049120903 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.049180031 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:27.049210072 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.049313068 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.049364090 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:27.050031900 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050045013 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050075054 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050086975 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050097942 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050098896 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.050124884 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050138950 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.050144911 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050162077 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.050647974 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050690889 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050736904 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.050750971 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050765038 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.050801039 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.051114082 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.051156044 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.051162004 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.051908970 CEST	49769	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:27.051935911 CEST	443	49769	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.059879065 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.059900045 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.059956074 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.060133934 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.060148001 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.060852051 CEST	49774	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.060866117 CEST	443	49774	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.074807882 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.074830055 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.074837923 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.074865103 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.074889898 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.074898958 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.074914932 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.074934006 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.074960947 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.098788023 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.133264065 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.133277893 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.133301020 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.133308887 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.133331060 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.133384943 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.133392096 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.133426905 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.133547068 CEST	49786	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:27.133586884 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.133640051 CEST	49786	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:27.134352922 CEST	49786	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:27.134362936 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.139990091 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.140000105 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.140013933 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.140043974 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.140050888 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.140100002 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.157809973 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.157834053 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.157907963 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.157924891 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.157958984 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.164303064 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.164318085 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.164359093 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.164375067 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.164396048 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.164413929 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.171736956 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:27.171775103 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:27.171830893 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:27.172250986 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:27.172261953 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:27.215955973 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.216015100 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.216056108 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.216078043 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.216109991 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.216125011 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.220231056 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.220257044 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.220293045 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.220300913 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.220347881 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.223419905 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.223448992 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.223489046 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.223495007 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.223536015 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.228713036 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.228730917 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.228765011 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.228770018 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.228776932 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.228818893 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.242110014 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.242182970 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.242197037 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.242218018 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.242232084 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.242254972 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.244333982 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.244371891 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.244395018 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.244402885 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.244434118 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.244438887 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.244468927 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.244544983 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.244589090 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.246027946 CEST	49771	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.246046066 CEST	443	49771	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.269578934 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.269629002 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.269697905 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.269881964 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.269912004 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.275096893 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.275137901 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.275204897 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.275470972 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.275485992 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.303432941 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.303478956 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.303503990 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.303512096 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.303545952 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.306396008 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.306412935 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.306447029 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.306452036 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.306495905 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.309412956 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.309432983 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.309499979 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.309505939 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.312252045 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.312274933 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.312326908 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.312331915 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.312361956 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.315267086 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.315279961 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.315303087 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.315318108 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.315324068 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.315357924 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.318281889 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.318299055 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.318345070 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.318352938 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.318387032 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.320612907 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.320636034 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.320677042 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.320681095 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.320719004 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.389275074 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.389296055 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.389337063 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.389348984 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.389379978 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.391263962 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.391299963 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.391318083 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.391321898 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.391357899 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.393680096 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.393695116 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.393735886 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.393743038 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.393778086 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.393795013 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.396111012 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.396126986 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.396167040 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.396173000 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.396198988 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.398514032 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.398529053 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.398586035 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.398592949 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.398632050 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.400146961 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.400186062 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.400209904 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.400214911 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.400255919 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.402069092 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.402086020 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.402133942 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.402139902 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.402173042 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.404002905 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.404016972 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.404169083 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.404175043 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.404206991 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.477854013 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.477876902 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.477937937 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.477957010 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.477988958 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.478008986 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.479827881 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.479856014 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.479904890 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.479911089 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.479970932 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.481734037 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.481749058 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.481812000 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.481817961 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.481856108 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.484273911 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.484301090 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.484353065 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.484361887 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.484414101 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.486037016 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.486054897 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.486100912 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.486108065 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.486145020 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.488454103 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.488495111 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.488512039 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.488519907 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.488552094 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.488586903 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.490346909 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.490364075 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.490401983 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.490408897 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.490437031 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.490458012 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.492824078 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.492841959 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.492878914 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.492886066 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.492918015 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.492969036 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.565184116 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.565206051 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.565354109 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.565354109 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.565392017 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.565438986 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.566926956 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.566971064 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.566984892 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.566993952 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.567034960 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.567065954 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.569617987 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.569634914 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.569679976 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.569689035 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.569727898 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.572312117 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.572328091 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.572369099 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.572377920 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.572429895 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.572451115 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.573925972 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.573949099 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.574011087 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.574018955 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.574058056 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.575727940 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.575747967 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.575788021 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.575795889 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.575892925 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.577910900 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.577933073 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.577980042 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.577991009 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.578016996 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.578036070 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.578748941 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.578764915 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.578819990 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.578828096 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.578864098 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.593764067 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.594118118 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.594141006 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.594778061 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.595153093 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.595217943 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.595299959 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.639400005 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.650408983 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.650927067 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.650949001 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.652807951 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.652827024 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.652884007 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.652903080 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.652925968 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.652947903 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.654450893 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.654496908 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.654520988 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.654520988 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.654526949 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.654536009 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.654570103 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.654597998 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.654597998 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.655278921 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.655365944 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.655781031 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.655795097 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.656291008 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.656308889 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.656343937 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.656351089 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.656380892 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.656393051 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.657916069 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.657932043 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.657979012 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.657987118 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.658018112 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.659693003 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.659709930 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.659744024 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.659751892 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.659790039 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.659806967 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.660794973 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.660811901 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.660859108 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.660867929 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.660901070 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.662477970 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.662496090 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.662544966 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.662554026 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.662595987 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.664004087 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.664021015 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.664047956 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.664067984 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.664074898 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.664107084 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.664155960 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.665533066 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.665548086 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.666161060 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.666692972 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.666774035 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.667043924 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.700628042 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.711402893 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.739589930 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.739617109 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.739660025 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.739672899 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.739711046 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.741034985 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.741071939 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.741080999 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.741092920 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.741122007 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.741142035 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.742002010 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.742023945 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.742054939 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.742062092 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.742100000 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.743797064 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.743813038 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.743875980 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.743882895 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.743918896 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.744771957 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.744790077 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.744827032 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.744832993 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.744900942 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.746395111 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.746429920 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.746473074 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.746479034 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.746563911 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.747940063 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.747972012 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.748011112 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.748017073 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.748044014 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.748074055 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.749871016 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.749897003 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.749926090 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.749932051 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.749984026 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.766803980 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.767102957 CEST	49782	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.767142057 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.767533064 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.768023968 CEST	49782	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.768119097 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.768270969 CEST	49782	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.782841921 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.783162117 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.783171892 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.784290075 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.784341097 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.784452915 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.784930944 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.784995079 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.785288095 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.785295010 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.785573959 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.785631895 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.786734104 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.786789894 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.790256977 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.815398932 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.819626093 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.819804907 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.820631027 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.820646048 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.821202040 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.821218967 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.821733952 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.822386980 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.822453022 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.822530985 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.827198982 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.827227116 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.827260971 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.827275038 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.827301025 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.827320099 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.828183889 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.828200102 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.828234911 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.828241110 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.828269005 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.828283072 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.829377890 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.829391956 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.829421043 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.829427004 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.829461098 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.830437899 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.830457926 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.830491066 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.830497980 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.830526114 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.830549955 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.831330061 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.831346989 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.831382036 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.831393003 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.831422091 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.831442118 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.832794905 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.833312988 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.833349943 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.833369017 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.833376884 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.833410025 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.833429098 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.835201025 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.835218906 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.835269928 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.835277081 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.835314989 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.837366104 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.837383986 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.837410927 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.837419987 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.837425947 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.837467909 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.867402077 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.872375965 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.911747932 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.912954092 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.913034916 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.913084030 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.913098097 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.913115025 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.913163900 CEST	49786	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:27.913177013 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.913192987 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.913528919 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.914165020 CEST	49786	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:27.914227009 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.914535999 CEST	49786	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:27.920248985 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:27.921813965 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.921840906 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.921875954 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.921891928 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.921921015 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.921942949 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.923177004 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.923221111 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.923243046 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.923249006 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.923293114 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.924511909 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.924532890 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:27.924535036 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.924546957 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:27.924571037 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.924577951 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.924608946 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.924643040 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.924933910 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.924952984 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.924959898 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:27.924998045 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.925004959 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.925056934 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.925168991 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.925254107 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.925297976 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.925843000 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:27.925909042 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:27.925995111 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:27.926251888 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.933840036 CEST	49772	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.933855057 CEST	443	49772	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.936171055 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.936194897 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.936228037 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.936235905 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.936254978 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.936268091 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.936283112 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.936316967 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.938467026 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.938520908 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.946029902 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.946078062 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.946132898 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.946571112 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:27.946584940 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:27.955432892 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:27.971412897 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:28.003102064 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.003146887 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.003171921 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.003181934 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.003212929 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.003218889 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.003310919 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.003356934 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.004430056 CEST	49776	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.004445076 CEST	443	49776	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.016407013 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.016469955 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.016500950 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.016516924 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.016516924 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.016539097 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.016911983 CEST	49778	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.016928911 CEST	443	49778	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.019079924 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.019277096 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.019290924 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.022908926 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.022927999 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.022977114 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.023406982 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.023417950 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.023921967 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.024173975 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.024226904 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.024338007 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.024350882 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.024904013 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.024976969 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.025223970 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.025229931 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.025495052 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.025548935 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.025990963 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.026052952 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.026331902 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.026340008 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.043613911 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.043684006 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.043745041 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.044115067 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.044140100 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.050806999 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.050832033 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.050882101 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.051120996 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.051131964 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.069334984 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.069623947 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.095885038 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.095911980 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.095920086 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.095952988 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.095983028 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.095999002 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.095999956 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.096040010 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.096653938 CEST	49784	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.096671104 CEST	443	49784	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.096921921 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.096966028 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.097012997 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.097058058 CEST	49782	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.097131968 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.097156048 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.097419977 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.098018885 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.098027945 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.098332882 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.098507881 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.099178076 CEST	49782	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.099191904 CEST	443	49782	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.107722998 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.107741117 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.107820034 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.107820034 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.107820034 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.107829094 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.107832909 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.107866049 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.107881069 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.107892990 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.107919931 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.107923031 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.107930899 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.107944965 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.107964039 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.108392000 CEST	49785	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.108402967 CEST	443	49785	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.111826897 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.111848116 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.112082005 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.112082005 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.112106085 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.116535902 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.116565943 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.116717100 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.121979952 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.121998072 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.190781116 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.190810919 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.191054106 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.191068888 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.194005966 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.195589066 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:28.195611954 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:28.195754051 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:28.195764065 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:28.195918083 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:28.196481943 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:28.196481943 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:28.196813107 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.196856976 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.196934938 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.196934938 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.196944952 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.196995020 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.439094067 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:28.439120054 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:28.439155102 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:28.439191103 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:28.439208031 CEST	49786	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:28.439759970 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.439793110 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.439845085 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.439851046 CEST	49786	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:28.439881086 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.439881086 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.439897060 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.439941883 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.440263033 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.440284014 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.440289974 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.440331936 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.440346956 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.440346956 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.440354109 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.440613985 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.441137075 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.441179991 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.441236973 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.441237926 CEST	49786	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:28.441241980 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.441255093 CEST	443	49786	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:28.441284895 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.441284895 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.442126036 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.442847013 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.442890882 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.442934990 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.442939997 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.442979097 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.443046093 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.444302082 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.444339991 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.444811106 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.444871902 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.444891930 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.444926023 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.444931984 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.444962978 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.444962978 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.444977999 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.444987059 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.445018053 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.445043087 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.445043087 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.445502996 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.445553064 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.445684910 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.445687056 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.445705891 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.445708990 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.445722103 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.445825100 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.446470022 CEST	49783	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.446482897 CEST	443	49783	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.447077990 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.447091103 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.447103977 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.447210073 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.447210073 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.447231054 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.447304010 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.449309111 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.449453115 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.449508905 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.449645042 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.449700117 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.449718952 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.449775934 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.449781895 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.452675104 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.452701092 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.452898026 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.452903986 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.453001022 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.454145908 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:28.454145908 CEST	49788	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.454178095 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:28.454190969 CEST	443	49788	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.456298113 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:28.456448078 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:28.456464052 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:28.459994078 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.460026979 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.464726925 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.464726925 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.464757919 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.468559980 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.468584061 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.471894979 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.471947908 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.471966028 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.472949982 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.472971916 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.473186970 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.473195076 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.473653078 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.473690987 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.473715067 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.473716974 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.473754883 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.473942041 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.475600958 CEST	49789	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.475609064 CEST	443	49789	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.498523951 CEST	49787	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:28.498548985 CEST	443	49787	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:28.566231966 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.575809956 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.575829983 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.575968027 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.575988054 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.576248884 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.661262989 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.661293983 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.661322117 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.661408901 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.661408901 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.661439896 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.662163973 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.662342072 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.662353039 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.662406921 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.664005995 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.664201021 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.664211988 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.666215897 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.666488886 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.666498899 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.668788910 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.668901920 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.668912888 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.681169987 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.681691885 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.681715965 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.682861090 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.683329105 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.683329105 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.683347940 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.683579922 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.709980965 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.724191904 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.747004986 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.747123003 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.747147083 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.747168064 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.747473955 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.747632027 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.747662067 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.747673035 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.747695923 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.748141050 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.748245955 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.748254061 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.751885891 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.751952887 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.751955986 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.751971006 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.752099991 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.752487898 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.752625942 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.752866030 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.752932072 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.753371000 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.753453970 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.754498959 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.754688978 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.757200956 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.757370949 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.798640966 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.798871040 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.798892021 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.799268961 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.799757957 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.799757957 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.799829006 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.800113916 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.800307035 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.800326109 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.800690889 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.801204920 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.801204920 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.801259995 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.831175089 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.831492901 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.831502914 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.831842899 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.834517002 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.834579945 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.834666967 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.837629080 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.837723017 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.837759018 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.837779045 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.837821960 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.837924004 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.838102102 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.838130951 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.838131905 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.838146925 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.838157892 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.838478088 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.838500977 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.838509083 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.838521957 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.838571072 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.838571072 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.838579893 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.839061975 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.839147091 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.839174032 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.839183092 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.839209080 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.839617014 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.839828014 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.840140104 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.840169907 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.840176105 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.840187073 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.840199947 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.841979027 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.841985941 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.842650890 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.842850924 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.842878103 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.842885017 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.842947006 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.842988968 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.842995882 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.843019962 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.843156099 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.843167067 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.843398094 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.843416929 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.843424082 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.843446970 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.843489885 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.843586922 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.843641043 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.843712091 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.843821049 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.843918085 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.844187021 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.844193935 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.844217062 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.844300032 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.844372988 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.844382048 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.845005035 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.845134974 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.845148087 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.845187902 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.845211029 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.845218897 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.845293045 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.845323086 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.845357895 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.845402002 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.845453978 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.845483065 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.845629930 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.846162081 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.846225977 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.846334934 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.846405983 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.846529961 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.846657038 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.846664906 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.847887993 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.848002911 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.848026991 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.848036051 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.848186016 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.848212004 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.848218918 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.848295927 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.849984884 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.850214958 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.850224972 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.851990938 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.851990938 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.879406929 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.891397953 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.896612883 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.897190094 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.897211075 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.898168087 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.898168087 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.898180962 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.898206949 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.898663044 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.898739100 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.899971962 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.899971962 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.899983883 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.900055885 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.928358078 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.928457975 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.928491116 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.928508043 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.928533077 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.928571939 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.928580999 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.928795099 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.929991007 CEST	49777	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.930006981 CEST	443	49777	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.935813904 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.935847998 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.935971975 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.936496973 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.936496973 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.936518908 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.936532021 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.936680079 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.936836004 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.936849117 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:28.944771051 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:28.944792032 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.944808006 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.983510971 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.983557940 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.983767033 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.983851910 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:28.983866930 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:28.991337061 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.077919006 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.078016043 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088448048 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088455915 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088471889 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088541985 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088551044 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088552952 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.088552952 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.088566065 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088577032 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088596106 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.088603020 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088612080 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088623047 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.088630915 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.088644981 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.088660955 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.088730097 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.115170002 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.119458914 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.124922991 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.124932051 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.124953032 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.124964952 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.124975920 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.124978065 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.125005960 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.125025988 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.125032902 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.125046015 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.125053883 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.125111103 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.125283957 CEST	49796	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.125299931 CEST	443	49796	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.130666018 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.130676985 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.130712986 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.130713940 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.130728960 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.130739927 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.130748034 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.130762100 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.130762100 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.130789042 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.170553923 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.170810938 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.170830965 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.171233892 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.171639919 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.171705008 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.171828032 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.171940088 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.171976089 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.172010899 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.172024965 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.172065020 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.172082901 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.172125101 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.172779083 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.172797918 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.172847033 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.172893047 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.172925949 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.172945023 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.173276901 CEST	49793	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.173290014 CEST	443	49793	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.177886963 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.177903891 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.177964926 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.177973032 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.177994967 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.178014040 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.190021038 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.190751076 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.190804958 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.191294909 CEST	49791	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.191308975 CEST	443	49791	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.191611052 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.192188978 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:29.192203045 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.192583084 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.193603039 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:29.193669081 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.193774939 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.194154978 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:29.194505930 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.194525003 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.195806980 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.195863008 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.196367025 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.196455956 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.197320938 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.197330952 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.213295937 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.213326931 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.213352919 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.213360071 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.213391066 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.213411093 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.213414907 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.213619947 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.213655949 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.213895082 CEST	49794	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.213901997 CEST	443	49794	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.219403028 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.221096039 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.221281052 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.221292973 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.222770929 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.222831011 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.223320007 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.223412991 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.224106073 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:29.224145889 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:29.224199057 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:29.224541903 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.224550962 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.225459099 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:29.225477934 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:29.239402056 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.241561890 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.265603065 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.265640974 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.265674114 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.265691996 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.265726089 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.266515017 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.266526937 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.266563892 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.266573906 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.266611099 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.268685102 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.268698931 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.268748999 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.268762112 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.268779993 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.270279884 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.270294905 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.270349026 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.270359993 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.271625996 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.318098068 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.358210087 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.358231068 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.358288050 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.358304977 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.358355999 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.358979940 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.358995914 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.359040976 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.359052896 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.359080076 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.359088898 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.360115051 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.360131025 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.360173941 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.360183954 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.360229969 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.584480047 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.584513903 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.584563971 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.584589005 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.584613085 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.584636927 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.585772038 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.585802078 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.585844040 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:29.585848093 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.585870028 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.585886955 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.585896015 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:29.585908890 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:29.585939884 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:29.586263895 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.587696075 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.588038921 CEST	49798	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:29.588057041 CEST	443	49798	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:29.588393927 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.588417053 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.588448048 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.588458061 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.588484049 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.588491917 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.588510036 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.588514090 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.588538885 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.588670969 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.588768959 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.589514017 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.589531898 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.589591980 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.589603901 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.589654922 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.589654922 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.590277910 CEST	49790	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.590296030 CEST	443	49790	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.590596914 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.590611935 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.590662003 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.590671062 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.590697050 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.590708017 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.592102051 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.592123985 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.592195988 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.592206001 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.592252016 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.593240976 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.593257904 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.593314886 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.593326092 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.593358994 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.593388081 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.593409061 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.593475103 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.593838930 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.593861103 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.594616890 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.594633102 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.594683886 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.594691992 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.594716072 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.594738960 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.594928026 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.594944000 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.594985962 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.594994068 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.595036983 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.595108032 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.595129967 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.595149040 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.595159054 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.595180988 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.595195055 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.595195055 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.595197916 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.595220089 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.595257044 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.595266104 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.595280886 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.596338034 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.596354008 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.596396923 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.596405029 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.596427917 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.596442938 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.596462011 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.596493959 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.596504927 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.596577883 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.596632957 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.597172022 CEST	49800	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.597182035 CEST	443	49800	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.597251892 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.597271919 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.597307920 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.597315073 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.597345114 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.597367048 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.598031044 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.598046064 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.598089933 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.598098993 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.598128080 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.598138094 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.598932028 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.598956108 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.598995924 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.599004984 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.599035025 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.599045992 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.599512100 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.599534035 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.599582911 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.599591970 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.599631071 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.600594044 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.600616932 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.600651026 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.600658894 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.600692034 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.600703001 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.601500988 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.601516962 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.601569891 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.601578951 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.601617098 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.602335930 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.602351904 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.602391958 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.602400064 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.602438927 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.604223967 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.604242086 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.604310036 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.604320049 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.604360104 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.604635954 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.604665041 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.604723930 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.605005980 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.605021954 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.605348110 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.605362892 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.605406046 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.605413914 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.605442047 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.605463028 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.605710030 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.605725050 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.605777025 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.605784893 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.605838060 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.606796026 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.606812000 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.606870890 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.606878996 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.606919050 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.630701065 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.631110907 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.631124020 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.632250071 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.633369923 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.633524895 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.633529902 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.633615017 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.633644104 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.633699894 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.633779049 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.637696981 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.637716055 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.637789011 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.637800932 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.637861967 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.638557911 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.638572931 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.638616085 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.638623953 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.638653994 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.638672113 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.639673948 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.639691114 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.639722109 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.639729977 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.639755011 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.639800072 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.640465975 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.640480042 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.640527010 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.640533924 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.640546083 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.640588045 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.640595913 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.640640020 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.641655922 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.641669989 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.641716003 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.641725063 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.641763926 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.645492077 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.645507097 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.645560026 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.645569086 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.645610094 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.646838903 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.646852970 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.646895885 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.646903038 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.646935940 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.646956921 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.651266098 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.651283026 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.651325941 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.651335001 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.651362896 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.651390076 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.652744055 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.652935982 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.652945995 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.653301954 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.653786898 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.653858900 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.653914928 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.655630112 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.655808926 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.655818939 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.656152010 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.656425953 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.656481981 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.656534910 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.699399948 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.703396082 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.730478048 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.730504036 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.730545998 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.730580091 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.730597019 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.730623960 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.731302023 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.731317997 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.731394053 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.731403112 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.731451988 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.732285976 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.732314110 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.732340097 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.732347012 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.732392073 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.733155966 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.733170986 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.733211040 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.733221054 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.733257055 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.733267069 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.734144926 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.734160900 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.734193087 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.734200001 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.734234095 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.734244108 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.738672018 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.738687992 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.738733053 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.738740921 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.738768101 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.738786936 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.739554882 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.739569902 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.739609957 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.739619017 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.739643097 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.739659071 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.742584944 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.742611885 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.742665052 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.742672920 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.743940115 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.743956089 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.743998051 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.744007111 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.744035006 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.744054079 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.784434080 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.830934048 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.830965996 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.831012011 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.831022978 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.831054926 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.831068993 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.831883907 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.831904888 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.831933975 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.831943035 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.831973076 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.831991911 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.832652092 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.832668066 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.832714081 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.832721949 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.832752943 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.832770109 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.835314989 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.835350037 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.835396051 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.835403919 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.835432053 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.837928057 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.837950945 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.837975979 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.837987900 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.838052034 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.838125944 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.838145018 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.838191986 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.838198900 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.843763113 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.843781948 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.843882084 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.843890905 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.844562054 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.844588995 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.844610929 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.844618082 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.844651937 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.845331907 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.845345974 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.845397949 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.845407009 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.881517887 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.885620117 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.885653019 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.885689020 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.885739088 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.885746002 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.885791063 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.885865927 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.885910034 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.886518002 CEST	49795	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.886534929 CEST	443	49795	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.891406059 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.891457081 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.891532898 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.891813993 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.891829014 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.892153978 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.893384933 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.893433094 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.893493891 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.893676043 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.893690109 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.906884909 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.907048941 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.907105923 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.907813072 CEST	49803	443	192.168.2.4	54.188.205.94
Sep 11, 2024 19:25:29.907829046 CEST	443	49803	54.188.205.94	192.168.2.4
Sep 11, 2024 19:25:29.909159899 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.909193039 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.909245014 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.910024881 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:29.910058975 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:29.910119057 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:29.910336971 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.910351992 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.910826921 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:29.910841942 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:29.923170090 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.923196077 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.923243999 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.923253059 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.923291922 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.923306942 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.923945904 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.923960924 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.924000025 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.924006939 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.924045086 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.924742937 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.924760103 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.924809933 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.924819946 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.924860001 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.927529097 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.927545071 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.927584887 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.927593946 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.927624941 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.927635908 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.930335999 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.930351019 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.930392981 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.930401087 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.930428982 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.930447102 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.930572033 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.936573982 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.936589003 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.936645031 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.936652899 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.936686993 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.937410116 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.937424898 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.937463999 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.937472105 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.937498093 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.937516928 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.937874079 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.937892914 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.937926054 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.937933922 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.937962055 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.937978983 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.940712929 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.940732002 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.940774918 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.940787077 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:29.940819979 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:29.940862894 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.025923967 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.025949955 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.025994062 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.026006937 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.026036978 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.026052952 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.028660059 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.028681993 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.028714895 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.028723001 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.028752089 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.028778076 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.035057068 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.035073042 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.035121918 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.035131931 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.035181999 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.074472904 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.074502945 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.074579954 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.074594975 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.074606895 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.074809074 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.076246023 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.076280117 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.076322079 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.076327085 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.076339006 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.076366901 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.076385021 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.076409101 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.076426029 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.076486111 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.076494932 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.077253103 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.078943014 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.078959942 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.079001904 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.079011917 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.079041004 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.079067945 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.079082012 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.079123020 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.079128981 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.079165936 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.079205990 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.079591990 CEST	49792	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.079606056 CEST	443	49792	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.084038973 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.094198942 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.094216108 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.094261885 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.094276905 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.094294071 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.094485998 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.107712984 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.107774973 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.107795000 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.107815981 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.107841969 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.107855082 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.107875109 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.107887030 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.107902050 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.107903957 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.107929945 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.107981920 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.158250093 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.158659935 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.158675909 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.160149097 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.160170078 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.160209894 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.160252094 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.160274982 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.160290956 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.161271095 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.161293030 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.161386967 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.161386967 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.161401987 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.162266016 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.162719011 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.162858963 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.162873983 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.162955046 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.162955046 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.162965059 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.163259029 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.163469076 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.163794994 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.163804054 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.163954020 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.163974047 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.164040089 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.164047956 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.164058924 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.172517061 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.172588110 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.172693968 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.173173904 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.173182964 CEST	443	49797	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.173235893 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.174462080 CEST	49797	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.188397884 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.188452005 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.188484907 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.188497066 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.189273119 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.191886902 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.191931963 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.192008972 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.192008972 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.192017078 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.194219112 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.194542885 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.194550037 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.195573092 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.198319912 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.200587034 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.200612068 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.200619936 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.201764107 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.208983898 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.209058046 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.209089994 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.209274054 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.210467100 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.214174986 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.214190006 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.247311115 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.247334957 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.247623920 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.247633934 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.247776031 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.247885942 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.247901917 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.247984886 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.247984886 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.247992992 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.248661041 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.248769045 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.248785973 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.249358892 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.249366045 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.249974966 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.250125885 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.250142097 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.250816107 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.250823021 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.251033068 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.251099110 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.251116037 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.251199961 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.251199961 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.251207113 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.251843929 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.252001047 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.252016068 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.252130985 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.252137899 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.252432108 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.252763033 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.252777100 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.253158092 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.253165007 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.253582001 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.273977995 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.287172079 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.287519932 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.287571907 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.288405895 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.288441896 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.288444996 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.288464069 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.288482904 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.288506985 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.289324999 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.289978981 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.289994001 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.290081978 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.290158033 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.290230036 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.291024923 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.291116953 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.291760921 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.291829109 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.291893005 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.292634964 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.292660952 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.292666912 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.293003082 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.333837986 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.333868027 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.333880901 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.333915949 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.333959103 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.333971977 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.333998919 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.334021091 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.334059000 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.335285902 CEST	49802	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.335300922 CEST	443	49802	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.339555025 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.339734077 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.339838982 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.341000080 CEST	49804	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.341013908 CEST	443	49804	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.342700958 CEST	49812	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.342726946 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.342808962 CEST	49812	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.343358994 CEST	49812	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.343377113 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.350065947 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.350445032 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.350470066 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.351706028 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.354554892 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.358567953 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.358575106 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.358880997 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.359074116 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.359112024 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.359158993 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.359546900 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.359628916 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.359663010 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.362857103 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.363013029 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.363112926 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.363260984 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.363432884 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.363532066 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.363548994 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.363688946 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.363826990 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.364141941 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.364218950 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.364419937 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.364435911 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.364542961 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.364572048 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.364579916 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.364650011 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.364670038 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.364677906 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.364701986 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.364782095 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.364948034 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.365098000 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.365140915 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.365314960 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.370127916 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.370254040 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.370305061 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.370451927 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.370510101 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.370582104 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.370867968 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.370958090 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.370991945 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.370999098 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.371021986 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.371108055 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.371249914 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.371311903 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.371727943 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.371838093 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.371849060 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.371866941 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.371915102 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.371915102 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.371959925 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.372073889 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.372306108 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.372399092 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.372555971 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.374756098 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.375188112 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.377368927 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.377660990 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.399322987 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.399333954 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.403426886 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.416182995 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.450527906 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.450647116 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.450659037 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.450680017 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.450709105 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.450752974 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.450866938 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.450907946 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.450915098 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.450939894 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.451160908 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.451420069 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.451704979 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.451735973 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.451742887 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.451769114 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.451821089 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.451853991 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.451860905 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.451885939 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.451910019 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.451915979 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.451937914 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452056885 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.452354908 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452415943 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.452449083 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452543974 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452569962 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.452575922 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452637911 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452663898 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.452670097 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452733040 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452820063 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452848911 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.452856064 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.452871084 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.452919960 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.453181982 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.453300953 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.453331947 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.453337908 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.453357935 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.453476906 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.453610897 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.453715086 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.453994036 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.454153061 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.454163074 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.454338074 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.481990099 CEST	49799	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.482007027 CEST	443	49799	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.491638899 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.491682053 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.491900921 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.492208004 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.492225885 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.532987118 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.539764881 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.539808989 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.539840937 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.539865971 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.539865971 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.539900064 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.540484905 CEST	49801	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.540503979 CEST	443	49801	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.550779104 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.550796032 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.551100969 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.551436901 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.551451921 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.608257055 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.609782934 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.609802008 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.610165119 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.621789932 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.621789932 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.621887922 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.622122049 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.631274939 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.631285906 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.631310940 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.631375074 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.631375074 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.631408930 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.633881092 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.633943081 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.634780884 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.635538101 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.635554075 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.639842033 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.642782927 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.642812967 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.642828941 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.642841101 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.642858982 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.642868042 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.642918110 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.642925978 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.642950058 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.643033028 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.643034935 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.643052101 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.643486977 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.648873091 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.648991108 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.659934998 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.660427094 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.660476923 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.669436932 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:30.670749903 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.672983885 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.677777052 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:30.677786112 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:30.678342104 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:30.680782080 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:30.680890083 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:30.681106091 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:30.703404903 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.715398073 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.716813087 CEST	49806	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.716830969 CEST	443	49806	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.722835064 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.722860098 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.722973108 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.722973108 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.722979069 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.723110914 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.723391056 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:30.725084066 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.725176096 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.725198984 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.725532055 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.725532055 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:30.725537062 CEST	443	49805	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.725555897 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.725981951 CEST	49805	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.767674923 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.767720938 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.767826080 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.768110991 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.768122911 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.799911976 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.800008059 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.800091028 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.800854921 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.800893068 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.881674051 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.881724119 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.882347107 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.883358955 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.883403063 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.883414030 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.893354893 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.893364906 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.893403053 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.893419027 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.893431902 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.893459082 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.893474102 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.893547058 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.893601894 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.906510115 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.906529903 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.906714916 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.907052040 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.907061100 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.908902884 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.917504072 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.917536974 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.917607069 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.918032885 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.918045998 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.919224977 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.919285059 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.919296026 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.919322014 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.919322014 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.919352055 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.919368982 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.919405937 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.956458092 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.956973076 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.957017899 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.957031965 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.957446098 CEST	49812	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.957463980 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.957956076 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.958127975 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.958213091 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.964334011 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:30.964380980 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:30.964535952 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:30.964535952 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:30.964714050 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:30.965630054 CEST	49812	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.965724945 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:30.966487885 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.966577053 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.967410088 CEST	49812	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:30.967492104 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.967508078 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.969918966 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.970002890 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.970040083 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.970135927 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.979321003 CEST	49808	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.979357004 CEST	443	49808	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.988029957 CEST	49810	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:30.988070965 CEST	443	49810	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:30.999361038 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.999393940 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:30.999495983 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.999496937 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:30.999531031 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.000140905 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.006230116 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.006308079 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.006345034 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.006356001 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.006722927 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.015408039 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:31.019988060 CEST	49820	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:31.020042896 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:31.020643950 CEST	49820	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:31.020955086 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.021609068 CEST	49820	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:31.021635056 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:31.085858107 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.085920095 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.085949898 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.085956097 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.086002111 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.086297989 CEST	49809	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.086318970 CEST	443	49809	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.092808008 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.092834949 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.096541882 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.100627899 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.100641012 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.203733921 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:31.203830004 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:31.203874111 CEST	49812	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:31.204466105 CEST	49812	443	192.168.2.4	34.213.165.212
Sep 11, 2024 19:25:31.204483986 CEST	443	49812	34.213.165.212	192.168.2.4
Sep 11, 2024 19:25:31.214227915 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.214464903 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.214498043 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.214915037 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.215302944 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.215396881 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.215528011 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.263406992 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.301744938 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.302016020 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.302050114 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.303102970 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.303164005 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.303623915 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.303682089 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.303787947 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.303802013 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.357232094 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.480014086 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:31.480045080 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:31.480235100 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:31.480988026 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:31.480999947 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:31.486810923 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.487436056 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.487471104 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.487957001 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.488965034 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.489058018 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.489203930 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.489651918 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.489679098 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.489727020 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.489752054 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.489794970 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.489923000 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.489979982 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.490020990 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.490552902 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:31.490602970 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:31.490655899 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:31.491698980 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:31.491723061 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:31.503504992 CEST	49813	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.503532887 CEST	443	49813	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.508538961 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.508588076 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.508660078 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.509226084 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.509243011 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.512994051 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.523108959 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.523134947 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.523176908 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.523205042 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.523236990 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.523247957 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.524772882 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.535412073 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.537477016 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.537507057 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.538618088 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.538661003 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.538722992 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.538933039 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.538949966 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.538959026 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.539608002 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.539762020 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.540153027 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.573080063 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:31.573136091 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:31.573175907 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:31.585452080 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.604012012 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.604104996 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.604125023 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.604201078 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.604253054 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.605094910 CEST	49807	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.605110884 CEST	443	49807	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.618841887 CEST	49739	443	192.168.2.4	172.217.18.100
Sep 11, 2024 19:25:31.618875980 CEST	443	49739	172.217.18.100	192.168.2.4
Sep 11, 2024 19:25:31.626116991 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.626678944 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.626694918 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.627047062 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.628046036 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.628106117 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.628355980 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.647304058 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.648267031 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.648294926 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.649384022 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.649440050 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.650322914 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.650398016 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.650715113 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.650728941 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.661670923 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.662658930 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.662672043 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.663670063 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.663733959 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.664525032 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.664571047 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.664912939 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.664917946 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.675393105 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.694822073 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.710082054 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.792306900 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:31.794063091 CEST	49820	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:31.794099092 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:31.794476986 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:31.798875093 CEST	49820	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:31.798952103 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:31.799105883 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.799665928 CEST	49820	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:31.808834076 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.808841944 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.808887959 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.808957100 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.808990002 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.809015036 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.809051037 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.809051991 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.809051991 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.809077978 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.809097052 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.809129953 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.809129953 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.833386898 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.833416939 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.833425045 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.833452940 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.833458900 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.833468914 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.833477020 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.833491087 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.833519936 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.833519936 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.833544970 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.843406916 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:31.850323915 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.854644060 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.887321949 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.887433052 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.887434006 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.887474060 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.895814896 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.902616978 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.902633905 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.903191090 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.904362917 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.904452085 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.912527084 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.912586927 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.912630081 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.912682056 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.912718058 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.912719965 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.912765980 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.916564941 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.916651964 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.916693926 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.916695118 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.917037010 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.921562910 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.928848982 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.928858995 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.928906918 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.928935051 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.928956985 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.928957939 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.928980112 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.941253901 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.949446917 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.949456930 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.949470997 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.949503899 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.949536085 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.949551105 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.949580908 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.963408947 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.981688023 CEST	49816	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.981715918 CEST	443	49816	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.982280970 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.982309103 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.982366085 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.986694098 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.986717939 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.997572899 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.997606993 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.997647047 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.997677088 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:31.997694016 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:31.997714043 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.003458977 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.003487110 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.003541946 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.003560066 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.003597021 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.036262035 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.036288023 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.036338091 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.036371946 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.036387920 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.036405087 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.036894083 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.036943913 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.036952019 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.036972046 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.037019014 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.056406975 CEST	49811	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.056432009 CEST	443	49811	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.057202101 CEST	49819	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.057245016 CEST	443	49819	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.087263107 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.087312937 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.087344885 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.087376118 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.087420940 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.087420940 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.088212013 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.088237047 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.088273048 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.088285923 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.088310957 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.088326931 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.090658903 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.090687990 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.090723038 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.090735912 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.090776920 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.094363928 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.094396114 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.094428062 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.094449997 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.094470978 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.094484091 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.219363928 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.219407082 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.219449997 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.219472885 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.219491005 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.219521046 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.220408916 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.220426083 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.220479012 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.220484972 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.220523119 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.220946074 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.220963001 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.220997095 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.221004009 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.221031904 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.221046925 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.222090006 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222112894 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222114086 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222163916 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.222168922 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222218037 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222228050 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.222263098 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.222393036 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222414017 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222444057 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.222450018 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222471952 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.222497940 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.222579002 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222594023 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222621918 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.222628117 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.222651005 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.222664118 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.223113060 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.225212097 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.225574017 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.225603104 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.225636959 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.225642920 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.225701094 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.270942926 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.271259069 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:32.303308010 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:32.305407047 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.307657003 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.307724953 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.307746887 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.307769060 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.307784081 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.307821989 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.308439016 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.308502913 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.308514118 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.308532953 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.308564901 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.309437990 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.309478998 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.309506893 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.309514046 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.309556961 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.309703112 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.309755087 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.309777975 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.309782982 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.309812069 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.310908079 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.310960054 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.310996056 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.311001062 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.311043978 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.311636925 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.311681986 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.311706066 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.311711073 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.311739922 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.311801910 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.311865091 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.311870098 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.311969995 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.312017918 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.314256907 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.324451923 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:32.324462891 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.324888945 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.324903965 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.324939966 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.325115919 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.325124025 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.327524900 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.327620983 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.328635931 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.328704119 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.349898100 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.351442099 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:32.351479053 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:32.352606058 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:32.352670908 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:32.352716923 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:32.352823973 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.359682083 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.359710932 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.359762907 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.359782934 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.359814882 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.359971046 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.403417110 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:32.436801910 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.436872005 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.436901093 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.436937094 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.439404964 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.620567083 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.620779991 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.621813059 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.622015953 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.629087925 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.629184961 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.629431009 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.648811102 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.648843050 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.649491072 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:32.649683952 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.649708033 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.650374889 CEST	49818	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.650404930 CEST	443	49818	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.652291059 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.652304888 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.652870893 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:32.652944088 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:32.653131008 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:32.657824993 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:32.657859087 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:32.658507109 CEST	49814	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.658524036 CEST	443	49814	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.662795067 CEST	49817	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.662803888 CEST	443	49817	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.670092106 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:32.670254946 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:32.671045065 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:32.671078920 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:32.671114922 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:32.671149015 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:32.677138090 CEST	49830	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:32.677175999 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:32.677248955 CEST	49830	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:32.677692890 CEST	49830	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:32.677720070 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:32.694324970 CEST	49815	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.694358110 CEST	443	49815	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.695408106 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.696491957 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:32.696526051 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:32.696590900 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:32.697597027 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:32.697614908 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:32.697805882 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.697818041 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.709418058 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:32.709439039 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:32.709505081 CEST	49820	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:32.709507942 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:32.709599972 CEST	49820	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:32.710242987 CEST	49820	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:32.710253954 CEST	443	49820	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:32.713825941 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:32.725687981 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.735879898 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.735891104 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.735935926 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.735944033 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.735971928 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.736001015 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.736036062 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.736052990 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.736052990 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.736052990 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.736083984 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.771212101 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.771548033 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.771569967 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.771939039 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.772268057 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.772346973 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.772460938 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.815442085 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.818377972 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.818464994 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.818474054 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.818536043 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.818880081 CEST	49822	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.818900108 CEST	443	49822	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.831398964 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.831425905 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.831486940 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:32.831499100 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.831511021 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.831608057 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:32.832253933 CEST	49823	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:32.832269907 CEST	443	49823	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:32.834995985 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.835669994 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.836030960 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.836085081 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.836096048 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.836126089 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.836158037 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.836199999 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.836373091 CEST	49825	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.836386919 CEST	443	49825	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.845276117 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.845288038 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.845323086 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.845355034 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.845365047 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.845377922 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.845392942 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.845411062 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.845417023 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.845433950 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.889178038 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.923129082 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:32.923228979 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:32.923301935 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:32.923856020 CEST	49824	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:32.923882008 CEST	443	49824	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:32.926060915 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.926071882 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.926106930 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.926126957 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.926141977 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.926151037 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.926196098 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.931014061 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.931021929 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.931049109 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.931082010 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:32.931087971 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:32.931133986 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.013220072 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.013237953 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.013261080 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.013303995 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.013323069 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.013334990 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.013343096 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.013366938 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.013731956 CEST	49826	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.013747931 CEST	443	49826	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.049858093 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.059828997 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.059881926 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.059915066 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.059928894 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.059948921 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.060009003 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.105710983 CEST	49833	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.105792999 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.105878115 CEST	49833	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.106388092 CEST	49833	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.106405973 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.112317085 CEST	49834	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.112325907 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.112471104 CEST	49834	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.112715006 CEST	49834	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.112725973 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.113518953 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.113547087 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.113632917 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.114856958 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.114905119 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.114953041 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.115570068 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.115605116 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.115752935 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.115767002 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.142348051 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.142430067 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.142441988 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.142456055 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.142504930 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.192670107 CEST	49827	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.192692995 CEST	443	49827	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.252053022 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.256995916 CEST	3478	49838	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.257066965 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.257124901 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.258266926 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.259653091 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.259708881 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.259789944 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.260130882 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.260896921 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.260982037 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.261396885 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.261434078 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.262248039 CEST	3478	49839	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.262311935 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.263530970 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.264741898 CEST	3478	49838	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.268353939 CEST	3478	49839	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.286652088 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.287638903 CEST	49830	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.287652969 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.288028002 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.288902998 CEST	49830	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.288975000 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.289433002 CEST	49830	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.289463043 CEST	49830	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.289467096 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.309824944 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.318608046 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.318624020 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.319063902 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.319130898 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.319814920 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.319865942 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.322932959 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.322999954 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.323739052 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.323750019 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.323766947 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.331415892 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.366394043 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.367419958 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.380542040 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.385658979 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.385679007 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.387131929 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.409425974 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.409585953 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.410079956 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:33.451423883 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:33.523688078 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.524353027 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.529484987 CEST	3478	49838	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.529885054 CEST	3478	49839	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.661580086 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.661674976 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.661716938 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.663080931 CEST	49831	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.663100004 CEST	443	49831	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.707860947 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.708775997 CEST	49833	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.708842039 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.709449053 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.711277008 CEST	49833	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.711458921 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.711540937 CEST	49833	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.711646080 CEST	49833	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.711694002 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.718868017 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.719147921 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.719156981 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.719552040 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.719628096 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.720220089 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.720257998 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.720551014 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.720662117 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.720751047 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.721107006 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.721112967 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.721292973 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.721318960 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.721679926 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.721704006 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.722815037 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.722872972 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.723546028 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.723608017 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.723658085 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.723664045 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.723920107 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.723937988 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.733139992 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.733607054 CEST	49834	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.733627081 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.733989000 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.734719038 CEST	49834	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.734790087 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.734961033 CEST	49834	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.735018969 CEST	49834	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.735053062 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.856859922 CEST	3478	49839	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.892695904 CEST	3478	49838	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.905407906 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.915868044 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.918622017 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.918725014 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.918776989 CEST	49830	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.920794964 CEST	3478	49839	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.930171013 CEST	49830	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:33.930217028 CEST	443	49830	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:33.944312096 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.957923889 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:33.963604927 CEST	3478	49838	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.967832088 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.968039036 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.968106985 CEST	49833	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.968909025 CEST	49833	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.968951941 CEST	443	49833	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.983395100 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.983501911 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.983558893 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.983977079 CEST	3478	49839	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:33.985076904 CEST	49836	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.985094070 CEST	443	49836	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.989125967 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.989204884 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:33.989253998 CEST	49834	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.990005016 CEST	49834	443	192.168.2.4	35.166.207.170
Sep 11, 2024 19:25:33.990016937 CEST	443	49834	35.166.207.170	192.168.2.4
Sep 11, 2024 19:25:34.020108938 CEST	49723	80	192.168.2.4	199.232.214.172
Sep 11, 2024 19:25:34.025365114 CEST	80	49723	199.232.214.172	192.168.2.4
Sep 11, 2024 19:25:34.025427103 CEST	49723	80	192.168.2.4	199.232.214.172
Sep 11, 2024 19:25:34.027338028 CEST	3478	49838	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:34.028362036 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.028388023 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.028445005 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.029093981 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:34.029124975 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:34.029174089 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:34.029609919 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.030158043 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.030199051 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.032460928 CEST	49835	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.032471895 CEST	443	49835	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.035069942 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:34.035089970 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:34.038079977 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:34.039393902 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.039405107 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.069612026 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:34.087109089 CEST	3478	49839	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:34.133909941 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:34.135164022 CEST	3478	49838	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:34.157484055 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.157521009 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.157890081 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.157890081 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.157919884 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.179349899 CEST	49845	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.179398060 CEST	443	49845	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.179537058 CEST	49845	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.179961920 CEST	49845	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.179977894 CEST	443	49845	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.180919886 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:34.291424036 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.291462898 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.291488886 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.291527987 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.291554928 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.291588068 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.291815996 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.418282032 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.418307066 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.418328047 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.418349028 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.418421984 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.418442011 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.418456078 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.418570042 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.420104980 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.420134068 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.420238972 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.420238972 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.420270920 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.420322895 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.424993992 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.439591885 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.439651012 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.439713955 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.439778090 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.439842939 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.451312065 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.451361895 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.451467037 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.451467991 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.451488972 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.505146027 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.505352974 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.505376101 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.505563021 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.505595922 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.505645037 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.505687952 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.505723953 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.505738020 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.505765915 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.507138968 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.507159948 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.507267952 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.507267952 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.507277966 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.508893967 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.508913040 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.508976936 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.508985043 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.509046078 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.551913023 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.551923990 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.574784994 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.574820042 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.574873924 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.574920893 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.575057983 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.575103998 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.576914072 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.577596903 CEST	49828	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.577634096 CEST	443	49828	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.592334986 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.592365026 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.592463970 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.592479944 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.592974901 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.592997074 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.593374968 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.593381882 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.593561888 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.593836069 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.593851089 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.594115973 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.594121933 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.594363928 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.595088959 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.595107079 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.595262051 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.595268011 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.595594883 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.597127914 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.597203016 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.597235918 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.597238064 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.597270966 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.597489119 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.597489119 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.598298073 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:34.598339081 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:34.600938082 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:34.600938082 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:34.600985050 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:34.601197004 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:34.601214886 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:34.601357937 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:34.601469994 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:34.601480007 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:34.669975996 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.670591116 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.670604944 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.671802998 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.672328949 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.672328949 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.672380924 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.672396898 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.672406912 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.672540903 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.713032961 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.756829977 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:34.757111073 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:34.757129908 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:34.758150101 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:34.758301020 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:34.881792068 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:34.882110119 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:34.882289886 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:34.883100986 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.900154114 CEST	49829	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.900223017 CEST	443	49829	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.926239014 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.926321983 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:34.926354885 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:34.939518929 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.939532995 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.940037012 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.944523096 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.944602966 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.948122978 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.955837011 CEST	443	49845	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.958937883 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.959033012 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.960097075 CEST	49845	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.960112095 CEST	443	49845	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.960181952 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.960448027 CEST	443	49845	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.966068983 CEST	49842	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:34.966094971 CEST	443	49842	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:34.967947006 CEST	49845	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.967947006 CEST	49845	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.968019962 CEST	443	49845	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:34.974422932 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:34.992403984 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:34.992438078 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.016912937 CEST	49845	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.058651924 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.058686018 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.058695078 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.058727026 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.058819056 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.058819056 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.058847904 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.105145931 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.142250061 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.142293930 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.142348051 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.142833948 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.142847061 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.143789053 CEST	49850	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:35.143817902 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:35.143889904 CEST	49850	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:35.144345045 CEST	49850	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:35.144360065 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:35.144725084 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.144737959 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.144778013 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.144789934 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.144792080 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.144805908 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.144824982 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.144860029 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.144876003 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.145417929 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.145504951 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.145575047 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.146543026 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.146554947 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.146574974 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.146605015 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.146614075 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.146646976 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.146662951 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.147067070 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.147104979 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.155256033 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.165225983 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.165235043 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.165251970 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.165265083 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.165271997 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.165282011 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.165303946 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.165326118 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.165328026 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.165345907 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.209387064 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.231914043 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.231937885 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.232052088 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.232080936 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.232131004 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.232403994 CEST	443	49845	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.232547045 CEST	443	49845	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.232593060 CEST	49845	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.233035088 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.233098984 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.233107090 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.233503103 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.233551979 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.233560085 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.234297991 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.234316111 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.234347105 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.234355927 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.234381914 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.235217094 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.235269070 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.235277891 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.235361099 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.235397100 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.242418051 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.242427111 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.242479086 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.242501020 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.242513895 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.242539883 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.242566109 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.252846003 CEST	49843	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:35.252863884 CEST	443	49843	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:35.255397081 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:35.255450964 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:35.255512953 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:35.255806923 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:35.255844116 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:35.255894899 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:35.256499052 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:35.256534100 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:35.256838083 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:35.256855965 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:35.302705050 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.354264021 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.356154919 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.403165102 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.452378988 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.452395916 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.453089952 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.453406096 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.453430891 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.454471111 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.454554081 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.454616070 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.454634905 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.454674959 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.454971075 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.458230972 CEST	49854	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:35.458266973 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:35.458336115 CEST	49854	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:35.458724976 CEST	49854	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:35.458741903 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:35.496716022 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.496872902 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.497239113 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.497257948 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.499408007 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.549865961 CEST	49844	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.549900055 CEST	443	49844	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.551718950 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.587934971 CEST	49845	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.587959051 CEST	443	49845	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.761223078 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.761271954 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.761279106 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.761310101 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.761328936 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.761329889 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.761337042 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.761363983 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.761380911 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.761403084 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.761409998 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.807718039 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.807746887 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.847798109 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.847811937 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.847868919 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.847898960 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.848562956 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.848572016 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.848601103 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.848606110 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.848618031 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.848632097 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.848644972 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.848655939 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.848664999 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.848683119 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.848704100 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.858306885 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.858613968 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.858628988 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.859066010 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.859585047 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.859674931 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.859991074 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.860819101 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:35.860959053 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.860995054 CEST	49850	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:35.861006021 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:35.861411095 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.861417055 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:35.861475945 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.861866951 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.861955881 CEST	49850	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:35.862016916 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:35.862322092 CEST	49850	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:35.862865925 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.862957954 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.863147974 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:35.907393932 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.907423973 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:35.907427073 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:35.908133984 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.908175945 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.908185959 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.908210039 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.908236980 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.908253908 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.908263922 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.930089951 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.930105925 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.930144072 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.930151939 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.930185080 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.930212021 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.930219889 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.930248976 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.931257963 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.931277990 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.931318045 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.931324959 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.931363106 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.934393883 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.934412003 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.934447050 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.934453964 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.934485912 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.935879946 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.935914040 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.935991049 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.935991049 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.935998917 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:35.951721907 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.983704090 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:35.992772102 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.992813110 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.992845058 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.992865086 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:35.992887974 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.993019104 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:35.993024111 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:36.018795013 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:36.018804073 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:36.018831015 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:36.018879890 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:36.018901110 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:36.018915892 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:36.018934965 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:36.019426107 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:36.019484997 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:36.019529104 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:36.019565105 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:36.019573927 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:36.019606113 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:36.019608021 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:36.019648075 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:36.024662018 CEST	49848	443	192.168.2.4	65.9.86.56
Sep 11, 2024 19:25:36.024679899 CEST	443	49848	65.9.86.56	192.168.2.4
Sep 11, 2024 19:25:36.044544935 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:36.044611931 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:36.044641018 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:36.045509100 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:36.045572042 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:36.075926065 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.082395077 CEST	49854	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:36.082412004 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.083692074 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.085999012 CEST	49854	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:36.086177111 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.086353064 CEST	49854	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:36.086353064 CEST	49854	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:36.086411953 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.110378981 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.111433029 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.111447096 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.111932993 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.111990929 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.112629890 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.112695932 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.113138914 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.113269091 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.113502979 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.113509893 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.122380972 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.122705936 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.122745037 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.123250008 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.123313904 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.124260902 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.124310017 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.124697924 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.124785900 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.124816895 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.132694960 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.137914896 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.137937069 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.137959003 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.137998104 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.138012886 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.138034105 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.138056993 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.142626047 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.142652035 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.142741919 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.142766953 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.142828941 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.145087957 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.145180941 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.159725904 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.167418957 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.174870968 CEST	49847	443	192.168.2.4	52.85.48.9
Sep 11, 2024 19:25:36.174910069 CEST	443	49847	52.85.48.9	192.168.2.4
Sep 11, 2024 19:25:36.175713062 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.175720930 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.184005022 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:36.184051991 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:36.184104919 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:36.184290886 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:36.184305906 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:36.217092991 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.217166901 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.217176914 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.217190027 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.217221975 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.219044924 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.219130039 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.219147921 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.219170094 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.223716974 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.300017118 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.300117016 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.300163984 CEST	49854	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:36.300951004 CEST	49854	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:36.300975084 CEST	443	49854	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.311578035 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.311650991 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.311712027 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.312931061 CEST	49853	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.312951088 CEST	443	49853	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.315996885 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.316071033 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.316123962 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.340306997 CEST	49851	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.340323925 CEST	443	49851	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.341314077 CEST	49849	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.341325998 CEST	443	49849	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.467961073 CEST	49857	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:36.468000889 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.468084097 CEST	49857	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:36.469254971 CEST	49857	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:36.469270945 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:36.469800949 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:36.469881058 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:36.469970942 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:36.470261097 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:36.470295906 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:36.569017887 CEST	49860	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.569065094 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.569175959 CEST	49860	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.569401026 CEST	49860	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.569417000 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.570858002 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.570909977 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.570971966 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.571166992 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:36.571177959 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:36.736051083 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:36.736143112 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:36.736258030 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:36.736772060 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:36.736808062 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:36.811829090 CEST	49852	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:36.811851025 CEST	443	49852	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:36.894877911 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:36.894902945 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:36.894973993 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:36.894994020 CEST	49850	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:36.895077944 CEST	49850	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:36.905888081 CEST	49850	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:36.905904055 CEST	443	49850	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:37.030899048 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.049067020 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.049103022 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.050185919 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.050249100 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.054894924 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.054965973 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.056324005 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.056332111 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.079895020 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:37.081528902 CEST	49857	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:37.081559896 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:37.081815004 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.082144976 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:37.104708910 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.124083996 CEST	49857	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:37.124253988 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.124272108 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.124326944 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:37.124596119 CEST	49857	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:37.124596119 CEST	49857	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:37.124649048 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:37.125539064 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.125603914 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.128070116 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.128119946 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.134819984 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.135020018 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.135807991 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.135817051 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.172347069 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:37.175334930 CEST	49860	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:37.175375938 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:37.176016092 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:37.177000999 CEST	49860	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:37.177095890 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:37.177395105 CEST	49860	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:37.208054066 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.208133936 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.208184004 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.218472004 CEST	49858	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.218528986 CEST	443	49858	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.219403982 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:37.232692957 CEST	49864	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.232733011 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.232803106 CEST	49864	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.233052969 CEST	49864	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.233067036 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.310317039 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.310379982 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.321146011 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.328610897 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.328658104 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.329049110 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.330574989 CEST	49855	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.330595016 CEST	443	49855	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.331646919 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.332242012 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.333234072 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.333261967 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.333318949 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.334501982 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.334516048 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.334992886 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.342731953 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:37.342761993 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:37.342817068 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:37.343190908 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:37.343203068 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:37.346564054 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:37.346982002 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:37.347039938 CEST	49857	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:37.348633051 CEST	49857	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:37.348649025 CEST	443	49857	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:37.358124971 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:37.358163118 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:37.358230114 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:37.359510899 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:37.359527111 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:37.375410080 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.413748980 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.413794041 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.413860083 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.414258957 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.414274931 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.474674940 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:37.474782944 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:37.474828005 CEST	49860	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:37.524729967 CEST	49860	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:37.524758101 CEST	443	49860	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:37.586133957 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.599174976 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.599231958 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.600446939 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.600523949 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.601984024 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.603688955 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.603802919 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.604130030 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.604139090 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.611819029 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.611848116 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.611885071 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.611920118 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.611937046 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.611962080 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.694181919 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.694235086 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.694247961 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.694266081 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.694294930 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.696469069 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.696502924 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.696523905 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.696533918 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.696561098 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.703862906 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.703885078 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.703915119 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.703922033 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.703955889 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.726281881 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.768238068 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.784112930 CEST	49864	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.784176111 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.784615040 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.787574053 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.787619114 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.787652016 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.787673950 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.787693977 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.787700891 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.787717104 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.787746906 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.791930914 CEST	49864	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.792005062 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.792462111 CEST	49864	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.792486906 CEST	49864	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.792493105 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.835361958 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.835391045 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.835397959 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.835414886 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.835426092 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.835439920 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.835462093 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.847513914 CEST	49861	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:37.847542048 CEST	443	49861	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:37.922619104 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.922635078 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.922652960 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.922661066 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.922663927 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.922683001 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.922692060 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.922725916 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.922733068 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.922754049 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.933269024 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.938420057 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.938450098 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.939364910 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.939425945 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.941188097 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.941230059 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.941571951 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.941709042 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.942078114 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:37.942090034 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:37.957237959 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.957315922 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.957386017 CEST	49864	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.962299109 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.962313890 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.962367058 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.962367058 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.962397099 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.962429047 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.962450981 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.962474108 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.962474108 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.962475061 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.962485075 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:37.962513924 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.962513924 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:37.963903904 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.968143940 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.968156099 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.968522072 CEST	49864	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.968590021 CEST	443	49864	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.970535994 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.970604897 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.973320007 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.973462105 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.977183104 CEST	49869	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.977237940 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.977411032 CEST	49869	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.977669001 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.977679968 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:37.978127003 CEST	49869	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:37.978142977 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.009911060 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.009979010 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.009990931 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.010020018 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.010071993 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.010113001 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.010113001 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.010128975 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.010163069 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.010760069 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.010818005 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.010838032 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.010848045 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.010874033 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.010881901 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.010910034 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.011759996 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.011827946 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.011846066 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.014416933 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.014441967 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.014477015 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.014483929 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.014511108 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.050760984 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.050833941 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.050867081 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.050903082 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.050949097 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.085870981 CEST	49862	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:38.085901976 CEST	443	49862	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:38.091303110 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.091376066 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:38.091547012 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.098644972 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.137770891 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.137866974 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.144967079 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.171380043 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.187356949 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:38.187498093 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:38.187611103 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:38.188067913 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:38.200787067 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:38.200804949 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.201117992 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.201128960 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.202794075 CEST	49868	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.202819109 CEST	443	49868	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.202899933 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.202917099 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.202939034 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.203042984 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.206043005 CEST	49865	443	192.168.2.4	35.84.56.34
Sep 11, 2024 19:25:38.206062078 CEST	443	49865	35.84.56.34	192.168.2.4
Sep 11, 2024 19:25:38.206093073 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:38.206320047 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.206613064 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.206724882 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.207606077 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:38.207906008 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.207921982 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.251398087 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.265384912 CEST	49870	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.265425920 CEST	443	49870	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.266417027 CEST	49870	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.270596027 CEST	49870	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.270647049 CEST	443	49870	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.310576916 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:38.310623884 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:38.312387943 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:38.316276073 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:38.316296101 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:38.328979015 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.413541079 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.413567066 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.415705919 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.415721893 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.471685886 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.500114918 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.500127077 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.500145912 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.500154018 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.500160933 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.500185966 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.500202894 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.500235081 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.500365973 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.502749920 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.502759933 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.502782106 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.502795935 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.502820969 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.502836943 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.502845049 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.503204107 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.510157108 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.510170937 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.510193110 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.510219097 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.510226011 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.510241032 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.510251045 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.510272980 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.516350031 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.517096996 CEST	49869	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.517112017 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.517857075 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.520850897 CEST	49869	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.520939112 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.521015882 CEST	49869	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.521015882 CEST	49869	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.521045923 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.587822914 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.587847948 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.587889910 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.587914944 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.587940931 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.587955952 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.587955952 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.589698076 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.589706898 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.589719057 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.589751005 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.589777946 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.589787960 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.589814901 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.589814901 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.592300892 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.592320919 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.592379093 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.592395067 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.592406034 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.592442989 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.592442989 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.664189100 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.689299107 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.689477921 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.689651012 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.689662933 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.689687967 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.689721107 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.689723969 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.689733982 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.689752102 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.689753056 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.689771891 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.689785004 CEST	49869	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.690012932 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.690047979 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.690073013 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.690083981 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.690116882 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.690120935 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.690217972 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.690706015 CEST	49869	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.690721035 CEST	443	49869	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.696284056 CEST	49873	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.696331978 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.700356960 CEST	49873	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.700356960 CEST	49873	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.700402021 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.701952934 CEST	49867	443	192.168.2.4	13.32.121.110
Sep 11, 2024 19:25:38.701972961 CEST	443	49867	13.32.121.110	192.168.2.4
Sep 11, 2024 19:25:38.853368998 CEST	443	49870	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.853930950 CEST	49870	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.853966951 CEST	443	49870	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.854695082 CEST	443	49870	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.855218887 CEST	49870	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.855220079 CEST	49870	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.855312109 CEST	443	49870	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:38.905885935 CEST	49870	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:38.993369102 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.994664907 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.994688988 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.994729996 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.994791985 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:38.994813919 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:38.994846106 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:39.025496006 CEST	443	49870	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.025685072 CEST	443	49870	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.025933027 CEST	49870	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.026659012 CEST	49870	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.026680946 CEST	443	49870	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.028758049 CEST	49874	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.028809071 CEST	443	49874	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.032355070 CEST	49874	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.036350965 CEST	49874	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.036379099 CEST	443	49874	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.101938963 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:39.142474890 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:39.142520905 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:39.142539024 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:39.142537117 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:39.142579079 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:39.142600060 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:39.142605066 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:39.142621040 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:39.142628908 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:39.142663956 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:39.142740011 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:39.142894030 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:39.142942905 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:39.193540096 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:39.212946892 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:39.212990999 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:39.213346958 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:39.213407993 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:39.213953972 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:39.214004993 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:39.214111090 CEST	49866	443	192.168.2.4	13.35.58.148
Sep 11, 2024 19:25:39.214153051 CEST	443	49866	13.35.58.148	192.168.2.4
Sep 11, 2024 19:25:39.216573000 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:39.216639042 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:39.217542887 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:39.217556953 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:39.235337019 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.252487898 CEST	49873	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.252532959 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.253124952 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.253684998 CEST	49873	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.253777027 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.254165888 CEST	49873	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.254194021 CEST	49873	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.254251957 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.289952040 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:39.388539076 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:39.388622999 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:39.388662100 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:39.389439106 CEST	49872	443	192.168.2.4	44.241.213.0
Sep 11, 2024 19:25:39.389465094 CEST	443	49872	44.241.213.0	192.168.2.4
Sep 11, 2024 19:25:39.405256987 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.405422926 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.405467987 CEST	49873	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.406037092 CEST	49873	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.406066895 CEST	443	49873	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.581311941 CEST	443	49874	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.581531048 CEST	49874	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.581558943 CEST	443	49874	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.582678080 CEST	443	49874	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.583188057 CEST	49874	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.583364964 CEST	49874	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.583369017 CEST	443	49874	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.631414890 CEST	443	49874	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.737235069 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:39.737266064 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:39.737320900 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:39.737570047 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:39.737584114 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:39.754880905 CEST	443	49874	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.754990101 CEST	49874	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.756134033 CEST	49874	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.756155968 CEST	443	49874	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.758228064 CEST	49876	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.758312941 CEST	443	49876	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:39.758382082 CEST	49876	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.758637905 CEST	49876	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:39.758670092 CEST	443	49876	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:40.266505957 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:40.266796112 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:40.266818047 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:40.268691063 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:40.268771887 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:40.293515921 CEST	443	49876	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:40.294709921 CEST	49876	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:40.294737101 CEST	443	49876	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:40.295538902 CEST	443	49876	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:40.296075106 CEST	49876	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:40.296075106 CEST	49876	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:40.296165943 CEST	443	49876	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:40.460553885 CEST	49876	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:40.467598915 CEST	443	49876	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:40.467689037 CEST	443	49876	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:40.468214989 CEST	49876	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:40.471872091 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:40.472179890 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:40.472225904 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:40.473994970 CEST	49876	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:40.474026918 CEST	443	49876	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:40.515405893 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:40.523461103 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:40.523480892 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:40.568459988 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:40.690323114 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:40.690490007 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:40.691071987 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:40.691113949 CEST	443	49875	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:40.691128969 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:40.691128969 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:40.691349030 CEST	49875	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:44.234993935 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.235047102 CEST	443	49877	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:44.235441923 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.237010956 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.237027884 CEST	443	49877	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:44.791004896 CEST	443	49877	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:44.791649103 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.791666031 CEST	443	49877	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:44.792773962 CEST	443	49877	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:44.793260098 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.793260098 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.793369055 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.793433905 CEST	443	49877	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:44.834678888 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.971215963 CEST	443	49877	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:44.971411943 CEST	443	49877	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:44.972624063 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.972624063 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.976691961 CEST	49878	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.976738930 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:44.977016926 CEST	49878	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.977016926 CEST	49878	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:44.977045059 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.273058891 CEST	49877	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:45.273087978 CEST	443	49877	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.549683094 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.549984932 CEST	49878	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:45.550002098 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.551116943 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.551656008 CEST	49878	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:45.551862955 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.551882029 CEST	49878	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:45.595446110 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.601022005 CEST	49878	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:45.713469028 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.713646889 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.713701010 CEST	49878	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:45.714514017 CEST	49878	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:45.714534998 CEST	443	49878	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:45.779350042 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:45.779457092 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:45.779608011 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:45.779628992 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:45.784375906 CEST	3478	49838	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:45.784578085 CEST	3478	49839	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:45.784909964 CEST	3478	49838	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:45.784969091 CEST	49838	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:45.785659075 CEST	3478	49839	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:45.785708904 CEST	49839	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:46.154928923 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.155044079 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.155128002 CEST	49879	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.155200958 CEST	443	49879	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.155247927 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.155327082 CEST	49879	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.155427933 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.155452967 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.155775070 CEST	49879	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.155791998 CEST	443	49879	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.829104900 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.829395056 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.829418898 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.830446959 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.830615997 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.831563950 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.831621885 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.831926107 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.831933975 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.852670908 CEST	443	49879	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.854674101 CEST	49879	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.854696989 CEST	443	49879	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.855770111 CEST	443	49879	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.855958939 CEST	49879	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.856296062 CEST	49879	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.856357098 CEST	443	49879	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.876499891 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.901026011 CEST	49879	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.901038885 CEST	443	49879	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:46.944525003 CEST	49879	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:46.997458935 CEST	49881	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:46.997497082 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:46.997754097 CEST	49881	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.002002954 CEST	49881	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.002021074 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.064500093 CEST	49882	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.064522982 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.068954945 CEST	49882	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.074018002 CEST	49882	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.074038029 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.091691971 CEST	49883	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.091751099 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.091901064 CEST	49883	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.093164921 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.093199015 CEST	49883	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.093208075 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.093214035 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.093566895 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.093920946 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.093940020 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.097579002 CEST	49885	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:47.097625017 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:47.097893953 CEST	49885	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:47.097893953 CEST	49885	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:47.097943068 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:47.239006042 CEST	49886	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:47.239059925 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:47.239368916 CEST	49886	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:47.239368916 CEST	49886	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:47.239408016 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:47.251893997 CEST	49887	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:47.251960039 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.252017021 CEST	49887	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:47.252377033 CEST	49887	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:47.252405882 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.614751101 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.615345001 CEST	49881	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.615359068 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.615756989 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.616072893 CEST	49881	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.616141081 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.616312027 CEST	49881	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.616343021 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.616508961 CEST	49881	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.616518021 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.683016062 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.683300018 CEST	49882	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.683310032 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.683765888 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.684151888 CEST	49882	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.684211969 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.684326887 CEST	49882	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.684353113 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.684370041 CEST	49882	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.727405071 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.793201923 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.793467999 CEST	49887	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:47.793490887 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.794183969 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.794495106 CEST	49887	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:47.794585943 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.794636011 CEST	49887	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:47.794682980 CEST	49887	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:47.794703960 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.794763088 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.795037985 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.795052052 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.795452118 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.795829058 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.795841932 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.795854092 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.795903921 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.799942017 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:47.800134897 CEST	49886	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:47.800143957 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:47.800669909 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.800714970 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:47.800836086 CEST	49883	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.800849915 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.801146030 CEST	49886	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:47.801172972 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.801198959 CEST	49886	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:47.801213980 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:47.801249981 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:47.801511049 CEST	49883	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.801570892 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.801681042 CEST	49883	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.832988977 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:47.833257914 CEST	49885	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:47.833280087 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:47.833633900 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:47.833944082 CEST	49885	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:47.834012985 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:47.834103107 CEST	49885	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:47.836962938 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:47.847398043 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:47.850665092 CEST	49886	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:47.874044895 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.874145031 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.874197960 CEST	49881	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.875508070 CEST	49881	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.875524044 CEST	443	49881	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.879395008 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:47.892712116 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.892796993 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.892848969 CEST	49882	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.893383980 CEST	49882	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:47.893392086 CEST	443	49882	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:47.967961073 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.968045950 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.968099117 CEST	49887	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:47.969300032 CEST	49887	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:47.969330072 CEST	443	49887	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:47.971472025 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:47.971530914 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:47.971577883 CEST	49886	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:47.972094059 CEST	49886	443	192.168.2.4	52.238.253.184
Sep 11, 2024 19:25:47.972106934 CEST	443	49886	52.238.253.184	192.168.2.4
Sep 11, 2024 19:25:48.044610977 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.044637918 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.044646025 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.044835091 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.044851065 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.048953056 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.049021006 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.049062967 CEST	49883	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.050088882 CEST	49883	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.050110102 CEST	443	49883	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.063342094 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.063375950 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.063437939 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.063852072 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.063860893 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.085604906 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.099344969 CEST	49889	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:48.099406958 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:48.099464893 CEST	49889	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:48.102375031 CEST	49889	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:48.102396011 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:48.106465101 CEST	49890	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.106508017 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.106568098 CEST	49890	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.107769012 CEST	49891	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.107801914 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.107945919 CEST	49891	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.108541965 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.108563900 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.108607054 CEST	49885	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:48.108638048 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.108655930 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.108702898 CEST	49885	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:48.109582901 CEST	49890	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.109601021 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.111404896 CEST	49891	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.111416101 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.130831957 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.130846024 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.130888939 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.130907059 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.130959988 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.130959988 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.130975008 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.131021976 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.131728888 CEST	49885	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:48.131762981 CEST	443	49885	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.157084942 CEST	49892	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:48.157109976 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.157403946 CEST	49892	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:48.157403946 CEST	49892	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:48.157429934 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.164319038 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.164341927 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.164431095 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.164452076 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.166378975 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.217319965 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.217344999 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.217627048 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.217648983 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.217879057 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.217895985 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.218050957 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.218056917 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.218559980 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.218708992 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.218717098 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.220376015 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.220393896 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.220493078 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.220493078 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.220500946 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.260719061 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.260736942 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.261950016 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.261967897 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.272340059 CEST	49893	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.272382021 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.272686005 CEST	49893	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.278002024 CEST	49893	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.278033972 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.304172039 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.304194927 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.304569960 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.304611921 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.304636002 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.304856062 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.305151939 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.305160046 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.305166960 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.305210114 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.305210114 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.306061983 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.306075096 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.306268930 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.306276083 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.306524038 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.307622910 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.307638884 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.308053970 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.308060884 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.308409929 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.308648109 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.308660984 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.309087038 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.309093952 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.309397936 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.338529110 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.338803053 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.338860035 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.338871956 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.338917017 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.339000940 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.347810030 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.347832918 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.348189116 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.348208904 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.348556042 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.381500959 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.381527901 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.381695986 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.381716967 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.381824970 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.391304016 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.391326904 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.391486883 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.391486883 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.391510010 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.391650915 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.391757965 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.391777992 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.391784906 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.391858101 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.391906977 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.394253969 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.394289970 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.394362926 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.394362926 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.394371033 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.394984007 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.395003080 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.395091057 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.395091057 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.395100117 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.398881912 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.415379047 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.415404081 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.415718079 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.415736914 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.415867090 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.425465107 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.425822973 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.425868988 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.425887108 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.425909042 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.426004887 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.434735060 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.434752941 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.434952021 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.434964895 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.435102940 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.469320059 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.469337940 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.469613075 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.469630957 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.469736099 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.477906942 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.477926970 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.478121996 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.478137970 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.478192091 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.478228092 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.478234053 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.478256941 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.478481054 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.478521109 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.478869915 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.478879929 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.479439020 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.479453087 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.479655981 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.479667902 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.480071068 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.480086088 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.480164051 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.480164051 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.480184078 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.502616882 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.502634048 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.502754927 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.502754927 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.502779961 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.513026953 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.513197899 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.513247013 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.513263941 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.513286114 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.521470070 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.521486044 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.521600962 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.521600962 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.521630049 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.556135893 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.556158066 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.556756020 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.556775093 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.564850092 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.564867020 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.565068007 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.565077066 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.565207958 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.565263987 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.565295935 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.565301895 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.565366983 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.565373898 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.565530062 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.566044092 CEST	49884	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.566062927 CEST	443	49884	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.566688061 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:48.566904068 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:48.570363045 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:48.576817036 CEST	49880	443	192.168.2.4	44.213.177.215
Sep 11, 2024 19:25:48.576833963 CEST	443	49880	44.213.177.215	192.168.2.4
Sep 11, 2024 19:25:48.634782076 CEST	49894	80	192.168.2.4	3.214.225.17
Sep 11, 2024 19:25:48.635801077 CEST	49895	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.635837078 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.636162996 CEST	49895	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.637406111 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.637427092 CEST	49895	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.637434959 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.637443066 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.637564898 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.638803959 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.638813019 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.638820887 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.638855934 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.639000893 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.639821053 CEST	80	49894	3.214.225.17	192.168.2.4
Sep 11, 2024 19:25:48.639914989 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.639930964 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.640043020 CEST	49894	80	192.168.2.4	3.214.225.17
Sep 11, 2024 19:25:48.640142918 CEST	49894	80	192.168.2.4	3.214.225.17
Sep 11, 2024 19:25:48.644994020 CEST	80	49894	3.214.225.17	192.168.2.4
Sep 11, 2024 19:25:48.659081936 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.659113884 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.659195900 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.659625053 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.659643888 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.659871101 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.659883022 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.660209894 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.660554886 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.660567999 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.671180010 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.677198887 CEST	49890	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.677213907 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.677510977 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.678675890 CEST	49890	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.678728104 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.682004929 CEST	49890	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.705120087 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:48.709558964 CEST	49889	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:48.709578037 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:48.709908009 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:48.714006901 CEST	49889	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:48.714075089 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:48.714402914 CEST	49889	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:48.723397970 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.755400896 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:48.838732958 CEST	49900	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.838766098 CEST	443	49900	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.838839054 CEST	49900	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.840730906 CEST	49900	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.840747118 CEST	443	49900	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.920784950 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.920865059 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.922195911 CEST	49890	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.922195911 CEST	49890	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.924587011 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.925719976 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.925853968 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.925992012 CEST	49891	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.926008940 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.926141977 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.926147938 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.926312923 CEST	49892	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:48.926330090 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.926479101 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.926484108 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.926665068 CEST	49901	443	192.168.2.4	91.235.132.130
Sep 11, 2024 19:25:48.926681995 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.926692963 CEST	443	49901	91.235.132.130	192.168.2.4
Sep 11, 2024 19:25:48.926855087 CEST	49901	443	192.168.2.4	91.235.132.130
Sep 11, 2024 19:25:48.927261114 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.927261114 CEST	49891	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.927346945 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.927366972 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.927602053 CEST	49901	443	192.168.2.4	91.235.132.130
Sep 11, 2024 19:25:48.927615881 CEST	443	49901	91.235.132.130	192.168.2.4
Sep 11, 2024 19:25:48.927891970 CEST	49892	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:48.927967072 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.928144932 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.928144932 CEST	49891	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:48.928178072 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:48.928248882 CEST	49892	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:48.931571960 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.932255030 CEST	49893	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.932264090 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.933397055 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.934334993 CEST	49893	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.934411049 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.934519053 CEST	49893	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.934519053 CEST	49893	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:48.934546947 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:48.975389957 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:48.975398064 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.057714939 CEST	49902	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:49.057760000 CEST	443	49902	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:49.057847977 CEST	49902	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:49.062036991 CEST	49902	443	192.168.2.4	52.24.39.108
Sep 11, 2024 19:25:49.062052011 CEST	443	49902	52.24.39.108	192.168.2.4
Sep 11, 2024 19:25:49.102674007 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.102701902 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.102845907 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.102859974 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.109249115 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:49.109534025 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:49.109688044 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:49.109842062 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:49.109867096 CEST	49893	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:49.110064030 CEST	49889	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:49.112246990 CEST	49889	443	192.168.2.4	52.35.79.138
Sep 11, 2024 19:25:49.112248898 CEST	49893	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:49.112260103 CEST	443	49889	52.35.79.138	192.168.2.4
Sep 11, 2024 19:25:49.112262964 CEST	443	49893	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:49.121037006 CEST	80	49894	3.214.225.17	192.168.2.4
Sep 11, 2024 19:25:49.149280071 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.155606985 CEST	49903	443	192.168.2.4	3.229.155.61
Sep 11, 2024 19:25:49.155654907 CEST	443	49903	3.229.155.61	192.168.2.4
Sep 11, 2024 19:25:49.155708075 CEST	49903	443	192.168.2.4	3.229.155.61
Sep 11, 2024 19:25:49.156482935 CEST	49903	443	192.168.2.4	3.229.155.61
Sep 11, 2024 19:25:49.156496048 CEST	443	49903	3.229.155.61	192.168.2.4
Sep 11, 2024 19:25:49.165136099 CEST	49894	80	192.168.2.4	3.214.225.17
Sep 11, 2024 19:25:49.177932978 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.178024054 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.178081989 CEST	49891	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.183470011 CEST	49891	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.183496952 CEST	443	49891	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.190613031 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.190623999 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.190643072 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.190720081 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.190720081 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.190730095 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.190752983 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.190828085 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.191174984 CEST	49888	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.191184044 CEST	443	49888	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.198085070 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:49.198173046 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:49.198227882 CEST	49892	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:49.198240042 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:49.198395967 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:49.198474884 CEST	49892	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:49.202054977 CEST	49892	443	192.168.2.4	13.225.78.31
Sep 11, 2024 19:25:49.202063084 CEST	443	49892	13.225.78.31	192.168.2.4
Sep 11, 2024 19:25:49.229135036 CEST	49890	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:49.229160070 CEST	443	49890	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:49.335899115 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.337412119 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.338810921 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.338824034 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.339078903 CEST	49895	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.339093924 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.339188099 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.340410948 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.342408895 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.342506886 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.342787027 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.342801094 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.343651056 CEST	49895	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.343871117 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.344213009 CEST	49895	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.344805002 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.345464945 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.345488071 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.346559048 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.346621037 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.348505020 CEST	49904	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.348540068 CEST	443	49904	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.348635912 CEST	49904	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.349092960 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.349199057 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.349677086 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.349684000 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.350630045 CEST	49904	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.350647926 CEST	443	49904	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.381715059 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.384382010 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.384399891 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.385497093 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.385559082 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.386563063 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.386636972 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.387594938 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.387602091 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.390660048 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.391130924 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.391138077 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.391395092 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.394591093 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.394653082 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.395459890 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.395513058 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.395682096 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.395695925 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.404118061 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.436125994 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.436127901 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.441077948 CEST	49905	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:49.441524982 CEST	49906	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:49.446137905 CEST	3478	49905	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:49.446199894 CEST	49905	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:49.446630001 CEST	3478	49906	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:49.446682930 CEST	49906	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:49.449107885 CEST	49906	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:49.449408054 CEST	49905	3478	192.168.2.4	91.235.132.129
Sep 11, 2024 19:25:49.454026937 CEST	3478	49906	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:49.454457998 CEST	3478	49905	91.235.132.129	192.168.2.4
Sep 11, 2024 19:25:49.466582060 CEST	49907	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:49.466604948 CEST	443	49907	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:49.466674089 CEST	49907	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:49.467895031 CEST	49907	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:49.467906952 CEST	443	49907	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:49.508044004 CEST	49908	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:49.508084059 CEST	443	49908	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:49.508143902 CEST	49908	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:49.511316061 CEST	49908	443	192.168.2.4	52.141.217.134
Sep 11, 2024 19:25:49.511332989 CEST	443	49908	52.141.217.134	192.168.2.4
Sep 11, 2024 19:25:49.558696985 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.558720112 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.558789015 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.558809996 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.567552090 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.567574978 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.567583084 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.567622900 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.567646980 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.567677021 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.573637962 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.573668957 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.573676109 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.573719978 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.573736906 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.573754072 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.600440025 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.616544008 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.616559982 CEST	49899	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.635236025 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.635477066 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.635531902 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.637975931 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.638047934 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.638118029 CEST	49895	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.638132095 CEST	443	49895	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.645715952 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.645729065 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.645761013 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.645781040 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.645801067 CEST	443	49896	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.645819902 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.645842075 CEST	49896	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.647676945 CEST	443	49900	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.650048018 CEST	49900	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.650067091 CEST	443	49900	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.651590109 CEST	49897	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.651613951 CEST	443	49897	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.652245045 CEST	443	49900	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.652318954 CEST	49900	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.654059887 CEST	49900	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.654261112 CEST	443	49900	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.654570103 CEST	49900	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.654577017 CEST	443	49900	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.654951096 CEST	443	49901	91.235.132.130	192.168.2.4
Sep 11, 2024 19:25:49.655452967 CEST	49901	443	192.168.2.4	91.235.132.130
Sep 11, 2024 19:25:49.655463934 CEST	443	49901	91.235.132.130	192.168.2.4
Sep 11, 2024 19:25:49.656439066 CEST	443	49901	91.235.132.130	192.168.2.4
Sep 11, 2024 19:25:49.656502008 CEST	49901	443	192.168.2.4	91.235.132.130
Sep 11, 2024 19:25:49.657963037 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.657980919 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.657998085 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.658006907 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.658020020 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.658031940 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.658039093 CEST	443	49898	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.658063889 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.658102989 CEST	49898	443	192.168.2.4	91.235.133.106
Sep 11, 2024 19:25:49.658416033 CEST	49901	443	192.168.2.4	91.235.132.130
Sep 11, 2024 19:25:49.658474922 CEST	443	49901	91.235.132.130	192.168.2.4
Sep 11, 2024 19:25:49.659481049 CEST	49901	443	192.168.2.4	91.235.132.130
Sep 11, 2024 19:25:49.659487009 CEST	443	49901	91.235.132.130	192.168.2.4
Sep 11, 2024 19:25:49.666126013 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.666165113 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.666201115 CEST	443	49899	91.235.133.106	192.168.2.4
Sep 11, 2024 19:25:49.666204929 CEST	49899	443	192.168.2.4	91.235.133.106

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 11, 2024 19:25:18.946973085 CEST	192.168.2.4	1.1.1.1	0x88b0	Standard query (0)	connect.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:18.946973085 CEST	192.168.2.4	1.1.1.1	0x3be9	Standard query (0)	connect.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:19.965522051 CEST	192.168.2.4	1.1.1.1	0xdc22	Standard query (0)	connect.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:19.965676069 CEST	192.168.2.4	1.1.1.1	0x8939	Standard query (0)	connect.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:20.966584921 CEST	192.168.2.4	1.1.1.1	0x904e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.967097044 CEST	192.168.2.4	1.1.1.1	0xd1f5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:22.383358955 CEST	192.168.2.4	1.1.1.1	0x2d1	Standard query (0)	static.cns-icn-prod.a.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:22.383685112 CEST	192.168.2.4	1.1.1.1	0x1ca0	Standard query (0)	static.cns-icn-prod.a.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:22.443737984 CEST	192.168.2.4	1.1.1.1	0x7f00	Standard query (0)	smx.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:22.448107958 CEST	192.168.2.4	1.1.1.1	0x590a	Standard query (0)	smx.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:23.452227116 CEST	192.168.2.4	1.1.1.1	0xe77c	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:23.452426910 CEST	192.168.2.4	1.1.1.1	0xa69d	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:24.365693092 CEST	192.168.2.4	1.1.1.1	0x44e5	Standard query (0)	static.cns-icn-prod.a.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:24.366938114 CEST	192.168.2.4	1.1.1.1	0xcdbd	Standard query (0)	static.cns-icn-prod.a.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:24.368268967 CEST	192.168.2.4	1.1.1.1	0x118b	Standard query (0)	smx.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:24.369077921 CEST	192.168.2.4	1.1.1.1	0x9804	Standard query (0)	smx.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:25.129710913 CEST	192.168.2.4	1.1.1.1	0xff75	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:25.130064964 CEST	192.168.2.4	1.1.1.1	0x4913	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:27.967376947 CEST	192.168.2.4	1.1.1.1	0x7914	Standard query (0)	prd.sentry-io.a.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:27.967741966 CEST	192.168.2.4	1.1.1.1	0xe153	Standard query (0)	prd.sentry-io.a.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:29.196914911 CEST	192.168.2.4	1.1.1.1	0xd399	Standard query (0)	prd.sentry-io.a.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:29.197129011 CEST	192.168.2.4	1.1.1.1	0x8af3	Standard query (0)	prd.sentry-io.a.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:31.468534946 CEST	192.168.2.4	1.1.1.1	0x23dc	Standard query (0)	eventbus.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:31.468751907 CEST	192.168.2.4	1.1.1.1	0x58d8	Standard query (0)	eventbus.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:33.147062063 CEST	192.168.2.4	1.1.1.1	0x53e2	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:33.147823095 CEST	192.168.2.4	1.1.1.1	0x57e6	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Sep 11, 2024 19:25:33.162153006 CEST	192.168.2.4	1.1.1.1	0xe43d	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Sep 11, 2024 19:25:33.241345882 CEST	192.168.2.4	1.1.1.1	0xa1db	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Sep 11, 2024 19:25:33.243067026 CEST	192.168.2.4	1.1.1.1	0x8e6b	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:34.006078959 CEST	192.168.2.4	1.1.1.1	0xc9ed	Standard query (0)	qfp.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:34.006778955 CEST	192.168.2.4	1.1.1.1	0x34a0	Standard query (0)	qfp.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:34.580813885 CEST	192.168.2.4	1.1.1.1	0x9087	Standard query (0)	bcdn-god.we-stats.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:34.580813885 CEST	192.168.2.4	1.1.1.1	0xaf8e	Standard query (0)	bcdn-god.we-stats.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:35.149954081 CEST	192.168.2.4	1.1.1.1	0x1de6	Standard query (0)	connect.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.150340080 CEST	192.168.2.4	1.1.1.1	0x8a32	Standard query (0)	connect.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:36.128211975 CEST	192.168.2.4	1.1.1.1	0x43af	Standard query (0)	risk-vendor-svc.api.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.128443003 CEST	192.168.2.4	1.1.1.1	0x5a27	Standard query (0)	risk-vendor-svc.api.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:36.452697992 CEST	192.168.2.4	1.1.1.1	0x5545	Standard query (0)	wup-04e01638.us.v2.we-stats.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.453059912 CEST	192.168.2.4	1.1.1.1	0x7128	Standard query (0)	wup-04e01638.us.v2.we-stats.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:36.573147058 CEST	192.168.2.4	1.1.1.1	0x7452	Standard query (0)	qfp.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.573287010 CEST	192.168.2.4	1.1.1.1	0x6a13	Standard query (0)	qfp.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:36.812697887 CEST	192.168.2.4	1.1.1.1	0x7689	Standard query (0)	quickbooks.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.813136101 CEST	192.168.2.4	1.1.1.1	0xf131	Standard query (0)	quickbooks.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:37.341475964 CEST	192.168.2.4	1.1.1.1	0x81da	Standard query (0)	bcdn-god.we-stats.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:37.341804028 CEST	192.168.2.4	1.1.1.1	0x6043	Standard query (0)	bcdn-god.we-stats.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:37.403549910 CEST	192.168.2.4	1.1.1.1	0xee46	Standard query (0)	wup-04e01638.us.v2.we-stats.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:37.403894901 CEST	192.168.2.4	1.1.1.1	0x409c	Standard query (0)	wup-04e01638.us.v2.we-stats.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:38.266315937 CEST	192.168.2.4	1.1.1.1	0xaea1	Standard query (0)	risk-vendor-svc.api.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:38.270365000 CEST	192.168.2.4	1.1.1.1	0xb1a1	Standard query (0)	risk-vendor-svc.api.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:39.726978064 CEST	192.168.2.4	1.1.1.1	0x3a3f	Standard query (0)	log-04e01638.us.v2.we-stats.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:39.728164911 CEST	192.168.2.4	1.1.1.1	0x9675	Standard query (0)	log-04e01638.us.v2.we-stats.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:46.132883072 CEST	192.168.2.4	1.1.1.1	0x2ffa	Standard query (0)	privacy.truste.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:46.133429050 CEST	192.168.2.4	1.1.1.1	0x4d7e	Standard query (0)	privacy.truste.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:48.576818943 CEST	192.168.2.4	1.1.1.1	0x84aa	Standard query (0)	www.truste.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:48.577366114 CEST	192.168.2.4	1.1.1.1	0x7882	Standard query (0)	www.truste.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:48.715411901 CEST	192.168.2.4	1.1.1.1	0xb174	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:48.715411901 CEST	192.168.2.4	1.1.1.1	0xe40	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Sep 11, 2024 19:25:49.124490023 CEST	192.168.2.4	1.1.1.1	0x5b82	Standard query (0)	www.truste.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:49.124490023 CEST	192.168.2.4	1.1.1.1	0x1556	Standard query (0)	www.truste.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:49.367654085 CEST	192.168.2.4	1.1.1.1	0x44c	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:49.369319916 CEST	192.168.2.4	1.1.1.1	0xe0f2	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Sep 11, 2024 19:25:49.378185987 CEST	192.168.2.4	1.1.1.1	0x9b2e	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Sep 11, 2024 19:25:49.432852983 CEST	192.168.2.4	1.1.1.1	0xbe89	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:50.331727028 CEST	192.168.2.4	1.1.1.1	0x17d4	Standard query (0)	trustarc.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:50.333029985 CEST	192.168.2.4	1.1.1.1	0x4980	Standard query (0)	trustarc.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:50.431406975 CEST	192.168.2.4	1.1.1.1	0x7029	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:50.432349920 CEST	192.168.2.4	1.1.1.1	0xaa9e	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Sep 11, 2024 19:25:51.700073004 CEST	192.168.2.4	1.1.1.1	0x98f0	Standard query (0)	v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:51.700629950 CEST	192.168.2.4	1.1.1.1	0x340d	Standard query (0)	v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.net	65	IN (0x0001)	false
Sep 11, 2024 19:25:51.861943960 CEST	192.168.2.4	1.1.1.1	0x3fe7	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:51.862099886 CEST	192.168.2.4	1.1.1.1	0x9233	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Sep 11, 2024 19:25:52.744638920 CEST	192.168.2.4	1.1.1.1	0x7ad7	Standard query (0)	v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.745119095 CEST	192.168.2.4	1.1.1.1	0x1a4d	Standard query (0)	v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.net	65	IN (0x0001)	false
Sep 11, 2024 19:25:52.849392891 CEST	192.168.2.4	1.1.1.1	0x11f1	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.849540949 CEST	192.168.2.4	1.1.1.1	0x521f	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Sep 11, 2024 19:25:52.866395950 CEST	192.168.2.4	1.1.1.1	0xb714	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.866573095 CEST	192.168.2.4	1.1.1.1	0x56b3	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:52.867779970 CEST	192.168.2.4	1.1.1.1	0xf1bd	Standard query (0)	chat-application.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.867963076 CEST	192.168.2.4	1.1.1.1	0xe862	Standard query (0)	chat-application.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:53.979706049 CEST	192.168.2.4	1.1.1.1	0xfa48	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:53.979860067 CEST	192.168.2.4	1.1.1.1	0xaf3d	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Sep 11, 2024 19:25:54.915904045 CEST	192.168.2.4	1.1.1.1	0x8948	Standard query (0)	trustarc.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:54.916066885 CEST	192.168.2.4	1.1.1.1	0x208c	Standard query (0)	trustarc.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:54.918210030 CEST	192.168.2.4	1.1.1.1	0xdfb1	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:54.918416023 CEST	192.168.2.4	1.1.1.1	0x28a1	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:54.971991062 CEST	192.168.2.4	1.1.1.1	0x74ef	Standard query (0)	chat-application.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:54.972253084 CEST	192.168.2.4	1.1.1.1	0x827a	Standard query (0)	chat-application.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:55.820489883 CEST	192.168.2.4	1.1.1.1	0x5701	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:55.828696012 CEST	192.168.2.4	1.1.1.1	0x9629	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:55.830957890 CEST	192.168.2.4	1.1.1.1	0xb038	Standard query (0)	cdn.livechatinc.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:55.831327915 CEST	192.168.2.4	1.1.1.1	0x53d8	Standard query (0)	cdn.livechatinc.com	65	IN (0x0001)	false
Sep 11, 2024 19:25:58.644882917 CEST	192.168.2.4	1.1.1.1	0x5aba	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:58.645009995 CEST	192.168.2.4	1.1.1.1	0x8fb2	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:00.251132011 CEST	192.168.2.4	1.1.1.1	0xb92	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:00.251518011 CEST	192.168.2.4	1.1.1.1	0x47cf	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:01.307856083 CEST	192.168.2.4	1.1.1.1	0xf2a5	Standard query (0)	eventbus.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.307986975 CEST	192.168.2.4	1.1.1.1	0xebcd	Standard query (0)	eventbus.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:01.309753895 CEST	192.168.2.4	1.1.1.1	0x881e	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.310136080 CEST	192.168.2.4	1.1.1.1	0x1aab	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:01.416914940 CEST	192.168.2.4	1.1.1.1	0x83ac	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.417325974 CEST	192.168.2.4	1.1.1.1	0x8602	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:02.643593073 CEST	192.168.2.4	1.1.1.1	0xbba8	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:02.643759966 CEST	192.168.2.4	1.1.1.1	0x8356	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:04.340007067 CEST	192.168.2.4	1.1.1.1	0x99ef	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.340235949 CEST	192.168.2.4	1.1.1.1	0xef48	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:04.340776920 CEST	192.168.2.4	1.1.1.1	0xa70a	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.341214895 CEST	192.168.2.4	1.1.1.1	0x4331	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Sep 11, 2024 19:26:04.341664076 CEST	192.168.2.4	1.1.1.1	0xa99e	Standard query (0)	info.trustarc.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.341805935 CEST	192.168.2.4	1.1.1.1	0x4373	Standard query (0)	info.trustarc.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:04.986973047 CEST	192.168.2.4	1.1.1.1	0x9676	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.987405062 CEST	192.168.2.4	1.1.1.1	0x2b95	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:05.107080936 CEST	192.168.2.4	1.1.1.1	0xd224	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.107261896 CEST	192.168.2.4	1.1.1.1	0x8db2	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:05.322005987 CEST	192.168.2.4	1.1.1.1	0x9327	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.322226048 CEST	192.168.2.4	1.1.1.1	0xc8b3	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Sep 11, 2024 19:26:05.731872082 CEST	192.168.2.4	1.1.1.1	0x4e97	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.732202053 CEST	192.168.2.4	1.1.1.1	0x9765	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:05.762584925 CEST	192.168.2.4	1.1.1.1	0xf269	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.762708902 CEST	192.168.2.4	1.1.1.1	0x2cf1	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 11, 2024 19:26:05.808595896 CEST	192.168.2.4	1.1.1.1	0xd715	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.808595896 CEST	192.168.2.4	1.1.1.1	0x987b	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:05.836802959 CEST	192.168.2.4	1.1.1.1	0xbfd4	Standard query (0)	info.trustarc.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.836941004 CEST	192.168.2.4	1.1.1.1	0x94f5	Standard query (0)	info.trustarc.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:05.846462965 CEST	192.168.2.4	1.1.1.1	0x2485	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.846788883 CEST	192.168.2.4	1.1.1.1	0x2653	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:06.131843090 CEST	192.168.2.4	1.1.1.1	0x96b3	Standard query (0)	feedback.qbo.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.132113934 CEST	192.168.2.4	1.1.1.1	0x2daa	Standard query (0)	feedback.qbo.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:06.387681007 CEST	192.168.2.4	1.1.1.1	0x60f3	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.387842894 CEST	192.168.2.4	1.1.1.1	0x403d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 11, 2024 19:26:06.401551008 CEST	192.168.2.4	1.1.1.1	0xdee1	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.401756048 CEST	192.168.2.4	1.1.1.1	0xd5c7	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:06.429457903 CEST	192.168.2.4	1.1.1.1	0xd403	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.429893017 CEST	192.168.2.4	1.1.1.1	0xcb7b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 11, 2024 19:26:06.669099092 CEST	192.168.2.4	1.1.1.1	0x4301	Standard query (0)	846-llz-652.mktoresp.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.669287920 CEST	192.168.2.4	1.1.1.1	0x1a2f	Standard query (0)	846-llz-652.mktoresp.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:07.317886114 CEST	192.168.2.4	1.1.1.1	0xb11a	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.317886114 CEST	192.168.2.4	1.1.1.1	0xc55b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 11, 2024 19:26:07.319478035 CEST	192.168.2.4	1.1.1.1	0x1c14	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.319833994 CEST	192.168.2.4	1.1.1.1	0xc41b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:07.699928045 CEST	192.168.2.4	1.1.1.1	0xd547	Standard query (0)	assets.uvcdn.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.700392962 CEST	192.168.2.4	1.1.1.1	0x9f05	Standard query (0)	assets.uvcdn.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:07.704436064 CEST	192.168.2.4	1.1.1.1	0x70c6	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.704751015 CEST	192.168.2.4	1.1.1.1	0x9fa8	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:08.476180077 CEST	192.168.2.4	1.1.1.1	0x155e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.476696014 CEST	192.168.2.4	1.1.1.1	0x32a8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:08.500300884 CEST	192.168.2.4	1.1.1.1	0xa1e	Standard query (0)	feedback.qbo.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.500943899 CEST	192.168.2.4	1.1.1.1	0xc740	Standard query (0)	feedback.qbo.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:08.508322001 CEST	192.168.2.4	1.1.1.1	0x7796	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.508919001 CEST	192.168.2.4	1.1.1.1	0xaee	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:08.730998039 CEST	192.168.2.4	1.1.1.1	0x33da	Standard query (0)	widget.uservoice.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.735991955 CEST	192.168.2.4	1.1.1.1	0x965f	Standard query (0)	widget.uservoice.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:09.937166929 CEST	192.168.2.4	1.1.1.1	0x2316	Standard query (0)	qbo.uservoice.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:09.937963009 CEST	192.168.2.4	1.1.1.1	0x189f	Standard query (0)	qbo.uservoice.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:11.087466002 CEST	192.168.2.4	1.1.1.1	0xd5f8	Standard query (0)	by2.uservoice.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.088479996 CEST	192.168.2.4	1.1.1.1	0x78f9	Standard query (0)	by2.uservoice.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:11.888840914 CEST	192.168.2.4	1.1.1.1	0x47f7	Standard query (0)	assets.uvcdn.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.889089108 CEST	192.168.2.4	1.1.1.1	0xf18b	Standard query (0)	assets.uvcdn.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:11.892040968 CEST	192.168.2.4	1.1.1.1	0x6dc5	Standard query (0)	widget.uservoice.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.892549038 CEST	192.168.2.4	1.1.1.1	0xfb0c	Standard query (0)	widget.uservoice.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:11.894516945 CEST	192.168.2.4	1.1.1.1	0x440f	Standard query (0)	qbo.uservoice.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.894905090 CEST	192.168.2.4	1.1.1.1	0xe27e	Standard query (0)	qbo.uservoice.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:14.063240051 CEST	192.168.2.4	1.1.1.1	0xc778	Standard query (0)	by2.uservoice.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:14.063982010 CEST	192.168.2.4	1.1.1.1	0x2ca2	Standard query (0)	by2.uservoice.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:24.275113106 CEST	192.168.2.4	1.1.1.1	0x3b19	Standard query (0)	www.truste.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:24.275573969 CEST	192.168.2.4	1.1.1.1	0x649b	Standard query (0)	www.truste.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:24.276032925 CEST	192.168.2.4	1.1.1.1	0xce0a	Standard query (0)	www.truste.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:24.276300907 CEST	192.168.2.4	1.1.1.1	0x5bb9	Standard query (0)	www.truste.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:25.604598045 CEST	192.168.2.4	1.1.1.1	0xb5bd	Standard query (0)	feedback-form.truste.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:25.604598045 CEST	192.168.2.4	1.1.1.1	0x318f	Standard query (0)	feedback-form.truste.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:27.373567104 CEST	192.168.2.4	1.1.1.1	0xf6ab	Standard query (0)	feedback-form.trustarc.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:27.374018908 CEST	192.168.2.4	1.1.1.1	0x9a3a	Standard query (0)	feedback-form.trustarc.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:29.184309006 CEST	192.168.2.4	1.1.1.1	0xf3a3	Standard query (0)	feedback-form.trustarc.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:29.184541941 CEST	192.168.2.4	1.1.1.1	0xd83d	Standard query (0)	feedback-form.trustarc.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:39.379281044 CEST	192.168.2.4	1.1.1.1	0xc6b6	Standard query (0)	connect.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.379573107 CEST	192.168.2.4	1.1.1.1	0xb575	Standard query (0)	connect.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:39.383426905 CEST	192.168.2.4	1.1.1.1	0xa210	Standard query (0)	qfp.intuit.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.383635998 CEST	192.168.2.4	1.1.1.1	0x7708	Standard query (0)	qfp.intuit.com	65	IN (0x0001)	false
Sep 11, 2024 19:26:40.380331993 CEST	192.168.2.4	1.1.1.1	0x7af4	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:41.739248037 CEST	192.168.2.4	1.1.1.1	0x2067	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:27:03.312817097 CEST	192.168.2.4	1.1.1.1	0x762c	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.24.39.108	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.209.229.198	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.148.83.25	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.214.56.55	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.42.183.249	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.218.18.222	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		35.155.228.157	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032237053 CEST	1.1.1.1	192.168.2.4	0x88b0	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.69.242.72	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032392025 CEST	1.1.1.1	192.168.2.4	0x3be9	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032392025 CEST	1.1.1.1	192.168.2.4	0x3be9	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032392025 CEST	1.1.1.1	192.168.2.4	0x3be9	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032392025 CEST	1.1.1.1	192.168.2.4	0x3be9	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032392025 CEST	1.1.1.1	192.168.2.4	0x3be9	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.032392025 CEST	1.1.1.1	192.168.2.4	0x3be9	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.076525927 CEST	1.1.1.1	192.168.2.4	0x8939	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.076525927 CEST	1.1.1.1	192.168.2.4	0x8939	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.076525927 CEST	1.1.1.1	192.168.2.4	0x8939	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.076525927 CEST	1.1.1.1	192.168.2.4	0x8939	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.076525927 CEST	1.1.1.1	192.168.2.4	0x8939	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.076525927 CEST	1.1.1.1	192.168.2.4	0x8939	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.35.79.138	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.24.39.108	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.33.148.156	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		35.85.157.36	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.214.56.55	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.209.229.198	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.218.18.222	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.113203049 CEST	1.1.1.1	192.168.2.4	0xdc22	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.148.83.25	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.973242998 CEST	1.1.1.1	192.168.2.4	0x904e	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:20.973824978 CEST	1.1.1.1	192.168.2.4	0xd1f5	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 11, 2024 19:25:22.391068935 CEST	1.1.1.1	192.168.2.4	0x2d1	No error (0)	static.cns-icn-prod.a.intuit.com		13.225.78.31	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:22.391068935 CEST	1.1.1.1	192.168.2.4	0x2d1	No error (0)	static.cns-icn-prod.a.intuit.com		13.225.78.17	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:22.391068935 CEST	1.1.1.1	192.168.2.4	0x2d1	No error (0)	static.cns-icn-prod.a.intuit.com		13.225.78.36	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:22.391068935 CEST	1.1.1.1	192.168.2.4	0x2d1	No error (0)	static.cns-icn-prod.a.intuit.com		13.225.78.22	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:22.460088015 CEST	1.1.1.1	192.168.2.4	0x590a	No error (0)	smx.intuit.com	http-download.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:22.460592031 CEST	1.1.1.1	192.168.2.4	0x7f00	No error (0)	smx.intuit.com	http-download.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:23.691673994 CEST	1.1.1.1	192.168.2.4	0xe77c	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:23.691673994 CEST	1.1.1.1	192.168.2.4	0xe77c	No error (0)	d296je7bbdd650.cloudfront.net		52.85.48.9	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:23.691688061 CEST	1.1.1.1	192.168.2.4	0xa69d	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:24.382489920 CEST	1.1.1.1	192.168.2.4	0x9804	No error (0)	smx.intuit.com	http-download.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:24.387569904 CEST	1.1.1.1	192.168.2.4	0x118b	No error (0)	smx.intuit.com	http-download.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:24.392055035 CEST	1.1.1.1	192.168.2.4	0x44e5	No error (0)	static.cns-icn-prod.a.intuit.com		13.225.78.31	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:24.392055035 CEST	1.1.1.1	192.168.2.4	0x44e5	No error (0)	static.cns-icn-prod.a.intuit.com		13.225.78.17	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:24.392055035 CEST	1.1.1.1	192.168.2.4	0x44e5	No error (0)	static.cns-icn-prod.a.intuit.com		13.225.78.22	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:24.392055035 CEST	1.1.1.1	192.168.2.4	0x44e5	No error (0)	static.cns-icn-prod.a.intuit.com		13.225.78.36	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:25.138021946 CEST	1.1.1.1	192.168.2.4	0xff75	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:25.138021946 CEST	1.1.1.1	192.168.2.4	0xff75	No error (0)	d296je7bbdd650.cloudfront.net		13.35.58.148	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:25.139594078 CEST	1.1.1.1	192.168.2.4	0x4913	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:28.011611938 CEST	1.1.1.1	192.168.2.4	0x7914	No error (0)	prd.sentry-io.a.intuit.com	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:28.011611938 CEST	1.1.1.1	192.168.2.4	0x7914	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		54.188.205.94	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:28.011611938 CEST	1.1.1.1	192.168.2.4	0x7914	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.215.237.163	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:28.011611938 CEST	1.1.1.1	192.168.2.4	0x7914	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.213.165.212	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:28.090820074 CEST	1.1.1.1	192.168.2.4	0xe153	No error (0)	prd.sentry-io.a.intuit.com	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:29.217463017 CEST	1.1.1.1	192.168.2.4	0xd399	No error (0)	prd.sentry-io.a.intuit.com	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:29.217463017 CEST	1.1.1.1	192.168.2.4	0xd399	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.213.165.212	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:29.217463017 CEST	1.1.1.1	192.168.2.4	0xd399	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		34.215.237.163	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:29.217463017 CEST	1.1.1.1	192.168.2.4	0xd399	No error (0)	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		54.188.205.94	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:29.259831905 CEST	1.1.1.1	192.168.2.4	0x8af3	No error (0)	prd.sentry-io.a.intuit.com	platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:31.483158112 CEST	1.1.1.1	192.168.2.4	0x58d8	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:31.488913059 CEST	1.1.1.1	192.168.2.4	0x23dc	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:31.488913059 CEST	1.1.1.1	192.168.2.4	0x23dc	No error (0)	eventbus.a.intuit.com		35.166.207.170	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:31.488913059 CEST	1.1.1.1	192.168.2.4	0x23dc	No error (0)	eventbus.a.intuit.com		54.69.149.23	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:31.488913059 CEST	1.1.1.1	192.168.2.4	0x23dc	No error (0)	eventbus.a.intuit.com		44.228.135.147	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:31.488913059 CEST	1.1.1.1	192.168.2.4	0x23dc	No error (0)	eventbus.a.intuit.com		44.225.83.157	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:31.488913059 CEST	1.1.1.1	192.168.2.4	0x23dc	No error (0)	eventbus.a.intuit.com		54.189.162.76	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:31.488913059 CEST	1.1.1.1	192.168.2.4	0x23dc	No error (0)	eventbus.a.intuit.com		52.10.192.44	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:31.488913059 CEST	1.1.1.1	192.168.2.4	0x23dc	No error (0)	eventbus.a.intuit.com		52.35.132.95	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:31.488913059 CEST	1.1.1.1	192.168.2.4	0x23dc	No error (0)	eventbus.a.intuit.com		54.69.89.188	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:32.724694967 CEST	1.1.1.1	192.168.2.4	0x95f3	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:32.724694967 CEST	1.1.1.1	192.168.2.4	0x95f3	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:33.153867960 CEST	1.1.1.1	192.168.2.4	0x53e2	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:33.250575066 CEST	1.1.1.1	192.168.2.4	0x8e6b	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:34.021069050 CEST	1.1.1.1	192.168.2.4	0xc9ed	No error (0)	qfp.intuit.com	h-v60nf4oj-qfp.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:34.021069050 CEST	1.1.1.1	192.168.2.4	0xc9ed	No error (0)	h-v60nf4oj-qfp.online-metrix.net		91.235.133.106	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:34.025626898 CEST	1.1.1.1	192.168.2.4	0x34a0	No error (0)	qfp.intuit.com	h-v60nf4oj-qfp.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:34.470365047 CEST	1.1.1.1	192.168.2.4	0xacd4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:34.470365047 CEST	1.1.1.1	192.168.2.4	0xacd4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:34.593807936 CEST	1.1.1.1	192.168.2.4	0xaf8e	No error (0)	bcdn-god.we-stats.com	d2rikquc8s9owl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:34.600528002 CEST	1.1.1.1	192.168.2.4	0x9087	No error (0)	bcdn-god.we-stats.com	d2rikquc8s9owl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:34.600528002 CEST	1.1.1.1	192.168.2.4	0x9087	No error (0)	d2rikquc8s9owl.cloudfront.net		65.9.86.56	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:34.600528002 CEST	1.1.1.1	192.168.2.4	0x9087	No error (0)	d2rikquc8s9owl.cloudfront.net		65.9.86.85	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:34.600528002 CEST	1.1.1.1	192.168.2.4	0x9087	No error (0)	d2rikquc8s9owl.cloudfront.net		65.9.86.74	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:34.600528002 CEST	1.1.1.1	192.168.2.4	0x9087	No error (0)	d2rikquc8s9owl.cloudfront.net		65.9.86.69	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.35.79.138	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		35.155.228.157	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.37.128.117	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.223.205.90	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.214.56.55	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.209.229.198	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.148.83.25	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.197427034 CEST	1.1.1.1	192.168.2.4	0x1de6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.33.148.156	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:35.222615957 CEST	1.1.1.1	192.168.2.4	0x8a32	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.222615957 CEST	1.1.1.1	192.168.2.4	0x8a32	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.222615957 CEST	1.1.1.1	192.168.2.4	0x8a32	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.222615957 CEST	1.1.1.1	192.168.2.4	0x8a32	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.222615957 CEST	1.1.1.1	192.168.2.4	0x8a32	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:35.222615957 CEST	1.1.1.1	192.168.2.4	0x8a32	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.180572033 CEST	1.1.1.1	192.168.2.4	0x5a27	No error (0)	risk-vendor-svc.api.intuit.com	risk-vendor-svc.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.180572033 CEST	1.1.1.1	192.168.2.4	0x5a27	No error (0)	risk-vendor-svc.prd.api.a.intuit.com	risk-vendor-svc-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.180572033 CEST	1.1.1.1	192.168.2.4	0x5a27	No error (0)	risk-vendor-svc-us-west-2.prd.api.a.intuit.com	sw1_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.180572033 CEST	1.1.1.1	192.168.2.4	0x5a27	No error (0)	sw1_us-west-2_web.prd.api.a.intuit.com	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	risk-vendor-svc.api.intuit.com	risk-vendor-svc.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	risk-vendor-svc.prd.api.a.intuit.com	risk-vendor-svc-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	risk-vendor-svc-us-west-2.prd.api.a.intuit.com	sw1_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	sw1_us-west-2_web.prd.api.a.intuit.com	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		35.84.56.34	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		54.189.230.245	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		44.241.55.184	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		34.210.100.91	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		52.88.64.36	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.183429956 CEST	1.1.1.1	192.168.2.4	0x43af	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		44.241.213.0	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.467657089 CEST	1.1.1.1	192.168.2.4	0x5545	No error (0)	wup-04e01638.us.v2.we-stats.com		52.141.217.134	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.583848000 CEST	1.1.1.1	192.168.2.4	0x7452	No error (0)	qfp.intuit.com	h-v60nf4oj-qfp.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.583848000 CEST	1.1.1.1	192.168.2.4	0x7452	No error (0)	h-v60nf4oj-qfp.online-metrix.net		91.235.133.106	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:36.591589928 CEST	1.1.1.1	192.168.2.4	0x6a13	No error (0)	qfp.intuit.com	h-v60nf4oj-qfp.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.901949883 CEST	1.1.1.1	192.168.2.4	0xf131	No error (0)	quickbooks.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:36.916989088 CEST	1.1.1.1	192.168.2.4	0x7689	No error (0)	quickbooks.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:37.354975939 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	bcdn-god.we-stats.com	d2rikquc8s9owl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:37.354975939 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	d2rikquc8s9owl.cloudfront.net		13.32.121.110	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:37.354975939 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	d2rikquc8s9owl.cloudfront.net		13.32.121.13	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:37.354975939 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	d2rikquc8s9owl.cloudfront.net		13.32.121.41	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:37.354975939 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	d2rikquc8s9owl.cloudfront.net		13.32.121.106	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:37.354994059 CEST	1.1.1.1	192.168.2.4	0x6043	No error (0)	bcdn-god.we-stats.com	d2rikquc8s9owl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:37.413058996 CEST	1.1.1.1	192.168.2.4	0xee46	No error (0)	wup-04e01638.us.v2.we-stats.com		52.141.217.134	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	risk-vendor-svc.api.intuit.com	risk-vendor-svc.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	risk-vendor-svc.prd.api.a.intuit.com	risk-vendor-svc-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	risk-vendor-svc-us-west-2.prd.api.a.intuit.com	sw1_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	sw1_us-west-2_web.prd.api.a.intuit.com	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		44.241.213.0	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		35.84.56.34	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		34.210.100.91	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		44.241.55.184	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		54.189.230.245	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:38.303227901 CEST	1.1.1.1	192.168.2.4	0xaea1	No error (0)	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		52.88.64.36	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:38.309936047 CEST	1.1.1.1	192.168.2.4	0xb1a1	No error (0)	risk-vendor-svc.api.intuit.com	risk-vendor-svc.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:38.309936047 CEST	1.1.1.1	192.168.2.4	0xb1a1	No error (0)	risk-vendor-svc.prd.api.a.intuit.com	risk-vendor-svc-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:38.309936047 CEST	1.1.1.1	192.168.2.4	0xb1a1	No error (0)	risk-vendor-svc-us-west-2.prd.api.a.intuit.com	sw1_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:38.309936047 CEST	1.1.1.1	192.168.2.4	0xb1a1	No error (0)	sw1_us-west-2_web.prd.api.a.intuit.com	prd-dx01.devpapigwextprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:39.736483097 CEST	1.1.1.1	192.168.2.4	0x3a3f	No error (0)	log-04e01638.us.v2.we-stats.com		52.238.253.184	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:46.140355110 CEST	1.1.1.1	192.168.2.4	0x2ffa	No error (0)	privacy.truste.com	legacy-validation-prod2-1100105057.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:46.140355110 CEST	1.1.1.1	192.168.2.4	0x2ffa	No error (0)	legacy-validation-prod2-1100105057.us-east-1.elb.amazonaws.com		44.213.177.215	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:46.140355110 CEST	1.1.1.1	192.168.2.4	0x2ffa	No error (0)	legacy-validation-prod2-1100105057.us-east-1.elb.amazonaws.com		34.192.170.117	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:46.140355110 CEST	1.1.1.1	192.168.2.4	0x2ffa	No error (0)	legacy-validation-prod2-1100105057.us-east-1.elb.amazonaws.com		54.83.8.79	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:46.140355110 CEST	1.1.1.1	192.168.2.4	0x2ffa	No error (0)	legacy-validation-prod2-1100105057.us-east-1.elb.amazonaws.com		44.207.177.70	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:46.143333912 CEST	1.1.1.1	192.168.2.4	0x4d7e	No error (0)	privacy.truste.com	legacy-validation-prod2-1100105057.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:46.754323959 CEST	1.1.1.1	192.168.2.4	0x1161	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:46.754323959 CEST	1.1.1.1	192.168.2.4	0x1161	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:48.605530977 CEST	1.1.1.1	192.168.2.4	0x7882	No error (0)	www.truste.com	truste-com-509071560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:48.606317043 CEST	1.1.1.1	192.168.2.4	0x84aa	No error (0)	www.truste.com	truste-com-509071560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:48.606317043 CEST	1.1.1.1	192.168.2.4	0x84aa	No error (0)	truste-com-509071560.us-east-1.elb.amazonaws.com		3.214.225.17	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:48.606317043 CEST	1.1.1.1	192.168.2.4	0x84aa	No error (0)	truste-com-509071560.us-east-1.elb.amazonaws.com		3.229.155.61	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:48.922869921 CEST	1.1.1.1	192.168.2.4	0xb174	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:49.153511047 CEST	1.1.1.1	192.168.2.4	0x1556	No error (0)	www.truste.com	truste-com-509071560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:49.154033899 CEST	1.1.1.1	192.168.2.4	0x5b82	No error (0)	www.truste.com	truste-com-509071560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:49.154033899 CEST	1.1.1.1	192.168.2.4	0x5b82	No error (0)	truste-com-509071560.us-east-1.elb.amazonaws.com		3.229.155.61	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:49.154033899 CEST	1.1.1.1	192.168.2.4	0x5b82	No error (0)	truste-com-509071560.us-east-1.elb.amazonaws.com		3.214.225.17	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:49.374495029 CEST	1.1.1.1	192.168.2.4	0x44c	No error (0)	eu-aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:49.440162897 CEST	1.1.1.1	192.168.2.4	0xbe89	No error (0)	eu-aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:50.339317083 CEST	1.1.1.1	192.168.2.4	0x17d4	No error (0)	trustarc.com		141.193.213.21	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:50.339317083 CEST	1.1.1.1	192.168.2.4	0x17d4	No error (0)	trustarc.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:50.438958883 CEST	1.1.1.1	192.168.2.4	0x7029	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:51.716192961 CEST	1.1.1.1	192.168.2.4	0x98f0	No error (0)	v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:51.870913982 CEST	1.1.1.1	192.168.2.4	0x3fe7	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.761893034 CEST	1.1.1.1	192.168.2.4	0x7ad7	No error (0)	v60nf4oj3mgnvys6zl47qe7mnrthfstqpnc663di7b25835e2ff541abam1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.857081890 CEST	1.1.1.1	192.168.2.4	0x11f1	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:52.857274055 CEST	1.1.1.1	192.168.2.4	0x521f	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:52.873238087 CEST	1.1.1.1	192.168.2.4	0xb714	No error (0)	consent.trustarc.com		18.238.243.9	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.873238087 CEST	1.1.1.1	192.168.2.4	0xb714	No error (0)	consent.trustarc.com		18.238.243.42	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.873238087 CEST	1.1.1.1	192.168.2.4	0xb714	No error (0)	consent.trustarc.com		18.238.243.14	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.873238087 CEST	1.1.1.1	192.168.2.4	0xb714	No error (0)	consent.trustarc.com		18.238.243.123	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:52.972009897 CEST	1.1.1.1	192.168.2.4	0xf1bd	No error (0)	chat-application.com		3.215.34.116	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:53.986669064 CEST	1.1.1.1	192.168.2.4	0xfa48	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:53.987943888 CEST	1.1.1.1	192.168.2.4	0xaf3d	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:54.923254967 CEST	1.1.1.1	192.168.2.4	0x8948	No error (0)	trustarc.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:54.923254967 CEST	1.1.1.1	192.168.2.4	0x8948	No error (0)	trustarc.com		141.193.213.21	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:54.926043987 CEST	1.1.1.1	192.168.2.4	0xdfb1	No error (0)	consent.trustarc.com		18.238.243.123	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:54.926043987 CEST	1.1.1.1	192.168.2.4	0xdfb1	No error (0)	consent.trustarc.com		18.238.243.42	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:54.926043987 CEST	1.1.1.1	192.168.2.4	0xdfb1	No error (0)	consent.trustarc.com		18.238.243.9	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:54.926043987 CEST	1.1.1.1	192.168.2.4	0xdfb1	No error (0)	consent.trustarc.com		18.238.243.14	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:55.173109055 CEST	1.1.1.1	192.168.2.4	0x74ef	No error (0)	chat-application.com		3.215.34.116	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:55.845014095 CEST	1.1.1.1	192.168.2.4	0x5701	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:55.845014095 CEST	1.1.1.1	192.168.2.4	0x5701	No error (0)	www3.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:25:55.845062971 CEST	1.1.1.1	192.168.2.4	0x53d8	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:55.845078945 CEST	1.1.1.1	192.168.2.4	0x9629	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:55.845331907 CEST	1.1.1.1	192.168.2.4	0xb038	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:58.652101994 CEST	1.1.1.1	192.168.2.4	0x5aba	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:25:58.652606964 CEST	1.1.1.1	192.168.2.4	0x8fb2	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:00.263221979 CEST	1.1.1.1	192.168.2.4	0x47cf	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:00.263221979 CEST	1.1.1.1	192.168.2.4	0x47cf	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:00.263549089 CEST	1.1.1.1	192.168.2.4	0xb92	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:00.263549089 CEST	1.1.1.1	192.168.2.4	0xb92	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:01.319422960 CEST	1.1.1.1	192.168.2.4	0x881e	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:01.319444895 CEST	1.1.1.1	192.168.2.4	0x1aab	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:01.322846889 CEST	1.1.1.1	192.168.2.4	0xf2a5	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:01.322846889 CEST	1.1.1.1	192.168.2.4	0xf2a5	No error (0)	eventbus.a.intuit.com		54.69.149.23	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.322846889 CEST	1.1.1.1	192.168.2.4	0xf2a5	No error (0)	eventbus.a.intuit.com		52.26.102.189	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.322846889 CEST	1.1.1.1	192.168.2.4	0xf2a5	No error (0)	eventbus.a.intuit.com		54.189.162.76	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.322846889 CEST	1.1.1.1	192.168.2.4	0xf2a5	No error (0)	eventbus.a.intuit.com		52.35.132.95	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.322846889 CEST	1.1.1.1	192.168.2.4	0xf2a5	No error (0)	eventbus.a.intuit.com		54.69.89.188	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.322846889 CEST	1.1.1.1	192.168.2.4	0xf2a5	No error (0)	eventbus.a.intuit.com		44.228.135.147	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.322846889 CEST	1.1.1.1	192.168.2.4	0xf2a5	No error (0)	eventbus.a.intuit.com		44.225.83.157	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.322846889 CEST	1.1.1.1	192.168.2.4	0xf2a5	No error (0)	eventbus.a.intuit.com		52.10.192.44	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:01.332983971 CEST	1.1.1.1	192.168.2.4	0xebcd	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:01.424226046 CEST	1.1.1.1	192.168.2.4	0x83ac	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:01.424226046 CEST	1.1.1.1	192.168.2.4	0x83ac	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:01.425309896 CEST	1.1.1.1	192.168.2.4	0x8602	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:01.425309896 CEST	1.1.1.1	192.168.2.4	0x8602	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:02.702140093 CEST	1.1.1.1	192.168.2.4	0xbba8	No error (0)	www.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:02.702140093 CEST	1.1.1.1	192.168.2.4	0xbba8	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:02.702157021 CEST	1.1.1.1	192.168.2.4	0x8356	No error (0)	www.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:02.702157021 CEST	1.1.1.1	192.168.2.4	0x8356	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.347111940 CEST	1.1.1.1	192.168.2.4	0x99ef	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.347111940 CEST	1.1.1.1	192.168.2.4	0x99ef	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.347111940 CEST	1.1.1.1	192.168.2.4	0x99ef	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.347111940 CEST	1.1.1.1	192.168.2.4	0x99ef	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.347111940 CEST	1.1.1.1	192.168.2.4	0x99ef	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.347125053 CEST	1.1.1.1	192.168.2.4	0xef48	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.348730087 CEST	1.1.1.1	192.168.2.4	0xa70a	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.348743916 CEST	1.1.1.1	192.168.2.4	0x4331	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.445463896 CEST	1.1.1.1	192.168.2.4	0xa99e	No error (0)	info.trustarc.com	truste.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.445463896 CEST	1.1.1.1	192.168.2.4	0xa99e	No error (0)	truste.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.445463896 CEST	1.1.1.1	192.168.2.4	0xa99e	No error (0)	sj01.mktossl.com		104.17.73.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.445463896 CEST	1.1.1.1	192.168.2.4	0xa99e	No error (0)	sj01.mktossl.com		104.17.70.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.445463896 CEST	1.1.1.1	192.168.2.4	0xa99e	No error (0)	sj01.mktossl.com		104.17.72.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.445463896 CEST	1.1.1.1	192.168.2.4	0xa99e	No error (0)	sj01.mktossl.com		104.17.71.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.445463896 CEST	1.1.1.1	192.168.2.4	0xa99e	No error (0)	sj01.mktossl.com		104.17.74.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.447598934 CEST	1.1.1.1	192.168.2.4	0x4373	No error (0)	info.trustarc.com	truste.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.447598934 CEST	1.1.1.1	192.168.2.4	0x4373	No error (0)	truste.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.447598934 CEST	1.1.1.1	192.168.2.4	0x4373	No error (0)	sj01.mktossl.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:04.993957996 CEST	1.1.1.1	192.168.2.4	0x9676	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:04.993957996 CEST	1.1.1.1	192.168.2.4	0x9676	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.993957996 CEST	1.1.1.1	192.168.2.4	0x9676	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.993957996 CEST	1.1.1.1	192.168.2.4	0x9676	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.993957996 CEST	1.1.1.1	192.168.2.4	0x9676	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:04.995393038 CEST	1.1.1.1	192.168.2.4	0x2b95	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.113882065 CEST	1.1.1.1	192.168.2.4	0xd224	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.113882065 CEST	1.1.1.1	192.168.2.4	0xd224	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.113882065 CEST	1.1.1.1	192.168.2.4	0xd224	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.113882065 CEST	1.1.1.1	192.168.2.4	0xd224	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.113882065 CEST	1.1.1.1	192.168.2.4	0xd224	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.113960981 CEST	1.1.1.1	192.168.2.4	0x8db2	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.331020117 CEST	1.1.1.1	192.168.2.4	0xc8b3	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.331238031 CEST	1.1.1.1	192.168.2.4	0x9327	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.738704920 CEST	1.1.1.1	192.168.2.4	0x4e97	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.738704920 CEST	1.1.1.1	192.168.2.4	0x4e97	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.738704920 CEST	1.1.1.1	192.168.2.4	0x4e97	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.738704920 CEST	1.1.1.1	192.168.2.4	0x4e97	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.738704920 CEST	1.1.1.1	192.168.2.4	0x4e97	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.740097046 CEST	1.1.1.1	192.168.2.4	0x9765	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.770586014 CEST	1.1.1.1	192.168.2.4	0xf269	No error (0)	td.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.816133022 CEST	1.1.1.1	192.168.2.4	0xd715	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.816133022 CEST	1.1.1.1	192.168.2.4	0xd715	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.816133022 CEST	1.1.1.1	192.168.2.4	0xd715	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.816133022 CEST	1.1.1.1	192.168.2.4	0xd715	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.816133022 CEST	1.1.1.1	192.168.2.4	0xd715	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.816140890 CEST	1.1.1.1	192.168.2.4	0x987b	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.856378078 CEST	1.1.1.1	192.168.2.4	0x2485	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.856378078 CEST	1.1.1.1	192.168.2.4	0x2485	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.856378078 CEST	1.1.1.1	192.168.2.4	0x2485	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.856378078 CEST	1.1.1.1	192.168.2.4	0x2485	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.856378078 CEST	1.1.1.1	192.168.2.4	0x2485	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:05.856393099 CEST	1.1.1.1	192.168.2.4	0x2653	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.940673113 CEST	1.1.1.1	192.168.2.4	0x94f5	No error (0)	info.trustarc.com	truste.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.940673113 CEST	1.1.1.1	192.168.2.4	0x94f5	No error (0)	truste.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:05.940673113 CEST	1.1.1.1	192.168.2.4	0x94f5	No error (0)	sj01.mktossl.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:06.076275110 CEST	1.1.1.1	192.168.2.4	0xbfd4	No error (0)	info.trustarc.com	truste.mktoweb.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:06.076275110 CEST	1.1.1.1	192.168.2.4	0xbfd4	No error (0)	truste.mktoweb.com	sj01.mktossl.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:06.076275110 CEST	1.1.1.1	192.168.2.4	0xbfd4	No error (0)	sj01.mktossl.com		104.17.73.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.076275110 CEST	1.1.1.1	192.168.2.4	0xbfd4	No error (0)	sj01.mktossl.com		104.17.70.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.076275110 CEST	1.1.1.1	192.168.2.4	0xbfd4	No error (0)	sj01.mktossl.com		104.17.71.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.076275110 CEST	1.1.1.1	192.168.2.4	0xbfd4	No error (0)	sj01.mktossl.com		104.17.74.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.076275110 CEST	1.1.1.1	192.168.2.4	0xbfd4	No error (0)	sj01.mktossl.com		104.17.72.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.177103996 CEST	1.1.1.1	192.168.2.4	0x96b3	No error (0)	feedback.qbo.intuit.com	qbo.uservoice.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:06.177103996 CEST	1.1.1.1	192.168.2.4	0x96b3	No error (0)	qbo.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.177103996 CEST	1.1.1.1	192.168.2.4	0x96b3	No error (0)	qbo.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.177103996 CEST	1.1.1.1	192.168.2.4	0x96b3	No error (0)	qbo.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.177103996 CEST	1.1.1.1	192.168.2.4	0x96b3	No error (0)	qbo.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.177103996 CEST	1.1.1.1	192.168.2.4	0x96b3	No error (0)	qbo.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.178606033 CEST	1.1.1.1	192.168.2.4	0x2daa	No error (0)	feedback.qbo.intuit.com	qbo.uservoice.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:06.178606033 CEST	1.1.1.1	192.168.2.4	0x2daa	No error (0)	qbo.uservoice.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:06.395350933 CEST	1.1.1.1	192.168.2.4	0x403d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 11, 2024 19:26:06.395576000 CEST	1.1.1.1	192.168.2.4	0x60f3	No error (0)	googleads.g.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.409301996 CEST	1.1.1.1	192.168.2.4	0xd5c7	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:06.409677029 CEST	1.1.1.1	192.168.2.4	0xdee1	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:06.409677029 CEST	1.1.1.1	192.168.2.4	0xdee1	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.409677029 CEST	1.1.1.1	192.168.2.4	0xdee1	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.409677029 CEST	1.1.1.1	192.168.2.4	0xdee1	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.409677029 CEST	1.1.1.1	192.168.2.4	0xdee1	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.436523914 CEST	1.1.1.1	192.168.2.4	0xd403	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.436523914 CEST	1.1.1.1	192.168.2.4	0xd403	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.436523914 CEST	1.1.1.1	192.168.2.4	0xd403	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.436523914 CEST	1.1.1.1	192.168.2.4	0xd403	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:06.763515949 CEST	1.1.1.1	192.168.2.4	0x4301	No error (0)	846-llz-652.mktoresp.com		192.28.147.68	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.325047016 CEST	1.1.1.1	192.168.2.4	0xc55b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 11, 2024 19:26:07.325073957 CEST	1.1.1.1	192.168.2.4	0xb11a	No error (0)	googleads.g.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.326317072 CEST	1.1.1.1	192.168.2.4	0x1c14	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.326941967 CEST	1.1.1.1	192.168.2.4	0xc41b	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:07.709350109 CEST	1.1.1.1	192.168.2.4	0x9f05	No error (0)	assets.uvcdn.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:07.709486008 CEST	1.1.1.1	192.168.2.4	0xd547	No error (0)	assets.uvcdn.com		104.18.18.225	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.709486008 CEST	1.1.1.1	192.168.2.4	0xd547	No error (0)	assets.uvcdn.com		104.18.19.225	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.711302042 CEST	1.1.1.1	192.168.2.4	0x70c6	No error (0)	s3.amazonaws.com		54.231.236.208	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.711302042 CEST	1.1.1.1	192.168.2.4	0x70c6	No error (0)	s3.amazonaws.com		52.216.41.208	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.711302042 CEST	1.1.1.1	192.168.2.4	0x70c6	No error (0)	s3.amazonaws.com		54.231.128.232	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.711302042 CEST	1.1.1.1	192.168.2.4	0x70c6	No error (0)	s3.amazonaws.com		3.5.24.54	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.711302042 CEST	1.1.1.1	192.168.2.4	0x70c6	No error (0)	s3.amazonaws.com		52.216.153.206	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.711302042 CEST	1.1.1.1	192.168.2.4	0x70c6	No error (0)	s3.amazonaws.com		16.182.37.144	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.711302042 CEST	1.1.1.1	192.168.2.4	0x70c6	No error (0)	s3.amazonaws.com		54.231.226.184	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:07.711302042 CEST	1.1.1.1	192.168.2.4	0x70c6	No error (0)	s3.amazonaws.com		54.231.194.208	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.484352112 CEST	1.1.1.1	192.168.2.4	0x32a8	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:08.484368086 CEST	1.1.1.1	192.168.2.4	0x155e	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.513127089 CEST	1.1.1.1	192.168.2.4	0xc740	No error (0)	feedback.qbo.intuit.com	qbo.uservoice.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:08.513127089 CEST	1.1.1.1	192.168.2.4	0xc740	No error (0)	qbo.uservoice.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:08.515003920 CEST	1.1.1.1	192.168.2.4	0xa1e	No error (0)	feedback.qbo.intuit.com	qbo.uservoice.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515003920 CEST	1.1.1.1	192.168.2.4	0xa1e	No error (0)	qbo.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515003920 CEST	1.1.1.1	192.168.2.4	0xa1e	No error (0)	qbo.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515003920 CEST	1.1.1.1	192.168.2.4	0xa1e	No error (0)	qbo.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515003920 CEST	1.1.1.1	192.168.2.4	0xa1e	No error (0)	qbo.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515003920 CEST	1.1.1.1	192.168.2.4	0xa1e	No error (0)	qbo.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515904903 CEST	1.1.1.1	192.168.2.4	0x7796	No error (0)	s3.amazonaws.com		54.231.160.152	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515904903 CEST	1.1.1.1	192.168.2.4	0x7796	No error (0)	s3.amazonaws.com		52.217.231.136	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515904903 CEST	1.1.1.1	192.168.2.4	0x7796	No error (0)	s3.amazonaws.com		52.216.219.24	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515904903 CEST	1.1.1.1	192.168.2.4	0x7796	No error (0)	s3.amazonaws.com		52.216.130.133	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515904903 CEST	1.1.1.1	192.168.2.4	0x7796	No error (0)	s3.amazonaws.com		52.216.217.152	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515904903 CEST	1.1.1.1	192.168.2.4	0x7796	No error (0)	s3.amazonaws.com		52.217.121.136	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515904903 CEST	1.1.1.1	192.168.2.4	0x7796	No error (0)	s3.amazonaws.com		52.216.49.184	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.515904903 CEST	1.1.1.1	192.168.2.4	0x7796	No error (0)	s3.amazonaws.com		52.217.113.240	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.739216089 CEST	1.1.1.1	192.168.2.4	0x33da	No error (0)	widget.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.739216089 CEST	1.1.1.1	192.168.2.4	0x33da	No error (0)	widget.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.739216089 CEST	1.1.1.1	192.168.2.4	0x33da	No error (0)	widget.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.739216089 CEST	1.1.1.1	192.168.2.4	0x33da	No error (0)	widget.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.739216089 CEST	1.1.1.1	192.168.2.4	0x33da	No error (0)	widget.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:08.744625092 CEST	1.1.1.1	192.168.2.4	0x965f	No error (0)	widget.uservoice.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:09.947484016 CEST	1.1.1.1	192.168.2.4	0x2316	No error (0)	qbo.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:09.947484016 CEST	1.1.1.1	192.168.2.4	0x2316	No error (0)	qbo.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:09.947484016 CEST	1.1.1.1	192.168.2.4	0x2316	No error (0)	qbo.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:09.947484016 CEST	1.1.1.1	192.168.2.4	0x2316	No error (0)	qbo.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:09.947484016 CEST	1.1.1.1	192.168.2.4	0x2316	No error (0)	qbo.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:09.948780060 CEST	1.1.1.1	192.168.2.4	0x189f	No error (0)	qbo.uservoice.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:10.914252996 CEST	1.1.1.1	192.168.2.4	0x6c1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:10.914252996 CEST	1.1.1.1	192.168.2.4	0x6c1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.094947100 CEST	1.1.1.1	192.168.2.4	0xd5f8	No error (0)	by2.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.094947100 CEST	1.1.1.1	192.168.2.4	0xd5f8	No error (0)	by2.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.094947100 CEST	1.1.1.1	192.168.2.4	0xd5f8	No error (0)	by2.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.094947100 CEST	1.1.1.1	192.168.2.4	0xd5f8	No error (0)	by2.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.094947100 CEST	1.1.1.1	192.168.2.4	0xd5f8	No error (0)	by2.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.096321106 CEST	1.1.1.1	192.168.2.4	0x78f9	No error (0)	by2.uservoice.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:11.900388956 CEST	1.1.1.1	192.168.2.4	0xf18b	No error (0)	assets.uvcdn.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:11.900681019 CEST	1.1.1.1	192.168.2.4	0x6dc5	No error (0)	widget.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.900681019 CEST	1.1.1.1	192.168.2.4	0x6dc5	No error (0)	widget.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.900681019 CEST	1.1.1.1	192.168.2.4	0x6dc5	No error (0)	widget.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.900681019 CEST	1.1.1.1	192.168.2.4	0x6dc5	No error (0)	widget.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.900681019 CEST	1.1.1.1	192.168.2.4	0x6dc5	No error (0)	widget.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.901092052 CEST	1.1.1.1	192.168.2.4	0xfb0c	No error (0)	widget.uservoice.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:11.903517962 CEST	1.1.1.1	192.168.2.4	0x47f7	No error (0)	assets.uvcdn.com		104.18.19.225	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.903517962 CEST	1.1.1.1	192.168.2.4	0x47f7	No error (0)	assets.uvcdn.com		104.18.18.225	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.903594017 CEST	1.1.1.1	192.168.2.4	0x440f	No error (0)	qbo.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.903594017 CEST	1.1.1.1	192.168.2.4	0x440f	No error (0)	qbo.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.903594017 CEST	1.1.1.1	192.168.2.4	0x440f	No error (0)	qbo.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.903594017 CEST	1.1.1.1	192.168.2.4	0x440f	No error (0)	qbo.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.903594017 CEST	1.1.1.1	192.168.2.4	0x440f	No error (0)	qbo.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:11.905250072 CEST	1.1.1.1	192.168.2.4	0xe27e	No error (0)	qbo.uservoice.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:14.071086884 CEST	1.1.1.1	192.168.2.4	0xc778	No error (0)	by2.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:14.071086884 CEST	1.1.1.1	192.168.2.4	0xc778	No error (0)	by2.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:14.071086884 CEST	1.1.1.1	192.168.2.4	0xc778	No error (0)	by2.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:14.071086884 CEST	1.1.1.1	192.168.2.4	0xc778	No error (0)	by2.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:14.071086884 CEST	1.1.1.1	192.168.2.4	0xc778	No error (0)	by2.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:14.073338032 CEST	1.1.1.1	192.168.2.4	0x2ca2	No error (0)	by2.uservoice.com			65	IN (0x0001)	false
Sep 11, 2024 19:26:24.304018974 CEST	1.1.1.1	192.168.2.4	0x3b19	No error (0)	www.truste.com	truste-com-509071560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:24.304018974 CEST	1.1.1.1	192.168.2.4	0x3b19	No error (0)	truste-com-509071560.us-east-1.elb.amazonaws.com		3.229.155.61	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:24.304018974 CEST	1.1.1.1	192.168.2.4	0x3b19	No error (0)	truste-com-509071560.us-east-1.elb.amazonaws.com		3.214.225.17	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:24.305036068 CEST	1.1.1.1	192.168.2.4	0x5bb9	No error (0)	www.truste.com	truste-com-509071560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:24.305370092 CEST	1.1.1.1	192.168.2.4	0xce0a	No error (0)	www.truste.com	truste-com-509071560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:24.305370092 CEST	1.1.1.1	192.168.2.4	0xce0a	No error (0)	truste-com-509071560.us-east-1.elb.amazonaws.com		3.214.225.17	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:24.305370092 CEST	1.1.1.1	192.168.2.4	0xce0a	No error (0)	truste-com-509071560.us-east-1.elb.amazonaws.com		3.229.155.61	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:24.310934067 CEST	1.1.1.1	192.168.2.4	0x649b	No error (0)	www.truste.com	truste-com-509071560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:26.580408096 CEST	1.1.1.1	192.168.2.4	0xb5bd	No error (0)	feedback-form.truste.com	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:26.580408096 CEST	1.1.1.1	192.168.2.4	0xb5bd	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		54.81.34.222	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:26.580408096 CEST	1.1.1.1	192.168.2.4	0xb5bd	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		52.204.30.119	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:26.580408096 CEST	1.1.1.1	192.168.2.4	0xb5bd	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		52.3.103.189	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:26.580408096 CEST	1.1.1.1	192.168.2.4	0xb5bd	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		3.214.183.78	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:26.582058907 CEST	1.1.1.1	192.168.2.4	0x318f	No error (0)	feedback-form.truste.com	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:27.407001972 CEST	1.1.1.1	192.168.2.4	0xf6ab	No error (0)	feedback-form.trustarc.com	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:27.407001972 CEST	1.1.1.1	192.168.2.4	0xf6ab	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		52.204.30.119	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:27.407001972 CEST	1.1.1.1	192.168.2.4	0xf6ab	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		54.81.34.222	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:27.407001972 CEST	1.1.1.1	192.168.2.4	0xf6ab	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		3.214.183.78	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:27.407001972 CEST	1.1.1.1	192.168.2.4	0xf6ab	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		52.3.103.189	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:27.409287930 CEST	1.1.1.1	192.168.2.4	0x9a3a	No error (0)	feedback-form.trustarc.com	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:29.223362923 CEST	1.1.1.1	192.168.2.4	0xd83d	No error (0)	feedback-form.trustarc.com	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:29.223962069 CEST	1.1.1.1	192.168.2.4	0xf3a3	No error (0)	feedback-form.trustarc.com	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:29.223962069 CEST	1.1.1.1	192.168.2.4	0xf3a3	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		3.214.183.78	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:29.223962069 CEST	1.1.1.1	192.168.2.4	0xf3a3	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		52.3.103.189	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:29.223962069 CEST	1.1.1.1	192.168.2.4	0xf3a3	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		52.204.30.119	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:29.223962069 CEST	1.1.1.1	192.168.2.4	0xf3a3	No error (0)	legacy-watchdog-prod2-2089635595.us-east-1.elb.amazonaws.com		54.81.34.222	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:30.297451973 CEST	1.1.1.1	192.168.2.4	0xdb58	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:30.297451973 CEST	1.1.1.1	192.168.2.4	0xdb58	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.398785114 CEST	1.1.1.1	192.168.2.4	0x7708	No error (0)	qfp.intuit.com	h-v60nf4oj-qfp.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.401282072 CEST	1.1.1.1	192.168.2.4	0xa210	No error (0)	qfp.intuit.com	h-v60nf4oj-qfp.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.401282072 CEST	1.1.1.1	192.168.2.4	0xa210	No error (0)	h-v60nf4oj-qfp.online-metrix.net		91.235.133.106	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.35.79.138	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		35.155.228.157	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.42.183.249	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		52.36.189.133	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.223.205.90	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.214.56.55	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		54.69.242.72	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.410512924 CEST	1.1.1.1	192.168.2.4	0xc6b6	No error (0)	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		34.218.18.222	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:39.484807014 CEST	1.1.1.1	192.168.2.4	0xb575	No error (0)	connect.intuit.com	gtm.icn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.484807014 CEST	1.1.1.1	192.168.2.4	0xb575	No error (0)	gtm.icn.a.intuit.com	cpclient.api.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.484807014 CEST	1.1.1.1	192.168.2.4	0xb575	No error (0)	cpclient.api.intuit.com	cpclient.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.484807014 CEST	1.1.1.1	192.168.2.4	0xb575	No error (0)	cpclient.prd.api.a.intuit.com	cpclient-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.484807014 CEST	1.1.1.1	192.168.2.4	0xb575	No error (0)	cpclient-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:39.484807014 CEST	1.1.1.1	192.168.2.4	0xb575	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:26:40.389554024 CEST	1.1.1.1	192.168.2.4	0x7af4	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:40.389554024 CEST	1.1.1.1	192.168.2.4	0x7af4	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Sep 11, 2024 19:26:41.746963978 CEST	1.1.1.1	192.168.2.4	0x2067	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 11, 2024 19:27:03.320691109 CEST	1.1.1.1	192.168.2.4	0x762c	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49894	3.214.225.17	80	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 11, 2024 19:25:48.640142918 CEST	468	OUT	GET /consumer-resources/dispute-resolution-2 HTTP/1.1 Host: www.truste.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 11, 2024 19:25:49.121037006 CEST	373	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 11 Sep 2024 17:25:49 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://www.truste.com:443/consumer-resources/dispute-resolution-2 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Sep 11, 2024 19:26:34.138262987 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:20 UTC	809	OUT	GET /portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US HTTP/1.1 Host: connect.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:21 UTC	1187	IN	HTTP/1.1 302 Found Date: Wed, 11 Sep 2024 17:25:20 GMT Content-Type: text/html;charset=utf-8 Content-Length: 282 Connection: close x-spanid: f23818bc-5689-42fd-e2cc-105560894ad9 x-amzn-trace-id: Root=1-66e1d280-4db69f786604dbed45660f6b X-Content-Type-Options: nosniff Set-Cookie: AWSALB=eyCbwemgRikorTJoyEwudBfP4UnnJfNOrWD+Jq8gahg4sJsyAD+UpeKeE8PDfw8y8ju5QsdiJUsiPnKDGbVd1zIximgm+W1ab4FsDNynd5ouilv1IwUxphBb35+X; Expires=Wed, 18 Sep 2024 17:25:20 GMT; Path=/ Set-Cookie: AWSALBCORS=eyCbwemgRikorTJoyEwudBfP4UnnJfNOrWD+Jq8gahg4sJsyAD+UpeKeE8PDfw8y8ju5QsdiJUsiPnKDGbVd1zIximgm+W1ab4FsDNynd5ouilv1IwUxphBb35+X; Expires=Wed, 18 Sep 2024 17:25:20 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store Location: /t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Vary: Accept, Accept-Encoding x-envoy-upstream-service-time: 6 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-66e1d280-4db69f786604dbed45660f6b x-request-id: 1-66e1d280-4db69f786604dbed45660f6b server: istio-envoy
2024-09-11 17:25:21 UTC	282	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 74 2f 73 63 73 2d 76 31 2d 66 36 32 35 64 30 62 33 32 35 34 38 34 34 30 62 39 39 39 31 36 38 34 38 64 65 64 30 32 35 63 38 35 35 64 34 66 36 30 62 31 63 62 37 34 65 62 61 62 65 65 32 30 66 30 65 36 62 39 32 39 66 66 64 65 35 62 62 35 36 34 39 62 36 33 33 34 37 33 35 62 63 36 34 31 36 63 39 39 64 35 35 38 62 31 31 3f 6c 6f 63 61 6c 65 3d 45 4e 5f 55 53 22 3e 2f 74 2f 73 63 73 2d 76 31 2d 66 36 32 35 64 30 62 33 32 35 34 38 34 34 30 62 39 39 39 31 36 38 34 38 64 65 64 30 32 35 63 38 35 35 64 34 66 36 30 62 31 63 62 37 34 65 62 61 62 65 65 32 30 66 30 65 36 62 39 32 39 66 66 64 65 35 62 62 35 36 34 39 62 36 33 33 34 37 33 35 62 63 36 34 31 36 63 39 39 64 Data Ascii: <p>Found. Redirecting to <a href="/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US">/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:21 UTC	1057	OUT	GET /t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=eyCbwemgRikorTJoyEwudBfP4UnnJfNOrWD+Jq8gahg4sJsyAD+UpeKeE8PDfw8y8ju5QsdiJUsiPnKDGbVd1zIximgm+W1ab4FsDNynd5ouilv1IwUxphBb35+X; AWSALBCORS=eyCbwemgRikorTJoyEwudBfP4UnnJfNOrWD+Jq8gahg4sJsyAD+UpeKeE8PDfw8y8ju5QsdiJUsiPnKDGbVd1zIximgm+W1ab4FsDNynd5ouilv1IwUxphBb35+X
2024-09-11 17:25:21 UTC	1225	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:21 GMT Content-Type: text/html;charset=utf-8 Content-Length: 159357 Connection: close x-spanid: 51218143-dff5-b3d8-fbee-1b3350fe946a x-amzn-trace-id: Root=1-66e1d281-44e11e1e75638d833aab54f6 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; Expires=Wed, 18 Sep 2024 17:25:21 GMT; Path=/ Set-Cookie: AWSALBCORS=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; Expires=Wed, 18 Sep 2024 17:25:21 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store Set-Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; Domain=.intuit.com; Path=/; Expires=Tue, 11 Sep 2029 17:25:21 GMT; Secure ETag: W/"26e7d-2wJbfuHy6Cn64U+N4ddrQwlyz4U" Vary: Accept-Encoding x-envoy-upstream-service-time: 651 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-66e1d281-44e11e1e75638d833aab54f6 x-request-id: 1-66e1d281-44e11e1e75638d833aab54f6 server: istio-envoy
2024-09-11 17:25:21 UTC	15148	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 22 2f 3e 3c 74 69 74 6c 65 3e 49 6e 74 75 69 74 20 51 75 69 63 6b 42 6f 6f 6b 73 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 3e 0a 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6d 65 73 73 61 67 65 2c 20 73 6f 75 72 63 65 2c 20 6c 69 6e 65 6e 6f 2c 20 63 6f 6c 6e 6f 2c 20 65 72 72 6f 72 29 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><title>Intuit QuickBooks</title><script>window.onerror = function (message, source, lineno, colno, error) {
2024-09-11 17:25:21 UTC	16384	IN	Data Raw: 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 34 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 Data Ascii: -ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;-ms-flex-pack:center;justify-content:center;border-bottom:4px solid transparent;pa
2024-09-11 17:25:22 UTC	16384	IN	Data Raw: 6d 69 6c 79 3a 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 4d 65 64 69 75 6d 3b 7d 2e 63 70 42 75 74 74 6f 6e 2e 6a 73 78 2d 32 36 30 39 30 35 34 32 33 33 3a 66 6f 63 75 73 2c 63 70 42 75 74 74 6f 6e 2e 6a 73 78 2d 32 36 30 39 30 35 34 32 33 33 3a 61 63 74 69 76 65 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 77 68 69 74 65 2c 30 70 78 20 30 70 78 20 30 70 78 20 34 70 78 20 23 30 30 37 37 43 35 3b 7d 2e 63 70 42 75 74 74 6f 6e 2e 6a 73 78 2d 32 36 30 39 30 35 34 32 33 33 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 3b 7d 2e 63 70 42 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 2e 6a 73 78 2d 32 36 30 39 30 35 34 32 33 33 7b 63 Data Ascii: mily:AvenirNextforINTUIT-Medium;}.cpButton.jsx-2609054233:focus,cpButton.jsx-2609054233:active{outline:none;box-shadow:0px 0px 0px 1px white,0px 0px 0px 4px #0077C5;}.cpButton.jsx-2609054233::-moz-focus-inner{border:0;}.cpButton--disabled.jsx-2609054233{c
2024-09-11 17:25:22 UTC	16384	IN	Data Raw: 65 20 69 64 3d 22 5f 5f 6a 73 78 2d 31 39 32 30 38 36 30 33 36 22 3e 2e 66 69 65 6c 64 2d 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2d 77 72 61 70 70 65 72 2e 6a 73 78 2d 31 39 32 30 38 36 30 33 36 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 78 3b 7d 2e 66 69 65 6c 64 2d 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2d 77 72 61 70 70 65 72 2e 6a 73 78 2d 31 39 32 30 38 36 30 33 36 20 2e 65 72 72 6f 72 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 2e 6a 73 78 2d 31 39 32 30 38 36 30 33 36 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 2e 66 69 65 6c 64 2d 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2d 77 72 61 70 70 65 72 2e 6a 73 78 2d 31 39 32 30 38 36 30 33 36 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2e 6a 73 78 2d 31 39 32 30 38 36 30 33 36 7b 64 69 73 Data Ascii: e id="__jsx-192086036">.field-error-message-wrapper.jsx-192086036{line-height:14px;}.field-error-message-wrapper.jsx-192086036 .error-icon-wrapper.jsx-192086036{position:absolute;}.field-error-message-wrapper.jsx-192086036 .error-message.jsx-192086036{dis
2024-09-11 17:25:22 UTC	16384	IN	Data Raw: 37 36 38 70 78 29 7b 2e 6d 61 69 6e 2e 6a 73 78 2d 31 39 36 30 34 36 36 33 33 20 2e 6d 61 69 6e 2d 63 61 72 64 2d 77 72 61 70 70 65 72 2e 6a 73 78 2d 31 39 36 30 34 36 36 33 33 20 2e 63 6f 6e 74 61 63 74 2d 6d 65 73 73 61 67 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 38 70 78 3b 7d 7d 40 6d 65 64 69 61 20 6e 6f 74 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 6d 61 69 6e 2e 6a 73 78 2d 31 39 36 30 34 36 36 33 33 20 2e 66 65 65 64 62 61 63 6b 2d 77 2e 6a 73 78 2d 31 39 36 30 34 36 36 33 33 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 7d 2e 6d 65 72 63 68 61 6e 74 2d 6d 73 67 2d 6d 6f 62 69 6c 65 2e 6a 73 78 2d 31 39 36 30 34 36 36 33 33 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 40 6d 65 64 69 61 20 Data Ascii: 768px){.main.jsx-196046633 .main-card-wrapper.jsx-196046633 .contact-message{margin-bottom:38px;}}@media not screen and (max-width:768px){.main.jsx-196046633 .feedback-w.jsx-196046633{display:none;}}.merchant-msg-mobile.jsx-196046633{display:none;}@media
2024-09-11 17:25:22 UTC	16384	IN	Data Raw: 76 6f 69 63 65 4d 6f 72 65 44 65 74 61 69 6c 73 2d 76 69 65 77 2d 69 6e 76 6f 69 63 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 41 70 70 72 6f 76 61 6c 20 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 6a 73 78 2d 32 36 30 39 30 35 34 32 33 33 20 63 70 42 75 74 74 6f 6e 20 63 70 42 75 74 74 6f 6e 2d 2d 73 74 61 6e 64 61 72 64 20 63 70 42 75 74 74 6f 6e 2d 2d 64 65 66 61 75 6c 74 20 63 70 42 75 74 74 6f 6e 2d 2d 63 75 73 74 6f 6d 2d 77 69 64 74 68 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6a 73 78 2d 32 36 30 39 30 35 34 32 33 33 20 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6a 73 78 2d 32 35 30 32 30 37 36 36 38 37 20 70 72 6f 67 72 65 73 73 2d 62 74 6e 2d 77 22 3e 3c 73 70 61 6e 3e 56 69 65 77 20 69 6e 76 6f 69 63 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 Data Ascii: voiceMoreDetails-view-invoice" aria-label="Approval button" class="jsx-2609054233 cpButton cpButton--standard cpButton--default cpButton--custom-width"><span class="jsx-2609054233 "><span class="jsx-2502076687 progress-btn-w"><span>View invoice</span></sp
2024-09-11 17:25:22 UTC	16384	IN	Data Raw: 76 69 64 65 20 75 73 2e 20 59 6f 75 20 61 6c 73 6f 20 61 6c 6c 6f 77 20 49 6e 74 75 69 74 20 74 6f 20 63 68 61 72 67 65 20 24 34 33 36 2e 34 35 20 74 6f 20 79 6f 75 72 20 63 61 72 64 20 6f 6e 20 53 65 70 74 65 6d 62 65 72 20 31 31 2c 20 32 30 32 34 2e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 78 2d 32 38 37 34 33 36 37 35 38 20 70 61 79 2d 62 75 74 74 6f 6e 22 3e 3c 62 75 74 74 6f 6e 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 50 61 79 20 42 75 74 74 6f 6e 22 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 22 66 61 6c 73 65 22 20 63 6c 61 73 73 3d 22 6a 73 78 2d 33 34 32 36 31 34 32 39 39 33 20 63 70 42 75 74 74 6f 6e 20 70 61 79 20 20 63 70 42 75 74 74 6f 6e 2d 2d 6a 75 6d 62 6f 20 63 70 42 75 74 74 6f 6e 2d 2d Data Ascii: vide us. You also allow Intuit to charge $436.45 to your card on September 11, 2024.</span></p></div><div class="jsx-287436758 pay-button"><button aria-label="Pay Button" aria-disabled="false" class="jsx-3426142993 cpButton pay cpButton--jumbo cpButton--
2024-09-11 17:25:22 UTC	16384	IN	Data Raw: 65 6e 74 20 72 65 71 75 65 73 74 20 68 61 73 20 62 65 65 6e 20 64 65 6c 65 74 65 64 20 62 79 20 74 68 65 20 73 65 6e 64 65 72 2e 22 2c 22 45 52 52 4f 52 5f 45 58 50 49 52 45 44 5f 54 4f 4b 45 4e 5f 50 41 47 45 5f 48 45 41 44 45 52 22 3a 22 49 6e 76 6f 69 63 65 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 76 61 69 6c 61 62 6c 65 22 2c 22 45 52 52 4f 52 5f 50 41 59 4d 45 4e 54 5f 42 4c 4f 43 4b 45 44 22 3a 22 54 68 69 73 20 6c 69 6e 6b 20 69 73 20 65 78 70 69 72 65 64 22 2c 22 45 52 52 4f 52 5f 50 41 59 4d 45 4e 54 5f 42 4c 4f 43 4b 45 44 5f 43 4f 4e 54 41 43 54 5f 53 45 4e 44 45 52 22 3a 22 41 73 6b 20 74 68 65 20 73 65 6e 64 65 72 20 74 6f 20 73 65 6e 64 20 74 68 65 20 69 6e 76 6f 69 63 65 20 61 67 61 69 6e 2e 22 2c 22 45 52 52 4f 52 5f 45 58 50 49 52 45 44 5f 54 Data Ascii: ent request has been deleted by the sender.","ERROR_EXPIRED_TOKEN_PAGE_HEADER":"Invoice no longer available","ERROR_PAYMENT_BLOCKED":"This link is expired","ERROR_PAYMENT_BLOCKED_CONTACT_SENDER":"Ask the sender to send the invoice again.","ERROR_EXPIRED_T
2024-09-11 17:25:22 UTC	16384	IN	Data Raw: 59 5f 57 49 54 48 5f 43 52 45 44 49 54 5f 43 41 52 44 22 3a 22 50 61 79 20 77 69 74 68 20 63 72 65 64 69 74 20 63 61 72 64 22 2c 22 50 41 59 4e 4f 57 5f 50 41 59 5f 42 55 54 54 4f 4e 5f 4c 41 42 45 4c 22 3a 22 50 61 79 22 2c 22 50 41 59 4e 4f 57 5f 53 43 48 45 44 55 4c 45 44 5f 50 41 59 4d 45 4e 54 5f 4e 4f 54 5f 45 4e 41 42 4c 45 44 22 3a 22 5c 75 30 30 33 63 62 5c 75 30 30 33 65 53 63 68 65 64 75 6c 65 64 20 70 61 79 6d 65 6e 74 73 5c 75 30 30 33 63 2f 62 5c 75 30 30 33 65 20 61 72 65 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 64 65 62 69 74 2c 20 63 72 65 64 69 74 2c 20 61 6e 64 20 62 61 6e 6b 20 70 61 79 6d 65 6e 74 73 2e 22 2c 22 50 41 59 4e 4f 57 5f 56 45 4e 4d 4f 5f 49 4e 54 45 47 52 41 54 45 44 5f 42 52 4f 57 53 57 45 52 22 3a 22 Data Ascii: Y_WITH_CREDIT_CARD":"Pay with credit card","PAYNOW_PAY_BUTTON_LABEL":"Pay","PAYNOW_SCHEDULED_PAYMENT_NOT_ENABLED":"\u003cb\u003eScheduled payments\u003c/b\u003e are only available for debit, credit, and bank payments.","PAYNOW_VENMO_INTEGRATED_BROWSWER":"
2024-09-11 17:25:22 UTC	13137	IN	Data Raw: 74 69 6f 6e 20 74 6f 20 70 61 79 20 74 68 65 20 62 75 73 69 6e 65 73 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 61 6e 79 20 64 69 73 70 75 74 65 20 6f 72 20 63 61 73 65 2c 20 69 6e 20 6c 61 77 20 6f 72 20 65 71 75 69 74 79 2e 20 4d 6f 6e 65 79 20 6d 6f 76 65 6d 65 6e 74 20 73 65 72 76 69 63 65 73 20 61 72 65 20 70 72 6f 76 69 64 65 64 20 62 79 20 49 50 49 20 70 75 72 73 75 61 6e 74 20 74 6f 20 49 50 49 27 73 20 6c 69 63 65 6e 73 65 73 20 28 4e 4d 4c 53 20 23 31 30 39 38 38 31 39 2c 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 75 69 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 73 2f 70 61 79 6d 65 6e 74 2d 6c 69 63 65 6e 73 65 73 29 2e 20 49 50 49 20 69 73 20 6c 6f 63 61 74 65 64 20 61 74 Data Ascii: tion to pay the business, including in connection with any dispute or case, in law or equity. Money movement services are provided by IPI pursuant to IPI's licenses (NMLS #1098819, https://www.intuit.com/legal/licenses/payment-licenses). IPI is located at

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	668	OUT	GET /american-express.bug.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:23 UTC	625	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1670 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Mon, 09 Sep 2024 13:10:11 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: HJmxCKSt0YPZ4dbyIlTc21fc4fyaCKYL Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 14:20:07 GMT ETag: "cca0007b9cc6cac90e54c8728d5cf76d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2f194b62c8c43859cbf5af8e53a8d2a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: EduQJ3rVBqd3wp4ItO8P4_DsGSP5rUE2sxFjVYSL9SA6N2vm5nsGWg== Age: 11117 Vary: Origin
2024-09-11 17:25:23 UTC	1428	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 33 2e 34 39 31 33 20 31 2e 34 30 32 35 33 56 32 2e 36 39 30 34 35 56 31 38 2e 37 30 35 34 56 31 39 2e 36 30 31 33 43 33 33 2e 34 39 31 33 20 32 30 2e 33 38 35 33 20 33 32 2e 38 37 35 33 20 32 31 2e 30 30 31 32 20 33 32 2e 30 39 31 33 20 32 31 2e 30 30 31 32 48 32 2e 30 37 37 33 34 43 31 2e 32 39 33 33 39 20 32 31 2e 30 30 31 32 20 30 2e 36 37 37 34 32 39 20 32 30 2e 33 38 35 33 20 30 2e 36 37 37 34 32 39 20 31 39 2e 36 30 31 33 56 31 2e 34 Data Ascii: <svg width="34" height="21" viewBox="0 0 34 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M33.4913 1.40253V2.69045V18.7054V19.6013C33.4913 20.3853 32.8753 21.0012 32.0913 21.0012H2.07734C1.29339 21.0012 0.677429 20.3853 0.677429 19.6013V1.4
2024-09-11 17:25:23 UTC	242	IN	Data Raw: 38 48 31 38 2e 38 37 35 38 4c 31 39 2e 34 33 35 37 20 39 2e 30 31 37 39 31 48 32 32 2e 34 35 39 34 4c 32 33 2e 30 31 39 34 20 31 30 2e 33 30 35 38 48 32 35 2e 30 33 35 32 4c 32 32 2e 31 32 33 35 20 33 2e 37 35 34 33 39 5a 4d 32 30 2e 30 35 31 37 20 37 2e 35 30 36 30 35 4c 32 30 2e 39 34 37 36 20 35 2e 33 37 38 32 34 4c 32 31 2e 38 34 33 35 20 37 2e 35 30 36 30 35 48 32 30 2e 30 35 31 37 5a 22 20 66 69 6c 6c 3d 22 23 30 30 37 31 43 45 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 31 2e 38 36 36 36 20 31 34 2e 33 33 37 37 4c 33 33 2e 34 39 30 38 20 31 36 2e 31 32 39 39 56 31 32 2e 35 34 35 35 4c 33 31 2e 38 36 36 36 20 31 34 2e 33 33 37 37 5a 22 20 66 69 6c 6c 3d 22 23 30 30 37 31 43 45 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 8H18.8758L19.4357 9.01791H22.4594L23.0194 10.3058H25.0352L22.1235 3.75439ZM20.0517 7.50605L20.9476 5.37824L21.8435 7.50605H20.0517Z" fill="#0071CE"/><path d="M31.8666 14.3377L33.4908 16.1299V12.5455L31.8666 14.3377Z" fill="#0071CE"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	660	OUT	GET /discover.bug.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:23 UTC	589	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 112893 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Thu, 29 Jul 2021 14:30:56 GMT x-amz-version-id: s1brD8GvEjp8mKlUYeFYSyDUP_P7J_6B Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 14:20:02 GMT ETag: "5a77cf71535a1fea1d094ea4f090e641" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 57d93b321db68494cc6755a0d3fb29cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: U_uzw9F0nNietl_hHW_Ft43t1W0m7xmxArNyURAf7EK4gNL5SzI6Qg== Age: 11122 Vary: Origin
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 20 32 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 31 2e 37 36 37 33 20 32 31 2e 32 31 35 38 43 33 32 2e 35 34 36 35 20 32 31 2e 32 31 35 38 20 33 33 2e 31 37 33 38 20 32 30 2e 35 39 35 31 20 33 33 2e 31 37 33 38 20 31 39 2e 38 31 37 35 56 32 2e 31 38 31 38 43 33 33 2e 31 37 33 38 20 31 2e 34 30 34 32 34 20 33 32 2e 35 34 36 35 20 30 2e 37 38 33 34 39 36 20 33 31 2e 37 36 37 33 20 30 2e 37 38 33 34 39 36 48 32 2e 32 32 36 36 39 43 31 2e 34 34 37 34 33 20 30 2e 37 38 33 34 39 36 20 30 2e 38 Data Ascii: <svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M31.7673 21.2158C32.5465 21.2158 33.1738 20.5951 33.1738 19.8175V2.1818C33.1738 1.40424 32.5465 0.783496 31.7673 0.783496H2.22669C1.44743 0.783496 0.8
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 36 20 31 31 2e 34 34 30 37 20 31 39 2e 35 36 39 36 20 31 32 2e 34 39 39 33 20 31 38 2e 32 35 35 34 20 31 32 2e 34 39 39 33 43 31 36 2e 39 34 31 32 20 31 32 2e 34 39 39 33 20 31 35 2e 38 37 35 32 20 31 31 2e 34 34 30 37 20 31 35 2e 38 37 35 32 20 31 30 2e 31 33 35 37 43 31 35 2e 38 37 35 32 20 38 2e 38 33 30 36 35 20 31 36 2e 39 34 31 32 20 37 2e 37 37 32 30 39 20 31 38 2e 32 35 35 34 20 37 2e 37 37 32 30 39 5a 22 20 66 69 6c 6c 3d 22 23 35 34 35 35 35 37 22 2f 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 35 22 20 64 3d 22 4d 31 38 2e 32 35 37 31 20 37 2e 37 37 33 36 38 43 31 39 2e 35 37 31 33 20 37 2e 37 37 33 36 38 20 32 30 2e 36 33 37 33 20 38 2e 38 33 32 32 33 20 32 30 2e 36 33 37 33 20 31 30 2e 31 33 37 33 43 32 30 2e 36 33 37 33 20 31 31 Data Ascii: 6 11.4407 19.5696 12.4993 18.2554 12.4993C16.9412 12.4993 15.8752 11.4407 15.8752 10.1357C15.8752 8.83065 16.9412 7.77209 18.2554 7.77209Z" fill="#545557"/><path opacity="0.5" d="M18.2571 7.77368C19.5713 7.77368 20.6373 8.83223 20.6373 10.1373C20.6373 11
2024-09-11 17:25:23 UTC	10072	IN	Data Raw: 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 35 22 20 64 3d 22 4d 31 38 2e 33 34 20 37 2e 38 38 31 34 37 43 31 39 2e 36 34 35 37 20 37 2e 38 37 39 37 38 20 32 30 2e 37 30 33 32 20 38 2e 39 32 39 38 39 20 32 30 2e 37 30 34 39 20 31 30 2e 32 32 36 35 43 32 30 2e 37 30 36 36 20 31 31 2e 35 32 33 31 20 31 39 2e 36 34 39 31 20 31 32 2e 35 37 33 32 20 31 38 2e 33 34 33 34 20 31 32 2e 35 37 34 39 43 31 37 2e 30 33 37 37 20 31 32 2e 35 37 36 36 20 31 35 2e 39 38 30 32 20 31 31 2e 35 32 36 35 20 31 35 2e 39 37 38 35 20 31 30 2e 32 32 39 39 56 31 30 2e 32 32 38 32 43 31 35 2e 39 37 36 38 20 38 2e 39 33 33 32 37 20 31 37 2e 30 33 34 33 20 37 2e 38 38 33 31 36 20 31 38 2e 33 33 38 33 20 37 2e 38 38 31 34 37 48 31 38 2e 33 34 5a 22 20 66 69 6c 6c 3d 22 23 38 34 38 36 Data Ascii: ath opacity="0.5" d="M18.34 7.88147C19.6457 7.87978 20.7032 8.92989 20.7049 10.2265C20.7066 11.5231 19.6491 12.5732 18.3434 12.5749C17.0377 12.5766 15.9802 11.5265 15.9785 10.2299V10.2282C15.9768 8.93327 17.0343 7.88316 18.3383 7.88147H18.34Z" fill="#8486
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 32 30 2e 37 33 37 39 20 31 30 2e 32 38 33 32 43 32 30 2e 37 33 37 39 20 31 31 2e 35 37 33 31 20 31 39 2e 36 38 33 39 20 31 32 2e 36 31 39 38 20 31 38 2e 33 38 35 20 31 32 2e 36 31 39 38 43 31 37 2e 30 38 36 31 20 31 32 2e 36 31 39 38 20 31 36 2e 30 33 32 20 31 31 2e 35 37 33 31 20 31 36 2e 30 33 32 20 31 30 2e 32 38 33 32 43 31 36 2e 30 33 32 20 38 2e 39 39 33 33 39 20 31 37 2e 30 38 36 31 20 37 2e 39 34 36 36 36 20 31 38 2e 33 38 35 20 37 2e 39 34 36 36 36 5a 22 20 66 69 6c 6c 3d 22 23 39 46 41 31 41 34 22 2f 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 35 22 20 64 3d 22 4d 31 38 2e 33 38 34 37 20 37 2e 39 34 37 38 38 43 31 39 2e 36 38 33 36 20 37 2e 39 34 37 38 38 20 32 30 2e 37 33 37 37 20 38 2e 39 39 34 36 31 20 32 30 2e 37 33 37 37 20 31 Data Ascii: 20.7379 10.2832C20.7379 11.5731 19.6839 12.6198 18.385 12.6198C17.0861 12.6198 16.032 11.5731 16.032 10.2832C16.032 8.99339 17.0861 7.94666 18.385 7.94666Z" fill="#9FA1A4"/><path opacity="0.5" d="M18.3847 7.94788C19.6836 7.94788 20.7377 8.99461 20.7377 1
2024-09-11 17:25:23 UTC	5175	IN	Data Raw: 34 20 31 32 2e 36 39 36 35 20 31 36 2e 31 32 35 20 31 31 2e 36 35 34 38 20 31 36 2e 31 32 35 20 31 30 2e 33 37 31 38 43 31 36 2e 31 32 33 33 20 39 2e 30 38 38 36 36 20 31 37 2e 31 37 30 36 20 38 2e 30 34 38 36 39 20 31 38 2e 34 36 32 37 20 38 2e 30 34 37 43 31 38 2e 34 36 34 34 20 38 2e 30 34 37 20 31 38 2e 34 36 34 34 20 38 2e 30 34 37 20 31 38 2e 34 36 36 31 20 38 2e 30 34 37 5a 22 20 66 69 6c 6c 3d 22 23 43 39 43 42 43 44 22 2f 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 39 35 22 20 64 3d 22 4d 31 38 2e 34 36 37 35 20 38 2e 30 34 38 39 35 43 31 39 2e 37 35 39 36 20 38 2e 30 34 38 39 35 20 32 30 2e 38 30 38 36 20 39 2e 30 39 30 36 32 20 32 30 2e 38 30 38 36 20 31 30 2e 33 37 33 37 43 32 30 2e 38 30 38 36 20 31 31 2e 36 35 36 38 20 31 39 2e Data Ascii: 4 12.6965 16.125 11.6548 16.125 10.3718C16.1233 9.08866 17.1706 8.04869 18.4627 8.047C18.4644 8.047 18.4644 8.047 18.4661 8.047Z" fill="#C9CBCD"/><path opacity="0.95" d="M18.4675 8.04895C19.7596 8.04895 20.8086 9.09062 20.8086 10.3737C20.8086 11.6568 19.
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 36 2e 31 34 35 20 31 31 2e 36 38 30 31 20 31 36 2e 31 34 35 20 31 30 2e 33 39 37 43 31 36 2e 31 34 35 20 39 2e 31 31 33 39 33 20 31 37 2e 31 39 34 20 38 2e 30 37 32 32 37 20 31 38 2e 34 38 36 31 20 38 2e 30 37 32 32 37 5a 22 20 66 69 6c 6c 3d 22 23 43 45 44 30 44 31 22 2f 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 38 36 22 20 64 3d 22 4d 31 38 2e 34 38 37 38 20 38 2e 30 37 34 31 43 31 39 2e 37 37 39 39 20 38 2e 30 37 34 31 20 32 30 2e 38 32 38 39 20 39 2e 31 31 35 37 37 20 32 30 2e 38 32 38 39 20 31 30 2e 33 39 38 39 43 32 30 2e 38 32 38 39 20 31 31 2e 36 38 31 39 20 31 39 2e 37 37 39 39 20 31 32 2e 37 32 33 36 20 31 38 2e 34 38 37 38 20 31 32 2e 37 32 33 36 43 31 37 2e 31 39 35 37 20 31 32 2e 37 32 33 36 20 31 36 2e 31 34 36 37 20 31 31 2e Data Ascii: 6.145 11.6801 16.145 10.397C16.145 9.11393 17.194 8.07227 18.4861 8.07227Z" fill="#CED0D1"/><path opacity="0.86" d="M18.4878 8.0741C19.7799 8.0741 20.8289 9.11577 20.8289 10.3989C20.8289 11.6819 19.7799 12.7236 18.4878 12.7236C17.1957 12.7236 16.1467 11.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	638	OUT	GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2 HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://connect.intuit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:23 UTC	647	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 35228 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET x-amz-replication-status: COMPLETED Last-Modified: Tue, 12 Jan 2021 11:38:18 GMT x-amz-version-id: eWJvGZvOztSr3hMiY_jDKfHtC28kH6yJ Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 07:20:34 GMT ETag: "0acd962351f0b06e9a1f472e692ed680" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ec9e3bc729d9c6d55ed32446408ad62e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: DTA5otunLwg3SfZZK26D_K0RwPXeL2T4MFXb5AHjwZuUDzKxspXaCA== Age: 43650
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 89 9c 00 10 00 00 00 01 a7 e0 00 00 89 38 00 02 4c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 87 0c 1c bc 18 06 60 16 8b 60 00 83 0c 08 83 64 09 92 50 0a 84 99 5c 83 c0 7c 01 36 02 24 03 91 28 0b 91 2c 00 04 20 05 a2 33 07 20 0c 84 2f 5b c3 71 71 40 1c b7 57 80 f3 04 68 5b f3 ab e7 e6 be 80 ea b5 c3 e2 e8 b9 b5 28 78 83 ca ee 00 7a fb 94 81 f3 04 33 32 ad d5 2f 3f fb ff ff 08 71 0c 31 05 54 dd 0f 51 a5 2a a8 9e 35 b3 d7 c9 1e f7 3e 6b bd cd 8c a9 8f 3b 66 7d a2 a7 3b b7 4b 03 37 28 d9 d1 e9 5f 14 82 a9 1f 1d 9d e9 8d 59 a0 15 50 b7 4f 94 f4 05 15 28 01 52 05 fc 03 ad 55 c5 f2 a6 26 3e 00 77 19 10 40 07 00 00 00 00 d4 21 d8 93 d3 4d 57 91 a8 2e 75 3e 35 0b b0 6c 4a 69 ac 00 06 00 c0 0a 00 00 f8 02 00 Data Ascii: wOF28L``dP\\|6$(, 3 /[qq@Wh[(xz32/?q1TQ*5>k;f};K7(_YPO(RU&>w@!MW.u>5lJi
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 74 48 91 2b 20 7e 6e f7 45 dc 05 5c ec 51 20 63 7c e2 9a ee 37 5d 22 63 c2 90 7f 73 14 85 22 87 28 f3 b3 c4 95 d8 6f b1 08 09 d1 0d ac b7 6f 31 7c 28 bc ce fe b9 01 7e eb 96 3c 95 9b 92 6f 9e 9a 27 06 f3 7a e7 b6 e7 2d fe 75 3b 8a 02 3f 64 f0 a0 d0 b5 eb ce 35 60 99 c1 33 c5 af c4 9e 69 92 b9 ed a5 d5 ed 39 b3 f0 05 c0 3b 6d a3 13 b7 28 79 b9 92 a6 52 07 38 6c 97 e4 07 fd 34 6d 3d 15 f4 5e 8f a5 2c ca 4e fc 89 27 51 d9 16 90 17 49 61 d3 26 0b 64 a8 c6 3a 22 c7 48 65 da 04 f2 4d 3e 90 df f2 6a 6c 1c e8 fb 94 50 22 8b d3 f4 26 72 5c 22 21 94 50 ae b4 8c e6 42 73 3c fb 19 48 4b af 11 cb c2 fe ea a5 ba 44 81 da 91 3e fc 9f f3 d0 1e 42 df 72 6b b6 91 4c 0b 54 8d 0c 32 50 96 3f 4d 58 46 f0 77 9a 31 d0 ac 48 52 8d 46 4a 42 2a 35 c8 20 f3 aa 2a 44 29 36 e5 a6 af Data Ascii: tH+ ~nE\Q c\|7]"cs"(oo1\|(~<o'z-u;?d5`3i9;m(yR8l4m=^,N'QIa&d:"HeM>jlP"&r\"!PBs<HKD>BrkLT2P?MXFw1HRFJB5 D)6
2024-09-11 17:25:23 UTC	2460	IN	Data Raw: 3f 92 cc 73 c1 7d 6b b0 f8 9a bc 85 23 b1 b1 f5 37 79 2c 5d 60 c1 e4 92 ea 4d de 19 56 33 08 e3 98 c7 0a f0 53 a2 81 3b 17 fd db b9 80 d2 45 2f b7 5e 52 70 68 2b 3c 7e 22 b0 02 0f 57 f4 e3 2b 09 6f 9e b0 e7 c0 df 38 a0 dc 32 9a ce d7 99 0f ce 85 7b e3 cd 03 11 13 e8 3d c9 aa 31 b4 db 6a 24 9d 5f 1c 43 f5 5a c6 d7 0a 90 33 3a a1 87 4e 28 2f c3 22 3f 9f 29 d1 ba 73 db 66 b5 ae fb cf eb d6 db 4d 42 0e 9c a3 92 af e8 d3 0b c7 1d bb 33 6a 17 3e 17 2a cc 55 85 36 e3 b1 85 ea bf f6 f5 d7 3f b2 18 49 0e 4e ce d9 39 e4 60 11 9a 89 73 3d cf b9 7e d5 d3 b3 1b 12 a4 e6 27 c6 e8 84 b1 51 d6 58 96 52 4b 58 f0 60 94 d9 6c 1b f9 a5 55 40 95 01 53 c7 75 e9 1e 82 58 65 a4 a1 ca 78 19 15 79 00 d0 2b fb e3 c3 61 0c d8 cf e1 cb 4a a9 2d b1 cc f8 cd c7 bd 91 92 93 ba c0 96 56 Data Ascii: ?s}k#7y,]`MV3S;E/^Rph+<~"W+o82{=1j$_CZ3:N(/"?)sfMB3j>*U6?IN9`s=~'QXRKX`lU@SuXexy+aJ-V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	640	OUT	GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2 HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://connect.intuit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:23 UTC	647	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 35152 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET x-amz-replication-status: COMPLETED Last-Modified: Tue, 12 Jan 2021 11:38:29 GMT x-amz-version-id: ER4n9r0bgQC73W_rMirrtGRmEaqFzUq9 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 07:20:34 GMT ETag: "476fe09cbbbbf74ba00b93f8595ee5ed" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 286eb4b50e0acf373dd03645aee00b7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: E_G6IdqGtO6Q_2E1Cv4xgzFPJmy8C4gWZLNJOc4uYe4kBH7_DZcqoA== Age: 57308
2024-09-11 17:25:23 UTC	15737	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 89 50 00 10 00 00 00 01 a5 08 00 00 88 ee 00 02 4c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 8d 5e 1c bc 18 06 60 16 8b 60 00 83 0c 08 83 64 09 92 50 0a 84 8c 44 83 b8 05 01 36 02 24 03 91 28 0b 91 2c 00 04 20 05 a3 1d 07 20 0c 84 2f 5b 08 71 71 04 3d ed f8 48 78 b8 6d 00 ec d6 e1 51 cd ca 07 c4 01 b7 5f 09 75 a7 3b 3f 2c b3 c4 3e c1 dc 9c 45 7c c8 a1 e6 6d 66 44 8e 7c b9 64 ff ff ff 67 26 0d 39 2c b9 5a 72 a5 14 60 db ff 3f 49 91 0d 23 91 15 63 60 8c 63 90 35 94 e2 29 6c f1 3c 2e dd ab ea a6 7d ad 48 1c 27 5f d4 1c f8 d8 d2 9c b5 de 3b 1a 55 e4 8a 4e b9 19 22 15 3d 2d 9c 5e 2e 4b 76 71 9e 90 91 da 2b ac c5 74 e7 23 ec 15 86 1a c9 c1 db 70 77 d8 57 85 12 cd a4 60 a2 03 16 55 c8 b8 12 1f 6a 13 a9 44 Data Ascii: wOF2PL^``dPD6$(, /[qq=HxmQ_u;?,>E\|mfD\|dg&9,Zr`?I#c`c5)l<.}H'_;UN"=-^.Kvq+t#pwW`UjD
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 8d b0 78 f8 13 ae 22 2f 47 fc 78 5d 0f fb 2d ce 49 c1 de fb d6 2f ec 7e 2e ad 1e a3 58 a3 9b e4 ad 2d 8a b5 41 bf 66 6d 67 db 7a a5 df 36 ce 2a 87 d4 c3 d7 b3 90 72 a3 0e 12 93 39 07 3f bb 76 98 6d f1 a6 dc 1c 7c 58 6a 72 31 38 8c c0 2f aa 5f fc 34 f0 fa 58 ed 6c 5b 32 6c 1d c1 27 d5 00 79 a7 a1 4c 56 eb 3b b9 9e 20 ab 5b 6f e2 74 05 bc 3d 4c e3 84 ae 5a 7a aa 57 74 6a b3 79 b7 d4 b8 bb ab e1 eb 74 12 2e 70 1a 6e 2e 71 14 7e 35 17 b0 6e db 09 da 26 e7 30 3c 5c 25 37 e8 15 15 11 b2 f1 ec e1 01 83 45 c2 17 39 98 df 5f 27 d4 f9 b9 de 88 44 a9 f0 f0 03 f8 e7 3a 8b de e3 97 ac 30 8a 3c 03 98 1d d4 a2 5c 45 29 19 ec 69 86 5c 99 e6 ed 6b 75 fc b6 de 94 64 96 20 cd a2 64 52 b9 2e 14 51 af 6b 2f 6d 94 86 e4 dd 04 8f 98 12 38 fd 97 3c 8f d1 17 b6 ad 69 b6 30 fb 6d Data Ascii: x"/Gx]-I/~.X-Afmgz6*r9?vm\|Xjr18/_4Xl[2l'yLV; [ot=LZzWtjyt.pn.q~5n&0<\%7E9_'D:0<\E)i\kud dR.Qk/m8<i0m
2024-09-11 17:25:23 UTC	3031	IN	Data Raw: ff 14 4a f9 92 c2 2a 0a 35 17 3b 31 84 e0 cd 32 d9 bd be b3 c5 3e 2a 59 19 70 b7 80 68 62 25 00 82 c0 bb 1c b1 77 95 7c d6 e9 45 b7 61 30 1a 63 fb 37 54 22 82 0f 64 71 73 ec f0 1e a7 24 d8 1e 77 25 11 27 67 ca b2 cb 1e d9 f2 23 48 1a d8 23 91 d0 44 42 64 00 3e da 8c 87 10 d3 d4 af 18 a9 a8 e4 6c eb 72 f3 ca 31 7c 2e ef b2 85 6e b2 cd 62 d3 df 6c 36 c7 cd 7d f3 e3 8c 84 44 18 b1 bd fe 2a 8e ee a6 81 4b c8 12 70 72 8c b0 59 0a 2e e2 6d f1 77 8d 35 fe c1 98 7a 7f 23 f5 83 4b b5 42 fc fa 26 0a ae ae 34 47 ca d3 c6 14 df ab f3 04 e9 c8 ce 82 f3 d7 58 19 a3 0a 0e ec 11 dc 8e 8f 16 8e a1 f4 88 8a cb ee af 8c d1 cf 54 20 20 ed 51 00 ae 04 44 a5 98 bd 87 9a ff 42 a4 e6 1e e0 5a 76 16 63 fa d0 91 7b 44 92 11 bb 83 31 72 ec 38 33 71 1d 61 e2 11 e9 7a 4d dd 27 b6 47 Data Ascii: J5;12>Yphb%w\|Ea0c7T"dqs$w%'g#H#DBd>lr1\|.nbl6}D*KprY.mw5z#KB&4GXT QDBZvc{D1r83qazM'G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	654	OUT	GET /truste.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:23 UTC	566	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 20028 Connection: close Date: Mon, 12 Aug 2024 17:08:17 GMT Last-Modified: Mon, 13 May 2019 07:16:15 GMT ETag: "6dcc0db5446ac677d011c9e531400a08" Cache-Control: public, max-age=31536000 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 286eb4b50e0acf373dd03645aee00b7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: ykdtG43msdpokJRRl8d0j_H0QnYkC6m1Ez8dlAKGimnj8nYATP40qw== Age: 2593027 Vary: Origin
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 38 70 78 22 20 68 65 69 67 68 74 3d 22 32 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 38 20 32 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 33 2e 32 20 28 37 32 36 34 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="88px" height="28px" viewBox="0 0 88 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 53.2 (72643) - https://sketchapp.com -->
2024-09-11 17:25:23 UTC	3608	IN	Data Raw: 34 38 2c 31 39 2e 34 34 34 34 20 37 34 2e 30 37 36 38 2c 31 39 2e 35 36 34 34 20 37 34 2e 30 37 36 38 2c 31 39 2e 37 31 33 34 20 4c 37 34 2e 30 37 36 38 2c 31 39 2e 37 32 36 34 20 43 37 34 2e 30 37 36 38 2c 31 39 2e 38 37 35 34 20 37 34 2e 31 33 37 38 2c 31 39 2e 39 39 35 34 20 37 34 2e 32 35 36 38 2c 32 30 2e 30 37 34 34 20 43 37 34 2e 33 37 33 38 2c 32 30 2e 31 35 32 34 20 37 34 2e 35 32 38 38 2c 32 30 2e 31 39 34 34 20 37 34 2e 37 30 37 38 2c 32 30 2e 31 39 34 34 20 43 37 34 2e 38 33 31 38 2c 32 30 2e 31 39 34 34 20 37 34 2e 39 34 32 38 2c 32 30 2e 31 37 36 34 20 37 35 2e 30 34 38 38 2c 32 30 2e 31 34 36 34 20 43 37 35 2e 31 35 33 38 2c 32 30 2e 31 31 36 34 20 37 35 2e 32 34 36 38 2c 32 30 2e 30 36 38 34 20 37 35 2e 33 32 36 38 2c 32 30 2e 30 30 37 34 Data Ascii: 48,19.4444 74.0768,19.5644 74.0768,19.7134 L74.0768,19.7264 C74.0768,19.8754 74.1378,19.9954 74.2568,20.0744 C74.3738,20.1524 74.5288,20.1944 74.7078,20.1944 C74.8318,20.1944 74.9428,20.1764 75.0488,20.1464 C75.1538,20.1164 75.2468,20.0684 75.3268,20.0074
2024-09-11 17:25:23 UTC	36	IN	Data Raw: 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: </g> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	656	OUT	GET /flags/us.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:24 UTC	582	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 4424 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 06 Dec 2022 09:36:13 GMT x-amz-version-id: 3J9QqnT3nEyHG1ivjeSeboZhefqbdr_a Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:24 GMT ETag: "bfaaeb1ca82bf9541f20aa098f3e7cf2" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 32e3b86ae254a231182567c0124af892.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: Y_7edvjohtP_2TRTDQmyomytkWhXSwvIgbgg7xlA9X0Zm4yuu90E3Q== Vary: Origin
2024-09-11 17:25:24 UTC	4424	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 69 64 3d 22 66 6c 61 67 2d 69 63 6f 6e 73 2d 75 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 30 20 34 38 30 22 3e 0a 20 20 3c 67 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 3c 67 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 70 74 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 62 64 33 64 34 34 22 20 64 3d 22 4d 30 20 30 68 39 31 32 76 33 37 48 30 7a 6d 30 20 37 33 2e 39 68 39 31 32 76 33 37 48 30 7a 6d 30 20 37 33 2e 38 68 39 31 32 76 33 37 48 30 7a 6d 30 20 37 33 2e 38 68 39 31 32 76 33 37 48 30 7a 6d 30 20 37 34 68 39 31 32 76 33 36 2e 38 48 30 7a 6d 30 20 37 33 2e 37 68 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" id="flag-icons-us" viewBox="0 0 640 480"> <g fill-rule="evenodd"> <g stroke-width="1pt"> <path fill="#bd3d44" d="M0 0h912v37H0zm0 73.9h912v37H0zm0 73.8h912v37H0zm0 73.8h912v37H0zm0 74h912v36.8H0zm0 73.7h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	656	OUT	GET /visa.bug.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:24 UTC	582	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1561 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Thu, 29 Jul 2021 14:30:52 GMT x-amz-version-id: GIBp9xwE0boAlHPcZDGBdyrhsCdIZxQW Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:24 GMT ETag: "7351accf267df64da10b802e00a8467e" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 1e498d046330e15095a1a2a958463bf4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: t_o6qSssnEu12hg2AHSVO5X7GoT15cMs6GzYSry4-2GBBAXqM_cwPA== Vary: Origin
2024-09-11 17:25:24 UTC	1561	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 20 32 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 31 2e 37 32 37 35 20 32 31 2e 32 31 35 38 43 33 32 2e 35 30 36 37 20 32 31 2e 32 31 35 38 20 33 33 2e 31 33 34 20 32 30 2e 35 39 35 31 20 33 33 2e 31 33 34 20 31 39 2e 38 31 37 35 56 32 2e 31 38 31 38 43 33 33 2e 31 33 34 20 31 2e 34 30 34 32 34 20 33 32 2e 35 30 36 37 20 30 2e 37 38 33 34 39 36 20 33 31 2e 37 32 37 35 20 30 2e 37 38 33 34 39 36 48 32 2e 31 38 36 39 43 31 2e 34 30 37 36 33 20 30 2e 37 38 33 34 39 36 20 30 2e 37 38 30 33 32 Data Ascii: <svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M31.7275 21.2158C32.5067 21.2158 33.134 20.5951 33.134 19.8175V2.1818C33.134 1.40424 32.5067 0.783496 31.7275 0.783496H2.1869C1.40763 0.783496 0.78032

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49744	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	662	OUT	GET /mastercard.bug.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:23 UTC	587	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1975 Connection: close Date: Wed, 11 Sep 2024 03:10:14 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 29 Jul 2021 14:30:53 GMT ETag: "c398ba7b3f1d301e06c7b3b32c2826d1" x-amz-version-id: wuzPI2NSZ7bMYiAyvKuLEta9wNaOXBMS Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1e498d046330e15095a1a2a958463bf4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: Wtl2rIuc7wXGD0e1fGJlCWq61niEPACWHA1CCg1rbhKkrO8TR5yDPQ== Age: 51310 Vary: Origin
2024-09-11 17:25:23 UTC	1428	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 20 32 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 31 2e 37 35 33 32 20 32 31 2e 32 31 39 37 43 33 32 2e 35 33 32 36 20 32 31 2e 32 31 39 37 20 33 33 2e 31 36 20 32 30 2e 35 39 38 39 20 33 33 2e 31 36 20 31 39 2e 38 32 31 32 56 32 2e 31 38 32 30 33 43 33 33 2e 31 36 20 31 2e 34 30 34 33 32 20 33 32 2e 35 33 32 36 20 30 2e 37 38 33 34 35 33 20 33 31 2e 37 35 33 32 20 30 2e 37 38 33 34 35 33 48 32 2e 32 30 36 39 43 31 2e 34 32 37 34 39 20 30 2e 37 38 33 34 35 33 20 30 2e 38 30 30 30 35 35 20 Data Ascii: <svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M31.7532 21.2197C32.5326 21.2197 33.16 20.5989 33.16 19.8212V2.18203C33.16 1.40432 32.5326 0.783453 31.7532 0.783453H2.2069C1.42749 0.783453 0.800055
2024-09-11 17:25:23 UTC	547	IN	Data Raw: 36 20 39 2e 30 36 38 33 31 20 31 38 2e 34 35 34 31 20 38 2e 31 38 35 35 31 43 31 38 2e 30 32 32 32 20 37 2e 33 30 32 37 31 20 31 37 2e 33 39 34 31 20 36 2e 35 32 38 38 20 31 36 2e 36 31 37 32 20 35 2e 39 32 32 31 35 43 31 37 2e 35 38 30 31 20 35 2e 31 37 30 35 31 20 31 38 2e 37 33 36 36 20 34 2e 37 30 33 30 37 20 31 39 2e 39 35 34 34 20 34 2e 35 37 33 32 37 43 32 31 2e 31 37 32 33 20 34 2e 34 34 33 34 38 20 32 32 2e 34 30 32 33 20 34 2e 36 35 36 35 35 20 32 33 2e 35 30 33 39 20 35 2e 31 38 38 31 34 43 32 34 2e 36 30 35 36 20 35 2e 37 31 39 37 33 20 32 35 2e 35 33 34 34 20 36 2e 35 34 38 33 38 20 32 36 2e 31 38 34 31 20 37 2e 35 37 39 33 39 43 32 36 2e 38 33 33 39 20 38 2e 36 31 30 34 20 32 37 2e 31 37 38 35 20 39 2e 38 30 32 31 35 20 32 37 2e 31 37 38 35 Data Ascii: 6 9.06831 18.4541 8.18551C18.0222 7.30271 17.3941 6.5288 16.6172 5.92215C17.5801 5.17051 18.7366 4.70307 19.9544 4.57327C21.1723 4.44348 22.4023 4.65655 23.5039 5.18814C24.6056 5.71973 25.5344 6.54838 26.1841 7.57939C26.8339 8.6104 27.1785 9.80215 27.1785

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	641	OUT	GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2 HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://connect.intuit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:23 UTC	647	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 35236 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET x-amz-replication-status: COMPLETED Last-Modified: Tue, 12 Jan 2021 11:38:24 GMT x-amz-version-id: EYWb1BkOwqM0JBhy7AHAPt11DikRQL3u Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 07:20:34 GMT ETag: "4451062c2d96d0eb928e7a55a7c7da34" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 06d36e78e8dfd9468327f09115761a9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: q3T1ash8qtQMTErPBrw5wLsRVZdBpXU_YF0NYlKlB7JghSw94NBhWQ== Age: 43649
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 89 a4 00 10 00 00 00 01 a7 bc 00 00 89 41 00 02 4c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 8b 6c 1c bc 18 06 60 16 8b 60 00 83 0c 08 83 64 09 92 50 0a 84 94 40 83 be 56 01 36 02 24 03 91 28 0b 91 2c 00 04 20 05 a2 4b 07 20 0c 84 2f 5b 15 73 71 01 4f 36 7a f4 40 e6 6d 33 ed 95 62 82 b4 37 70 72 4b b8 07 3d b7 4c 20 46 6f cb f1 08 ba 6d 33 42 3b 95 de ac c7 9d 8b 59 10 66 ff ff 7f 4f 50 32 6e ff 71 5b 05 84 87 00 cd ea 25 23 2a 6a 4c 86 f4 3e 31 c9 71 6a 45 29 7a 4d 77 c3 95 33 28 e4 a9 8c f9 f2 9a 95 e9 d2 1e 60 cb 32 7d 37 8f bc f9 95 99 fb 7b 89 19 43 90 6a ac ed 16 ed b7 bb 9e 54 84 d6 3f 30 89 74 ae 15 5d 66 fc 77 09 0e 59 a5 eb c8 1e 00 31 d3 9d 95 0e 20 00 c1 60 00 43 2c bd e3 6f 25 70 7f b0 Data Ascii: wOF2ALl``dP@V6$(, K /[sqO6z@m3b7prK=L Fom3B;YfOP2nq[%#*jL>1qjE)zMw3(`2}7{CjT?0t]fwY1 `C,o%p
2024-09-11 17:25:23 UTC	16384	IN	Data Raw: 0b d8 00 4f 0d 61 db e8 47 d3 56 d2 72 26 7c 69 3d a5 07 c1 fd e0 cc 17 7d b7 3c f9 4d 22 71 ad 38 a3 b3 68 d4 70 d8 d0 4d 66 8d c6 47 8a d6 96 e4 c5 df 2c 1e 8a 17 ff 71 05 2a 7f 54 0e 7d 3a 90 2b 27 89 ff b4 62 24 f7 d2 7c c3 fb 0c dc 29 9d 78 13 0a 2f 4a e2 43 ce fb 9c c2 61 c3 23 b7 ac 79 92 a1 91 cc d4 48 76 3e 3d 57 f0 d8 96 e1 20 f4 03 f9 0d 74 25 cd 8e 98 4d b6 8b 4f ea db a3 9d 94 f4 da 70 50 ca 0d 90 f8 46 a1 58 eb 78 83 36 df 8c 6a 9c ce 16 e0 29 c7 0b 84 10 af d8 04 b0 77 bb 60 ee c4 a3 8a ea f4 45 b1 02 85 24 4e 37 98 c9 09 89 84 85 f5 96 12 86 4c 92 e4 e3 7f 20 7b e7 7d 4d e7 78 78 cc 30 9b cd 0c c9 cd e7 f0 2d 20 db 47 bc b1 de 2c bf fb 33 19 5b 9d 8f b2 52 d8 b4 90 8b c7 a5 7e cd fc f5 4c 82 a1 90 55 50 2d 26 7a 52 c1 42 47 ad a1 46 96 4c Data Ascii: OaGVr&\|i=}<M"q8hpMfG,q*T}:+'b$\|)x/JCa#yHv>=W t%MOpPFXx6j)w`E$N7L {}Mxx0- G,3[R~LUP-&zRBGFL
2024-09-11 17:25:23 UTC	1504	IN	Data Raw: 49 7e b0 cc 7f 98 07 4a d9 d3 fd a1 12 db 82 c7 b6 60 1c 5f 83 f0 16 30 89 8e ce df e4 31 bd 20 ec 7f 6d 34 79 87 14 6e e6 79 8b 87 f0 58 85 a3 57 28 13 99 da 25 5a 77 5a 11 6d c9 27 2b b4 9f 78 a2 8b 59 cb a3 e1 ab 27 0d 81 b5 2f f3 07 b6 63 66 38 cf 2c 60 e9 2b 01 e7 b8 2b e6 8d e7 c1 44 db 4e 26 88 59 cd 7c 06 32 ed 83 dd 14 d6 33 be e6 fc 55 32 07 7f c4 d9 8d 78 96 95 37 6c 4a c8 ec 1c 33 ef 9e 4a 97 3c b6 e0 72 9e 6c 66 8b 57 6e ff 8f 10 0a ca 06 3b 3f ca ac c3 ec bf 7c c2 f5 bc aa 33 bb f3 5c ae 23 72 3f 6b c6 9f f3 35 5a 1e bb 59 92 13 3e 7f 89 cb 6c ab 1e a7 b2 3e d1 41 6c d5 5c d4 32 c5 86 51 ba c7 79 ac 3e bf 5e ce 7b ba 5d 6c 3c ae 9f a3 73 5f 9d 9f 96 b6 44 47 0d 45 cd fc 15 d0 2f 82 bd 22 81 c0 23 57 ea 15 9f be 76 97 39 fc 26 00 9c 17 85 96 Data Ascii: I~J`_01 m4ynyXW(%ZwZm'+xY'/cf8,`++DN&Y\|23U2x7lJ3J<rlfWn;?\|3\#r?k5ZY>l>Al\2Qy>^{]l<s_DGE/"#Wv9&
2024-09-11 17:25:23 UTC	964	IN	Data Raw: 75 64 81 14 ac 92 e1 d1 22 a4 b7 01 d9 75 b3 8e 2f 2d 46 5b 94 f3 4d f7 87 c4 f9 33 f8 2b 75 6d cb 0f 24 1f 44 a1 70 19 0f 7d 22 a9 c7 f0 62 7c 8b 1a b5 d4 7c 37 d1 2a 01 bf 84 cd f8 67 9e 5e 3e 9c 82 32 5e ca bc cb c5 80 10 d3 0b 83 df ff 7e 9b 7a 70 c1 8b 6d f3 ec a2 53 75 a8 13 2b 92 37 72 61 94 b1 d3 7a 12 3e 42 86 92 9d 75 39 8b 36 51 51 59 74 90 cc 8f 5a eb 8e d4 9a 79 55 44 ee 9e b2 6e b7 81 c5 68 66 54 07 8a e9 bc dd 9b 4a 4c 9e 08 22 5f d2 f5 80 01 9e 6d a0 af 3e 32 50 83 be af 6f 0f 7a d9 0b b3 4d 2f d9 76 b9 a3 da ec 1a 8c 0b 65 29 5d 14 5b 92 a6 40 b0 c6 c2 29 39 4d 03 02 0b d5 a4 96 53 e5 a1 00 60 64 88 7e 53 72 78 4a 91 a1 42 f6 12 a4 31 a9 ad f9 11 96 16 7c 80 0a 05 c8 bb 22 a9 81 5f 14 ae e4 5d 2e eb aa da 99 c5 a5 96 09 e4 53 7d 0e 0e 67 Data Ascii: ud"u/-F[M3+um$Dp}"b\|\|7*g^>2^~zpmSu+7raz>Bu96QQYtZyUDnhfTJL"_m>2PozM/ve)][@)9MS`d~SrxJB1\|"_].S}g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-11 17:25:24 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=84002 Date: Wed, 11 Sep 2024 17:25:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:24 UTC	628	OUT	GET /_next/static/chunks/9835.59c20536643b9726.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	628	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 973 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: CWjuvavjEYcgZ64o4hkWaOsYHiyCakGL Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:25 GMT ETag: "6b64452b69b814fa56db74365d21d6fe" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 06d36e78e8dfd9468327f09115761a9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: e6rmlbTL708NJtP1Hn01GdWUsqwepa_T3wziMa685ZVWMPAe9sIt5g== Vary: Origin
2024-09-11 17:25:25 UTC	973	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 38 33 35 5d 2c 7b 33 39 38 33 35 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 63 2c 65 29 7b 65 2e 72 28 63 29 3b 65 28 36 37 32 39 34 29 3b 76 61 72 20 61 3d 65 28 35 31 32 34 35 29 2c 73 3d 65 28 38 35 38 39 33 29 3b 63 2e 64 65 66 61 75 6c 74 3d 6c 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 63 3d 32 34 2c 68 65 69 67 68 74 3a 65 3d 32 34 2c 63 6f 6c 6f 72 3a 68 3d 61 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 2c 63 6c 61 73 73 4e 61 6d 65 3a 74 3d 22 22 7d 3d 6c 3b 72 65 74 75 72 6e 28 30 2c 73 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9835],{39835:function(l,c,e){e.r(c);e(67294);var a=e(51245),s=e(85893);c.default=l=>{let{width:c=24,height:e=24,color:h=a.colors.white,className:t=""}=l;return(0,s.jsx)("svg",{xmlns:"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:24 UTC	628	OUT	GET /_next/static/chunks/7868.851b65ef7fa1a422.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	628	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 955 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: BOmk9Y3rMhskmN8CYHCc71_JeJ1bL4XU Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:26 GMT ETag: "54378336344b3de8529083ef5d0707ab" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 1bf129b8787cf2e96d3bce725554e4d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: rTaACWCy2JbDMx2le_K3gpbjWil8ddGcLGpk47B9UM7TWT9TcTGWhA== Vary: Origin
2024-09-11 17:25:25 UTC	955	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 36 38 5d 2c 7b 37 37 38 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6c 2c 63 29 7b 63 2e 72 28 6c 29 3b 63 28 36 37 32 39 34 29 3b 76 61 72 20 69 3d 63 28 35 31 32 34 35 29 2c 72 3d 63 28 38 35 38 39 33 29 3b 6c 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 6c 3d 32 34 2c 68 65 69 67 68 74 3a 63 3d 32 34 2c 63 6f 6c 6f 72 3a 73 3d 69 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 2c 63 6c 61 73 73 4e 61 6d 65 3a 74 3d 22 22 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 72 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7868],{77868:function(e,l,c){c.r(l);c(67294);var i=c(51245),r=c(85893);l.default=e=>{let{width:l=24,height:c=24,color:s=i.colors.white,className:t=""}=e;return(0,r.jsx)("svg",{xmlns:"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:24 UTC	628	OUT	GET /_next/static/chunks/1193.3dd404b7ea3c36c8.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1308 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZoR41e29l01uDgA0ZzVneNFS1wppB3yP Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:26 GMT ETag: "f69d3b30a1263332b5a03cd48576c018" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 edfd22ec6695cdc9d7ac634220af1314.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: GB6xCCyB1n8hLkoSbC2-D2Z7x9eyrwiL7_uQJ6vkFKMJxrdIXJJsFQ== Vary: Origin
2024-09-11 17:25:25 UTC	1308	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 39 33 5d 2c 7b 36 31 31 39 33 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 65 2c 72 29 7b 72 2e 72 28 65 29 3b 76 61 72 20 74 3d 72 28 39 35 36 32 37 29 2c 6f 3d 72 2e 6e 28 74 29 2c 69 3d 72 28 36 37 32 39 34 29 2c 6e 3d 72 28 35 31 32 34 35 29 2c 6c 3d 72 28 38 35 38 39 33 29 3b 65 2e 64 65 66 61 75 6c 74 3d 73 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 65 3d 31 32 2c 68 65 69 67 68 74 3a 72 3d 31 35 2c 63 6f 6c 6f 72 3a 74 3d 6e 2e 63 6f 6c 6f 72 73 2e 62 6c 61 63 6b 2c 63 6c 61 73 73 4e 61 6d 65 3a 61 3d 22 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 63 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1193],{61193:function(s,e,r){r.r(e);var t=r(95627),o=r.n(t),i=r(67294),n=r(51245),l=r(85893);e.default=s=>{let{width:e=12,height:r=15,color:t=n.colors.black,className:a="",strokeWidth:c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:24 UTC	628	OUT	GET /_next/static/chunks/8948.2692353fb3048aa0.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	623	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1478 Connection: close Date: Wed, 11 Sep 2024 17:25:26 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT ETag: "efa6f902936b7db194d07237f235321c" x-amz-server-side-encryption: AES256 x-amz-version-id: OLXBesqN2qaps0r8QCbzZEfK_qrDDCjV Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7158aa4ac648947d564b98d9769b5b2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 2NJ6Y0zHaro9vecs4FnWSb6FJIktQnmBbvHvXOjcCTJFEiyEdfOklw== Vary: Origin
2024-09-11 17:25:25 UTC	1478	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 34 38 5d 2c 7b 39 38 39 34 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 2e 72 28 65 29 3b 69 28 36 37 32 39 34 29 3b 76 61 72 20 73 3d 69 28 38 35 38 39 33 29 3b 65 2e 64 65 66 61 75 6c 74 3d 74 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 65 3d 33 32 2c 68 65 69 67 68 74 3a 69 3d 32 34 7d 3d 74 3b 72 65 74 75 72 6e 28 30 2c 73 2e 6a 73 78 73 29 28 22 73 76 67 22 2c 7b 77 69 64 74 68 3a 65 2c 68 65 69 67 68 74 3a 69 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 33 36 20 33 32 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8948],{98948:function(t,e,i){i.r(e);i(67294);var s=i(85893);e.default=t=>{let{width:e=32,height:i=24}=t;return(0,s.jsxs)("svg",{width:e,height:i,viewBox:"0 0 36 32",fill:"none",xmlns:"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49753	52.85.48.9	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:24 UTC	582	OUT	GET /analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:24 UTC	765	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 105589 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 30 Jul 2024 21:28:33 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 4mvb9o8UUXh8TqnRkosr5wilSZwqCqiv Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:25 GMT Cache-Control: public, max-age=120 ETag: "8f973ac4bdf60f81fbdae9b37e78047b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 06ede6e80e9cd4fa59b8d9b8a98391a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL50-C2 X-Amz-Cf-Id: zn55DcwrzFPsNTKIrBuCdKgmUPRSawTIWoLIHEkCGmLadBz-ovJO9Q==
2024-09-11 17:25:24 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 2c 72 2c 69 3d 7b 38 38 37 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 72 28 6e 28 33 32 35 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e Data Ascii: !function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.
2024-09-11 17:25:24 UTC	1514	IN	Data Raw: 2e 69 73 41 72 72 61 79 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 74 5b 72 5d 3d 69 28 6e 2c 65 29 7d 29 29 2c 74 7d 28 74 2c 65 29 3a 72 2e 69 73 28 74 2c 65 29 3f 72 2e 70 61 72 73 65 28 74 29 3a 74 7d 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 38 32 36 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 2f 5e 28 5c 64 7b 34 7d 29 28 3f 3a 2d 3f 28 5c 64 7b 32 7d 29 28 3f 3a 2d 3f 28 5c 64 7b 32 7d 29 29 3f 29 3f 28 3f 3a 28 5b 20 54 5d 29 28 5c 64 7b 32 7d 29 3a 3f 28 5c 64 7b 32 7d 29 28 3f 3a 3a 3f 28 5c 64 7b 32 7d 29 28 3f 3a 5b 2c 5c 2e 5d 28 5c 64 7b 31 2c 7d 29 29 3f 29 3f 28 3f 3a 28 5a 29 Data Ascii: .isArray(t)?function(t,e){return t.forEach((function(n,r){t[r]=i(n,e)})),t}(t,e):r.is(t,e)?r.parse(t):t}t.exports=i},8264:function(t,e){"use strict";var n=/^(\d{4})(?:-?(\d{2})(?:-?(\d{2}))?)?(?:([ T])(\d{2}):?(\d{2})(?::?(\d{2})(?:[,\.](\d{1,}))?)?(?:(Z)
2024-09-11 17:25:25 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 6e 2e 74 65 73 74 28 74 29 7d 2c 65 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 2c 6e 65 77 20 44 61 74 65 28 74 29 7d 7d 2c 36 30 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 2f 5c 64 7b 31 30 7d 2f 3b 65 2e 69 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 74 65 73 74 28 74 29 7d 2c 65 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 31 65 33 2a 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 65 29 7d 7d 2c 33 32 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 Data Ascii: eturn n.test(t)},e.parse=function(t){return t=parseInt(t,10),new Date(t)}},6076:function(t,e){"use strict";var n=/\d{10}/;e.is=function(t){return n.test(t)},e.parse=function(t){var e=1e3*parseInt(t,10);return new Date(e)}},325:function(t){function e(t){re
2024-09-11 17:25:25 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 74 29 7d 7d 28 29 2c 31 65 33 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 75 6c 6c 3d 3d 74 7c 7c 74 2e 6c 6f 67 28 22 77 61 72 6e 22 2c 22 43 61 6c 6c 62 61 63 6b 20 45 72 72 6f 72 22 2c 7b 65 72 72 6f 72 3a 65 7d 29 2c 6e 75 6c 6c 3d 3d 74 7c 7c 74 2e 73 74 61 74 73 2e 69 6e 63 72 65 6d 65 6e 74 28 22 63 61 6c 6c 62 61 63 6b 5f 65 72 72 6f 72 22 29 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 29 29 7d 6e 2e 64 Data Ascii: tion(){return r(function(){try{return Promise.resolve(e(t))}catch(t){return Promise.reject(t)}}(),1e3)})).catch((function(e){null==t\|\|t.log("warn","Callback Error",{error:e}),null==t\|\|t.stats.increment("callback_error")})).then((function(){return t}))}n.d
2024-09-11 17:25:25 UTC	16384	IN	Data Raw: 22 69 64 65 6e 74 69 66 79 22 5d 2e 69 6e 63 6c 75 64 65 73 28 74 2e 74 79 70 65 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 28 30 2c 6f 2e 50 4f 29 28 74 2e 74 72 61 69 74 73 29 29 74 68 72 6f 77 20 6e 65 77 20 50 28 22 2e 74 72 61 69 74 73 22 2c 49 29 7d 28 74 29 7d 76 61 72 20 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 74 2c 74 68 69 73 2e 63 72 65 61 74 65 4d 65 73 73 61 67 65 49 64 3d 74 2e 63 72 65 61 74 65 4d 65 73 73 61 67 65 49 64 2c 74 68 69 73 2e 6f 6e 45 76 65 6e 74 4d 65 74 68 6f 64 43 61 6c 6c 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 74 2e 6f 6e 45 76 65 6e 74 4d 65 74 68 6f 64 43 61 6c 6c 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d Data Ascii: "identify"].includes(t.type)&&function(t){if(!(0,o.PO)(t.traits))throw new P(".traits",I)}(t)}var M=function(t){var e,n;this.settings=t,this.createMessageId=t.createMessageId,this.onEventMethodCall=null!==(e=t.onEventMethodCall)&&void 0!==e?e:function(){}
2024-09-11 17:25:25 UTC	16384	IN	Data Raw: 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 72 3d 75 2e 6c 65 67 61 63 79 55 73 65 72 53 74 6f 72 65 2e 67 65 74 28 58 2e 63 6f 6f 6b 69 65 2e 6f 6c 64 4b 65 79 29 3b 72 65 74 75 72 6e 20 72 3f 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 3f 72 2e 69 64 3a 72 3a 6e 75 6c 6c 7d 2c 74 68 69 73 2e 61 6e 6f 6e 79 6d 6f 75 73 49 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 69 66 28 75 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 75 2e 69 64 65 6e 74 69 74 79 53 74 6f 72 65 2e 67 65 74 41 6e 64 53 79 6e 63 28 75 2e 61 6e 6f 6e 4b 65 79 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 6e Data Ascii: if(n)return n;var r=u.legacyUserStore.get(X.cookie.oldKey);return r?"object"==typeof r?r.id:r:null},this.anonymousId=function(t){var e,n;if(u.options.disable)return null;if(void 0===t){var r=null!==(e=u.identityStore.getAndSync(u.anonKey))&&void 0!==e?e:n
2024-09-11 17:25:25 UTC	16384	IN	Data Raw: 6e 28 30 2c 74 2e 4a 68 29 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 79 74 29 2c 5b 32 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 68 69 73 29 5d 7d 29 29 7d 29 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 67 65 76 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 50 72 6f 6d 69 73 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 4a 68 29 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 77 69 74 63 68 28 74 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 79 74 29 2c 5b 34 2c 74 68 69 73 2e 70 61 Data Ascii: n(0,t.Jh)(this,(function(t){return console.warn(yt),[2,Promise.resolve(this)]}))}))},n.prototype.pageview=function(e){return(0,t.mG)(this,void 0,Promise,(function(){return(0,t.Jh)(this,(function(t){switch(t.label){case 0:return console.warn(yt),[4,this.pa
2024-09-11 17:25:25 UTC	5771	IN	Data Raw: 72 65 28 74 29 7d 29 29 2c 5b 32 2c 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 73 29 5d 7d 7d 29 29 7d 29 29 7d 29 29 5d 3a 5b 33 2c 31 37 5d 3b 63 61 73 65 20 31 36 3a 6b 2e 73 65 6e 74 28 29 2c 6b 2e 6c 61 62 65 6c 3d 31 37 3b 63 61 73 65 20 31 37 3a 72 65 74 75 72 6e 5b 32 2c 6a 5d 7d 76 61 72 20 4f 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 24 74 28 6e 2c 72 2c 6f 29 7b 76 61 72 20 73 2c 75 2c 61 2c 63 2c 6c 2c 70 2c 66 2c 68 2c 76 2c 79 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 7b 7d 29 2c 28 30 2c 74 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 50 72 6f 6d 69 73 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 2c 67 2c 62 2c 77 2c 5f 2c 78 2c 53 2c 50 2c 6a 2c 49 2c 6b 3b 72 65 74 75 72 6e 28 30 2c 74 2e 4a 68 Data Ascii: re(t)})),[2,Promise.all(s)]}}))}))}))]:[3,17];case 16:k.sent(),k.label=17;case 17:return[2,j]}var O}))}))}function $t(n,r,o){var s,u,a,c,l,p,f,h,v,y;return void 0===r&&(r={}),(0,t.mG)(this,void 0,Promise,(function(){var m,g,b,w,_,x,S,P,j,I,k;return(0,t.Jh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-11 17:25:25 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=83971 Date: Wed, 11 Sep 2024 17:25:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-11 17:25:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:24 UTC	628	OUT	GET /_next/static/chunks/2378.40683c6fb386355f.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	623	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2724 Connection: close Date: Wed, 11 Sep 2024 17:25:26 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT ETag: "7b6efeec50738adaf197572116b3d96a" x-amz-server-side-encryption: AES256 x-amz-version-id: RDHOvwr_abA5fVUeosn64InB3XO0ONQQ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 999a435eb37a050d3de26fe63534c416.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: SXVmX1ONzaUoOFv03GYBl2NamnZPDpJntscV-p5N0CE8NRaNI7vvJA== Vary: Origin
2024-09-11 17:25:25 UTC	2724	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 37 38 5d 2c 7b 35 32 33 37 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6f 2e 72 28 74 29 3b 6f 28 36 37 32 39 34 29 3b 76 61 72 20 72 3d 6f 28 38 35 38 39 33 29 3b 74 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 74 3d 34 30 2c 68 65 69 67 68 74 3a 6f 3d 32 34 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 72 2e 6a 73 78 73 29 28 22 73 76 67 22 2c 7b 77 69 64 74 68 3a 74 2c 68 65 69 67 68 74 3a 6f 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 33 37 20 33 32 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2378],{52378:function(e,t,o){o.r(t);o(67294);var r=o(85893);t.default=e=>{let{width:t=40,height:o=24}=e;return(0,r.jsxs)("svg",{width:t,height:o,viewBox:"0 0 37 32",fill:"none",xmlns:"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:25 UTC	631	OUT	GET /_next/static/chunks/webpack-3dbe3e04f86f6c11.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5776 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: fRvB6yUb1b8G4cbekGev27LHxeMf0tAP Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:26 GMT ETag: "6675b58551f780ea2d2b55bb460c9582" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ac0e9b19969df989a920e6d1b834d008.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 4VMBT2qdQUtdbYYtxTP4mAVUhb6KiOKKSU8nD5cDZLY90ciQgkqVdQ== Vary: Origin
2024-09-11 17:25:25 UTC	5776	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 63 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 63 29 72 65 74 75 72 6e 20 63 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 74 5b 72 5d 3d 7b 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6f 3d 21 30 3b 74 72 79 7b 65 5b 72 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 6f 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 72 65 74 75 72 6e 20 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(){"use strict";var e={},t={};function n(r){var c=t[r];if(void 0!==c)return c.exports;var f=t[r]={id:r,loaded:!1,exports:{}},o=!0;try{e[r].call(f.exports,f,f.exports,n),o=!1}finally{o&&delete t[r]}return f.loaded=!0,f.exports}n.m=e,function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49765	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:25 UTC	431	OUT	GET /american-express.bug.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	625	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1670 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Mon, 09 Sep 2024 13:10:11 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: HJmxCKSt0YPZ4dbyIlTc21fc4fyaCKYL Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 14:20:07 GMT ETag: "cca0007b9cc6cac90e54c8728d5cf76d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cc0ab20766d57035422a2c4c69fe0620.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 97-DcPDWIVDvZwzKv-U7v0TQJtjQ4SuVr3onS9p3yq8Ip1lopmOzfw== Age: 11119 Vary: Origin
2024-09-11 17:25:25 UTC	1670	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 33 2e 34 39 31 33 20 31 2e 34 30 32 35 33 56 32 2e 36 39 30 34 35 56 31 38 2e 37 30 35 34 56 31 39 2e 36 30 31 33 43 33 33 2e 34 39 31 33 20 32 30 2e 33 38 35 33 20 33 32 2e 38 37 35 33 20 32 31 2e 30 30 31 32 20 33 32 2e 30 39 31 33 20 32 31 2e 30 30 31 32 48 32 2e 30 37 37 33 34 43 31 2e 32 39 33 33 39 20 32 31 2e 30 30 31 32 20 30 2e 36 37 37 34 32 39 20 32 30 2e 33 38 35 33 20 30 2e 36 37 37 34 32 39 20 31 39 2e 36 30 31 33 56 31 2e 34 Data Ascii: <svg width="34" height="21" viewBox="0 0 34 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M33.4913 1.40253V2.69045V18.7054V19.6013C33.4913 20.3853 32.8753 21.0012 32.0913 21.0012H2.07734C1.29339 21.0012 0.677429 20.3853 0.677429 19.6013V1.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49763	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:25 UTC	417	OUT	GET /truste.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	566	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 20028 Connection: close Date: Mon, 12 Aug 2024 17:08:17 GMT Last-Modified: Mon, 13 May 2019 07:16:15 GMT ETag: "6dcc0db5446ac677d011c9e531400a08" Cache-Control: public, max-age=31536000 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f99b5b46e77cfe9c3413f99dc8a4088c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 0rkyrPWBPH5avnpnXmSCUdTVCdi8VvJdFCNxcMBDbDcsZ2KLlwDlIw== Age: 2593029 Vary: Origin
2024-09-11 17:25:25 UTC	15818	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 38 70 78 22 20 68 65 69 67 68 74 3d 22 32 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 38 20 32 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 33 2e 32 20 28 37 32 36 34 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="88px" height="28px" viewBox="0 0 88 28" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 53.2 (72643) - https://sketchapp.com -->
2024-09-11 17:25:25 UTC	4210	IN	Data Raw: 2e 35 30 36 20 4c 36 38 2e 31 36 31 2c 31 37 2e 35 30 36 20 4c 36 38 2e 31 36 31 2c 32 30 2e 36 37 34 20 5a 20 4d 36 38 2e 31 31 35 2c 31 37 2e 30 32 20 4c 36 39 2e 31 31 35 2c 31 37 2e 30 32 20 4c 36 39 2e 31 31 35 2c 31 36 2e 33 33 20 4c 36 38 2e 31 31 35 2c 31 36 2e 33 33 20 4c 36 38 2e 31 31 35 2c 31 37 2e 30 32 20 5a 22 20 69 64 3d 22 46 69 6c 6c 2d 33 39 22 20 66 69 6c 6c 3d 22 23 30 30 30 30 30 30 22 20 6d 61 73 6b 3d 22 75 72 6c 28 23 6d 61 73 6b 2d 34 29 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 46 69 6c 6c 2d 34 30 22 20 66 69 6c 6c 3d 22 23 30 30 30 30 30 30 22 20 6d 61 73 6b 3d 22 75 72 6c 28 23 6d 61 73 6b 2d 34 29 22 20 70 6f 69 6e 74 73 3d 22 36 39 2e 35 36 34 31 20 Data Ascii: .506 L68.161,17.506 L68.161,20.674 Z M68.115,17.02 L69.115,17.02 L69.115,16.33 L68.115,16.33 L68.115,17.02 Z" id="Fill-39" fill="#000000" mask="url(#mask-4)"></path> <polygon id="Fill-40" fill="#000000" mask="url(#mask-4)" points="69.5641

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49762	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:25 UTC	425	OUT	GET /mastercard.bug.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	587	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1975 Connection: close Date: Wed, 11 Sep 2024 03:10:14 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 29 Jul 2021 14:30:53 GMT ETag: "c398ba7b3f1d301e06c7b3b32c2826d1" x-amz-version-id: wuzPI2NSZ7bMYiAyvKuLEta9wNaOXBMS Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e56e6732f380db727425bac2d6158760.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: yrNVYgDLUwmTQHqtW5p6PbtV4V2yng5gXoNoEeaTkjvZlifF47qy3A== Age: 51312 Vary: Origin
2024-09-11 17:25:25 UTC	1975	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 20 32 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 31 2e 37 35 33 32 20 32 31 2e 32 31 39 37 43 33 32 2e 35 33 32 36 20 32 31 2e 32 31 39 37 20 33 33 2e 31 36 20 32 30 2e 35 39 38 39 20 33 33 2e 31 36 20 31 39 2e 38 32 31 32 56 32 2e 31 38 32 30 33 43 33 33 2e 31 36 20 31 2e 34 30 34 33 32 20 33 32 2e 35 33 32 36 20 30 2e 37 38 33 34 35 33 20 33 31 2e 37 35 33 32 20 30 2e 37 38 33 34 35 33 48 32 2e 32 30 36 39 43 31 2e 34 32 37 34 39 20 30 2e 37 38 33 34 35 33 20 30 2e 38 30 30 30 35 35 20 Data Ascii: <svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M31.7532 21.2197C32.5326 21.2197 33.16 20.5989 33.16 19.8212V2.18203C33.16 1.40432 32.5326 0.783453 31.7532 0.783453H2.2069C1.42749 0.783453 0.800055

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:25 UTC	419	OUT	GET /visa.bug.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	583	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1561 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Thu, 29 Jul 2021 14:30:52 GMT x-amz-version-id: GIBp9xwE0boAlHPcZDGBdyrhsCdIZxQW Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:24 GMT ETag: "7351accf267df64da10b802e00a8467e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ac0e9b19969df989a920e6d1b834d008.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: Q0ISsC8t0u5219aK1IO-jaC93k3DDGyTxyY4CpAj_0PO4WGzt2k-kw== Age: 2 Vary: Origin
2024-09-11 17:25:25 UTC	1561	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 20 32 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 31 2e 37 32 37 35 20 32 31 2e 32 31 35 38 43 33 32 2e 35 30 36 37 20 32 31 2e 32 31 35 38 20 33 33 2e 31 33 34 20 32 30 2e 35 39 35 31 20 33 33 2e 31 33 34 20 31 39 2e 38 31 37 35 56 32 2e 31 38 31 38 43 33 33 2e 31 33 34 20 31 2e 34 30 34 32 34 20 33 32 2e 35 30 36 37 20 30 2e 37 38 33 34 39 36 20 33 31 2e 37 32 37 35 20 30 2e 37 38 33 34 39 36 48 32 2e 31 38 36 39 43 31 2e 34 30 37 36 33 20 30 2e 37 38 33 34 39 36 20 30 2e 37 38 30 33 32 Data Ascii: <svg width="34" height="22" viewBox="0 0 34 22" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M31.7275 21.2158C32.5067 21.2158 33.134 20.5951 33.134 19.8175V2.1818C33.134 1.40424 32.5067 0.783496 31.7275 0.783496H2.1869C1.40763 0.783496 0.78032

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49766	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:25 UTC	419	OUT	GET /flags/us.svg HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:25 UTC	583	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 4424 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 06 Dec 2022 09:36:13 GMT x-amz-version-id: 3J9QqnT3nEyHG1ivjeSeboZhefqbdr_a Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:24 GMT ETag: "bfaaeb1ca82bf9541f20aa098f3e7cf2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90cf045072373c2c671297de3161846e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: RG0A-rm8C8OnIUEXts2iu0PErcGIvTdTvDES9_4naMnCheewozQATw== Age: 2 Vary: Origin
2024-09-11 17:25:25 UTC	4424	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 69 64 3d 22 66 6c 61 67 2d 69 63 6f 6e 73 2d 75 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 30 20 34 38 30 22 3e 0a 20 20 3c 67 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 3c 67 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 70 74 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 62 64 33 64 34 34 22 20 64 3d 22 4d 30 20 30 68 39 31 32 76 33 37 48 30 7a 6d 30 20 37 33 2e 39 68 39 31 32 76 33 37 48 30 7a 6d 30 20 37 33 2e 38 68 39 31 32 76 33 37 48 30 7a 6d 30 20 37 33 2e 38 68 39 31 32 76 33 37 48 30 7a 6d 30 20 37 34 68 39 31 32 76 33 36 2e 38 48 30 7a 6d 30 20 37 33 2e 37 68 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" id="flag-icons-us" viewBox="0 0 640 480"> <g fill-rule="evenodd"> <g stroke-width="1pt"> <path fill="#bd3d44" d="M0 0h912v37H0zm0 73.9h912v37H0zm0 73.8h912v37H0zm0 73.8h912v37H0zm0 74h912v36.8H0zm0 73.7h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49767	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:25 UTC	633	OUT	GET /_next/static/chunks/framework-560765ab0625ba27.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:26 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 130057 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Ry3OV1uap8X3eDx5HeALfpmAFEPny_7h Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Sep 2024 21:19:49 GMT ETag: "575f0dd2d17bbece23c4e3266a51a5c2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f8fe53d5464b299529d281799da8de30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 4-t9bAXTwKTktWfQiDNdw-B6Nu2mMamjSh1L02V0bIRwT-ekK4KVdg== Age: 72338 Vary: Origin
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 36 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 37 32 39 34 29 2c 6c 3d 6e 28 39 36 30 38 36 29 2c 61 3d 6e 28 36 33 38 34 30 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{64448:function(e,t,n){var r=n(67294),l=n(96086),a=n(63840);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 61 2c 6f 2c 75 2c 69 29 7b 57 65 3d 21 31 2c 48 65 3d 6e 75 6c 6c 2c 24 65 2e 61 70 70 6c 79 28 4b 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 76 61 72 20 74 3d 65 2c 6e 3d 65 3b 69 66 28 65 2e 61 6c 74 65 72 6e 61 74 65 29 66 6f 72 28 3b 74 2e 72 65 74 75 72 6e 3b 29 74 3d 74 2e 72 65 74 75 72 6e 3b 65 6c 73 65 7b 65 3d 74 3b 64 6f 7b 30 21 3d 3d 28 31 30 32 36 26 28 74 3d 65 29 2e 66 6c 61 67 73 29 26 26 28 6e 3d 74 2e 72 65 74 75 72 6e 29 2c 65 3d 74 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 29 7d 72 65 74 75 72 6e 20 33 3d 3d 3d 74 2e 74 61 67 3f 6e 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 29 7b 69 66 28 31 33 3d 3d 3d 65 2e 74 61 67 29 7b 76 61 72 20 74 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 Data Ascii: a,o,u,i){We=!1,He=null,$e.apply(Ke,arguments)}function Xe(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!==(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Ge(e){if(13===e.tag){var t=e.memoizedSt
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 73 74 65 20 70 61 75 73 65 20 70 61 75 73 65 20 70 6c 61 79 20 70 6c 61 79 20 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 43 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 64 6f 77 6e 20 70 6f 69 6e 74 65 72 44 6f 77 6e 20 70 6f 69 6e 74 65 72 75 70 20 70 6f 69 6e 74 65 72 55 70 20 72 61 74 65 63 68 61 6e 67 65 20 72 61 74 65 43 68 61 6e 67 65 20 72 65 73 65 74 20 72 65 73 65 74 20 73 65 65 6b 65 64 20 73 65 65 6b 65 64 20 73 75 62 6d 69 74 20 73 75 62 6d 69 74 20 74 6f 75 63 68 63 61 6e 63 65 6c 20 74 6f 75 63 68 43 61 6e 63 65 6c 20 74 6f 75 63 68 65 6e 64 20 74 6f 75 63 68 45 6e 64 20 74 6f 75 63 68 73 74 61 72 74 20 74 6f 75 63 68 53 74 61 72 74 20 76 6f 6c 75 6d 65 63 68 61 6e 67 65 20 76 6f 6c 75 6d 65 43 68 61 6e 67 65 22 2e 73 70 6c 69 Data Ascii: ste pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".spli
2024-09-11 17:25:26 UTC	15195	IN	Data Raw: 7b 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 72 3d 64 69 28 29 2c 6c 3d 70 69 28 65 29 2c 61 3d 63 61 28 72 2c 6c 29 3b 61 2e 74 61 67 3d 31 2c 61 2e 70 61 79 6c 6f 61 64 3d 74 2c 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 26 26 28 61 2e 63 61 6c 6c 62 61 63 6b 3d 6e 29 2c 66 61 28 65 2c 61 29 2c 68 69 28 65 2c 6c 2c 72 29 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 6e 3d 64 69 28 29 2c 72 3d 70 69 28 65 29 2c 6c 3d 63 61 28 6e 2c 72 29 3b 6c 2e 74 61 67 3d 32 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 28 6c 2e 63 61 6c 6c 62 61 63 6b 3d 74 29 2c 66 61 Data Ascii: {e=e._reactInternals;var r=di(),l=pi(e),a=ca(r,l);a.tag=1,a.payload=t,void 0!==n&&null!==n&&(a.callback=n),fa(e,a),hi(e,l,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=di(),r=pi(e),l=ca(n,r);l.tag=2,void 0!==t&&null!==t&&(l.callback=t),fa
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 7a 6f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 64 69 28 29 2c 6c 3d 70 69 28 65 29 2c 61 3d 7b 6c 61 6e 65 3a 6c 2c 61 63 74 69 6f 6e 3a 6e 2c 65 61 67 65 72 52 65 64 75 63 65 72 3a 6e 75 6c 6c 2c 65 61 67 65 72 53 74 61 74 65 3a 6e 75 6c 6c 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 2c 6f 3d 74 2e 70 65 6e 64 69 6e 67 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6f 3f 61 2e 6e 65 78 74 3d 61 3a 28 61 2e 6e 65 78 74 3d 6f 2e 6e 65 78 74 2c 6f 2e 6e 65 78 74 3d 61 29 2c 74 2e 70 65 6e 64 69 6e 67 3d 61 2c 6f 3d 65 2e 61 6c 74 65 72 6e 61 74 65 2c 65 3d 3d 3d 4a 61 7c 7c 6e 75 6c 6c 21 3d 3d 6f 26 26 6f 3d 3d 3d 4a 61 29 72 6f 3d 6e 6f 3d 21 30 3b 65 6c 73 65 7b 69 66 28 30 3d 3d 3d 65 2e 6c 61 6e 65 73 26 26 28 6e 75 6c 6c 3d 3d 3d 6f 7c 7c 30 3d 3d 3d 6f 2e 6c Data Ascii: tion zo(e,t,n){var r=di(),l=pi(e),a={lane:l,action:n,eagerReducer:null,eagerState:null,next:null},o=t.pending;if(null===o?a.next=a:(a.next=o.next,o.next=a),t.pending=a,o=e.alternate,e===Ja\|\|null!==o&&o===Ja)ro=no=!0;else{if(0===e.lanes&&(null===o\|\|0===o.l
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 75 2e 6e 65 78 74 45 66 66 65 63 74 3d 6e 75 6c 6c 2c 75 2e 66 69 72 73 74 45 66 66 65 63 74 3d 6e 75 6c 6c 2c 75 2e 6c 61 73 74 45 66 66 65 63 74 3d 6e 75 6c 6c 2c 6e 75 6c 6c 3d 3d 3d 28 73 3d 75 2e 61 6c 74 65 72 6e 61 74 65 29 3f 28 75 2e 63 68 69 6c 64 4c 61 6e 65 73 3d 30 2c 75 2e 6c 61 6e 65 73 3d 65 2c 75 2e 63 68 69 6c 64 3d 6e 75 6c 6c 2c 75 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 3d 6e 75 6c 6c 2c 75 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 75 6c 6c 2c 75 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 75 6c 6c 2c 75 2e 64 65 70 65 6e 64 65 6e 63 69 65 73 3d 6e 75 6c 6c 2c 75 2e 73 74 61 74 65 4e 6f 64 65 3d 6e 75 6c 6c 29 3a 28 75 2e 63 68 69 6c 64 4c 61 6e 65 73 3d 73 2e 63 68 69 6c 64 4c 61 6e 65 73 2c 75 2e 6c 61 6e 65 73 3d 73 2e 6c 61 Data Ascii: u.nextEffect=null,u.firstEffect=null,u.lastEffect=null,null===(s=u.alternate)?(u.childLanes=0,u.lanes=e,u.child=null,u.memoizedProps=null,u.memoizedState=null,u.updateQueue=null,u.dependencies=null,u.stateNode=null):(u.childLanes=s.childLanes,u.lanes=s.la
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 75 65 75 65 3d 63 2e 75 70 64 61 74 65 51 75 65 75 65 2c 75 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 63 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 75 2e 6c 61 6e 65 73 3d 63 2e 6c 61 6e 65 73 29 3a 28 75 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 75 6c 6c 2c 75 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 75 6c 6c 29 7d 76 61 72 20 66 3d 30 21 3d 3d 28 31 26 44 61 2e 63 75 72 72 65 6e 74 29 2c 64 3d 6f 3b 64 6f 7b 76 61 72 20 70 3b 69 66 28 70 3d 31 33 3d 3d 3d 64 2e 74 61 67 29 7b 76 61 72 20 68 3d 64 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 6e 75 6c 6c 21 3d 3d 68 29 70 3d 6e 75 6c 6c 21 3d 3d 68 2e 64 65 68 79 64 72 61 74 65 64 3b 65 6c 73 65 7b 76 61 72 20 6d 3d 64 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 3b 70 3d 76 6f 69 64 20 Data Ascii: ueue=c.updateQueue,u.memoizedState=c.memoizedState,u.lanes=c.lanes):(u.updateQueue=null,u.memoizedState=null)}var f=0!==(1&Da.current),d=o;do{var p;if(p=13===d.tag){var h=d.memoizedState;if(null!==h)p=null!==h.dehydrated;else{var m=d.memoizedProps;p=void
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 75 6c 6c 21 3d 3d 61 26 26 57 72 28 72 2c 61 29 26 26 28 74 2e 66 6c 61 67 73 7c 3d 31 36 29 2c 24 6f 28 65 2c 74 29 2c 55 6f 28 65 2c 74 2c 75 2c 6e 29 2c 74 2e 63 68 69 6c 64 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 65 26 26 57 61 28 74 29 2c 6e 75 6c 6c 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 20 5a 6f 28 65 2c 74 2c 6e 29 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 52 61 28 74 2c 74 2e 73 74 61 74 65 4e 6f 64 65 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 29 2c 72 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 2c 6e 75 6c 6c 3d 3d 3d 65 3f 74 2e 63 68 69 6c 64 3d 43 61 28 74 2c 6e 75 6c 6c 2c 72 2c 6e 29 3a 55 6f 28 65 2c 74 2c 72 2c 6e 29 2c 74 2e 63 68 69 6c 64 3b 63 61 73 65 20 31 31 3a 72 65 74 75 72 6e 20 72 3d 74 2e 74 Data Ascii: ull!==a&&Wr(r,a)&&(t.flags\|=16),$o(e,t),Uo(e,t,u,n),t.child;case 6:return null===e&&Wa(t),null;case 13:return Zo(e,t,n);case 4:return Ra(t,t.stateNode.containerInfo),r=t.pendingProps,null===e?t.child=Ca(t,null,r,n):Uo(e,t,r,n),t.child;case 11:return r=t.t
2024-09-11 17:25:26 UTC	174	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 4c 3b 4c 3d 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 69 6e 61 6c 6c 79 7b 4c 3d 6e 7d 7d 7d 7d 2c 36 33 38 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 30 30 35 33 29 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 66 72 61 6d 65 77 6f 72 6b 2d 35 36 30 37 36 35 61 62 30 36 32 35 62 61 32 37 2e 6a 73 2e 6d 61 70 Data Ascii: function(){var n=L;L=t;try{return e.apply(this,arguments)}finally{L=n}}}},63840:function(e,t,n){e.exports=n(60053)}}]);//# sourceMappingURL=framework-560765ab0625ba27.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49770	13.35.58.148	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:25 UTC	404	OUT	GET /analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:26 UTC	767	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 105589 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 30 Jul 2024 21:28:33 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 4mvb9o8UUXh8TqnRkosr5wilSZwqCqiv Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:25 GMT Cache-Control: public, max-age=120 ETag: "8f973ac4bdf60f81fbdae9b37e78047b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 13c8b9a0a39ad1238a922185ad5547fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: N5KFLDhuL55pl7szceeekdajdBCfqFJqAcAlw2DXQkrodgB-cZjzBw== Age: 2
2024-09-11 17:25:26 UTC	15238	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 2c 72 2c 69 3d 7b 38 38 37 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 72 28 6e 28 33 32 35 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e Data Ascii: !function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 72 3d 6e 75 6c 6c 3d 3d 74 68 69 73 5b 6e 5d 3f 74 68 69 73 2e 70 72 6f 78 79 28 22 70 72 6f 70 65 72 74 69 65 73 2e 22 2b 6e 29 3a 74 68 69 73 5b 6e 5d 28 29 3b 6e 75 6c 6c 21 3d 72 26 26 28 65 5b 74 5b 6e 5d 5d 3d 72 2c 64 65 6c 65 74 65 20 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 6c 2e 75 73 65 72 6e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 78 79 28 22 74 72 61 69 74 73 2e 75 73 65 72 6e 61 6d 65 22 29 7c 7c 74 68 69 73 2e 70 72 6f 78 79 28 22 70 72 6f 70 65 72 74 69 65 73 2e 75 73 65 72 6e 61 6d 65 22 29 7c 7c 74 68 69 73 2e 75 73 65 72 49 64 28 29 7c 7c 74 68 69 73 2e 73 65 73 73 69 6f 6e 49 64 28 29 7d 2c 6c 2e 65 6d 61 69 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e Data Ascii: r=null==this[n]?this.proxy("properties."+n):this[n]();null!=r&&(e[t[n]]=r,delete e[n])}return e},l.username=function(){return this.proxy("traits.username")\|\|this.proxy("properties.username")\|\|this.userId()\|\|this.sessionId()},l.email=function(){var t=this.
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6c 61 73 73 20 65 78 74 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 65 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 72 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 Data Ascii: peof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function n(){this.constructor=t}r(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var o=function(){return o=Object.assign\|\|fu
2024-09-11 17:25:26 UTC	5688	IN	Data Raw: 72 61 69 74 73 22 21 3d 3d 66 26 26 22 6f 70 74 69 6f 6e 73 22 21 3d 3d 66 7c 7c 6e 75 6c 6c 21 3d 70 26 26 21 28 30 2c 6f 2e 50 4f 29 28 70 29 7c 7c 28 75 5b 66 5d 3d 70 29 2c 28 30 2c 6f 2e 6d 66 29 28 70 29 29 7b 75 2e 63 61 6c 6c 62 61 63 6b 3d 70 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 5b 6e 75 6c 6c 21 3d 3d 28 65 3d 75 2e 69 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 74 2e 69 64 28 29 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 75 2e 74 72 61 69 74 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 7b 7d 2c 6e 75 6c 6c 21 3d 3d 28 72 3d 75 2e 6f 70 74 69 6f 6e 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 7b 7d 2c 75 2e 63 61 6c 6c 62 61 63 6b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 6e 2c 72 29 7b 28 30 2c 6f 2e 68 6a 29 28 74 Data Ascii: raits"!==f&&"options"!==f\|\|null!=p&&!(0,o.PO)(p)\|\|(u[f]=p),(0,o.mf)(p)){u.callback=p;break}}return[null!==(e=u.id)&&void 0!==e?e:t.id(),null!==(n=u.traits)&&void 0!==n?n:{},null!==(r=u.options)&&void 0!==r?r:{},u.callback]}};function p(t,e,n,r){(0,o.hj)(t
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 73 29 2c 61 3d 65 2e 6f 70 74 69 6f 6e 73 3f 74 68 69 73 2e 63 6f 6e 74 65 78 74 28 65 2e 6f 70 74 69 6f 6e 73 29 3a 5b 5d 2c 63 3d 61 5b 30 5d 2c 6c 3d 61 5b 31 5d 2c 70 3d 65 2e 6f 70 74 69 6f 6e 73 2c 66 3d 28 30 2c 74 2e 5f 54 29 28 65 2c 5b 22 6f 70 74 69 6f 6e 73 22 5d 29 2c 64 3d 28 30 2c 74 2e 70 69 29 28 28 30 2c 74 2e 70 69 29 28 28 30 2c 74 2e 70 69 29 28 28 30 2c 74 2e 70 69 29 28 7b 74 69 6d 65 73 74 61 6d 70 3a 6e 65 77 20 44 61 74 65 7d 2c 66 29 2c 7b 63 6f 6e 74 65 78 74 3a 63 2c 69 6e 74 65 67 72 61 74 69 6f 6e 73 3a 75 7d 29 2c 6c 29 2c 7b 6d 65 73 73 61 67 65 49 64 3a 70 2e 6d 65 73 73 61 67 65 49 64 7c 7c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 63 72 65 61 74 65 4d 65 73 73 61 67 65 49 64 28 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: s),a=e.options?this.context(e.options):[],c=a[0],l=a[1],p=e.options,f=(0,t._T)(e,["options"]),d=(0,t.pi)((0,t.pi)((0,t.pi)((0,t.pi)({timestamp:new Date},f),{context:c,integrations:u}),l),{messageId:p.messageId\|\|this.settings.createMessageId()});return thi
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 6c 61 62 65 6c 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 72 2b 2b 2c 5b 33 2c 31 5d 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 2c 61 74 3d 73 74 2e 62 69 6e 64 28 76 6f 69 64 20 30 2c 22 6f 6e 22 29 2c 63 74 3d 73 74 2e 62 69 6e 64 28 76 6f 69 64 20 30 2c 22 73 65 74 41 6e 6f 6e 79 6d 6f 75 73 49 64 22 29 2c 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 70 74 28 74 29 29 7b 76 61 72 20 65 3d 74 2e 70 6f 70 28 29 3b 72 65 74 75 72 6e 20 77 28 65 29 7d 7d 2c 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 28 30 2c 6f 2e 50 4f 29 28 74 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 62 70 63 22 21 3d 3d 74 2e 5f 5f 74 29 72 65 74 75 72 6e 21 31 3b Data Ascii: label=3;case 3:return r++,[3,1];case 4:return[2]}}))}))},at=st.bind(void 0,"on"),ct=st.bind(void 0,"setAnonymousId"),lt=function(t){if(pt(t)){var e=t.pop();return w(e)}},pt=function(t){return function(t){if(!(0,o.PO)(t))return!1;if("bpc"!==t.__t)return!1;
2024-09-11 17:25:26 UTC	16384	IN	Data Raw: 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3d 6e 65 77 20 52 28 72 3f 5b 5d 3a 5b 6e 65 77 20 48 28 4f 74 28 29 29 5d 29 2c 73 3d 6f 2e 67 65 74 28 22 73 3a 63 6f 6e 74 65 78 74 2e 72 65 66 65 72 72 65 72 22 29 2c 75 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 62 74 69 64 3a 22 64 61 74 61 78 75 22 2c 75 72 69 64 3a 22 6d 69 6c 6c 65 6e 6e 69 61 6c 2d 6d 65 64 69 61 22 7d 3b 74 2e 73 74 61 72 74 73 57 69 74 68 28 22 3f 22 29 26 26 28 74 3d 74 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 26 22 29 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 Data Ascii: ),function(e,n,r){var i,o=new R(r?[]:[new H(Ot())]),s=o.get("s:context.referrer"),u=null!==(i=function(t){var e={btid:"dataxu",urid:"millennial-media"};t.startsWith("?")&&(t=t.substring(1));for(var n=0,r=(t=t.replace(/\?/g,"&")).split("&");n<r.length;n++)
2024-09-11 17:25:26 UTC	2743	IN	Data Raw: 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 22 22 3b 69 66 28 28 75 3d 6e 2e 65 78 65 63 28 73 29 29 26 26 75 5b 31 5d 29 7b 72 3d 75 5b 31 5d 3b 62 72 65 61 6b 7d 7d 69 66 28 21 72 26 26 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 7b 76 61 72 20 75 3b 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 2c 28 75 3d 6e 2e 65 78 65 63 28 73 29 29 26 26 75 5b 31 5d 26 26 28 72 3d 75 5b 31 5d 29 7d 72 65 74 75 72 6e 20 72 7d 28 29 2c 69 3d 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 28 30 2c 6f 74 2e 77 49 29 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 5f 6c 6f 61 64 4f 70 74 69 6f 6e Data Ascii: [i].getAttribute("src"))&&void 0!==t?t:"";if((u=n.exec(s))&&u[1]){r=u[1];break}}if(!r&&document.currentScript){var u;s=document.currentScript.src,(u=n.exec(s))&&u[1]&&(r=u[1])}return r}(),i=null!==(n=null===(e=(0,ot.wI)())\|\|void 0===e?void 0:e._loadOption

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49768	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:25 UTC	451	OUT	GET /_next/static/chunks/9835.59c20536643b9726.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:26 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 973 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: CWjuvavjEYcgZ64o4hkWaOsYHiyCakGL Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:25 GMT ETag: "6b64452b69b814fa56db74365d21d6fe" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 882f747f39885162595630c95dd0012c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: sORnWv2ayVEMqP5NNA_u4YH4vOwAOSIG-PrGvT2W3oMWh3PNxW2HnA== Age: 2 Vary: Origin
2024-09-11 17:25:26 UTC	973	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 38 33 35 5d 2c 7b 33 39 38 33 35 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 63 2c 65 29 7b 65 2e 72 28 63 29 3b 65 28 36 37 32 39 34 29 3b 76 61 72 20 61 3d 65 28 35 31 32 34 35 29 2c 73 3d 65 28 38 35 38 39 33 29 3b 63 2e 64 65 66 61 75 6c 74 3d 6c 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 63 3d 32 34 2c 68 65 69 67 68 74 3a 65 3d 32 34 2c 63 6f 6c 6f 72 3a 68 3d 61 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 2c 63 6c 61 73 73 4e 61 6d 65 3a 74 3d 22 22 7d 3d 6c 3b 72 65 74 75 72 6e 28 30 2c 73 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9835],{39835:function(l,c,e){e.r(c);e(67294);var a=e(51245),s=e(85893);c.default=l=>{let{width:c=24,height:e=24,color:h=a.colors.white,className:t=""}=l;return(0,s.jsx)("svg",{xmlns:"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49769	52.85.48.9	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:26 UTC	602	OUT	GET /v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:27 UTC	766	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 2238 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Thu, 25 Jul 2024 19:17:34 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 4hoYBvYQgJthTLgLG5DZEcC2mBG6hFyA Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:27 GMT Cache-Control: public, max-age=10800 ETag: "26ee0147b7d243991d94b48a2b8b5675" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e524b8092e2dda964664df0dfa35341a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL50-C2 X-Amz-Cf-Id: A8W47m8F9Ldigje3S1IEncSIP-BVnBHHP6bZ0sB8PyDrfrL6aosKIQ==
2024-09-11 17:25:27 UTC	2238	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 41 6d 70 6c 69 74 75 64 65 22 3a 7b 22 61 70 69 4b 65 79 22 3a 22 65 31 37 38 39 63 38 30 33 61 65 61 35 61 36 65 32 30 64 65 63 61 35 30 38 36 34 37 62 64 66 36 22 2c 22 61 70 70 65 6e 64 46 69 65 6c 64 73 54 6f 45 76 65 6e 74 50 72 6f 70 73 22 3a 7b 7d 2c 22 62 61 74 63 68 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 64 65 76 69 63 65 49 64 46 72 6f 6d 55 72 6c 50 61 72 61 6d 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 4c 6f 63 61 74 69 6f 6e 4c 69 73 74 65 6e 69 6e 67 22 3a 74 72 75 65 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 50 65 72 69 6f 64 4d 69 6c 6c 69 73 22 3a 33 30 30 30 30 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 54 68 72 65 73 68 6f 6c 64 22 3a 33 30 2c 22 66 6f 72 63 65 48 74 74 70 73 22 3a Data Ascii: {"integrations":{"Amplitude":{"apiKey":"e1789c803aea5a6e20deca508647bdf6","appendFieldsToEventProps":{},"batchEvents":false,"deviceIdFromUrlParam":false,"enableLocationListening":true,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"forceHttps":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49771	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:26 UTC	628	OUT	GET /_next/static/chunks/main-593e743601aca717.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:27 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 75858 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Cy.QPYhG2UY0dmWItEVQfKryibu3LQWY Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:27 GMT ETag: "650f21ac4fd9546e505724abe1db85e7" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 57d93b321db68494cc6755a0d3fb29cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: xfLTXabhX27l0_O9-pqhWdgZFy_qTB4KiE5NrQz8_CEIeVkpc1TWNA== Vary: Origin
2024-09-11 17:25:27 UTC	15404	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 36 30 39 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 72 2c 6e 2c 6f 2c 61 2c 69 29 7b 74 72 79 7b 76 61 72 20 73 3d 65 5b 61 5d 28 69 29 2c 6c 3d 73 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 75 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 75 29 7d 73 2e 64 6f 6e 65 3f 74 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6e 2c 6f 29 7d 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{60932:function(e,t){"use strict";function r(e,t,r,n,o,a,i){try{var s=e[a](i),l=s.value}catch(u){return void r(u)}s.done?t(l):Promise.resolve(l).then(n,o)}t.Z=function(e){return function(){var
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 65 52 65 6c 61 74 69 76 65 55 72 6c 28 72 29 2c 7b 70 61 74 68 6e 61 6d 65 3a 70 7d 3d 75 2e 70 61 72 73 65 52 65 6c 61 74 69 76 65 55 72 6c 28 74 29 2c 6d 3d 63 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 53 6c 61 73 68 28 64 29 3b 69 66 28 22 2f 22 21 3d 3d 6d 5b 30 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 52 6f 75 74 65 20 6e 61 6d 65 20 73 68 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 61 20 22 2f 22 2c 20 67 6f 74 20 22 24 7b 6d 7d 22 60 29 3b 72 65 74 75 72 6e 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 69 2e 64 65 66 61 75 6c 74 28 63 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 53 6c 61 73 68 28 73 2e 61 64 64 4c 6f 63 61 6c 65 28 65 2c 6e 29 29 2c 22 2e 6a 73 6f 6e 22 29 3b 72 65 74 75 72 6e 20 6f 2e 61 64 64 42 61 73 65 50 61 74 Data Ascii: eRelativeUrl(r),{pathname:p}=u.parseRelativeUrl(t),m=c.removeTrailingSlash(d);if("/"!==m[0])throw new Error(`Route name should start with a "/", got "${m}"`);return(e=>{const t=i.default(c.removeTrailingSlash(s.addLocale(e,n)),".json");return o.addBasePat
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 7b 6f 6e 28 74 2c 72 29 7b 28 65 5b 74 5d 7c 7c 28 65 5b 74 5d 3d 5b 5d 29 29 2e 70 75 73 68 28 72 29 7d 2c 6f 66 66 28 74 2c 72 29 7b 65 5b 74 5d 26 26 65 5b 74 5d 2e 73 70 6c 69 63 65 28 65 5b 74 5d 2e 69 6e 64 65 78 4f 66 28 72 29 3e 3e 3e 30 2c 31 29 7d 2c 65 6d 69 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 72 3e 31 3f 72 2d 31 3a 30 29 2c Data Ascii: rict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){const e=Object.create(null);return{on(t,r){(e[t]\|\|(e[t]=[])).push(r)},off(t,r){e[t]&&e[t].splice(e[t].indexOf(r)>>>0,1)},emit(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 63 6f 6d 70 6f 6e 65 6e 74 73 5b 22 2f 5f 61 70 70 22 5d 2e 43 6f 6d 70 6f 6e 65 6e 74 2c 72 29 7d 62 65 66 6f 72 65 50 6f 70 53 74 61 74 65 28 65 29 7b 74 68 69 73 2e 5f 62 70 73 3d 65 7d 6f 6e 6c 79 41 48 61 73 68 43 68 61 6e 67 65 28 65 29 7b 69 66 28 21 74 68 69 73 2e 61 73 50 61 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 5b 74 2c 72 5d 3d 74 68 69 73 2e 61 73 50 61 74 68 2e 73 70 6c 69 74 28 22 23 22 29 2c 5b 6e 2c 6f 5d 3d 65 2e 73 70 6c 69 74 28 22 23 22 29 3b 72 65 74 75 72 6e 21 28 21 6f 7c 7c 74 21 3d 3d 6e 7c 7c 72 21 3d 3d 6f 29 7c 7c 74 3d 3d 3d 6e 26 26 72 21 3d 3d 6f 7d 73 63 72 6f 6c 6c 54 6f 48 61 73 68 28 65 29 7b 63 6f 6e 73 74 5b 2c 74 3d 22 22 5d 3d 65 2e 73 70 6c 69 74 28 22 23 22 29 3b 69 66 28 22 22 3d 3d 3d 74 7c 7c 22 74 Data Ascii: components["/_app"].Component,r)}beforePopState(e){this._bps=e}onlyAHashChange(e){if(!this.asPath)return!1;const[t,r]=this.asPath.split("#"),[n,o]=e.split("#");return!(!o\|\|t!==n\|\|r!==o)\|\|t===n&&r!==o}scrollToHash(e){const[,t=""]=e.split("#");if(""===t\|\|"t
2024-09-11 17:25:27 UTC	11302	IN	Data Raw: 7c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 73 65 74 28 6f 2c 6e 65 77 20 72 29 2c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 67 65 74 28 6f 29 2e 5f 69 6e 73 65 72 74 28 65 2e 73 6c 69 63 65 28 31 29 2c 74 2c 6e 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 21 30 2c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 73 6c 75 67 4e 61 6d 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 72 65 73 74 53 6c 75 67 4e 61 6d 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c 52 65 73 74 53 6c 75 67 4e 61 6d 65 3d 6e 75 6c 6c 7d 7d 7d 2c 33 36 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 72 3b 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: \|this.children.set(o,new r),this.children.get(o)._insert(e.slice(1),t,n)}constructor(){this.placeholder=!0,this.children=new Map,this.slugName=null,this.restSlugName=null,this.optionalRestSlugName=null}}},36616:function(e,t){"use strict";let r;Object.defi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49772	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:26 UTC	634	OUT	GET /_next/static/chunks/pages/_app-7d82d00ca8a38f1d.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:27 UTC	632	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1082437 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: bXUJooFJrSupcJKipYQDHgG0u2vZjIr6 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:27 GMT ETag: "e026539df2e4f739d8f64b5315599f3c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c7015d60d4f8f2170aaaa75e69e40618.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: Ud8W8XBtWXkosFQOn7k7JIJPsmzj6hEQzLalPowlz1gVVttWQH51ZA== Vary: Origin
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 2c 32 37 34 31 5d 2c 7b 32 35 36 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6b 47 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 45 72 72 6f 72 29 2c 21 65 29 74 68 72 6f 77 20 6e 65 77 20 6e 28 74 29 7d 7d 2c 39 35 39 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888,2741],{25687:function(e,t,n){"use strict";n.d(t,{kG:function(){return r}});function r(e,t,n){if(void 0===n&&(n=Error),!e)throw new n(t)}},95957:function(e,t,n){"use strict";function r(e,t){var
2024-09-11 17:25:27 UTC	2180	IN	Data Raw: 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 6e 2c 6e 2b 74 2e 6c 65 6e 67 74 68 29 3d 3d 3d 74 7d 2c 71 3d 55 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 22 22 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 6f 3e 69 3b 29 7b 69 66 28 28 6e 3d 65 5b 69 2b 2b 5d 29 3e 31 31 31 34 31 31 31 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 6e 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 63 6f 64 65 20 70 6f 69 6e 74 22 29 3b Data Ascii: n)}:function(e,t,n){return e.slice(n,n+t.length)===t},q=U?String.fromCodePoint:function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];for(var n,r="",o=e.length,i=0;o>i;){if((n=e[i++])>1114111)throw RangeError(n+" is not a valid code point");
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 7d 29 7d 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 3a 69 2c 65 72 72 3a 6e 75 6c 6c 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 3b 74 68 69 73 2e 62 75 6d 70 28 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 70 61 72 73 65 54 61 67 4e 61 6d 65 28 29 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 53 70 61 63 65 28 29 2c 74 68 69 73 2e 62 75 6d 70 49 66 28 22 2f 3e 22 29 29 72 65 74 75 72 6e 7b 76 61 6c 3a 7b 74 79 70 65 3a 6f 2e 6c 69 74 65 72 61 6c 2c 76 61 6c 75 65 3a 22 3c 22 2e 63 6f 6e 63 61 74 28 69 2c 22 2f 3e 22 29 2c 6c 6f 63 61 74 69 6f 6e 3a 4c 28 6e 2c 74 68 69 73 2e 63 6c Data Ascii: clonePosition())})}}}return{val:i,err:null}},e.prototype.parseTag=function(e,t){var n=this.clonePosition();this.bump();var i=this.parseTagName();if(this.bumpSpace(),this.bumpIf("/>"))return{val:{type:o.literal,value:"<".concat(i,"/>"),location:L(n,this.cl
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 2c 6f 2e 5a 54 29 28 74 2c 65 29 2c 74 7d 28 6c 29 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 76 61 72 20 6f 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2e 4d 49 53 53 49 4e 47 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 2c 27 4d 69 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 22 27 2e 63 6f 6e 63 61 74 28 74 2e 69 64 2c 27 22 20 66 6f 72 20 6c 6f 63 61 6c 65 20 22 27 29 2e 63 6f 6e 63 61 74 28 6e 2c 27 22 2c 20 75 73 69 6e 67 20 27 29 2e 63 6f 6e 63 61 74 28 74 2e 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3f 22 64 65 66 61 75 6c 74 20 6d 65 73 73 61 67 65 22 3a 22 69 64 22 2c 22 20 61 73 20 66 61 6c 6c 62 61 63 6b 2e 22 29 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 6f 2e 64 65 73 63 72 69 70 74 6f 72 3d 74 2c 6f Data Ascii: ,o.ZT)(t,e),t}(l),d=function(e){function t(t,n){var o=e.call(this,r.MISSING_TRANSLATION,'Missing message: "'.concat(t.id,'" for locale "').concat(n,'", using ').concat(t.defaultMessage?"default message":"id"," as fallback."))\|\|this;return o.descriptor=t,o
2024-09-11 17:25:27 UTC	12985	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 69 2c 61 2c 73 2c 64 2c 70 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 69 2c 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 31 26 6f 5b 30 5d 29 74 68 72 6f 77 20 6f 5b 31 5d 3b 72 65 74 75 72 6e 20 6f 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 3b 72 65 74 75 72 6e 20 69 3d 7b 6e 65 78 74 3a 73 28 30 29 2c 74 68 72 6f 77 3a 73 28 31 29 2c 72 65 74 75 72 6e 3a 73 28 32 29 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 69 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d Data Ascii: function(){var n,r,o,i,a,s,d,p;return function(e,t){var n,r,o,i,a={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:s(0),throw:s(1),return:s(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 5f 65 3d 7b 51 42 4f 3a 7b 74 69 6d 65 6f 75 74 3a 32 65 33 2c 61 73 73 65 74 41 6c 69 61 73 3a 7b 22 49 6e 74 75 69 74 2e 61 63 63 6f 75 6e 74 69 6e 67 2e 63 6f 72 65 2e 71 62 6f 77 65 62 61 70 70 22 3a 7b 74 69 6d 65 6f 75 74 3a 31 35 30 30 2c 76 65 6e 64 6f 72 73 3a 5b 22 54 4d 58 22 5d 7d 7d 7d 2c 47 65 6e 4f 53 3a 7b 74 69 6d 65 6f 75 74 3a 33 65 33 2c 70 72 6f 63 65 73 73 53 65 73 73 69 6f 6e 3a 21 30 2c 63 6f 6e 74 69 6e 75 6f 75 73 50 72 6f 66 69 6c 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 6d 61 78 44 75 72 61 74 69 6f 6e 3a 33 36 65 35 7d 7d 2c 43 72 65 64 69 74 4b 61 72 6d 61 3a 7b 74 69 6d 65 6f 75 74 3a 33 65 33 7d 2c 54 75 72 62 6f 54 61 78 3a 7b 74 69 6d 65 6f 75 74 3a 31 35 30 30 7d 2c 50 61 79 6d 65 6e 74 73 3a 7b 61 73 73 65 74 41 Data Ascii: _e={QBO:{timeout:2e3,assetAlias:{"Intuit.accounting.core.qbowebapp":{timeout:1500,vendors:["TMX"]}}},GenOS:{timeout:3e3,processSession:!0,continuousProfiling:{enabled:!0,maxDuration:36e5}},CreditKarma:{timeout:3e3},TurboTax:{timeout:1500},Payments:{assetA
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 45 28 74 68 69 73 2e 5f 62 6f 64 79 49 6e 69 74 2c 7b 73 74 61 74 75 73 3a 74 68 69 73 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 54 65 78 74 3a 74 68 69 73 2e 73 74 61 74 75 73 54 65 78 74 2c 68 65 61 64 65 72 73 3a 6e 65 77 20 68 28 74 68 69 73 2e 68 65 61 64 65 72 73 29 2c 75 72 6c 3a 74 68 69 73 2e 75 72 6c 7d 29 7d 2c 45 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 45 28 6e 75 6c 6c 2c 7b 73 74 61 74 75 73 3a 32 30 30 2c 73 74 61 74 75 73 54 65 78 74 3a 22 22 7d 29 3b 72 65 74 75 72 6e 20 65 2e 6f 6b 3d 21 31 2c 65 2e 73 74 61 74 75 73 3d 30 2c 65 2e 74 79 70 65 3d 22 65 72 72 6f 72 22 2c 65 7d 3b 76 61 72 20 4f 3d 5b 33 30 31 2c 33 30 32 2c 33 30 33 2c 33 30 37 Data Ascii: ion(){return new E(this._bodyInit,{status:this.status,statusText:this.statusText,headers:new h(this.headers),url:this.url})},E.error=function(){var e=new E(null,{status:200,statusText:""});return e.ok=!1,e.status=0,e.type="error",e};var O=[301,302,303,307
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 72 20 6e 3d 74 2e 64 69 73 70 61 74 63 68 2c 72 3d 74 2e 67 65 74 53 74 61 74 65 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6f 3f 6f 28 6e 2c 72 2c 65 29 3a 74 28 6f 29 7d 7d 7d 7d 76 61 72 20 61 65 3d 69 65 28 29 3b 61 65 2e 77 69 74 68 45 78 74 72 61 41 72 67 75 6d 65 6e 74 3d 69 65 3b 76 61 72 20 73 65 3d 61 65 2c 63 65 3d 28 6e 28 33 34 31 35 35 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 Data Ascii: r n=t.dispatch,r=t.getState;return function(t){return function(o){return"function"===typeof o?o(n,r,e):t(o)}}}}var ae=ie();ae.withExtraArgument=ie;var se=ae,ce=(n(34155),function(){var e=function(t,n){return e=Object.setPrototypeOf\|\|{__proto__:[]}instance
2024-09-11 17:25:27 UTC	2256	IN	Data Raw: 73 4e 61 6d 65 2c 6e 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 74 28 65 2e 63 6c 61 73 73 4e 61 6d 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 62 61 73 65 56 61 6c 7c 7c 22 22 2c 6e 29 29 7d 7d 2c 32 34 34 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 30 32 31 30 29 28 22 25 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 25 22 2c 21 30 29 7c 7c 21 31 3b 69 66 28 72 29 74 72 79 7b 72 28 7b 7d 2c 22 61 22 2c 7b 76 61 6c 75 65 3a 31 7d 29 7d 63 61 74 63 68 28 6f 29 7b 72 3d 21 31 7d 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 35 33 39 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 Data Ascii: sName,n):e.setAttribute("class",t(e.className&&e.className.baseVal\|\|"",n))}},24429:function(e,t,n){"use strict";var r=n(40210)("%Object.defineProperty%",!0)\|\|!1;if(r)try{r({},"a",{value:1})}catch(o){r=!1}e.exports=r},53981:function(e){"use strict";e.expor
2024-09-11 17:25:27 UTC	14128	IN	Data Raw: 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 69 66 28 66 29 74 72 79 7b 66 28 7b 7d 2c 22 22 29 7d 63 61 74 63 68 28 4c 29 7b 66 3d 6e 75 6c 6c 7d 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 6c 7d 2c 6d 3d 66 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 68 7d 63 61 74 63 68 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 66 28 61 72 67 75 6d 65 6e 74 73 2c 22 63 61 6c 6c 65 65 22 29 2e 67 65 74 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 68 7d 7d 7d 28 29 3a 68 2c 79 3d 6e 28 34 31 34 30 35 29 28 29 2c 67 3d 6e 28 32 38 31 38 35 29 28 29 2c 62 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 Data Ascii: }catch(t){}},f=Object.getOwnPropertyDescriptor;if(f)try{f({},"")}catch(L){f=null}var h=function(){throw new l},m=f?function(){try{return h}catch(e){try{return f(arguments,"callee").get}catch(t){return h}}}():h,y=n(41405)(),g=n(28185)(),b=Object.getPrototy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49773	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:26 UTC	451	OUT	GET /_next/static/chunks/7868.851b65ef7fa1a422.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:26 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 955 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: BOmk9Y3rMhskmN8CYHCc71_JeJ1bL4XU Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:26 GMT ETag: "54378336344b3de8529083ef5d0707ab" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ac0e9b19969df989a920e6d1b834d008.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: I4qnaPF9htUCOfHfE7XQrdLN1KRePiqdFCpl3pfVrB0zZh7Xv2Lgig== Age: 1 Vary: Origin
2024-09-11 17:25:26 UTC	955	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 36 38 5d 2c 7b 37 37 38 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6c 2c 63 29 7b 63 2e 72 28 6c 29 3b 63 28 36 37 32 39 34 29 3b 76 61 72 20 69 3d 63 28 35 31 32 34 35 29 2c 72 3d 63 28 38 35 38 39 33 29 3b 6c 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 6c 3d 32 34 2c 68 65 69 67 68 74 3a 63 3d 32 34 2c 63 6f 6c 6f 72 3a 73 3d 69 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 2c 63 6c 61 73 73 4e 61 6d 65 3a 74 3d 22 22 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 72 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7868],{77868:function(e,l,c){c.r(l);c(67294);var i=c(51245),r=c(85893);l.default=e=>{let{width:l=24,height:c=24,color:s=i.colors.white,className:t=""}=e;return(0,r.jsx)("svg",{xmlns:"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49775	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:26 UTC	451	OUT	GET /_next/static/chunks/1193.3dd404b7ea3c36c8.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:26 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1308 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZoR41e29l01uDgA0ZzVneNFS1wppB3yP Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:26 GMT ETag: "f69d3b30a1263332b5a03cd48576c018" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e1e056e45a0f8d6bc22b223900511170.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: HFJP60cdLL_6-iXS0cHzGk5qv5lxD4Oqar6yOs22fUOkEjqdV6aOGg== Age: 1 Vary: Origin
2024-09-11 17:25:26 UTC	1308	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 39 33 5d 2c 7b 36 31 31 39 33 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 65 2c 72 29 7b 72 2e 72 28 65 29 3b 76 61 72 20 74 3d 72 28 39 35 36 32 37 29 2c 6f 3d 72 2e 6e 28 74 29 2c 69 3d 72 28 36 37 32 39 34 29 2c 6e 3d 72 28 35 31 32 34 35 29 2c 6c 3d 72 28 38 35 38 39 33 29 3b 65 2e 64 65 66 61 75 6c 74 3d 73 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 65 3d 31 32 2c 68 65 69 67 68 74 3a 72 3d 31 35 2c 63 6f 6c 6f 72 3a 74 3d 6e 2e 63 6f 6c 6f 72 73 2e 62 6c 61 63 6b 2c 63 6c 61 73 73 4e 61 6d 65 3a 61 3d 22 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 63 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1193],{61193:function(s,e,r){r.r(e);var t=r(95627),o=r.n(t),i=r(67294),n=r(51245),l=r(85893);e.default=s=>{let{width:e=12,height:r=15,color:t=n.colors.black,className:a="",strokeWidth:c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49774	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:26 UTC	451	OUT	GET /_next/static/chunks/8948.2692353fb3048aa0.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:27 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1478 Connection: close Date: Wed, 11 Sep 2024 17:25:26 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT ETag: "efa6f902936b7db194d07237f235321c" x-amz-server-side-encryption: AES256 x-amz-version-id: OLXBesqN2qaps0r8QCbzZEfK_qrDDCjV Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0d94766f433ae64cf30c40acb74fc43e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: I4nRwRGdgo234jIu_qeu8EsQUI9sJesuDKFBRWtU15THF7w7GCgkKw== Age: 1 Vary: Origin
2024-09-11 17:25:27 UTC	1428	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 34 38 5d 2c 7b 39 38 39 34 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 2e 72 28 65 29 3b 69 28 36 37 32 39 34 29 3b 76 61 72 20 73 3d 69 28 38 35 38 39 33 29 3b 65 2e 64 65 66 61 75 6c 74 3d 74 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 65 3d 33 32 2c 68 65 69 67 68 74 3a 69 3d 32 34 7d 3d 74 3b 72 65 74 75 72 6e 28 30 2c 73 2e 6a 73 78 73 29 28 22 73 76 67 22 2c 7b 77 69 64 74 68 3a 65 2c 68 65 69 67 68 74 3a 69 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 33 36 20 33 32 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8948],{98948:function(t,e,i){i.r(e);i(67294);var s=i(85893);e.default=t=>{let{width:e=32,height:i=24}=t;return(0,s.jsxs)("svg",{width:e,height:i,viewBox:"0 0 36 32",fill:"none",xmlns:"h
2024-09-11 17:25:27 UTC	50	IN	Data Raw: 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 38 39 34 38 2e 32 36 39 32 33 35 33 66 62 33 30 34 38 61 61 30 2e 6a 73 2e 6d 61 70 Data Ascii: //# sourceMappingURL=8948.2692353fb3048aa0.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49776	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:27 UTC	628	OUT	GET /_next/static/chunks/6859-0e318ca24b4b6137.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:27 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28981 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 3LG2BesmlzE94Qa2xCAd5fWU9my6WzxA Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Sep 2024 21:19:50 GMT ETag: "37eb804273791af5f1a8acac5775fd06" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 96c1c36adc76f99239fd3220e5be7e6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: YgJfXXAc2qQ_ahzHekuR7QtuK-JPMDcMwpdKfqJXpq0FZyOcomXotQ== Age: 72338 Vary: Origin
2024-09-11 17:25:27 UTC	15749	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 35 39 5d 2c 7b 31 38 36 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 33 34 31 35 35 29 2c 73 3d 72 28 32 31 38 37 36 29 2e 42 75 66 66 65 72 2c 69 3d 72 28 39 33 30 29 2c 6f 3d 72 28 33 33 32 33 29 3b 63 6f 6e 73 74 20 61 3d 5b 22 73 74 72 61 74 65 67 79 22 2c 22 73 72 63 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 5d 2c 6c 3d 5b 22 73 74 72 61 74 65 67 79 22 5d 2c 63 3d 5b 22 63 72 6f 73 73 4f 72 69 67 69 6e 22 2c 22 6e 6f 6e 63 65 22 5d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6859],{18613:function(e,t,r){"use strict";var n=r(34155),s=r(21876).Buffer,i=r(930),o=r(3323);const a=["strategy","src","children","dangerouslySetInnerHTML"],l=["strategy"],c=["crossOrigin","nonce"]
2024-09-11 17:25:27 UTC	13232	IN	Data Raw: 79 29 72 65 74 75 72 6e 20 76 6f 69 64 28 65 2e 62 65 66 6f 72 65 49 6e 74 65 72 61 63 74 69 76 65 3d 28 65 2e 62 65 66 6f 72 65 49 6e 74 65 72 61 63 74 69 76 65 7c 7c 5b 5d 29 2e 63 6f 6e 63 61 74 28 5b 70 28 7b 7d 2c 74 2e 70 72 6f 70 73 29 5d 29 29 3b 69 66 28 5b 22 6c 61 7a 79 4f 6e 6c 6f 61 64 22 2c 22 61 66 74 65 72 49 6e 74 65 72 61 63 74 69 76 65 22 2c 22 77 6f 72 6b 65 72 22 5d 2e 69 6e 63 6c 75 64 65 73 28 74 2e 70 72 6f 70 73 2e 73 74 72 61 74 65 67 79 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 61 2e 70 75 73 68 28 74 2e 70 72 6f 70 73 29 7d 7d 29 29 2c 74 2e 73 63 72 69 70 74 4c 6f 61 64 65 72 3d 61 7d 28 69 2c 6f 2c 65 29 2c 5f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 68 74 6d 6c 22 2c 4f 62 6a 65 63 74 2e 61 73 Data Ascii: y)return void(e.beforeInteractive=(e.beforeInteractive\|\|[]).concat([p({},t.props)]));if(["lazyOnload","afterInteractive","worker"].includes(t.props.strategy))return void a.push(t.props)}})),t.scriptLoader=a}(i,o,e),_.default.createElement("html",Object.as

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49778	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:27 UTC	628	OUT	GET /_next/static/chunks/2332-a40370253963c421.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:27 UTC	634	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 33763 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: slApbxTRItBGQ1Yh2mnL9EDL_My6JlV4 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 15:13:35 GMT ETag: "dba23ed240561ed1d860d0e1189a64f1" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2fcedcc055e24d7ac99fbc19ed8fc8ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 1wDqrzO6oHqfvTvf36JFbQU1R4MQMGFHfteLT40rIorVan_mLAPjeQ== Age: 7913 Vary: Origin
2024-09-11 17:25:27 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 33 32 5d 2c 7b 36 30 31 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 7d 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 2e 74 68 61 74 52 65 74 75 72 6e 73 3d 65 2c 72 2e 74 68 61 74 52 65 74 75 72 6e 73 46 61 6c 73 65 3d 65 28 21 31 29 2c 72 2e 74 68 61 74 52 65 74 75 72 6e 73 54 72 75 65 3d 65 28 21 30 29 2c 72 2e 74 68 61 74 52 65 74 75 72 6e 73 4e 75 6c 6c 3d 65 28 6e 75 6c 6c 29 2c 72 2e 74 68 61 74 52 65 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2332],{60139:function(t){function e(t){return function(){return t}}var r=function(){};r.thatReturns=e,r.thatReturnsFalse=e(!1),r.thatReturnsTrue=e(!0),r.thatReturnsNull=e(null),r.thatRe
2024-09-11 17:25:27 UTC	1514	IN	Data Raw: 57 72 3d 4c 72 3f 4c 72 2e 74 6f 53 74 72 69 6e 67 3a 76 6f 69 64 20 30 3b 76 61 72 20 24 72 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 71 74 28 65 29 29 72 65 74 75 72 6e 20 4d 72 28 65 2c 74 29 2b 22 22 3b 69 66 28 44 72 28 65 29 29 72 65 74 75 72 6e 20 57 72 3f 57 72 2e 63 61 6c 6c 28 65 29 3a 22 22 3b 76 61 72 20 72 3d 65 2b 22 22 3b 72 65 74 75 72 6e 22 30 22 3d 3d 72 26 26 31 2f 65 3d 3d 2d 49 6e 66 69 6e 69 74 79 3f 22 2d 30 22 3a 72 7d 3b 76 61 72 20 48 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 22 22 3a 24 72 28 74 29 7d 3b 76 61 72 20 71 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: Wr=Lr?Lr.toString:void 0;var $r=function t(e){if("string"==typeof e)return e;if(qt(e))return Mr(e,t)+"";if(Dr(e))return Wr?Wr.call(e):"";var r=e+"";return"0"==r&&1/e==-Infinity?"-0":r};var Hr=function(t){return null==t?"":$r(t)};var qr=function(t){return
2024-09-11 17:25:28 UTC	15865	IN	Data Raw: 61 72 20 69 3d 61 5b 6f 5d 2c 75 3d 74 5b 69 5d 3b 58 72 28 75 29 3f 72 2e 67 65 74 28 75 29 7c 7c 28 72 2e 73 65 74 28 75 2c 21 30 29 2c 6e 5b 69 5d 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 75 29 3f 5b 5d 3a 7b 7d 2c 63 6e 28 75 2c 65 2c 72 2c 6e 5b 69 5d 29 29 3a 6e 5b 69 5d 3d 65 7d 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 73 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 72 3d 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 72 2e 68 63 43 61 63 68 65 3d 7b 7d 2c 72 2e 68 62 43 61 63 68 65 3d 7b 7d 2c 72 2e 72 65 67 69 73 74 65 72 46 69 65 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 2e 66 69 65 6c 64 73 5b 74 5d 3d 65 7d 2c 72 2e 75 6e 72 65 67 69 73 74 65 Data Ascii: ar i=a[o],u=t[i];Xr(u)?r.get(u)\|\|(r.set(u,!0),n[i]=Array.isArray(u)?[]:{},cn(u,e,r,n[i])):n[i]=e}return n}var sn=function(t){function e(e){var r=t.call(this,e)\|\|this;return r.hcCache={},r.hbCache={},r.registerField=function(t,e){r.fields[t]=e},r.unregiste

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49777	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:27 UTC	628	OUT	GET /_next/static/chunks/5439-f4c5699a82de3c8e.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:28 UTC	673	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 253985 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 x-amz-version-id: YIuha.w273NgSECXzSE1HptyBuo3hO5f Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:29 GMT ETag: "1e5daeaf41220ceff890f155747e27b6" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 999a435eb37a050d3de26fe63534c416.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: iDdLZwJke4VRmXCmuhhS6Eed1Z-XyWJxuibK7uqjCVFrqXS5XEXn7g== Vary: Origin
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 39 5d 2c 7b 32 34 36 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 6e 75 6d 62 65 72 3a 6e 28 33 37 39 39 29 2c 65 78 70 69 72 61 74 69 6f 6e 44 61 74 65 3a 6e 28 36 34 32 30 33 29 2c 65 78 70 69 72 61 74 69 6f 6e 4d 6f 6e 74 68 3a 6e 28 34 30 37 38 36 29 2c 65 78 70 69 72 61 74 69 6f 6e 59 65 61 72 3a 6e 28 37 33 37 38 36 29 2c 63 76 76 3a 6e 28 36 30 36 29 2c 70 6f 73 74 61 6c 43 6f 64 65 3a 6e 28 36 36 39 33 37 29 2c 63 72 65 64 69 74 43 61 72 64 54 79 70 65 3a 6e 28 31 31 30 33 38 29 7d 7d 2c Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5439],{24652:function(e,t,n){"use strict";e.exports={number:n(3799),expirationDate:n(64203),expirationMonth:n(40786),expirationYear:n(73786),cvv:n(606),postalCode:n(66937),creditCardType:n(11038)}},
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 2e 64 61 74 65 54 69 6d 65 28 7b 77 69 64 74 68 3a 22 6d 65 64 69 75 6d 22 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 50 50 50 22 3a 6f 3d 74 2e 64 61 74 65 54 69 6d 65 28 7b 77 69 64 74 68 3a 22 6c 6f 6e 67 22 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 6f 3d 74 2e 64 61 74 65 54 69 6d 65 28 7b 77 69 64 74 68 3a 22 66 75 6c 6c 22 7d 29 7d 72 65 74 75 72 6e 20 6f 2e 72 65 70 6c 61 63 65 28 22 7b 7b 64 61 74 65 7d 7d 22 2c 6e 28 69 2c 74 29 29 2e 72 65 70 6c 61 63 65 28 22 7b 7b 74 69 6d 65 7d 7d 22 2c 72 28 75 2c 74 29 29 7d 7d 3b 74 2e 5a 3d 6f 7d 2c 32 34 32 36 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 44 61 74 Data Ascii: .dateTime({width:"medium"});break;case"PPP":o=t.dateTime({width:"long"});break;default:o=t.dateTime({width:"full"})}return o.replace("{{date}}",n(i,t)).replace("{{time}}",r(u,t))}};t.Z=o},24262:function(e,t,n){"use strict";function r(e){var t=new Date(Dat
2024-09-11 17:25:28 UTC	1514	IN	Data Raw: 28 72 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 72 26 26 28 72 3d 32 34 29 2c 22 6b 6f 22 3d 3d 3d 74 3f 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 72 2c 7b 75 6e 69 74 3a 22 68 6f 75 72 22 7d 29 3a 70 28 72 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 22 6d 6f 22 3d 3d 3d 74 3f 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 65 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 2c 7b 75 6e 69 74 3a 22 6d 69 6e 75 74 65 22 7d 29 3a 64 2e 6d 28 65 2c 74 29 7d 2c 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 22 73 6f 22 3d Data Ascii: (r,t.length)},k:function(e,t,n){var r=e.getUTCHours();return 0===r&&(r=24),"ko"===t?n.ordinalNumber(r,{unit:"hour"}):p(r,t.length)},m:function(e,t,n){return"mo"===t?n.ordinalNumber(e.getUTCMinutes(),{unit:"minute"}):d.m(e,t)},s:function(e,t,n){return"so"=
2024-09-11 17:25:28 UTC	5712	IN	Data Raw: 3d 6e 28 38 33 39 34 36 29 2c 78 3d 6e 28 38 34 33 31 34 29 2c 45 3d 6e 28 38 36 35 35 39 29 2c 4d 3d 2f 5b 79 59 51 71 4d 4c 77 49 64 44 65 63 69 68 48 4b 6b 6d 73 5d 6f 7c 28 5c 77 29 5c 31 2a 7c 27 27 7c 27 28 27 27 7c 5b 5e 27 5d 29 2b 28 27 7c 24 29 7c 2e 2f 67 2c 52 3d 2f 50 2b 70 2b 7c 50 2b 7c 70 2b 7c 27 27 7c 27 28 27 27 7c 5b 5e 27 5d 29 2b 28 27 7c 24 29 7c 2e 2f 67 2c 6a 3d 2f 5e 27 28 5b 5e 5d 2a 3f 29 27 3f 24 2f 2c 4e 3d 2f 27 27 2f 67 2c 59 3d 2f 5b 61 2d 7a 41 2d 5a 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 2c 6e 29 7b 76 61 72 20 75 2c 63 2c 73 2c 6c 2c 66 2c 70 2c 64 2c 68 2c 79 2c 6d 2c 76 2c 62 2c 77 2c 67 2c 44 2c 6b 2c 4f 2c 6a 3b 28 30 2c 69 2e 5a 29 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 4e 3d 53 74 72 69 Data Ascii: =n(83946),x=n(84314),E=n(86559),M=/[yYQqMLwIdDecihHKkms]o\|(\w)\1\|''\|'(''\|[^'])+('\|$)\|./g,R=/P+p+\|P+\|p+\|''\|'(''\|[^'])+('\|$)\|./g,j=/^'([^]?)'?$/,N=/''/g,Y=/[a-zA-Z]/;function I(e,t,n){var u,c,s,l,f,p,d,h,y,m,v,b,w,g,D,k,O,j;(0,i.Z)(2,arguments);var N=Stri
2024-09-11 17:25:28 UTC	2856	IN	Data Raw: 72 3d 6e 28 31 39 30 31 33 29 2c 6f 3d 6e 28 31 33 38 38 32 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 28 30 2c 6f 2e 5a 29 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 6e 3d 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 65 29 2c 61 3d 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 74 29 3b 72 65 74 75 72 6e 20 6e 2e 67 65 74 54 69 6d 65 28 29 3d 3d 3d 61 2e 67 65 74 54 69 6d 65 28 29 7d 7d 2c 33 31 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 36 39 31 31 39 29 2c 6f 3d 6e 28 31 33 38 38 32 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 Data Ascii: r=n(19013),o=n(13882);function a(e,t){(0,o.Z)(2,arguments);var n=(0,r.default)(e),a=(0,r.default)(t);return n.getTime()===a.getTime()}},3151:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return a}});var r=n(69119),o=n(13882);function a(e,t
2024-09-11 17:25:28 UTC	1895	IN	Data Raw: 28 6e 3d 74 29 7d 29 29 2c 6e 7c 7c 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 7d 7d 2c 33 35 33 33 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 69 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 38 36 35 35 39 29 2c 6f 3d 6e 28 39 31 32 31 38 29 2c 61 3d 6e 28 31 39 30 31 33 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 61 73 73 69 67 6e 20 72 65 71 75 69 72 65 73 20 74 68 61 74 20 69 6e 70 75 74 20 70 61 72 61 6d 65 74 65 72 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 Data Ascii: (n=t)})),n\|\|new Date(NaN)}},35337:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return yi}});var r=n(86559),o=n(91218),a=n(19013);function i(e,t){if(null==e)throw new TypeError("assign requires that input parameter not be null or undefined
2024-09-11 17:25:28 UTC	5712	IN	Data Raw: 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 26 26 67 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 6e 26 26 67 28 65 2c 6e 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 76 61 72 20 4f 3d 66 75 6e 63 74 69 6f Data Ascii: 0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}function D(e,t,n){return t&&g(e.prototype,t),n&&g(e,n),e}function k(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}var O=functio
2024-09-11 17:25:28 UTC	5712	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 76 65 28 65 29 7b 72 65 74 75 72 6e 20 65 25 34 30 30 3d 3d 3d 30 7c 7c 65 25 34 3d 3d 3d 30 26 26 65 25 31 30 30 21 3d 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 62 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f Data Ascii: unction ve(e){return e%400===0\|\|e%4===0&&e%100!==0}function be(e){return be="function"===typeof Symbol&&"symbol"===typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"===typeof Symbol&&e.constructor===Symbol&&e!==Symbol.pro
2024-09-11 17:25:28 UTC	5712	IN	Data Raw: 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 57 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 2c 65 7d 2c 57 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 Data Ascii: =0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}function We(e,t){return We=Object.setPrototypeOf\|\|function(e,t){return e.__proto__=t,e},We(e,t)}function qe(e){var
2024-09-11 17:25:28 UTC	2513	IN	Data Raw: 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 6c 74 28 65 2c 74 29 7d 28 61 2c 65 29 3b 76 61 72 20 74 2c 6e 2c 72 2c 6f 3d 66 74 28 61 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 65 3b 63 74 28 74 68 69 73 2c 61 29 3b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 79 74 28 64 74 28 65 3d 6f 2e 63 61 6c Data Ascii: n");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&lt(e,t)}(a,e);var t,n,r,o=ft(a);function a(){var e;ct(this,a);for(var t=arguments.length,n=new Array(t),r=0;r<t;r++)n[r]=arguments[r];return yt(dt(e=o.cal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49782	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:27 UTC	451	OUT	GET /_next/static/chunks/2378.40683c6fb386355f.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:28 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2724 Connection: close Date: Wed, 11 Sep 2024 17:25:26 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT ETag: "7b6efeec50738adaf197572116b3d96a" x-amz-server-side-encryption: AES256 x-amz-version-id: RDHOvwr_abA5fVUeosn64InB3XO0ONQQ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 27f665df26bde4a7226480b4a2890ff8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: T5HL3GtwzuyxYi00nuG5aeAY4OAlSvWVQ9IHmVS6l0A5z48ZUjueZg== Age: 3 Vary: Origin
2024-09-11 17:25:28 UTC	2724	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 37 38 5d 2c 7b 35 32 33 37 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6f 2e 72 28 74 29 3b 6f 28 36 37 32 39 34 29 3b 76 61 72 20 72 3d 6f 28 38 35 38 39 33 29 3b 74 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 74 3d 34 30 2c 68 65 69 67 68 74 3a 6f 3d 32 34 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 72 2e 6a 73 78 73 29 28 22 73 76 67 22 2c 7b 77 69 64 74 68 3a 74 2c 68 65 69 67 68 74 3a 6f 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 33 37 20 33 32 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2378],{52378:function(e,t,o){o.r(t);o(67294);var r=o(85893);t.default=e=>{let{width:t=40,height:o=24}=e;return(0,r.jsxs)("svg",{width:t,height:o,viewBox:"0 0 37 32",fill:"none",xmlns:"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49785	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:27 UTC	628	OUT	GET /_next/static/chunks/3161-f0b07e6689a822c1.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:28 UTC	634	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 16371 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: vh4pr20X106.PtwE2l8z.qb8dmVGdxv8 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:28 GMT ETag: "5d13835892ea46b380757981208b63e0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ec9e3bc729d9c6d55ed32446408ad62e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: SAnbDGHzi34JXfpHZO-mmaVXQx_0zzJSfu4m5bMw2itpiaDMesqQ-w== Age: 2071 Vary: Origin
2024-09-11 17:25:28 UTC	15708	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 36 31 5d 2c 7b 32 33 31 36 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6c 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 2c 50 7a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 7d 7d 29 3b 76 61 72 20 61 3d 6e 28 35 39 34 39 39 29 2c 69 3d 28 6e 28 35 36 38 35 39 29 2c 6e 28 36 37 32 39 34 29 29 2c 6f 3d 6e 28 34 39 31 35 33 29 3b 63 6f 6e 73 74 20 72 3d 65 3d 3e 7b 69 66 28 65 26 26 65 2e 63 6f 6e 66 69 67 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 69 3b 69 66 28 6f 2e 65 28 28 66 75 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3161],{23161:function(e,t,n){"use strict";n.d(t,{lj:function(){return H},Pz:function(){return q}});var a=n(59499),i=(n(56859),n(67294)),o=n(49153);const r=e=>{if(e&&e.config){var t,n,a,i;if(o.e((fun
2024-09-11 17:25:28 UTC	663	IN	Data Raw: 65 29 7b 6c 65 74 7b 62 61 74 63 68 57 69 6e 64 6f 77 4c 65 6e 67 74 68 4d 69 6c 6c 69 73 65 63 6f 6e 64 3a 74 3d 33 35 30 2c 69 6e 76 6f 6b 65 64 43 61 6c 6c 62 61 63 6b 3a 6e 7d 3d 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 69 6e 76 6f 6b 65 64 43 61 6c 6c 62 61 63 6b 20 6d 75 73 74 20 62 65 20 70 61 73 73 65 64 20 74 6f 20 42 61 74 63 68 65 72 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 74 68 69 73 2e 62 61 74 63 68 57 69 6e 64 6f 77 4c 65 6e 67 74 68 4d 69 6c 6c 69 73 65 63 6f 6e 64 3d 74 2c 74 68 69 73 2e 69 6e 76 6f 6b 65 64 43 61 6c 6c 62 61 63 6b 3d 6e 2c 74 68 69 73 2e 5f 73 65 74 42 61 74 63 68 44 65 66 61 75 6c 74 56 61 6c 75 65 73 28 29 2c 74 68 69 73 2e Data Ascii: e){let{batchWindowLengthMillisecond:t=350,invokedCallback:n}=e;if("function"!==typeof n)throw new Error("invokedCallback must be passed to Batcher constructor");this.batchWindowLengthMillisecond=t,this.invokedCallback=n,this._setBatchDefaultValues(),this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49784	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:27 UTC	454	OUT	GET /_next/static/chunks/webpack-3dbe3e04f86f6c11.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:28 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5776 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: fRvB6yUb1b8G4cbekGev27LHxeMf0tAP Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:26 GMT ETag: "6675b58551f780ea2d2b55bb460c9582" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 03d509e8374e9f42668961b5e0201348.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: ZziIwyt2-bO0O9yp1d_QSjfHibshIMCmqD-xEnP1l7w1KD9FWBcSWw== Age: 3 Vary: Origin
2024-09-11 17:25:28 UTC	5776	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 63 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 63 29 72 65 74 75 72 6e 20 63 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 74 5b 72 5d 3d 7b 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6f 3d 21 30 3b 74 72 79 7b 65 5b 72 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 6f 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 72 65 74 75 72 6e 20 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(){"use strict";var e={},t={};function n(r){var c=t[r];if(void 0!==c)return c.exports;var f=t[r]={id:r,loaded:!1,exports:{}},o=!0;try{e[r].call(f.exports,f,f.exports,n),o=!1}finally{o&&delete t[r]}return f.loaded=!0,f.exports}n.m=e,function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49783	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:27 UTC	456	OUT	GET /_next/static/chunks/framework-560765ab0625ba27.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:28 UTC	636	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 130057 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Ry3OV1uap8X3eDx5HeALfpmAFEPny_7h Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Sep 2024 21:19:49 GMT ETag: "575f0dd2d17bbece23c4e3266a51a5c2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 91ba7c34719cd9c69e0357c149b94b90.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: fmu-nBrolTCI5d3A4taCbl6nDtvlOhTHRsU4Rwy8uMu5uo-rQQZwlg== Age: 72340 Vary: Origin
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 36 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 37 32 39 34 29 2c 6c 3d 6e 28 39 36 30 38 36 29 2c 61 3d 6e 28 36 33 38 34 30 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{64448:function(e,t,n){var r=n(67294),l=n(96086),a=n(63840);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 61 2c 6f 2c 75 2c 69 29 7b 57 65 3d 21 31 2c 48 65 3d 6e 75 6c 6c 2c 24 65 2e 61 70 70 6c 79 28 4b 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 76 61 72 20 74 3d 65 2c 6e 3d 65 3b 69 66 28 65 2e 61 6c 74 65 72 6e 61 74 65 29 66 6f 72 28 3b 74 2e 72 65 74 75 72 6e 3b 29 74 3d 74 2e 72 65 74 75 72 6e 3b 65 6c 73 65 7b 65 3d 74 3b 64 6f 7b 30 21 3d 3d 28 31 30 32 36 26 28 74 3d 65 29 2e 66 6c 61 67 73 29 26 26 28 6e 3d 74 2e 72 65 74 75 72 6e 29 2c 65 3d 74 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 29 7d 72 65 74 75 72 6e 20 33 3d 3d 3d 74 2e 74 61 67 3f 6e 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 29 7b 69 66 28 31 33 3d 3d 3d 65 2e 74 61 67 29 7b 76 61 72 20 74 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 Data Ascii: a,o,u,i){We=!1,He=null,$e.apply(Ke,arguments)}function Xe(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!==(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Ge(e){if(13===e.tag){var t=e.memoizedSt
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 73 74 65 20 70 61 75 73 65 20 70 61 75 73 65 20 70 6c 61 79 20 70 6c 61 79 20 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 43 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 64 6f 77 6e 20 70 6f 69 6e 74 65 72 44 6f 77 6e 20 70 6f 69 6e 74 65 72 75 70 20 70 6f 69 6e 74 65 72 55 70 20 72 61 74 65 63 68 61 6e 67 65 20 72 61 74 65 43 68 61 6e 67 65 20 72 65 73 65 74 20 72 65 73 65 74 20 73 65 65 6b 65 64 20 73 65 65 6b 65 64 20 73 75 62 6d 69 74 20 73 75 62 6d 69 74 20 74 6f 75 63 68 63 61 6e 63 65 6c 20 74 6f 75 63 68 43 61 6e 63 65 6c 20 74 6f 75 63 68 65 6e 64 20 74 6f 75 63 68 45 6e 64 20 74 6f 75 63 68 73 74 61 72 74 20 74 6f 75 63 68 53 74 61 72 74 20 76 6f 6c 75 6d 65 63 68 61 6e 67 65 20 76 6f 6c 75 6d 65 43 68 61 6e 67 65 22 2e 73 70 6c 69 Data Ascii: ste pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".spli
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 7b 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 72 3d 64 69 28 29 2c 6c 3d 70 69 28 65 29 2c 61 3d 63 61 28 72 2c 6c 29 3b 61 2e 74 61 67 3d 31 2c 61 2e 70 61 79 6c 6f 61 64 3d 74 2c 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 26 26 28 61 2e 63 61 6c 6c 62 61 63 6b 3d 6e 29 2c 66 61 28 65 2c 61 29 2c 68 69 28 65 2c 6c 2c 72 29 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 6e 3d 64 69 28 29 2c 72 3d 70 69 28 65 29 2c 6c 3d 63 61 28 6e 2c 72 29 3b 6c 2e 74 61 67 3d 32 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 28 6c 2e 63 61 6c 6c 62 61 63 6b 3d 74 29 2c 66 61 Data Ascii: {e=e._reactInternals;var r=di(),l=pi(e),a=ca(r,l);a.tag=1,a.payload=t,void 0!==n&&null!==n&&(a.callback=n),fa(e,a),hi(e,l,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=di(),r=pi(e),l=ca(n,r);l.tag=2,void 0!==t&&null!==t&&(l.callback=t),fa
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 61 74 63 68 3a 6e 75 6c 6c 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 52 65 64 75 63 65 72 3a 65 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 53 74 61 74 65 3a 74 7d 29 2e 64 69 73 70 61 74 63 68 3d 7a 6f 2e 62 69 6e 64 28 6e 75 6c 6c 2c 4a 61 2c 65 29 2c 5b 72 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 65 5d 7d 2c 75 73 65 52 65 66 3a 79 6f 2c 75 73 65 53 74 61 74 65 3a 76 6f 2c 75 73 65 44 65 62 75 67 56 61 6c 75 65 3a 50 6f 2c 75 73 65 44 65 66 65 72 72 65 64 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 76 6f 28 65 29 2c 6e 3d 74 5b 30 5d 2c 72 3d 74 5b 31 5d 3b 72 65 74 75 72 6e 20 53 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 47 61 2e 74 72 61 6e 73 69 74 69 6f 6e 3b 47 61 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 31 3b Data Ascii: atch:null,lastRenderedReducer:e,lastRenderedState:t}).dispatch=zo.bind(null,Ja,e),[r.memoizedState,e]},useRef:yo,useState:vo,useDebugValue:Po,useDeferredValue:function(e){var t=vo(e),n=t[0],r=t[1];return So((function(){var t=Ga.transition;Ga.transition=1;
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 74 7c 32 3a 31 26 74 29 2c 6e 29 3a 6e 75 6c 6c 3b 63 61 73 65 20 32 33 3a 63 61 73 65 20 32 34 3a 72 65 74 75 72 6e 20 45 69 28 29 2c 6e 75 6c 6c 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 21 3d 3d 28 6e 75 6c 6c 21 3d 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 26 26 22 75 6e 73 74 61 62 6c 65 2d 64 65 66 65 72 2d 77 69 74 68 6f 75 74 2d 68 69 64 69 6e 67 22 21 3d 3d 72 2e 6d 6f 64 65 26 26 28 74 2e 66 6c 61 67 73 7c 3d 34 29 2c 6e 75 6c 6c 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 35 36 2c 74 2e 74 61 67 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 75 28 65 29 7b 73 77 69 74 63 68 28 65 2e 74 61 67 29 7b 63 61 73 65 20 31 3a 67 6c 28 65 2e 74 79 70 65 29 26 26 79 6c 28 29 3b 76 61 72 20 74 3d 65 2e 66 6c Data Ascii: t\|2:1&t),n):null;case 23:case 24:return Ei(),null!==e&&null!==e.memoizedState!==(null!==t.memoizedState)&&"unstable-defer-without-hiding"!==r.mode&&(t.flags\|=4),null}throw Error(o(156,t.tag))}function iu(e){switch(e.tag){case 1:gl(e.type)&&yl();var t=e.fl
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 3b 69 66 28 30 3d 3d 3d 28 36 34 26 64 2e 66 6c 61 67 73 29 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6b 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 45 72 72 6f 72 7c 7c 6e 75 6c 6c 21 3d 3d 53 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 26 26 28 6e 75 6c 6c 3d 3d 3d 5a 75 7c 7c 21 5a 75 2e 68 61 73 28 53 29 29 29 29 7b 64 2e 66 6c 61 67 73 7c 3d 34 30 39 36 2c 74 26 3d 2d 74 2c 64 2e 6c 61 6e 65 73 7c 3d 74 2c 64 61 28 64 2c 70 75 28 64 2c 61 2c 74 29 29 3b 62 72 65 61 6b 20 65 7d 7d 64 3d 64 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 64 29 7d 7a 69 28 6e 29 7d 63 61 74 63 68 28 45 29 7b 74 3d 45 2c 4d 75 3d 3d 3d Data Ascii: ;if(0===(64&d.flags)&&("function"===typeof k.getDerivedStateFromError\|\|null!==S&&"function"===typeof S.componentDidCatch&&(null===Zu\|\|!Zu.has(S)))){d.flags\|=4096,t&=-t,d.lanes\|=t,da(d,pu(d,a,t));break e}}d=d.return}while(null!==d)}zi(n)}catch(E){t=E,Mu===
2024-09-11 17:25:28 UTC	15369	IN	Data Raw: 6e 75 6c 6c 21 3d 3d 28 69 3d 75 2e 73 69 62 6c 69 6e 67 29 29 7b 69 2e 72 65 74 75 72 6e 3d 75 2e 72 65 74 75 72 6e 2c 75 3d 69 3b 62 72 65 61 6b 7d 75 3d 75 2e 72 65 74 75 72 6e 7d 69 3d 75 7d 55 6f 28 65 2c 74 2c 6c 2e 63 68 69 6c 64 72 65 6e 2c 6e 29 2c 74 3d 74 2e 63 68 69 6c 64 7d 72 65 74 75 72 6e 20 74 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 20 6c 3d 74 2e 74 79 70 65 2c 72 3d 28 61 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 29 2e 63 68 69 6c 64 72 65 6e 2c 61 61 28 74 2c 6e 29 2c 72 3d 72 28 6c 3d 6f 61 28 6c 2c 61 2e 75 6e 73 74 61 62 6c 65 5f 6f 62 73 65 72 76 65 64 42 69 74 73 29 29 2c 74 2e 66 6c 61 67 73 7c 3d 31 2c 55 6f 28 65 2c 74 2c 72 2c 6e 29 2c 74 2e 63 68 69 6c 64 3b 63 61 73 65 20 31 34 3a 72 65 74 75 72 6e 20 61 3d 47 6c 28 6c Data Ascii: null!==(i=u.sibling)){i.return=u.return,u=i;break}u=u.return}i=u}Uo(e,t,l.children,n),t=t.child}return t;case 9:return l=t.type,r=(a=t.pendingProps).children,aa(t,n),r=r(l=oa(l,a.unstable_observedBits)),t.flags\|=1,Uo(e,t,r,n),t.child;case 14:return a=Gl(l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49786	52.85.48.9	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:27 UTC	586	OUT	GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:28 UTC	776	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9270 Connection: close Date: Tue, 16 Jul 2024 21:54:56 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 16 Jul 2024 17:27:05 GMT ETag: "00e9c65cbba11c07c4bf4a6e2727b8ea" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: mUKhKkDsTlV_L45onrBdOfv9_aAUrh2t Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 dde62003552e800310ee1980113eedb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL50-C2 X-Amz-Cf-Id: Sjz5udfzuXBZUHiggzuTkTWl-4UKmVDsdCsjBPQap9HsbL0laxJkLQ== Age: 4908633
2024-09-11 17:25:28 UTC	9270	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 34 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 76 61 72 20 69 2c 65 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 65 6e 61 62 6c 65 64 29 3f 6e 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49787	13.35.58.148	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:27 UTC	392	OUT	GET /v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:28 UTC	768	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 2238 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Thu, 25 Jul 2024 19:17:34 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 4hoYBvYQgJthTLgLG5DZEcC2mBG6hFyA Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:27 GMT Cache-Control: public, max-age=10800 ETag: "26ee0147b7d243991d94b48a2b8b5675" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 425709fb5486bea91d36ef6c75d4ffac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 9MSEwGVOH-AOikTD-Xi8j627k14oFBrAhGlaYmoMnJnMz24pG9lL_g== Age: 2
2024-09-11 17:25:28 UTC	2238	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 41 6d 70 6c 69 74 75 64 65 22 3a 7b 22 61 70 69 4b 65 79 22 3a 22 65 31 37 38 39 63 38 30 33 61 65 61 35 61 36 65 32 30 64 65 63 61 35 30 38 36 34 37 62 64 66 36 22 2c 22 61 70 70 65 6e 64 46 69 65 6c 64 73 54 6f 45 76 65 6e 74 50 72 6f 70 73 22 3a 7b 7d 2c 22 62 61 74 63 68 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 64 65 76 69 63 65 49 64 46 72 6f 6d 55 72 6c 50 61 72 61 6d 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 4c 6f 63 61 74 69 6f 6e 4c 69 73 74 65 6e 69 6e 67 22 3a 74 72 75 65 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 50 65 72 69 6f 64 4d 69 6c 6c 69 73 22 3a 33 30 30 30 30 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 54 68 72 65 73 68 6f 6c 64 22 3a 33 30 2c 22 66 6f 72 63 65 48 74 74 70 73 22 3a Data Ascii: {"integrations":{"Amplitude":{"apiKey":"e1789c803aea5a6e20deca508647bdf6","appendFieldsToEventProps":{},"batchEvents":false,"deviceIdFromUrlParam":false,"enableLocationListening":true,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"forceHttps":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49789	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:28 UTC	451	OUT	GET /_next/static/chunks/main-593e743601aca717.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:28 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 75858 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Cy.QPYhG2UY0dmWItEVQfKryibu3LQWY Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:27 GMT ETag: "650f21ac4fd9546e505724abe1db85e7" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cc0ab20766d57035422a2c4c69fe0620.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: WxwfWr9YAKtv5Q0bRUNLmGm9KMSfqN3WGbXIE1EgHwLIpt3-iF_dAQ== Age: 2 Vary: Origin
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 36 30 39 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 72 2c 6e 2c 6f 2c 61 2c 69 29 7b 74 72 79 7b 76 61 72 20 73 3d 65 5b 61 5d 28 69 29 2c 6c 3d 73 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 75 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 75 29 7d 73 2e 64 6f 6e 65 3f 74 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6e 2c 6f 29 7d 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{60932:function(e,t){"use strict";function r(e,t,r,n,o,a,i){try{var s=e[a](i),l=s.value}catch(u){return void r(u)}s.done?t(l):Promise.resolve(l).then(n,o)}t.Z=function(e){return function(){var
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 6c 74 26 26 6e 75 6c 6c 21 3d 3d 74 2e 64 65 66 61 75 6c 74 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 38 38 35 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 Data Ascii: lt&&null!==t.default)&&"undefined"===typeof t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},8854:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0})
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 6d 61 74 63 68 65 73 4d 69 64 64 6c 65 77 61 72 65 3d 54 2c 74 2e 69 73 4c 6f 63 61 6c 55 52 4c 3d 6b 2c 74 2e 69 6e 74 65 72 70 6f 6c 61 74 65 41 73 3d 44 2c 74 2e 72 65 73 6f 6c 76 65 48 72 65 66 3d 42 2c 74 2e 63 72 65 61 74 65 4b 65 79 3d 4b 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 72 28 36 30 39 33 32 29 2e 5a 2c 6f 3d 72 28 36 34 39 35 29 2e 5a 2c 61 3d 72 28 39 32 36 34 38 29 2e 5a 2c 69 3d 72 28 39 31 35 39 38 29 2e 5a 2c 73 3d 72 28 32 34 39 36 39 29 2c 6c 3d 72 28 31 35 33 32 33 29 2c 75 3d 72 28 34 39 38 39 29 2c 63 3d 72 28 37 32 31 38 39 29 2c 64 3d 69 28 72 28 38 30 36 37 36 29 29 2c 66 3d 72 28 37 37 34 38 29 2c 68 3d 72 28 39 36 32 35 29 2c 70 Data Ascii: Module",{value:!0}),t.matchesMiddleware=T,t.isLocalURL=k,t.interpolateAs=D,t.resolveHref=B,t.createKey=K,t.default=void 0;var n=r(60932).Z,o=r(6495).Z,a=r(92648).Z,i=r(91598).Z,s=r(24969),l=r(15323),u=r(4989),c=r(72189),d=i(r(80676)),f=r(7748),h=r(9625),p
2024-09-11 17:25:28 UTC	16384	IN	Data Raw: 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2c 5f 2e 67 65 74 52 6f 75 74 65 4d 61 74 63 68 65 72 28 50 2e 67 65 74 52 6f 75 74 65 52 65 67 65 78 28 6e 2e 70 61 74 68 6e 61 6d 65 29 29 28 77 2e 70 61 72 73 65 50 61 74 68 28 74 29 2e 70 61 74 68 6e 61 6d 65 29 7c 7c 7b 7d 29 2c 65 3d 62 2e 66 6f 72 6d 61 74 57 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 28 6e 29 29 3b 63 6f 6e 73 74 20 64 3d 6c 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 53 6c 61 73 68 28 61 29 3b 79 69 65 6c 64 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 6f 2e 70 61 67 65 4c 6f 61 64 65 72 2e 5f 69 73 53 73 67 28 64 29 2e 74 68 65 6e 28 28 74 3d 3e 21 21 74 26 26 56 28 7b 64 61 74 61 48 72 65 66 3a 6f 2e 70 61 67 65 4c 6f 61 64 65 72 2e 67 65 74 44 61 74 61 48 72 65 66 28 7b 68 72 65 66 3a 65 2c 61 Data Ascii: ject.assign(i,_.getRouteMatcher(P.getRouteRegex(n.pathname))(w.parsePath(t).pathname)\|\|{}),e=b.formatWithValidation(n));const d=l.removeTrailingSlash(a);yield Promise.all([o.pageLoader._isSsg(d).then((t=>!!t&&V({dataHref:o.pageLoader.getDataHref({href:e,a
2024-09-11 17:25:28 UTC	10322	IN	Data Raw: 28 2f 5c 5c 2f 67 2c 22 2f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 5c 2f 2b 2f 67 2c 22 2f 22 29 2b 28 74 5b 31 5d 3f 60 3f 24 7b 74 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 3f 22 29 7d 60 3a 22 22 29 7d 2c 74 2e 6c 6f 61 64 47 65 74 49 6e 69 74 69 61 6c 50 72 6f 70 73 3d 6c 2c 74 2e 53 54 3d 74 2e 53 50 3d 74 2e 77 61 72 6e 4f 6e 63 65 3d 74 2e 69 73 41 62 73 6f 6c 75 74 65 55 72 6c 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 72 28 36 30 39 33 32 29 2e 5a 3b 63 6f 6e 73 74 20 6f 3d 2f 5e 5b 61 2d 7a 41 2d 5a 5d 5b 61 2d 7a 41 2d 5a 5c 64 2b 5c 2d 2e 5d 2a 3f 3a 2f 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 63 6f 6e 73 74 7b 70 72 6f 74 6f 63 6f 6c 3a 65 2c 68 6f 73 74 6e 61 6d 65 3a 74 2c 70 6f 72 74 3a 72 7d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 Data Ascii: (/\\/g,"/").replace(/\/\/+/g,"/")+(t[1]?`?${t.slice(1).join("?")}`:"")},t.loadGetInitialProps=l,t.ST=t.SP=t.warnOnce=t.isAbsoluteUrl=void 0;var n=r(60932).Z;const o=/^[a-zA-Z][a-zA-Z\d+\-.]*?:/;function a(){const{protocol:e,hostname:t,port:r}=window.locat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49788	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:28 UTC	628	OUT	GET /_next/static/chunks/5480-42cda307521b848a.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:28 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21218 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: iZgnpmB0JFDdh5cikypsIdKbQngn2FTl Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:28 GMT ETag: "2a7272631cb808b8c16b6c30b24b352e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2fcedcc055e24d7ac99fbc19ed8fc8ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: kjzQfSuk19o1qKEuSaa7qtADwN5I2V4vT1Rrj8xZEn4KSEbC-5j6eQ== Age: 11799 Vary: Origin
2024-09-11 17:25:28 UTC	15749	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 38 30 5d 2c 7b 37 32 34 36 38 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 65 2c 74 29 7b 76 61 72 20 72 3d 74 28 39 35 36 32 37 29 2c 73 3d 74 2e 6e 28 72 29 2c 69 3d 74 28 36 37 32 39 34 29 2c 6c 3d 74 28 35 31 32 34 35 29 2c 6e 3d 74 28 38 35 38 39 33 29 3b 65 2e 5a 3d 6f 3d 3e 7b 6c 65 74 7b 63 68 69 6c 64 72 65 6e 3a 65 2c 72 65 6d 6f 76 65 44 65 66 61 75 6c 74 42 61 63 6b 67 72 6f 75 6e 64 3a 74 7d 3d 6f 3b 72 65 74 75 72 6e 28 30 2c 6e 2e 6a 73 78 73 29 28 69 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6e 2e 6a 73 78 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5480],{72468:function(o,e,t){var r=t(95627),s=t.n(r),i=t(67294),l=t(51245),n=t(85893);e.Z=o=>{let{children:e,removeDefaultBackground:t}=o;return(0,n.jsxs)(i.Fragment,{children:[(0,n.jsx
2024-09-11 17:25:28 UTC	5469	IN	Data Raw: 20 72 6f 77 20 69 74 65 6d 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 73 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 31 30 34 35 35 31 34 39 35 34 22 2c 5b 62 28 29 2c 6f 2e 66 6f 6e 74 53 69 7a 65 3f 6f 2e 66 6f 6e 74 53 69 7a 65 3a 6e 2e 66 6f 6e 74 53 69 7a 65 2e 78 73 2c 6d 7c 7c 6e 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 2c 75 3f 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 44 65 6d 69 22 3a 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 52 65 67 75 6c 61 72 22 2c 6e 2e 66 6f 6e 74 53 69 7a 65 2e 78 78 73 2c 6e 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 33 2c 78 3f 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 52 65 67 75 6c 61 72 22 3a 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 4d 65 64 69 75 6d Data Ascii: row item",className:s().dynamic([["1045514954",[b(),o.fontSize?o.fontSize:n.fontSize.xs,m\|\|n.colors.gray,u?"AvenirNextforINTUIT-Demi":"AvenirNextforINTUIT-Regular",n.fontSize.xxs,n.colors.gray03,x?"AvenirNextforINTUIT-Regular":"AvenirNextforINTUIT-Medium

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49790	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:28 UTC	628	OUT	GET /_next/static/chunks/5669-3d23076a3a43f159.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:29 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13542 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: um3TwWlbbzXmbEtCXlWuvp2HGN2MFNvu Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:30 GMT ETag: "ff073630bdc785112171092880fdb4b9" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 04ce5a607a98db6d08257633417b84d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: O_Aen88HSQvp9biMm9dTyPZFgfHRxz9IpuWwMMrV45jHAPyfHYjzIQ== Vary: Origin
2024-09-11 17:25:29 UTC	13542	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 36 36 39 5d 2c 7b 39 39 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 73 29 7b 73 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 7d 29 3b 76 61 72 20 74 3d 73 28 36 37 32 39 34 29 2c 6f 3d 73 28 39 35 36 32 37 29 2c 63 3d 73 2e 6e 28 6f 29 2c 69 3d 73 28 38 36 38 39 36 29 2c 72 3d 73 28 34 34 30 31 32 29 2c 61 3d 73 28 32 33 32 34 30 29 2c 6c 3d 73 28 38 35 38 39 33 29 2c 64 3d 65 3d 3e 7b 6c 65 74 7b 63 64 6e 3a 6e 2c 69 6e 74 6c 3a 73 7d 3d 65 3b 63 6f 6e 73 74 20 74 3d 73 2e 66 6f 72 6d 61 74 4d 65 73 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5669],{99278:function(e,n,s){s.d(n,{Z:function(){return _}});var t=s(67294),o=s(95627),c=s.n(o),i=s(86896),r=s(44012),a=s(23240),l=s(85893),d=e=>{let{cdn:n,intl:s}=e;const t=s.formatMes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49792	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:28 UTC	457	OUT	GET /_next/static/chunks/pages/_app-7d82d00ca8a38f1d.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:29 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1082437 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: bXUJooFJrSupcJKipYQDHgG0u2vZjIr6 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:27 GMT ETag: "e026539df2e4f739d8f64b5315599f3c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 999a435eb37a050d3de26fe63534c416.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: _7DmW0Hm9-NOkdFR7d0k7nnyGAi-kty4KEosxOwJ__Fb0bwLs27Sjg== Age: 2 Vary: Origin
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 2c 32 37 34 31 5d 2c 7b 32 35 36 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6b 47 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 45 72 72 6f 72 29 2c 21 65 29 74 68 72 6f 77 20 6e 65 77 20 6e 28 74 29 7d 7d 2c 39 35 39 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888,2741],{25687:function(e,t,n){"use strict";n.d(t,{kG:function(){return r}});function r(e,t,n){if(void 0===n&&(n=Error),!e)throw new n(t)}},95957:function(e,t,n){"use strict";function r(e,t){var
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 6e 2c 6e 2b 74 2e 6c 65 6e 67 74 68 29 3d 3d 3d 74 7d 2c 71 3d 55 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 22 22 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 6f 3e 69 3b 29 7b 69 66 28 28 6e 3d 65 5b 69 2b 2b 5d 29 3e 31 31 31 34 31 31 31 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 6e 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 63 6f 64 65 20 70 6f 69 6e 74 22 29 3b Data Ascii: n)}:function(e,t,n){return e.slice(n,n+t.length)===t},q=U?String.fromCodePoint:function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];for(var n,r="",o=e.length,i=0;o>i;){if((n=e[i++])>1114111)throw RangeError(n+" is not a valid code point");
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 36 34 38 33 30 3d 3d 3d 65 7c 7c 36 34 38 33 31 3d 3d 3d 65 7c 7c 65 3e 3d 36 35 30 39 33 26 26 65 3c 3d 36 35 30 39 34 7d 66 75 6e 63 74 69 6f 6e 20 6f 65 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 64 65 6c 65 74 65 20 65 2e 6c 6f 63 61 74 69 6f 6e 2c 70 28 65 29 7c 7c 66 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 2e 6f 70 74 69 6f 6e 73 29 64 65 6c 65 74 65 20 65 2e 6f 70 74 69 6f 6e 73 5b 74 5d 2e 6c 6f 63 61 74 69 6f 6e 2c 6f 65 28 65 2e 6f 70 74 69 6f 6e 73 5b 74 5d 2e 76 61 6c 75 65 29 3b 65 6c 73 65 20 6c 28 65 29 26 26 79 28 65 2e 73 74 79 6c 65 29 7c 7c 28 75 28 65 29 7c 7c 64 28 65 29 29 26 26 67 28 65 2e 73 74 79 6c 65 29 3f 64 65 6c 65 74 65 20 65 2e 73 74 79 6c 65 2e 6c 6f 63 61 74 69 Data Ascii: 64830===e\|\|64831===e\|\|e>=65093&&e<=65094}function oe(e){e.forEach((function(e){if(delete e.location,p(e)\|\|f(e))for(var t in e.options)delete e.options[t].location,oe(e.options[t].value);else l(e)&&y(e.style)\|\|(u(e)\|\|d(e))&&g(e.style)?delete e.style.locati
2024-09-11 17:25:29 UTC	15108	IN	Data Raw: 61 74 28 72 29 7d 7d 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 55 28 55 28 7b 7d 2c 72 29 2c 6f 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 58 28 29 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 22 29 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 55 28 7b 7d 2c 65 29 3b 22 67 65 74 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 6d 65 74 68 6f 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 64 65 6c 65 74 65 20 6e 2e 62 6f 64 79 3a 65 2e 64 61 74 61 26 26 21 65 2e 62 6f 64 79 26 26 28 6e 2e 62 6f 64 79 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2e 64 61 74 61 29 29 2c 6e 2e 68 65 61 64 65 72 73 3d 6e 65 77 20 48 65 61 64 65 72 73 Data Ascii: at(r)}}(e,t);return U(U({},r),o)},B=function(){return X().replace(/-/g,"")},H=function(e){var t,n=U({},e);"get"===(null===(t=e.method)\|\|void 0===t?void 0:t.toLowerCase())?delete n.body:e.data&&!e.body&&(n.body=JSON.stringify(e.data)),n.headers=new Headers
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 6f 6e 3a 21 30 2c 63 6f 6e 74 69 6e 75 6f 75 73 50 72 6f 66 69 6c 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 6d 61 78 44 75 72 61 74 69 6f 6e 3a 33 36 65 35 7d 7d 2c 5f 65 3d 7b 51 42 4f 3a 7b 74 69 6d 65 6f 75 74 3a 32 65 33 2c 61 73 73 65 74 41 6c 69 61 73 3a 7b 22 49 6e 74 75 69 74 2e 61 63 63 6f 75 6e 74 69 6e 67 2e 63 6f 72 65 2e 71 62 6f 77 65 62 61 70 70 22 3a 7b 74 69 6d 65 6f 75 74 3a 31 35 30 30 2c 76 65 6e 64 6f 72 73 3a 5b 22 54 4d 58 22 5d 7d 7d 7d 2c 47 65 6e 4f 53 3a 7b 74 69 6d 65 6f 75 74 3a 33 65 33 2c 70 72 6f 63 65 73 73 53 65 73 73 69 6f 6e 3a 21 30 2c 63 6f 6e 74 69 6e 75 6f 75 73 50 72 6f 66 69 6c 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 6d 61 78 44 75 72 61 74 69 6f 6e 3a 33 36 65 35 7d 7d 2c 43 72 65 64 69 74 4b 61 72 Data Ascii: on:!0,continuousProfiling:{enabled:!1,maxDuration:36e5}},_e={QBO:{timeout:2e3,assetAlias:{"Intuit.accounting.core.qbowebapp":{timeout:1500,vendors:["TMX"]}}},GenOS:{timeout:3e3,processSession:!0,continuousProfiling:{enabled:!0,maxDuration:36e5}},CreditKar
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 28 77 2e 70 72 6f 74 6f 74 79 70 65 29 2c 76 2e 63 61 6c 6c 28 45 2e 70 72 6f 74 6f 74 79 70 65 29 2c 45 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 45 28 74 68 69 73 2e 5f 62 6f 64 79 49 6e 69 74 2c 7b 73 74 61 74 75 73 3a 74 68 69 73 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 54 65 78 74 3a 74 68 69 73 2e 73 74 61 74 75 73 54 65 78 74 2c 68 65 61 64 65 72 73 3a 6e 65 77 20 68 28 74 68 69 73 2e 68 65 61 64 65 72 73 29 2c 75 72 6c 3a 74 68 69 73 2e 75 72 6c 7d 29 7d 2c 45 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 45 28 6e 75 6c 6c 2c 7b 73 74 61 74 75 73 3a 32 30 30 2c 73 74 61 74 75 73 54 65 78 74 3a 22 22 7d 29 3b 72 65 74 75 72 6e 20 65 2e Data Ascii: (w.prototype),v.call(E.prototype),E.prototype.clone=function(){return new E(this._bodyInit,{status:this.status,statusText:this.statusText,headers:new h(this.headers),url:this.url})},E.error=function(){var e=new E(null,{status:200,statusText:""});return e.
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 28 74 65 29 2c 6e 65 29 2c 6f 65 3d 6e 28 34 35 32 31 37 29 3b 66 75 6e 63 74 69 6f 6e 20 69 65 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 64 69 73 70 61 74 63 68 2c 72 3d 74 2e 67 65 74 53 74 61 74 65 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6f 3f 6f 28 6e 2c 72 2c 65 29 3a 74 28 6f 29 7d 7d 7d 7d 76 61 72 20 61 65 3d 69 65 28 29 3b 61 65 2e 77 69 74 68 45 78 74 72 61 41 72 67 75 6d 65 6e 74 3d 69 65 3b 76 61 72 20 73 65 3d 61 65 2c 63 65 3d 28 6e 28 33 34 31 35 35 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: (te),ne),oe=n(45217);function ie(e){return function(t){var n=t.dispatch,r=t.getState;return function(t){return function(o){return"function"===typeof o?o(n,r,e):t(o)}}}}var ae=ie();ae.withExtraArgument=ie;var se=ae,ce=(n(34155),function(){var e=function(t,
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 6f 76 65 28 6e 29 3a 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3f 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 74 28 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 6e 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 74 28 65 2e 63 6c 61 73 73 4e 61 6d 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 62 61 73 65 56 61 6c 7c 7c 22 22 2c 6e 29 29 7d 7d 2c 32 34 34 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 30 32 31 30 29 28 22 25 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 25 22 2c 21 30 29 7c 7c 21 31 3b 69 66 28 72 29 74 72 79 7b 72 28 7b 7d 2c 22 61 22 2c 7b 76 61 6c 75 65 3a 31 7d 29 7d 63 61 74 63 68 28 6f 29 Data Ascii: ove(n):"string"===typeof e.className?e.className=t(e.className,n):e.setAttribute("class",t(e.className&&e.className.baseVal\|\|"",n))}},24429:function(e,t,n){"use strict";var r=n(40210)("%Object.defineProperty%",!0)\|\|!1;if(r)try{r({},"a",{value:1})}catch(o)
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 30 2c 61 2e 46 4b 29 28 64 2e 61 73 74 2c 64 2e 6c 6f 63 61 6c 65 73 2c 64 2e 66 6f 72 6d 61 74 74 65 72 73 2c 64 2e 66 6f 72 6d 61 74 73 2c 65 2c 76 6f 69 64 20 30 2c 64 2e 6d 65 73 73 61 67 65 29 7d 2c 74 68 69 73 2e 72 65 73 6f 6c 76 65 64 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 6f 63 61 6c 65 3a 64 2e 72 65 73 6f 6c 76 65 64 4c 6f 63 61 6c 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 7d 2c 74 68 69 73 2e 67 65 74 41 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 61 73 74 7d 2c 74 68 69 73 2e 6c 6f 63 61 6c 65 73 3d 6e 2c 74 68 69 73 2e 72 65 73 6f 6c 76 65 64 4c 6f 63 61 6c 65 3d 65 2e 72 65 73 6f 6c 76 65 4c 6f 63 61 6c 65 28 6e 29 2c 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 Data Ascii: 0,a.FK)(d.ast,d.locales,d.formatters,d.formats,e,void 0,d.message)},this.resolvedOptions=function(){return{locale:d.resolvedLocale.toString()}},this.getAst=function(){return d.ast},this.locales=n,this.resolvedLocale=e.resolveLocale(n),"string"===typeof t)
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 2c 69 29 2c 7b 64 61 74 61 3a 6e 7d 3d 74 2c 6f 3d 6e 2e 6d 65 72 63 68 61 6e 74 53 65 73 73 69 6f 6e 4a 53 4f 4e 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 6e 2e 6d 65 72 63 68 61 6e 74 53 65 73 73 69 6f 6e 4a 53 4f 4e 29 3a 6e 3b 70 2e 63 6f 6d 70 6c 65 74 65 4d 65 72 63 68 61 6e 74 56 61 6c 69 64 61 74 69 6f 6e 28 6f 29 7d 63 61 74 63 68 28 74 29 7b 74 72 79 7b 70 2e 61 62 6f 72 74 28 29 7d 63 61 74 63 68 28 6e 29 7b 6d 28 7b 6c 6f 67 4c 65 76 65 6c 3a 22 65 72 72 6f 72 22 2c 61 63 74 69 6f 6e 3a 22 61 62 6f 72 74 22 2c 65 72 72 6f 72 3a 6e 7d 29 7d 6f 28 74 29 7d 7d 2c 70 2e 6f 6e 70 61 79 6d 65 6e 74 61 75 74 68 6f 72 69 7a 65 64 3d 74 3d 3e 7b 74 72 79 7b 70 2e 63 6f 6d 70 6c 65 74 65 50 61 79 6d 65 6e 74 28 41 70 70 6c 65 50 61 79 53 65 73 73 69 6f 6e 2e Data Ascii: ,i),{data:n}=t,o=n.merchantSessionJSON?JSON.parse(n.merchantSessionJSON):n;p.completeMerchantValidation(o)}catch(t){try{p.abort()}catch(n){m({logLevel:"error",action:"abort",error:n})}o(t)}},p.onpaymentauthorized=t=>{try{p.completePayment(ApplePaySession.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49793	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:28 UTC	451	OUT	GET /_next/static/chunks/6859-0e318ca24b4b6137.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:29 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28981 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 3LG2BesmlzE94Qa2xCAd5fWU9my6WzxA Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Sep 2024 21:19:50 GMT ETag: "37eb804273791af5f1a8acac5775fd06" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90cf045072373c2c671297de3161846e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: i-JKJ4YQG7qeA1m9pSKc_nivhgYAjTWC8ZNGYs2pTUQHoqYDv1oRWA== Age: 72339 Vary: Origin
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 35 39 5d 2c 7b 31 38 36 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 33 34 31 35 35 29 2c 73 3d 72 28 32 31 38 37 36 29 2e 42 75 66 66 65 72 2c 69 3d 72 28 39 33 30 29 2c 6f 3d 72 28 33 33 32 33 29 3b 63 6f 6e 73 74 20 61 3d 5b 22 73 74 72 61 74 65 67 79 22 2c 22 73 72 63 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 5d 2c 6c 3d 5b 22 73 74 72 61 74 65 67 79 22 5d 2c 63 3d 5b 22 63 72 6f 73 73 4f 72 69 67 69 6e 22 2c 22 6e 6f 6e 63 65 22 5d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6859],{18613:function(e,t,r){"use strict";var n=r(34155),s=r(21876).Buffer,i=r(930),o=r(3323);const a=["strategy","src","children","dangerouslySetInnerHTML"],l=["strategy"],c=["crossOrigin","nonce"]
2024-09-11 17:25:29 UTC	12597	IN	Data Raw: 6c 65 6d 65 6e 74 28 43 2c 6e 75 6c 6c 2c 5f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 4d 2c 6e 75 6c 6c 29 2c 5f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 64 79 22 2c 6e 75 6c 6c 2c 5f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2c 6e 75 6c 6c 29 2c 5f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 50 2c 6e 75 6c 6c 29 29 29 7d 7d 2c 37 31 36 34 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 45 44 47 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 5f 4e 4f 44 45 Data Ascii: lement(C,null,_.default.createElement(M,null),_.default.createElement("body",null,_.default.createElement(b,null),_.default.createElement(P,null)))}},71647:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.EDGE_UNSUPPORTED_NODE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49795	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:28 UTC	628	OUT	GET /_next/static/chunks/8804-0df16ebd6cb32488.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:29 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 24221 Connection: close Date: Wed, 11 Sep 2024 17:25:30 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT ETag: "d80243304aa96aa47f087c7b6fd7d648" x-amz-server-side-encryption: AES256 x-amz-version-id: bVxA_PDViPixwpyG_WfhuXiRTJEhrNZa Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d9bf8acc1da383db4531789bbb03ac06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: DQ3EkoqEJO9YDX4aHF5vP-6_uyVdkUwcCt8AQgSxknLVr5ULntiYlQ== Vary: Origin
2024-09-11 17:25:29 UTC	8393	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 30 34 5d 2c 7b 38 36 35 35 33 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 65 2c 69 29 7b 69 2e 64 28 65 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 76 61 72 20 61 3d 69 28 35 39 34 39 39 29 2c 6c 3d 69 28 39 35 36 32 37 29 2c 74 3d 69 2e 6e 28 6c 29 2c 72 3d 69 28 36 37 32 39 34 29 2c 6f 3d 69 28 34 34 30 31 32 29 2c 6e 3d 69 28 35 34 34 39 30 29 2c 63 3d 69 28 35 31 34 35 39 29 2c 75 3d 69 28 38 35 38 39 33 29 3b 76 61 72 20 78 3d 73 3d 3e 7b 6c 65 74 7b 63 6f 6c 6f 72 3a 65 3d 22 23 36 42 36 43 37 32 22 2c 77 69 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8804],{86553:function(s,e,i){i.d(e,{Z:function(){return b}});var a=i(59499),l=i(95627),t=i.n(l),r=i(67294),o=i(44012),n=i(54490),c=i(51459),u=i(85893);var x=s=>{let{color:e="#6B6C72",wi
2024-09-11 17:25:29 UTC	9000	IN	Data Raw: 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 69 6e 66 6f 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 64 75 65 2d 69 6e 66 6f 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 70 78 3b 7d 22 2c 22 2e 63 61 72 64 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 69 6e 66 6f 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 64 75 65 2d 69 6e 66 6f 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 6f 72 61 6e 67 65 2d 64 6f 74 2e 5f 5f 6a 73 78 2d Data Ascii: ic-selector .info.__jsx-style-dynamic-selector .due-info.__jsx-style-dynamic-selector{display:inline-block;padding-left:8px;}",".card.__jsx-style-dynamic-selector .info.__jsx-style-dynamic-selector .due-info.__jsx-style-dynamic-selector .orange-dot.__jsx-
2024-09-11 17:25:29 UTC	6828	IN	Data Raw: 70 72 69 61 74 65 22 5d 2c 22 66 61 72 74 79 22 3a 5b 22 69 6e 61 70 70 72 6f 70 72 69 61 74 65 22 5d 2c 22 66 61 74 61 73 73 22 3a 5b 22 69 6e 73 75 6c 74 22 5d 2c 22 66 65 6c 61 74 69 6f 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 66 65 6c 6c 61 74 69 6f 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 66 65 6c 74 63 68 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 66 69 6e 67 65 72 66 75 63 6b 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 66 69 6e 67 65 72 66 75 63 6b 65 64 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 66 69 6e 67 65 72 66 75 63 6b 65 72 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 66 69 6e 67 65 72 66 75 63 6b 69 6e 67 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 66 69 6e 67 65 72 66 75 63 6b 73 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 66 69 73 74 66 75 63 6b Data Ascii: priate"],"farty":["inappropriate"],"fatass":["insult"],"felatio":["sexual"],"fellatio":["sexual"],"feltch":["sexual"],"fingerfuck":["sexual"],"fingerfucked":["sexual"],"fingerfucker":["sexual"],"fingerfucking":["sexual"],"fingerfucks":["sexual"],"fistfuck

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49796	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:28 UTC	451	OUT	GET /_next/static/chunks/3161-f0b07e6689a822c1.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:29 UTC	634	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 16371 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: vh4pr20X106.PtwE2l8z.qb8dmVGdxv8 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:28 GMT ETag: "5d13835892ea46b380757981208b63e0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0d94766f433ae64cf30c40acb74fc43e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: l7vji3jm0QbLRbIiUsiJ23foDO1sSReSF2dsCApjWe4s7wdTdZX6OQ== Age: 2072 Vary: Origin
2024-09-11 17:25:29 UTC	16371	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 36 31 5d 2c 7b 32 33 31 36 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6c 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 2c 50 7a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 7d 7d 29 3b 76 61 72 20 61 3d 6e 28 35 39 34 39 39 29 2c 69 3d 28 6e 28 35 36 38 35 39 29 2c 6e 28 36 37 32 39 34 29 29 2c 6f 3d 6e 28 34 39 31 35 33 29 3b 63 6f 6e 73 74 20 72 3d 65 3d 3e 7b 69 66 28 65 26 26 65 2e 63 6f 6e 66 69 67 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 69 3b 69 66 28 6f 2e 65 28 28 66 75 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3161],{23161:function(e,t,n){"use strict";n.d(t,{lj:function(){return H},Pz:function(){return q}});var a=n(59499),i=(n(56859),n(67294)),o=n(49153);const r=e=>{if(e&&e.config){var t,n,a,i;if(o.e((fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49794	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:28 UTC	451	OUT	GET /_next/static/chunks/2332-a40370253963c421.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:29 UTC	634	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 33763 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: slApbxTRItBGQ1Yh2mnL9EDL_My6JlV4 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 15:13:35 GMT ETag: "dba23ed240561ed1d860d0e1189a64f1" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 27f665df26bde4a7226480b4a2890ff8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: mhBR8yvDT2ILFtSu9NlPn4yNNCxwh7rAledjURHsEGpWCGCpjCwG4g== Age: 7915 Vary: Origin
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 33 32 5d 2c 7b 36 30 31 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 7d 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 2e 74 68 61 74 52 65 74 75 72 6e 73 3d 65 2c 72 2e 74 68 61 74 52 65 74 75 72 6e 73 46 61 6c 73 65 3d 65 28 21 31 29 2c 72 2e 74 68 61 74 52 65 74 75 72 6e 73 54 72 75 65 3d 65 28 21 30 29 2c 72 2e 74 68 61 74 52 65 74 75 72 6e 73 4e 75 6c 6c 3d 65 28 6e 75 6c 6c 29 2c 72 2e 74 68 61 74 52 65 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2332],{60139:function(t){function e(t){return function(){return t}}var r=function(){};r.thatReturns=e,r.thatReturnsFalse=e(!1),r.thatReturnsTrue=e(!0),r.thatReturnsNull=e(null),r.thatRe
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 57 72 3d 4c 72 3f 4c 72 2e 74 6f 53 74 72 69 6e 67 3a 76 6f 69 64 20 30 3b 76 61 72 20 24 72 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 71 74 28 65 29 29 72 65 74 75 72 6e 20 4d 72 28 65 2c 74 29 2b 22 22 3b 69 66 28 44 72 28 65 29 29 72 65 74 75 72 6e 20 57 72 3f 57 72 2e 63 61 6c 6c 28 65 29 3a 22 22 3b 76 61 72 20 72 3d 65 2b 22 22 3b 72 65 74 75 72 6e 22 30 22 3d 3d 72 26 26 31 2f 65 3d 3d 2d 49 6e 66 69 6e 69 74 79 3f 22 2d 30 22 3a 72 7d 3b 76 61 72 20 48 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 22 22 3a 24 72 28 74 29 7d 3b 76 61 72 20 71 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: Wr=Lr?Lr.toString:void 0;var $r=function t(e){if("string"==typeof e)return e;if(qt(e))return Mr(e,t)+"";if(Dr(e))return Wr?Wr.call(e):"";var r=e+"";return"0"==r&&1/e==-Infinity?"-0":r};var Hr=function(t){return null==t?"":$r(t)};var qr=function(t){return
2024-09-11 17:25:29 UTC	76	IN	Data Raw: 46 6f 72 6d 61 74 74 65 64 54 69 6d 65 50 61 72 74 73 22 2c 74 2e 66 6f 72 6d 61 74 4e 75 6d 62 65 72 3d 22 46 6f 72 6d 61 74 74 65 64 4e 75 6d 62 65 72 50 61 72 74 73 22 2c 74 2e 66 6f 72 6d 61 74 4c 69 73 74 3d 22 46 6f 72 6d Data Ascii: FormattedTimeParts",t.formatNumber="FormattedNumberParts",t.formatList="Form
2024-09-11 17:25:29 UTC	919	IN	Data Raw: 61 74 74 65 64 4c 69 73 74 50 61 72 74 73 22 7d 28 6f 7c 7c 28 6f 3d 7b 7d 29 29 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 28 30 2c 75 2e 5a 29 28 29 2c 72 3d 74 2e 76 61 6c 75 65 2c 6e 3d 74 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 28 30 2c 61 2e 5f 54 29 28 74 2c 5b 22 76 61 6c 75 65 22 2c 22 63 68 69 6c 64 72 65 6e 22 5d 29 3b 72 65 74 75 72 6e 20 6e 28 65 2e 66 6f 72 6d 61 74 4e 75 6d 62 65 72 54 6f 50 61 72 74 73 28 72 2c 6f 29 29 7d 3b 63 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 46 6f 72 6d 61 74 74 65 64 4e 75 6d 62 65 72 50 61 72 74 73 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 28 30 2c 75 2e 5a 29 28 29 2c 6e 3d 65 2e 76 61 6c 75 65 2c 6f 3d Data Ascii: attedListParts"}(o\|\|(o={}));var c=function(t){var e=(0,u.Z)(),r=t.value,n=t.children,o=(0,a._T)(t,["value","children"]);return n(e.formatNumberToParts(r,o))};c.displayName="FormattedNumberParts";function s(t){var e=function(e){var r=(0,u.Z)(),n=e.value,o=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49791	54.188.205.94	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:28 UTC	745	OUT	POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1 Host: prd.sentry-io.a.intuit.com Connection: keep-alive Content-Length: 480 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:28 UTC	480	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 32 36 2e 37 37 37 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 6e 65 78 74 6a 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 35 33 2e 31 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 34 34 35 64 30 35 31 33 33 32 64 37 34 38 61 35 62 30 39 65 62 36 62 36 33 66 33 36 30 30 34 62 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 32 36 2e 37 37 36 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 32 36 2e 37 37 36 5a 22 2c 22 73 74 61 74 75 Data Ascii: {"sent_at":"2024-09-11T17:25:26.777Z","sdk":{"name":"sentry.javascript.nextjs","version":"7.53.1"}}{"type":"session"}{"sid":"445d051332d748a5b09eb6b63f36004b","init":true,"started":"2024-09-11T17:25:26.776Z","timestamp":"2024-09-11T17:25:26.776Z","statu
2024-09-11 17:25:29 UTC	415	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:29 GMT Content-Type: application/json Content-Length: 2 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin X-Frame-Options: SAMEORIGIN
2024-09-11 17:25:29 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49797	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:29 UTC	628	OUT	GET /_next/static/chunks/2352-26b800f7418ab0e8.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:30 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 19686 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: wxnuYrSUMbn3q5CZO8zI4IGBxCUfxcD2 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:30 GMT ETag: "1e55a07d6fbc854d8604746b8d20e42b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 d6b9c7bad28b271f1e800a50d49ab8a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: vB8_D5OQh8vRxd_2ot12yK6ACzOfXyruXeUSKzRxC8rDgOsDFO1ekA== Vary: Origin
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 35 32 5d 2c 7b 35 36 38 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 39 35 36 32 37 29 2c 73 3d 6e 2e 6e 28 69 29 2c 6f 3d 6e 28 36 37 32 39 34 29 2c 72 3d 6e 28 34 34 30 31 32 29 2c 61 3d 6e 28 31 34 30 36 37 29 2c 6c 3d 6e 28 35 34 36 32 33 29 2c 63 3d 6e 28 37 30 36 37 38 29 2c 64 3d 6e 28 34 34 39 34 37 29 2c 6d 3d 6e 28 35 31 32 34 35 29 2c 70 3d 6e 28 38 35 38 39 33 29 3b 74 2e 5a 3d 65 3d 3e 7b 6c 65 74 7b 68 69 64 65 3a 74 2c 6f 6e 43 6f 6e 74 69 6e 75 65 3a 6e 2c 68 65 61 64 65 72 49 6e 74 6c 3a 69 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2352],{56810:function(e,t,n){var i=n(95627),s=n.n(i),o=n(67294),r=n(44012),a=n(14067),l=n(54623),c=n(70678),d=n(44947),m=n(51245),p=n(85893);t.Z=e=>{let{hide:t,onContinue:n,headerIntl:i
2024-09-11 17:25:30 UTC	3302	IN	Data Raw: 70 78 20 73 6f 6c 69 64 20 24 7b 63 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 7d 60 3a 60 32 70 78 20 73 6f 6c 69 64 20 24 7b 63 2e 63 6f 6c 6f 72 73 2e 67 72 65 65 6e 7d 60 5d 5d 5d 29 2b 22 20 77 72 61 70 70 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 64 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 72 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 32 32 35 30 30 38 36 34 32 22 2c 5b 74 3f 63 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 3a 63 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 35 2c 6f 7c 7c 22 22 2c 69 2c 74 3f 60 31 70 78 20 73 6f 6c 69 64 20 24 7b 63 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 7d 60 3a 60 31 70 78 20 73 6f 6c 69 64 20 24 7b 63 2e 63 6f 6c 6f 72 73 2e 67 72 65 65 6e 7d 60 2c 74 3f 60 31 70 78 20 73 6f 6c 69 64 20 24 7b Data Ascii: px solid ${c.colors.error}`:`2px solid ${c.colors.green}`]]])+" wrapper",children:[(0,d.jsx)("div",{className:r().dynamic([["225008642",[t?c.colors.error:c.colors.gray05,o\|\|"",i,t?`1px solid ${c.colors.error}`:`1px solid ${c.colors.green}`,t?`1px solid ${

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49798	13.35.58.148	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:29 UTC	408	OUT	GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:29 UTC	777	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9270 Connection: close Date: Tue, 16 Jul 2024 21:54:56 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 16 Jul 2024 17:27:05 GMT ETag: "00e9c65cbba11c07c4bf4a6e2727b8ea" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: mUKhKkDsTlV_L45onrBdOfv9_aAUrh2t Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e53a38d449135904e00f29f17c559950.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: PZu6b1jmYqrNM5EhqmWQUGnHuj0-b2vCyKKY6wlTpuHKcjLIWNzrzw== Age: 4908634
2024-09-11 17:25:29 UTC	9270	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 34 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 76 61 72 20 69 2c 65 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 65 6e 61 62 6c 65 64 29 3f 6e 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49799	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:29 UTC	628	OUT	GET /_next/static/chunks/4737-7116baf9e1ba5e68.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:30 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 330319 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: xsu97mF.9lnV7hmH2_1SKMhmsY9By4v7 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:30 GMT ETag: "c29447b41e5e7fc7df2ede897a636a7c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 21a3da42c823b5a4a2d9c4c63248bbd6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: I62staO1LubWzNh6yTyD_HQNc0abF5h8VShgGGbbUZlmiS5dN1tQKA== Vary: Origin
2024-09-11 17:25:30 UTC	15753	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 33 37 2c 32 33 37 38 2c 31 31 39 33 2c 37 39 35 36 2c 34 35 37 37 2c 38 33 36 37 2c 32 30 30 31 2c 34 34 30 39 2c 39 38 36 33 5d 2c 7b 31 33 34 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 72 3d 61 28 39 35 36 32 37 29 2c 73 3d 61 2e 6e 28 72 29 2c 6e 3d 61 28 36 37 32 39 34 29 2c 6f 3d 61 28 34 34 30 31 32 29 2c 69 3d 61 28 37 32 34 36 38 29 2c 6c 3d 61 28 35 34 36 32 33 29 2c 63 3d 61 28 35 38 33 36 37 29 2c 64 3d 61 28 32 39 38 36 33 29 2c 70 3d 61 28 35 31 32 34 35 29 2c 6d 3d 61 28 38 35 38 39 33 29 3b 74 2e 5a 3d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4737,2378,1193,7956,4577,8367,2001,4409,9863],{13484:function(e,t,a){var r=a(95627),s=a.n(r),n=a(67294),o=a(44012),i=a(72468),l=a(54623),c=a(58367),d=a(29863),p=a(51245),m=a(85893);t.Z=
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 2e 64 69 73 70 6c 61 79 2c 70 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 70 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 5d 5d 5d 29 2b 22 20 73 63 68 65 64 75 6c 65 2d 70 61 79 2d 62 75 74 74 6f 6e 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6d 2e 6a 73 78 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6e 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 33 35 32 35 36 32 37 30 39 34 22 2c 5b 5a 2e 63 61 70 74 69 6f 6e 2e 64 69 73 70 6c 61 79 2c 5a 2e 63 61 70 74 69 6f 6e 2e 63 6f 6c 6f 72 2c 5a 5b 22 61 72 69 61 2d 6c 61 62 65 6c 22 5d 2c 5a 2e 61 6d 6f 75 6e 74 54 6f 50 61 79 2e 64 69 73 70 6c 61 79 2c 70 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 70 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 5d 5d 5d 29 2b 22 20 63 61 70 74 69 6f 6e Data Ascii: .display,p.breakpoints.md,p.breakpoints.md]]])+" schedule-pay-button",children:[(0,m.jsx)("span",{className:n().dynamic([["3525627094",[Z.caption.display,Z.caption.color,Z["aria-label"],Z.amountToPay.display,p.breakpoints.md,p.breakpoints.md]]])+" caption
2024-09-11 17:25:30 UTC	12919	IN	Data Raw: 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 79 65 61 72 2d 72 65 61 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 38 70 78 3b 6c 65 66 74 3a 2d 38 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 61 65 61 65 61 65 3b 7d 22 2c 22 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 6f 70 70 65 72 5b 64 61 74 61 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 27 62 6f 74 74 6f 6d 27 5d 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 74 72 69 61 6e 67 6c 65 7b 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 74 Data Ascii: --down-arrow::before,.react-datepicker__month-year-read-view--down-arrow::before{content:'';z-index:-1;border-width:8px;left:-8px;border-bottom-color:#aeaeae;}",".react-datepicker-popper[data-placement^='bottom'] .react-datepicker__triangle{top:0;margin-t
2024-09-11 17:25:30 UTC	5712	IN	Data Raw: 61 6e 67 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 2e 33 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 36 62 61 35 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 7d 22 2c 22 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 61 79 2d 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 61 79 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 61 79 2d 2d 69 6e 2d 72 61 6e 67 65 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 74 65 78 74 2d 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 Data Ascii: ange{border-radius:0.3rem;background-color:#216ba5;color:#fff;}",".react-datepicker__day--selected:hover,.react-datepicker__day--in-selecting-range:hover,.react-datepicker__day--in-range:hover,.react-datepicker__month-text--selected:hover,.react-datepicke
2024-09-11 17:25:30 UTC	5712	IN	Data Raw: 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 79 65 61 72 2d 6f 70 74 69 6f 6e 2d 2d 73 65 6c 65 63 74 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 35 70 78 3b 7d 22 2c 22 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 63 6c 6f 73 65 2d 69 63 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 36 70 78 20 30 70 78 20 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 Data Ascii: react-datepicker__month-year-option--selected{position:absolute;left:15px;}",".react-datepicker__close-icon{cursor:pointer;background-color:transparent;border:0;outline:0;padding:0px 6px 0px 0px;position:absolute;top:0;right:0;height:100%;display:table-ce
2024-09-11 17:25:30 UTC	2856	IN	Data Raw: 6f 6c 6f 72 73 2e 67 72 61 79 30 33 2c 78 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 78 2e 66 6f 6e 74 53 69 7a 65 2e 78 73 2c 78 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 5d 5d 5d 29 2b 22 20 68 65 61 64 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 6a 3f 28 30 2c 62 2e 6a 73 78 29 28 69 2e 5a 2c 7b 69 64 3a 22 50 41 59 4d 45 4e 54 5f 44 41 54 45 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 50 61 79 6d 65 6e 74 20 64 61 74 65 22 7d 29 3a 28 30 2c 62 2e 6a 73 78 29 28 69 2e 5a 2c 7b 69 64 3a 22 41 55 54 4f 50 41 59 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 41 75 74 6f 70 61 79 22 7d 29 7d 29 2c 21 73 26 26 28 30 2c 62 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6e 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 31 Data Ascii: olors.gray03,x.breakpoints.sm,x.fontSize.xs,x.breakpoints.sm]]])+" header",children:j?(0,b.jsx)(i.Z,{id:"PAYMENT_DATE",defaultMessage:"Payment date"}):(0,b.jsx)(i.Z,{id:"AUTOPAY",defaultMessage:"Autopay"})}),!s&&(0,b.jsx)("div",{className:n().dynamic([["1
2024-09-11 17:25:30 UTC	5712	IN	Data Raw: 6a 73 78 29 28 66 2e 64 65 66 61 75 6c 74 2c 7b 77 69 64 74 68 3a 32 33 2e 33 33 2c 68 65 69 67 68 74 3a 32 34 7d 29 2c 68 26 26 28 30 2c 62 2e 6a 73 78 29 28 6b 2e 5a 2c 7b 77 69 64 74 68 3a 32 34 2c 68 65 69 67 68 74 3a 32 34 7d 29 5d 7d 29 2c 28 30 2c 62 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6e 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 31 32 39 39 31 38 34 35 34 35 22 2c 5b 73 3f 22 75 6e 73 65 74 22 3a 22 63 65 6e 74 65 72 22 2c 78 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 78 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 2c 78 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 78 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 78 2e 66 6f 6e 74 53 69 7a 65 2e 78 73 2c 78 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 33 2c 78 2e 62 72 Data Ascii: jsx)(f.default,{width:23.33,height:24}),h&&(0,b.jsx)(k.Z,{width:24,height:24})]}),(0,b.jsx)("div",{className:n().dynamic([["1299184545",[s?"unset":"center",x.breakpoints.sm,x.colors.gray,x.breakpoints.sm,x.breakpoints.sm,x.fontSize.xs,x.colors.gray03,x.br
2024-09-11 17:25:30 UTC	8568	IN	Data Raw: 61 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 4a 28 4f 62 6a 65 63 74 28 61 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 72 2e 5a 29 28 65 2c 74 2c 61 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 61 29 29 3a 4a 28 4f Data Ascii: a}function ee(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?J(Object(a),!0).forEach((function(t){(0,r.Z)(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):J(O
2024-09-11 17:25:30 UTC	11424	IN	Data Raw: 3a 22 50 41 59 46 4c 4f 57 5f 41 43 43 4f 55 4e 54 5f 54 59 50 45 5f 42 55 53 49 4e 45 53 53 5f 43 48 45 43 4b 49 4e 47 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 42 75 73 69 6e 65 73 73 20 43 68 65 63 6b 69 6e 67 22 2c 63 68 69 6c 64 72 65 6e 3a 65 3d 3e 28 30 2c 62 2e 6a 73 78 29 28 22 6f 70 74 69 6f 6e 22 2c 7b 76 61 6c 75 65 3a 6f 65 2e 74 2e 42 55 53 49 4e 45 53 53 5f 43 48 45 43 4b 49 4e 47 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 33 34 36 30 34 34 31 36 31 32 22 2c 5b 78 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 5d 5d 5d 29 2c 63 68 69 6c 64 72 65 6e 3a 65 7d 29 7d 29 2c 28 30 2c 62 2e 6a 73 78 29 28 69 2e 5a 2c 7b 69 64 3a 22 50 41 59 46 4c 4f 57 5f 41 43 43 4f 55 4e 54 5f 54 59 50 45 5f 42 55 53 Data Ascii: :"PAYFLOW_ACCOUNT_TYPE_BUSINESS_CHECKING",defaultMessage:"Business Checking",children:e=>(0,b.jsx)("option",{value:oe.t.BUSINESS_CHECKING,className:n().dynamic([["3460441612",[x.breakpoints.sm]]]),children:e})}),(0,b.jsx)(i.Z,{id:"PAYFLOW_ACCOUNT_TYPE_BUS
2024-09-11 17:25:30 UTC	5712	IN	Data Raw: 30 33 56 31 36 33 2e 31 36 48 32 33 30 2e 33 36 33 4c 32 33 30 2e 35 35 33 20 31 36 31 2e 37 35 48 32 32 39 2e 35 37 33 56 31 36 31 2e 30 32 48 32 33 30 2e 36 36 33 4c 32 33 30 2e 39 35 33 20 31 35 38 2e 39 32 48 32 33 31 2e 37 30 33 4c 32 33 31 2e 34 30 33 20 31 36 31 2e 30 32 48 32 33 32 2e 35 38 33 4c 32 33 32 2e 38 37 33 20 31 35 38 2e 39 32 48 32 33 33 2e 36 32 33 4c 32 33 33 2e 33 32 33 20 31 36 31 2e 30 32 48 32 33 34 2e 32 32 33 56 31 36 31 2e 37 35 48 32 33 33 2e 32 32 33 4c 32 33 33 2e 30 32 33 20 31 36 33 2e 31 36 48 32 33 33 2e 39 35 33 56 31 36 33 2e 38 39 48 32 33 32 2e 39 33 33 4c 32 33 32 2e 36 33 33 20 31 36 36 48 32 33 31 2e 38 38 33 4c 32 33 32 2e 31 38 33 20 31 36 33 2e 38 39 48 32 33 31 2e 30 30 33 4c 32 33 30 2e 37 30 33 20 31 36 36 Data Ascii: 03V163.16H230.363L230.553 161.75H229.573V161.02H230.663L230.953 158.92H231.703L231.403 161.02H232.583L232.873 158.92H233.623L233.323 161.02H234.223V161.75H233.223L233.023 163.16H233.953V163.89H232.933L232.633 166H231.883L232.183 163.89H231.003L230.703 166

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49800	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:29 UTC	451	OUT	GET /_next/static/chunks/5480-42cda307521b848a.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:29 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21218 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: iZgnpmB0JFDdh5cikypsIdKbQngn2FTl Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:28 GMT ETag: "2a7272631cb808b8c16b6c30b24b352e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 27f665df26bde4a7226480b4a2890ff8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: u0VQFweoESrZDACkYtsWlAFpyw4YWPUBAbBduBIct612QTcfQd1sXA== Age: 11800 Vary: Origin
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 38 30 5d 2c 7b 37 32 34 36 38 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 65 2c 74 29 7b 76 61 72 20 72 3d 74 28 39 35 36 32 37 29 2c 73 3d 74 2e 6e 28 72 29 2c 69 3d 74 28 36 37 32 39 34 29 2c 6c 3d 74 28 35 31 32 34 35 29 2c 6e 3d 74 28 38 35 38 39 33 29 3b 65 2e 5a 3d 6f 3d 3e 7b 6c 65 74 7b 63 68 69 6c 64 72 65 6e 3a 65 2c 72 65 6d 6f 76 65 44 65 66 61 75 6c 74 42 61 63 6b 67 72 6f 75 6e 64 3a 74 7d 3d 6f 3b 72 65 74 75 72 6e 28 30 2c 6e 2e 6a 73 78 73 29 28 69 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6e 2e 6a 73 78 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5480],{72468:function(o,e,t){var r=t(95627),s=t.n(r),i=t(67294),l=t(51245),n=t(85893);e.Z=o=>{let{children:e,removeDefaultBackground:t}=o;return(0,n.jsxs)(i.Fragment,{children:[(0,n.jsx
2024-09-11 17:25:29 UTC	4834	IN	Data Raw: 5b 62 28 29 2c 6f 2e 66 6f 6e 74 53 69 7a 65 3f 6f 2e 66 6f 6e 74 53 69 7a 65 3a 6e 2e 66 6f 6e 74 53 69 7a 65 2e 78 73 2c 6d 7c 7c 6e 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 2c 75 3f 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 44 65 6d 69 22 3a 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 52 65 67 75 6c 61 72 22 2c 6e 2e 66 6f 6e 74 53 69 7a 65 2e 78 78 73 2c 6e 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 33 2c 78 3f 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 52 65 67 75 6c 61 72 22 3a 22 41 76 65 6e 69 72 4e 65 78 74 66 6f 72 49 4e 54 55 49 54 2d 4d 65 64 69 75 6d 22 2c 70 5d 5d 5d 29 2b 22 20 6c 61 62 65 6c 20 6c 65 66 74 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 63 2e 6a 73 78 29 28 22 73 70 61 6e 22 Data Ascii: [b(),o.fontSize?o.fontSize:n.fontSize.xs,m\|\|n.colors.gray,u?"AvenirNextforINTUIT-Demi":"AvenirNextforINTUIT-Regular",n.fontSize.xxs,n.colors.gray03,x?"AvenirNextforINTUIT-Regular":"AvenirNextforINTUIT-Medium",p]]])+" label left",children:[(0,c.jsx)("span"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49803	54.188.205.94	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:29 UTC	747	OUT	POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1 Host: prd.sentry-io.a.intuit.com Connection: keep-alive Content-Length: 18150 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:29 UTC	16384	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 36 35 31 64 36 39 30 34 33 36 65 38 34 66 36 30 38 35 30 63 31 63 33 39 66 31 39 39 66 65 38 33 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 32 37 2e 37 39 33 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 6e 65 78 74 6a 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 35 33 2e 31 22 7d 2c 22 74 72 61 63 65 22 3a 7b 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 72 65 6c 65 61 73 65 22 3a 22 31 2e 33 30 2e 30 2d 72 65 6c 65 61 73 65 5f 31 2e 33 30 2e 30 2d 38 30 62 34 32 66 31 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 3a 22 2f 70 61 79 61 62 6c 65 22 2c 22 70 75 62 6c 69 63 Data Ascii: {"event_id":"651d690436e84f60850c1c39f199fe83","sent_at":"2024-09-11T17:25:27.793Z","sdk":{"name":"sentry.javascript.nextjs","version":"7.53.1"},"trace":{"environment":"production","release":"1.30.0-release_1.30.0-80b42f1","transaction":"/payable","public
2024-09-11 17:25:29 UTC	1766	OUT	Data Raw: 22 6c 63 70 2e 65 6c 65 6d 65 6e 74 22 3a 22 64 69 76 2e 6a 73 78 2d 34 31 39 38 32 33 38 31 38 35 2e 6d 65 73 73 61 67 65 20 3e 20 70 2e 6a 73 78 2d 34 31 39 38 32 33 38 31 38 35 2e 63 70 2d 6c 69 6e 6b 2e 70 61 79 6d 65 6e 74 2d 64 69 73 63 6c 61 69 6d 65 72 22 2c 22 6c 63 70 2e 73 69 7a 65 22 3a 31 35 33 36 30 2c 22 63 6c 73 2e 73 6f 75 72 63 65 2e 31 22 3a 22 64 69 76 2e 6a 73 78 2d 32 37 30 34 30 34 33 36 38 35 20 3e 20 73 70 61 6e 2e 6a 73 78 2d 32 37 30 34 30 34 33 36 38 35 2e 63 70 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 20 3e 20 73 70 61 6e 2e 6a 73 78 2d 32 37 30 34 30 34 33 36 38 35 22 2c 22 63 6c 73 2e 73 6f 75 72 63 65 2e 32 22 3a 22 64 69 76 2e 6a 73 78 2d 31 31 39 32 35 38 32 30 34 32 2e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 66 6f 6f Data Ascii: "lcp.element":"div.jsx-4198238185.message > p.jsx-4198238185.cp-link.payment-disclaimer","lcp.size":15360,"cls.source.1":"div.jsx-2704043685 > span.jsx-2704043685.cp-link-wrapper > span.jsx-2704043685","cls.source.2":"div.jsx-1192582042.payment-method-foo
2024-09-11 17:25:29 UTC	416	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:29 GMT Content-Type: application/json Content-Length: 41 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin X-Frame-Options: SAMEORIGIN
2024-09-11 17:25:29 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 36 35 31 64 36 39 30 34 33 36 65 38 34 66 36 30 38 35 30 63 31 63 33 39 66 31 39 39 66 65 38 33 22 7d Data Ascii: {"id":"651d690436e84f60850c1c39f199fe83"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49802	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:29 UTC	451	OUT	GET /_next/static/chunks/5439-f4c5699a82de3c8e.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:29 UTC	674	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 253985 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 x-amz-version-id: YIuha.w273NgSECXzSE1HptyBuo3hO5f Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:29 GMT ETag: "1e5daeaf41220ceff890f155747e27b6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d9bf8acc1da383db4531789bbb03ac06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: -YCJpTQluNZq5GlKFLWCDVY4N-uAuwd91dwhGwHz6O-i-tEfyHcTtg== Age: 1 Vary: Origin
2024-09-11 17:25:29 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 39 5d 2c 7b 32 34 36 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 6e 75 6d 62 65 72 3a 6e 28 33 37 39 39 29 2c 65 78 70 69 72 61 74 69 6f 6e 44 61 74 65 3a 6e 28 36 34 32 30 33 29 2c 65 78 70 69 72 61 74 69 6f 6e 4d 6f 6e 74 68 3a 6e 28 34 30 37 38 36 29 2c 65 78 70 69 72 61 74 69 6f 6e 59 65 61 72 3a 6e 28 37 33 37 38 36 29 2c 63 76 76 3a 6e 28 36 30 36 29 2c 70 6f 73 74 61 6c 43 6f 64 65 3a 6e 28 36 36 39 33 37 29 2c 63 72 65 64 69 74 43 61 72 64 54 79 70 65 3a 6e 28 31 31 30 33 38 29 7d 7d 2c Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5439],{24652:function(e,t,n){"use strict";e.exports={number:n(3799),expirationDate:n(64203),expirationMonth:n(40786),expirationYear:n(73786),cvv:n(606),postalCode:n(66937),creditCardType:n(11038)}},
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 2e 64 61 74 65 54 69 6d 65 28 7b 77 69 64 74 68 3a 22 6d 65 64 69 75 6d 22 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 50 50 50 22 3a 6f 3d 74 2e 64 61 74 65 54 69 6d 65 28 7b 77 69 64 74 68 3a 22 6c 6f 6e 67 22 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 6f 3d 74 2e 64 61 74 65 54 69 6d 65 28 7b 77 69 64 74 68 3a 22 66 75 6c 6c 22 7d 29 7d 72 65 74 75 72 6e 20 6f 2e 72 65 70 6c 61 63 65 28 22 7b 7b 64 61 74 65 7d 7d 22 2c 6e 28 69 2c 74 29 29 2e 72 65 70 6c 61 63 65 28 22 7b 7b 74 69 6d 65 7d 7d 22 2c 72 28 75 2c 74 29 29 7d 7d 3b 74 2e 5a 3d 6f 7d 2c 32 34 32 36 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 44 61 74 Data Ascii: .dateTime({width:"medium"});break;case"PPP":o=t.dateTime({width:"long"});break;default:o=t.dateTime({width:"full"})}return o.replace("{{date}}",n(i,t)).replace("{{time}}",r(u,t))}};t.Z=o},24262:function(e,t,n){"use strict";function r(e){var t=new Date(Dat
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 28 72 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 72 26 26 28 72 3d 32 34 29 2c 22 6b 6f 22 3d 3d 3d 74 3f 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 72 2c 7b 75 6e 69 74 3a 22 68 6f 75 72 22 7d 29 3a 70 28 72 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 22 6d 6f 22 3d 3d 3d 74 3f 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 65 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 2c 7b 75 6e 69 74 3a 22 6d 69 6e 75 74 65 22 7d 29 3a 64 2e 6d 28 65 2c 74 29 7d 2c 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 22 73 6f 22 3d Data Ascii: (r,t.length)},k:function(e,t,n){var r=e.getUTCHours();return 0===r&&(r=24),"ko"===t?n.ordinalNumber(r,{unit:"hour"}):p(r,t.length)},m:function(e,t,n){return"mo"===t?n.ordinalNumber(e.getUTCMinutes(),{unit:"minute"}):d.m(e,t)},s:function(e,t,n){return"so"=
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 7b 31 2c 34 7d 2f 2c 4a 3d 2f 5e 2d 3f 5c 64 2b 2f 2c 65 65 3d 2f 5e 2d 3f 5c 64 2f 2c 74 65 3d 2f 5e 2d 3f 5c 64 7b 31 2c 32 7d 2f 2c 6e 65 3d 2f 5e 2d 3f 5c 64 7b 31 2c 33 7d 2f 2c 72 65 3d 2f 5e 2d 3f 5c 64 7b 31 2c 34 7d 2f 2c 6f 65 3d 2f 5e 28 5b 2b 2d 5d 29 28 5c 64 7b 32 7d 29 28 5c 64 7b 32 7d 29 3f 7c 5a 2f 2c 61 65 3d 2f 5e 28 5b 2b 2d 5d 29 28 5c 64 7b 32 7d 29 28 5c 64 7b 32 7d 29 7c 5a 2f 2c 69 65 3d 2f 5e 28 5b 2b 2d 5d 29 28 5c 64 7b 32 7d 29 28 5c 64 7b 32 7d 29 28 28 5c 64 7b 32 7d 29 29 3f 7c 5a 2f 2c 75 65 3d 2f 5e 28 5b 2b 2d 5d 29 28 5c 64 7b 32 7d 29 3a 28 5c 64 7b 32 7d 29 7c 5a 2f 2c 63 65 3d 2f 5e 28 5b 2b 2d 5d 29 28 5c 64 7b 32 7d 29 3a 28 5c 64 7b 32 7d 29 28 3a 28 5c 64 7b 32 7d 29 29 3f 7c 5a 2f 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: {1,4}/,J=/^-?\d+/,ee=/^-?\d/,te=/^-?\d{1,2}/,ne=/^-?\d{1,3}/,re=/^-?\d{1,4}/,oe=/^([+-])(\d{2})(\d{2})?\|Z/,ae=/^([+-])(\d{2})(\d{2})\|Z/,ie=/^([+-])(\d{2})(\d{2})((\d{2}))?\|Z/,ue=/^([+-])(\d{2}):(\d{2})\|Z/,ce=/^([+-])(\d{2}):(\d{2})(:(\d{2}))?\|Z/;function
2024-09-11 17:25:30 UTC	1580	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3e 3d 31 26 26 74 3c 3d 34 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 73 65 74 55 54 43 4d 6f 6e 74 68 28 33 2a 28 6e 2d 31 29 2c 31 29 2c 65 2e 73 65 74 55 54 43 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 2c 65 7d 7d 5d 29 26 26 77 74 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 77 74 28 74 2c 72 29 2c 61 7d 28 50 29 3b 66 75 6e 63 74 69 6f 6e 20 50 74 28 65 29 7b 72 65 74 75 72 6e 20 50 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: on(e,t){return t>=1&&t<=4}},{key:"set",value:function(e,t,n){return e.setUTCMonth(3*(n-1),1),e.setUTCHours(0,0,0,0),e}}])&&wt(t.prototype,n),r&&wt(t,r),a}(P);function Pt(e){return Pt="function"===typeof Symbol&&"symbol"===typeof Symbol.iterator?function(e
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 76 61 72 20 49 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c Data Ascii: ,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}var It=function(e){!function(e,t){if("function"!==typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{val
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 65 3b 55 6e 28 74 68 69 73 2c 61 29 3b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 51 6e 28 56 6e 28 65 3d 6f 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6f 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 6e 29 29 29 2c 22 70 72 69 6f 72 69 74 79 22 2c 39 30 29 2c 51 6e 28 56 6e 28 65 29 2c 22 69 6e 63 6f 6d 70 61 74 69 62 6c 65 54 6f 6b 65 6e 73 22 2c 5b 22 44 22 2c 22 69 22 2c 22 65 22 2c 22 63 22 2c 22 74 22 2c 22 54 22 5d 29 2c 65 7d 72 65 74 75 72 6e 20 74 3d 61 2c 28 6e 3d 5b 7b 6b 65 79 3a 22 70 61 72 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: e;Un(this,a);for(var t=arguments.length,n=new Array(t),r=0;r<t;r++)n[r]=arguments[r];return Qn(Vn(e=o.call.apply(o,[this].concat(n))),"priority",90),Qn(Vn(e),"incompatibleTokens",["D","i","e","c","t","T"]),e}return t=a,(n=[{key:"parse",value:function(e,t,
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4a 72 28 65 29 7b 72 65 74 75 72 6e 20 4a 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 7d 2c 4a 72 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 6f 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d Data Ascii: rn e}function Jr(e){return Jr=Object.setPrototypeOf?Object.getPrototypeOf:function(e){return e.__proto__\|\|Object.getPrototypeOf(e)},Jr(e)}function eo(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 65 29 7b 72 65 74 75 72 6e 20 6d 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 7d 2c 6d 61 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f Data Ascii: new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function ma(e){return ma=Object.setPrototypeOf?Object.getPrototypeOf:function(e){return e.__proto__\|\|Object.getPrototypeOf(e)},ma(e)}function va(e,t,n){return t in e?
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 34 2b 74 29 2b 22 7d 29 7c 28 5c 5c 64 7b 32 7d 7c 5b 2b 2d 5d 5c 5c 64 7b 22 2b 28 32 2b 74 29 2b 22 7d 29 24 29 22 29 2c 72 3d 65 2e 6d 61 74 63 68 28 6e 29 3b 69 66 28 21 72 29 72 65 74 75 72 6e 7b 79 65 61 72 3a 4e 61 4e 2c 72 65 73 74 44 61 74 65 53 74 72 69 6e 67 3a 22 22 7d 3b 76 61 72 20 6f 3d 72 5b 31 5d 3f 70 61 72 73 65 49 6e 74 28 72 5b 31 5d 29 3a 6e 75 6c 6c 2c 61 3d 72 5b 32 5d 3f 70 61 72 73 65 49 6e 74 28 72 5b 32 5d 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 7b 79 65 61 72 3a 6e 75 6c 6c 3d 3d 3d 61 3f 6f 3a 31 30 30 2a 61 2c 72 65 73 74 44 61 74 65 53 74 72 69 6e 67 3a 65 2e 73 6c 69 63 65 28 28 72 5b 31 5d 7c 7c 72 5b 32 5d 29 2e 6c 65 6e 67 74 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 Data Ascii: 4+t)+"})\|(\\d{2}\|[+-]\\d{"+(2+t)+"})$)"),r=e.match(n);if(!r)return{year:NaN,restDateString:""};var o=r[1]?parseInt(r[1]):null,a=r[2]?parseInt(r[2]):null;return{year:null===a?o:100*a,restDateString:e.slice((r[1]\|\|r[2]).length)}}function d(e,t){if(null===t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49801	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:29 UTC	628	OUT	GET /_next/static/chunks/9661-dfcd811ec7b9d297.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:30 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11601 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: zKAZc429VuX2jsqsmVieetGdmXeON2uZ Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:31 GMT ETag: "7991bebee72492de178e3236737b8b96" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 cc0ab20766d57035422a2c4c69fe0620.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: IpNJB6OVQQY6KSSYIVGAe_J1mnlQFynu8DxXLC8OxMUnG1AzfGuRIA== Vary: Origin
2024-09-11 17:25:30 UTC	11601	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 36 36 31 5d 2c 7b 39 33 34 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 73 29 7b 73 2e 64 28 69 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 29 3b 76 61 72 20 74 3d 73 28 39 35 36 32 37 29 2c 61 3d 73 2e 6e 28 74 29 2c 6e 3d 73 28 36 37 32 39 34 29 2c 6f 3d 73 28 33 34 32 34 32 29 2c 6c 3d 73 28 35 34 34 39 30 29 2c 72 3d 73 28 34 34 30 31 32 29 2c 63 3d 73 28 35 37 32 33 30 29 2c 64 3d 73 28 36 37 32 31 29 2c 75 3d 73 28 39 38 33 34 33 29 2c 78 3d 73 28 38 35 38 39 33 29 3b 76 61 72 20 79 3d 65 3d 3e 7b 6c 65 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9661],{93429:function(e,i,s){s.d(i,{Z:function(){return w}});var t=s(95627),a=s.n(t),n=s(67294),o=s(34242),l=s(54490),r=s(44012),c=s(57230),d=s(6721),u=s(98343),x=s(85893);var y=e=>{let

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49804	34.213.165.212	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:30 UTC	525	OUT	GET /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1 Host: prd.sentry-io.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:30 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 11 Sep 2024 17:25:30 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49806	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:30 UTC	451	OUT	GET /_next/static/chunks/5669-3d23076a3a43f159.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:30 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13542 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: um3TwWlbbzXmbEtCXlWuvp2HGN2MFNvu Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:30 GMT ETag: "ff073630bdc785112171092880fdb4b9" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90cf045072373c2c671297de3161846e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 9IUhVvubpFDv6nFoHbXqPlPuulZfDQ1b9b0xahl-HOF1hophUvt3fQ== Age: 1 Vary: Origin
2024-09-11 17:25:30 UTC	13542	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 36 36 39 5d 2c 7b 39 39 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 73 29 7b 73 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 7d 29 3b 76 61 72 20 74 3d 73 28 36 37 32 39 34 29 2c 6f 3d 73 28 39 35 36 32 37 29 2c 63 3d 73 2e 6e 28 6f 29 2c 69 3d 73 28 38 36 38 39 36 29 2c 72 3d 73 28 34 34 30 31 32 29 2c 61 3d 73 28 32 33 32 34 30 29 2c 6c 3d 73 28 38 35 38 39 33 29 2c 64 3d 65 3d 3e 7b 6c 65 74 7b 63 64 6e 3a 6e 2c 69 6e 74 6c 3a 73 7d 3d 65 3b 63 6f 6e 73 74 20 74 3d 73 2e 66 6f 72 6d 61 74 4d 65 73 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5669],{99278:function(e,n,s){s.d(n,{Z:function(){return _}});var t=s(67294),o=s(95627),c=s.n(o),i=s(86896),r=s(44012),a=s(23240),l=s(85893),d=e=>{let{cdn:n,intl:s}=e;const t=s.formatMes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49805	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:30 UTC	628	OUT	GET /_next/static/chunks/5544-4c8425f3484e6d6d.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:30 UTC	634	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 38182 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: BEL5wQX4VRZsHgcM09RRiKb9hXFeDu2x Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:30 GMT ETag: "3cbde6309cb722a79008599da2fc97ef" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 286eb4b50e0acf373dd03645aee00b7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: W7wufXKytM0wc2rDiE41UIKk4MpzFam0CtfKzWZch0ru5YrKbNgbQQ== Age: 7916 Vary: Origin
2024-09-11 17:25:30 UTC	15750	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 35 34 34 5d 2c 7b 35 39 35 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 39 35 36 32 37 29 2c 73 3d 6e 2e 6e 28 6f 29 2c 61 3d 6e 28 34 31 36 36 34 29 2c 72 3d 6e 2e 6e 28 61 29 2c 69 3d 6e 28 36 37 32 39 34 29 2c 6c 3d 6e 28 34 34 30 31 32 29 2c 63 3d 6e 28 32 33 32 34 30 29 2c 64 3d 6e 28 35 31 32 34 35 29 2c 70 3d 6e 28 32 38 37 30 29 2c 6d 3d 6e 28 38 35 38 39 33 29 3b 63 6f 6e 73 74 20 79 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 69 74 79 2e 69 6e 74 75 69 74 2e 63 6f 6d 2f 69 6e 64 65 78 2e 70 68 70 2f Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5544],{59596:function(e,t,n){var o=n(95627),s=n.n(o),a=n(41664),r=n.n(a),i=n(67294),l=n(44012),c=n(23240),d=n(51245),p=n(2870),m=n(85893);const y="https://security.intuit.com/index.php/
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 6f 2d 31 32 30 5d 5d 5d 29 2b 22 20 69 6e 70 75 74 2d 73 70 61 6e 22 2c 63 68 69 6c 64 72 65 6e 3a 74 7d 29 2c 28 30 2c 6d 2e 6a 73 78 29 28 61 28 29 2c 7b 69 64 3a 22 33 31 38 38 31 31 30 30 33 22 2c 64 79 6e 61 6d 69 63 3a 5b 73 3f 70 2e 63 6f 6c 6f 72 73 2e 72 65 64 45 72 72 6f 72 3a 70 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 33 2c 63 2c 6f 2c 70 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 6f 2d 31 32 30 5d 2c 63 68 69 6c 64 72 65 6e 3a 5b 22 2e 61 75 74 6f 2d 67 72 6f 77 69 6e 67 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7d 22 2c 60 2e 61 75 74 Data Ascii: o-120]]])+" input-span",children:t}),(0,m.jsx)(a(),{id:"318811003",dynamic:[s?p.colors.redError:p.colors.gray03,c,o,p.breakpoints.md,o-120],children:[".auto-growing-input-wrapper.__jsx-style-dynamic-selector{position:relative;display:inline-block;}",`.aut
2024-09-11 17:25:30 UTC	6048	IN	Data Raw: 72 61 6e 67 65 57 61 72 6e 3a 70 2e 63 6f 6c 6f 72 73 2e 6f 72 61 6e 67 65 57 61 72 6e 2c 77 61 72 6e 3a 70 2e 63 6f 6c 6f 72 73 2e 77 61 72 6e 7d 2c 75 3d 72 5b 65 5d 3f 3f 72 2e 77 61 72 6e 2c 78 3d 22 69 6e 66 6f 22 3d 3d 3d 65 7c 7c 22 6f 72 61 6e 67 65 57 61 72 6e 22 3d 3d 3d 65 3f 70 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 3a 70 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 3b 72 65 74 75 72 6e 28 30 2c 6d 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 72 65 66 3a 74 68 69 73 2e 65 72 72 6f 72 52 65 66 2c 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 34 30 33 32 33 32 31 32 39 31 22 2c 5b 75 2c 74 68 69 73 2e 70 72 6f 70 73 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 49 63 6f 6e 50 6f 73 69 74 69 6f 6e 7c 7c 22 63 65 6e 74 65 72 22 2c 70 2e Data Ascii: rangeWarn:p.colors.orangeWarn,warn:p.colors.warn},u=r[e]??r.warn,x="info"===e\|\|"orangeWarn"===e?p.colors.white:p.colors.gray;return(0,m.jsxs)("div",{ref:this.errorRef,className:a().dynamic([["4032321291",[u,this.props.errorMessageIconPosition\|\|"center",p.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49808	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:30 UTC	451	OUT	GET /_next/static/chunks/8804-0df16ebd6cb32488.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:30 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 24221 Connection: close Date: Wed, 11 Sep 2024 17:25:30 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT ETag: "d80243304aa96aa47f087c7b6fd7d648" x-amz-server-side-encryption: AES256 x-amz-version-id: bVxA_PDViPixwpyG_WfhuXiRTJEhrNZa Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f8fe53d5464b299529d281799da8de30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: vfQ-XofPwS5hKPoKOU5ZGUEmYQP5g7V-RU8HDoHsmp27dwdJBo5B9Q== Age: 1 Vary: Origin
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 30 34 5d 2c 7b 38 36 35 35 33 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 65 2c 69 29 7b 69 2e 64 28 65 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 76 61 72 20 61 3d 69 28 35 39 34 39 39 29 2c 6c 3d 69 28 39 35 36 32 37 29 2c 74 3d 69 2e 6e 28 6c 29 2c 72 3d 69 28 36 37 32 39 34 29 2c 6f 3d 69 28 34 34 30 31 32 29 2c 6e 3d 69 28 35 34 34 39 30 29 2c 63 3d 69 28 35 31 34 35 39 29 2c 75 3d 69 28 38 35 38 39 33 29 3b 76 61 72 20 78 3d 73 3d 3e 7b 6c 65 74 7b 63 6f 6c 6f 72 3a 65 3d 22 23 36 42 36 43 37 32 22 2c 77 69 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8804],{86553:function(s,e,i){i.d(e,{Z:function(){return b}});var a=i(59499),l=i(95627),t=i.n(l),r=i(67294),o=i(44012),n=i(54490),c=i(51459),u=i(85893);var x=s=>{let{color:e="#6B6C72",wi
2024-09-11 17:25:30 UTC	7837	IN	Data Raw: 78 75 61 6c 22 5d 2c 22 64 69 63 6b 6a 75 69 63 65 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 64 69 63 6b 6d 69 6c 6b 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 64 69 63 6b 73 6c 61 70 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 64 69 63 6b 77 61 64 22 3a 5b 22 69 6e 73 75 6c 74 22 5d 2c 22 64 69 63 6b 77 65 61 73 65 6c 22 3a 5b 22 69 6e 73 75 6c 74 22 5d 2c 22 64 69 63 6b 77 65 65 64 22 3a 5b 22 69 6e 73 75 6c 74 22 5d 2c 22 64 69 63 6b 77 6f 64 22 3a 5b 22 69 6e 73 75 6c 74 22 5d 2c 22 64 69 6c 64 6f 22 3a 5b 22 73 65 78 75 61 6c 22 5d 2c 22 64 69 6e 6b 22 3a 5b 22 69 6e 73 75 6c 74 22 2c 22 73 65 78 75 61 6c 22 5d 2c 22 64 69 70 73 68 69 74 22 3a 5b 22 69 6e 73 75 6c 74 22 5d 2c 22 64 6f 6f 63 68 62 61 67 22 3a 5b 22 69 6e 73 75 6c 74 22 5d 2c 22 64 6f 6f Data Ascii: xual"],"dickjuice":["sexual"],"dickmilk":["sexual"],"dickslap":["sexual"],"dickwad":["insult"],"dickweasel":["insult"],"dickweed":["insult"],"dickwod":["insult"],"dildo":["sexual"],"dink":["insult","sexual"],"dipshit":["insult"],"doochbag":["insult"],"doo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49807	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:30 UTC	628	OUT	GET /_next/static/chunks/5428-18008d1732926864.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:31 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21337 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 7cQejTxz7aErTbnfuNwT9pYS3wWQoshQ Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:32 GMT ETag: "d8c386cd534bb038504df3aaf6e9357d" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6fa33d47af6f4da7007689083cfe9b9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: ilKE0mtqiKA_zKgxGTU2M46U_z7NUa_Z2Q2rVysZIh8gRz8cN1LCXw== Vary: Origin
2024-09-11 17:25:31 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 32 38 2c 36 37 32 31 5d 2c 7b 31 30 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 74 29 7b 76 61 72 20 73 3d 74 28 39 35 36 32 37 29 2c 6e 3d 74 2e 6e 28 73 29 2c 6f 3d 74 28 36 37 32 39 34 29 2c 61 3d 74 28 34 34 30 31 32 29 2c 63 3d 74 28 33 36 34 35 36 29 2c 6c 3d 74 28 39 33 34 32 39 29 2c 72 3d 74 28 31 30 37 37 39 29 2c 64 3d 74 28 38 34 31 36 31 29 2c 6d 3d 74 28 36 37 32 31 34 29 2c 78 3d 74 28 35 34 36 32 33 29 2c 79 3d 74 28 37 30 36 37 38 29 2c 70 3d 74 28 39 36 35 35 34 29 2c 66 3d 74 28 37 31 32 39 35 29 2c 68 3d 74 28 38 32 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5428,6721],{10616:function(e,i,t){var s=t(95627),n=t.n(s),o=t(67294),a=t(44012),c=t(36456),l=t(93429),r=t(10779),d=t(84161),m=t(67214),x=t(54623),y=t(70678),p=t(96554),f=t(71295),h=t(82
2024-09-11 17:25:31 UTC	4953	IN	Data Raw: 73 6d 2c 63 2e 63 6f 6c 6f 72 73 2e 64 61 72 6b 47 72 61 79 5d 5d 5d 29 2b 22 20 70 61 79 6d 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 65 6d 61 69 6c 2d 6d 73 67 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 6c 2e 6a 73 78 29 28 61 2e 5a 2c 7b 69 64 3a 22 50 41 59 4e 4f 57 5f 50 41 59 4d 45 4e 54 5f 43 4f 4e 46 49 52 4d 41 54 49 4f 4e 5f 45 4d 41 49 4c 5f 53 45 4e 54 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 57 65 20 73 65 6e 74 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 6d 65 72 63 68 61 6e 74 20 61 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 65 6d 61 69 6c 22 7d 29 7d 29 2c 28 30 2c 6c 2e 6a 73 78 29 28 6e 28 29 2c 7b 69 64 3a 22 31 38 30 30 39 34 33 35 37 39 22 2c 64 79 6e 61 6d 69 63 3a 5b 63 2e 66 6f 6e 74 53 69 7a 65 2e 73 6d 2c 63 2e Data Ascii: sm,c.colors.darkGray]]])+" payment-confirmation-email-msg",children:(0,l.jsx)(a.Z,{id:"PAYNOW_PAYMENT_CONFIRMATION_EMAIL_SENT",defaultMessage:"We sent you and your merchant a confirmation email"})}),(0,l.jsx)(n(),{id:"1800943579",dynamic:[c.fontSize.sm,c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49809	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:30 UTC	628	OUT	GET /_next/static/chunks/6139-309dee1860ca094e.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:30 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 58979 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: cPwlfe8sjgMFPsu06rRlkxhFaP6BSiMR Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Sep 2024 21:19:52 GMT ETag: "dbb61563fbe82c516a5dfa738dbfd1d9" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 882f747f39885162595630c95dd0012c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: wmZN8OQ0uQN6qf-jiJRifPCvP2TrK-8-hGgQHQHGpeynAetDVhl9hg== Age: 72339 Vary: Origin
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 33 39 5d 2c 7b 33 36 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 76 61 72 20 6f 3d 73 28 35 39 34 39 39 29 2c 61 3d 73 28 39 35 36 32 37 29 2c 6e 3d 73 2e 6e 28 61 29 2c 69 3d 73 28 36 37 32 39 34 29 2c 72 3d 73 28 38 36 38 39 36 29 2c 6c 3d 73 28 34 34 30 31 32 29 2c 63 3d 73 28 32 33 32 34 30 29 2c 64 3d 73 28 33 37 30 30 34 29 2c 6d 3d 73 28 35 31 32 34 35 29 2c 70 3d 73 28 38 35 38 39 33 29 3b 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6139],{3619:function(e,t,s){var o=s(59499),a=s(95627),n=s.n(a),i=s(67294),r=s(86896),l=s(44012),c=s(23240),d=s(37004),m=s(51245),p=s(85893);function x(e,t){var s=Object.keys(e);if(Objec
2024-09-11 17:25:30 UTC	16384	IN	Data Raw: 6f 77 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 5f 2e 6a 73 78 29 28 22 73 70 61 6e 22 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 4d 65 73 73 61 67 65 22 2c 73 74 79 6c 65 3a 7b 6d 61 72 67 69 6e 54 6f 70 3a 44 3f 22 32 34 70 78 22 3a 22 30 70 78 22 7d 2c 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 31 38 35 35 36 33 30 32 34 39 22 2c 5b 50 3f 22 62 6c 6f 63 6b 22 3a 22 6e 6f 6e 65 22 2c 79 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 35 2c 79 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 31 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 44 3f 22 32 35 70 78 22 3a 22 35 70 78 22 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 Data Ascii: ow",children:(0,_.jsx)("span",{"aria-label":"Message",style:{marginTop:D?"24px":"0px"},className:a().dynamic([["1855630249",[P?"block":"none",y.colors.gray05,y.colors.gray01,y.breakpoints.sm,D?"25px":"5px",y.breakpoints.sm,y.breakpoints.sm,y.breakpoints.s
2024-09-11 17:25:31 UTC	10072	IN	Data Raw: 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 73 2e 70 75 73 68 2e 61 70 70 6c 79 28 73 2c 6f 29 7d 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b Data Ascii: ){var s=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),s.push.apply(s,o)}return s}function G(e){for(var t=1;t<arguments.length;t+
2024-09-11 17:25:31 UTC	16139	IN	Data Raw: 6c 65 63 74 6f 72 73 2e 77 65 62 41 64 64 72 53 65 6c 65 63 74 6f 72 28 73 29 2c 76 3d 65 65 2e 63 6f 6d 70 61 6e 79 49 6e 66 6f 53 65 6c 65 63 74 6f 72 73 2e 61 64 64 72 65 73 73 53 65 6c 65 63 74 6f 72 28 73 29 2c 4f 3d 65 65 2e 63 6f 6d 70 61 6e 79 49 6e 66 6f 53 65 6c 65 63 74 6f 72 73 2e 6e 61 6d 65 53 65 6c 65 63 74 6f 72 28 73 29 2c 49 3d 65 65 2e 63 6f 6d 70 61 6e 79 49 6e 66 6f 53 65 6c 65 63 74 6f 72 73 2e 6c 6f 67 6f 53 65 6c 65 63 74 6f 72 28 73 29 2c 43 3d 65 65 2e 63 6f 6d 70 61 6e 79 49 6e 66 6f 53 65 6c 65 63 74 6f 72 73 2e 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 28 73 29 2c 4d 3d 6f 65 2e 59 2e 72 65 66 65 72 65 6e 63 65 4e 75 6d 62 65 72 53 65 6c 65 63 74 6f 72 28 6f 29 2c 52 3d 6f 65 2e 59 2e 64 75 65 44 61 74 65 53 65 6c 65 63 74 6f Data Ascii: lectors.webAddrSelector(s),v=ee.companyInfoSelectors.addressSelector(s),O=ee.companyInfoSelectors.nameSelector(s),I=ee.companyInfoSelectors.logoSelector(s),C=ee.companyInfoSelectors.localeSelector(s),M=oe.Y.referenceNumberSelector(o),R=oe.Y.dueDateSelecto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49810	52.85.48.9	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:30 UTC	583	OUT	GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:30 UTC	776	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1559 Connection: close Date: Tue, 16 Jul 2024 21:54:59 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 16 Jul 2024 17:27:04 GMT ETag: "3867b2388b619ff7fddc29ef359fc9aa" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: IKXrUoItkKbxZQ20ut9b8FhMghJH_Xd7 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 db89633bf3348e057f316c437d2aee7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL50-C2 X-Amz-Cf-Id: vSVtgl6RdB7sNLcGN8MhiLBWz7WM5EIoS4-QDWgG1v_b-2gCnzh9dw== Age: 4908632
2024-09-11 17:25:30 UTC	1559	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 33 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 65 29 7b 76 61 72 20 74 2c 69 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 65 6e 61 62 6c 65 64 29 3f 65 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49812	34.213.165.212	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:30 UTC	525	OUT	GET /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/1.1 Host: prd.sentry-io.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:31 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 11 Sep 2024 17:25:31 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49811	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:30 UTC	637	OUT	GET /_next/static/chunks/pages/payable-f99486b740249e9c.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:31 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 23482 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 7N5E3AuKvugmehGITXMh0mAGDxT0euPt Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:32 GMT ETag: "c688c797224f889413a44be90805f57f" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 96c1c36adc76f99239fd3220e5be7e6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: Di-fRxk2gsYRNmTegsdLP-bHO_ECWna9v2Wt4HvNqzFQ2-5_AkjRbw== Vary: Origin
2024-09-11 17:25:31 UTC	15754	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 30 38 2c 37 31 32 5d 2c 7b 36 30 37 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 61 28 36 37 32 39 34 29 3b 76 61 72 20 6f 3d 61 28 35 31 32 34 35 29 2c 6e 3d 61 28 38 35 38 39 33 29 3b 74 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 74 3d 32 30 2c 68 65 69 67 68 74 3a 61 3d 32 30 2c 63 6f 6c 6f 72 3a 73 3d 6f 2e 63 6f 6c 6f 72 73 2e 6c 69 67 68 74 42 6c 75 65 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 6e 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 77 69 64 74 68 3a 74 2c 68 65 69 67 68 74 3a 61 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7908,712],{60712:function(e,t,a){"use strict";a.r(t);a(67294);var o=a(51245),n=a(85893);t.default=e=>{let{width:t=20,height:a=20,color:s=o.colors.lightBlue}=e;return(0,n.jsx)("svg",{width:t,height:a
2024-09-11 17:25:31 UTC	7728	IN	Data Raw: 29 7b 2e 6d 61 69 6e 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 6d 6f 62 69 6c 65 2d 74 69 6d 65 2d 6c 65 66 74 2d 74 6f 2d 70 61 79 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 7d 60 2c 22 2e 6d 61 69 6e 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 73 63 68 65 64 75 6c 65 2d 70 61 79 2d 63 61 72 64 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 22 2c 60 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 24 7b 62 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d Data Ascii: ){.main.__jsx-style-dynamic-selector .mobile-time-left-to-pay.__jsx-style-dynamic-selector{display:none;}}`,".main.__jsx-style-dynamic-selector .schedule-pay-card.__jsx-style-dynamic-selector{display:none;}",`@media screen and (max-width:${b.breakpoints.m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49813	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:31 UTC	644	OUT	GET /_next/static/1.30.0-release_1.30.0-80b42f1/_buildManifest.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:31 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3095 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: iQDghs_rrn8tA7E14l5uxmOjp7D.M5lv Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 16:50:58 GMT ETag: "a6d46560df992895f59a39934f1155fe" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ec9e3bc729d9c6d55ed32446408ad62e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: nm1YnDXJ3fp9DHqREAq9AQRK6Irbp30LL6rHSAFfwqPBb4F5X3edsA== Age: 2074 Vary: Origin
2024-09-11 17:25:31 UTC	3095	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 63 2c 61 2c 74 2c 69 2c 6e 2c 64 2c 72 2c 70 2c 75 2c 66 2c 6f 2c 6b 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 65 2c 73 2c 63 2c 61 2c 70 2c 69 2c 75 2c 66 2c 6b 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 62 32 66 32 63 35 30 38 36 31 30 35 37 62 63 30 2e 6a 73 22 5d 2c 22 2f 50 61 79 6d 65 6e 74 42 6c 6f 63 6b 65 64 22 3a 5b 65 2c 73 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 50 61 79 6d 65 6e 74 42 6c 6f 63 6b 65 64 2d 65 34 36 Data Ascii: self.__BUILD_MANIFEST=function(e,s,c,a,t,i,n,d,r,p,u,f,o,k){return{__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":[e,s,c,a,p,i,u,f,k,"static/chunks/pages/index-b2f2c50861057bc0.js"],"/PaymentBlocked":[e,s,"static/chunks/pages/PaymentBlocked-e46

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49814	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:31 UTC	642	OUT	GET /_next/static/1.30.0-release_1.30.0-80b42f1/_ssgManifest.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:32 UTC	627	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 77 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: dwaBff2Shuq_8k4igTKlalX2ZzOMo5Sc Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:32 GMT ETag: "b6652df95db52feb4daf4eca35380933" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 debe291145dc27044f50d04bac101cd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: xgIrLXFmI88FEEBa7JBSV5u46HMYb6JQcfFMbANSCiT9xW0DQ9doxQ== Vary: Origin
2024-09-11 17:25:32 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49815	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:31 UTC	628	OUT	GET /_next/static/chunks/2766.b29c036bad593b19.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:32 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21018 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2Bs70vMc6gJJpBAUyrlKxdz1mgrSdb3_ Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:33 GMT ETag: "9507d9bd19ef23cfa07cf7346001111b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6fa33d47af6f4da7007689083cfe9b9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: -uaiM7L5XhfzKRkXBhDhyuacHjmM_Rj5lRnrpMfLbN41ccXjSeAfBA== Vary: Origin
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 36 36 5d 2c 7b 33 32 37 36 36 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 73 2c 65 29 7b 65 2e 72 28 73 29 3b 76 61 72 20 4c 3d 65 28 39 35 36 32 37 29 2c 61 3d 65 2e 6e 28 4c 29 2c 6c 3d 28 65 28 36 37 32 39 34 29 2c 65 28 38 36 38 39 36 29 29 2c 69 3d 65 28 34 34 30 31 32 29 2c 74 3d 65 28 38 35 38 39 33 29 3b 73 2e 64 65 66 61 75 6c 74 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 43 3d 28 30 2c 6c 2e 5a 29 28 29 2e 66 6f 72 6d 61 74 4d 65 73 73 61 67 65 28 7b 69 64 3a 22 50 41 59 46 4c 4f 57 5f 42 41 4e 4b 5f 41 43 43 4f 55 4e 54 5f 4e 55 4d 42 45 52 22 2c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2766],{32766:function(C,s,e){e.r(s);var L=e(95627),a=e.n(L),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ACCOUNT_NUMBER",
2024-09-11 17:25:32 UTC	4634	IN	Data Raw: 2e 38 32 31 31 39 33 32 2c 33 38 2e 31 30 39 33 36 34 37 20 35 32 2e 38 32 31 31 39 33 32 2c 33 38 2e 35 31 31 36 36 31 38 20 43 35 32 2e 38 32 31 31 39 33 32 2c 33 38 2e 39 31 33 39 35 38 39 20 35 32 2e 39 30 37 38 38 32 36 2c 33 39 2e 36 30 38 38 33 35 37 20 35 33 2e 33 37 36 30 30 35 33 2c 33 39 2e 36 30 38 38 33 35 37 20 43 35 33 2e 38 33 39 37 39 33 36 2c 33 39 2e 36 30 38 38 33 35 37 20 35 33 2e 39 32 32 31 34 38 35 2c 33 38 2e 39 31 33 39 35 38 39 20 35 33 2e 39 32 32 31 34 38 35 2c 33 38 2e 35 31 31 36 36 31 38 20 5a 20 4d 35 37 2e 30 39 39 33 31 35 2c 33 38 2e 35 31 31 36 36 31 38 20 43 35 37 2e 30 39 39 33 31 35 2c 33 39 2e 34 34 32 32 32 37 38 20 35 36 2e 37 31 33 35 34 37 32 2c 34 30 2e 30 32 33 33 32 33 36 20 35 36 2e 30 32 30 30 33 32 2c 34 Data Ascii: .8211932,38.1093647 52.8211932,38.5116618 C52.8211932,38.9139589 52.9078826,39.6088357 53.3760053,39.6088357 C53.8397936,39.6088357 53.9221485,38.9139589 53.9221485,38.5116618 Z M57.099315,38.5116618 C57.099315,39.4422278 56.7135472,40.0233236 56.020032,4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49816	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:31 UTC	451	OUT	GET /_next/static/chunks/2352-26b800f7418ab0e8.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:31 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 19686 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: wxnuYrSUMbn3q5CZO8zI4IGBxCUfxcD2 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:30 GMT ETag: "1e55a07d6fbc854d8604746b8d20e42b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 56fad5a50ef67bd961b9722ed0931838.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: MBSOO_TIQW76sf6uphqRuImKxBSMIj4WXt0bq4Da0e3sp5tSKr5BbA== Age: 2 Vary: Origin
2024-09-11 17:25:31 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 35 32 5d 2c 7b 35 36 38 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 39 35 36 32 37 29 2c 73 3d 6e 2e 6e 28 69 29 2c 6f 3d 6e 28 36 37 32 39 34 29 2c 72 3d 6e 28 34 34 30 31 32 29 2c 61 3d 6e 28 31 34 30 36 37 29 2c 6c 3d 6e 28 35 34 36 32 33 29 2c 63 3d 6e 28 37 30 36 37 38 29 2c 64 3d 6e 28 34 34 39 34 37 29 2c 6d 3d 6e 28 35 31 32 34 35 29 2c 70 3d 6e 28 38 35 38 39 33 29 3b 74 2e 5a 3d 65 3d 3e 7b 6c 65 74 7b 68 69 64 65 3a 74 2c 6f 6e 43 6f 6e 74 69 6e 75 65 3a 6e 2c 68 65 61 64 65 72 49 6e 74 6c 3a 69 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2352],{56810:function(e,t,n){var i=n(95627),s=n.n(i),o=n(67294),r=n(44012),a=n(14067),l=n(54623),c=n(70678),d=n(44947),m=n(51245),p=n(85893);t.Z=e=>{let{hide:t,onContinue:n,headerIntl:i
2024-09-11 17:25:31 UTC	3302	IN	Data Raw: 70 78 20 73 6f 6c 69 64 20 24 7b 63 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 7d 60 3a 60 32 70 78 20 73 6f 6c 69 64 20 24 7b 63 2e 63 6f 6c 6f 72 73 2e 67 72 65 65 6e 7d 60 5d 5d 5d 29 2b 22 20 77 72 61 70 70 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 64 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 72 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 32 32 35 30 30 38 36 34 32 22 2c 5b 74 3f 63 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 3a 63 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 35 2c 6f 7c 7c 22 22 2c 69 2c 74 3f 60 31 70 78 20 73 6f 6c 69 64 20 24 7b 63 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 7d 60 3a 60 31 70 78 20 73 6f 6c 69 64 20 24 7b 63 2e 63 6f 6c 6f 72 73 2e 67 72 65 65 6e 7d 60 2c 74 3f 60 31 70 78 20 73 6f 6c 69 64 20 24 7b Data Ascii: px solid ${c.colors.error}`:`2px solid ${c.colors.green}`]]])+" wrapper",children:[(0,d.jsx)("div",{className:r().dynamic([["225008642",[t?c.colors.error:c.colors.gray05,o\|\|"",i,t?`1px solid ${c.colors.error}`:`1px solid ${c.colors.green}`,t?`1px solid ${

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49817	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:31 UTC	451	OUT	GET /_next/static/chunks/4737-7116baf9e1ba5e68.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:31 UTC	632	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 330319 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: xsu97mF.9lnV7hmH2_1SKMhmsY9By4v7 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:30 GMT ETag: "c29447b41e5e7fc7df2ede897a636a7c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 57d93b321db68494cc6755a0d3fb29cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: a9JKf6x0EkQi6M1kz4VifYSVuHbwaMPwZ_GOQp1XEYSOg911r4Z-Sg== Age: 1 Vary: Origin
2024-09-11 17:25:31 UTC	15752	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 33 37 2c 32 33 37 38 2c 31 31 39 33 2c 37 39 35 36 2c 34 35 37 37 2c 38 33 36 37 2c 32 30 30 31 2c 34 34 30 39 2c 39 38 36 33 5d 2c 7b 31 33 34 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 72 3d 61 28 39 35 36 32 37 29 2c 73 3d 61 2e 6e 28 72 29 2c 6e 3d 61 28 36 37 32 39 34 29 2c 6f 3d 61 28 34 34 30 31 32 29 2c 69 3d 61 28 37 32 34 36 38 29 2c 6c 3d 61 28 35 34 36 32 33 29 2c 63 3d 61 28 35 38 33 36 37 29 2c 64 3d 61 28 32 39 38 36 33 29 2c 70 3d 61 28 35 31 32 34 35 29 2c 6d 3d 61 28 38 35 38 39 33 29 3b 74 2e 5a 3d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4737,2378,1193,7956,4577,8367,2001,4409,9863],{13484:function(e,t,a){var r=a(95627),s=a.n(r),n=a(67294),o=a(44012),i=a(72468),l=a(54623),c=a(58367),d=a(29863),p=a(51245),m=a(85893);t.Z=
2024-09-11 17:25:31 UTC	16384	IN	Data Raw: 79 2e 64 69 73 70 6c 61 79 2c 70 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 70 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 5d 5d 5d 29 2b 22 20 73 63 68 65 64 75 6c 65 2d 70 61 79 2d 62 75 74 74 6f 6e 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6d 2e 6a 73 78 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6e 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 33 35 32 35 36 32 37 30 39 34 22 2c 5b 5a 2e 63 61 70 74 69 6f 6e 2e 64 69 73 70 6c 61 79 2c 5a 2e 63 61 70 74 69 6f 6e 2e 63 6f 6c 6f 72 2c 5a 5b 22 61 72 69 61 2d 6c 61 62 65 6c 22 5d 2c 5a 2e 61 6d 6f 75 6e 74 54 6f 50 61 79 2e 64 69 73 70 6c 61 79 2c 70 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 70 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 5d 5d 5d 29 2b 22 20 63 61 70 74 69 6f Data Ascii: y.display,p.breakpoints.md,p.breakpoints.md]]])+" schedule-pay-button",children:[(0,m.jsx)("span",{className:n().dynamic([["3525627094",[Z.caption.display,Z.caption.color,Z["aria-label"],Z.amountToPay.display,p.breakpoints.md,p.breakpoints.md]]])+" captio
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 79 65 61 72 2d 72 65 61 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 38 70 78 3b 6c 65 66 74 3a 2d 38 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 61 65 61 65 61 65 3b 7d 22 2c 22 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 6f 70 70 65 72 5b 64 61 74 61 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 27 62 6f 74 74 6f 6d 27 5d 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 74 72 69 61 6e 67 6c 65 7b 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d Data Ascii: w--down-arrow::before,.react-datepicker__month-year-read-view--down-arrow::before{content:'';z-index:-1;border-width:8px;left:-8px;border-bottom-color:#aeaeae;}",".react-datepicker-popper[data-placement^='bottom'] .react-datepicker__triangle{top:0;margin-
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 63 63 63 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 74 6f 70 3a 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 2e 34 35 72 65 6d 3b 7d 22 2c 22 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 64 72 6f 70 64 6f 77 6e 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 64 72 6f 70 64 6f 77 6e 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 79 65 61 72 2d 64 72 6f 70 64 6f 77 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 70 6f 73 Data Ascii: d-view--down-arrow{border-top-color:#ccc;float:right;margin-left:20px;top:8px;position:relative;border-width:0.45rem;}",".react-datepicker__year-dropdown,.react-datepicker__month-dropdown,.react-datepicker__month-year-dropdown{background-color:#f0f0f0;pos
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 72 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 4a 28 4f 62 6a 65 63 74 28 61 29 2c 21 Data Ascii: Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function ee(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?J(Object(a),!
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 33 39 2e 34 30 32 56 31 35 39 2e 39 48 31 34 30 2e 33 33 32 56 31 36 31 2e 32 36 48 31 34 31 2e 35 39 32 5a 4d 31 34 33 2e 35 31 33 20 31 36 31 2e 32 36 56 31 36 36 48 31 34 32 2e 35 37 33 56 31 36 31 2e 32 36 48 31 34 33 2e 35 31 33 5a 4d 31 34 33 2e 36 37 33 20 31 35 39 2e 35 35 43 31 34 33 2e 36 37 33 20 31 35 39 2e 38 39 20 31 34 33 2e 33 38 33 20 31 36 30 2e 31 35 20 31 34 33 2e 30 34 33 20 31 36 30 2e 31 35 43 31 34 32 2e 37 30 33 20 31 36 30 2e 31 35 20 31 34 32 2e 34 32 33 20 31 35 39 2e 38 38 20 31 34 32 2e 34 32 33 20 31 35 39 2e 35 35 43 31 34 32 2e 34 32 33 20 31 35 39 2e 32 31 20 31 34 32 2e 37 30 33 20 31 35 38 2e 39 34 20 31 34 33 2e 30 34 33 20 31 35 38 2e 39 34 43 31 34 33 2e 33 38 33 20 31 35 38 2e 39 34 20 31 34 33 2e 36 37 33 20 31 35 Data Ascii: 39.402V159.9H140.332V161.26H141.592ZM143.513 161.26V166H142.573V161.26H143.513ZM143.673 159.55C143.673 159.89 143.383 160.15 143.043 160.15C142.703 160.15 142.423 159.88 142.423 159.55C142.423 159.21 142.703 158.94 143.043 158.94C143.383 158.94 143.673 15
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 72 3a 73 28 72 29 2c 6f 6e 43 68 61 6e 67 65 3a 6c 28 72 29 2c 6f 6e 46 6f 63 75 73 3a 63 28 72 2c 79 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 66 6c 65 78 2d 61 6e 79 22 2c 6f 6e 50 61 73 74 65 3a 65 3d 3e 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 61 75 74 6f 43 6f 6d 70 6c 65 74 65 3a 22 6f 66 66 22 2c 6c 61 62 65 6c 3a 28 30 2c 62 2e 6a 73 78 29 28 69 2e 5a 2c 7b 69 64 3a 22 45 46 54 5f 50 41 59 46 4c 4f 57 5f 49 4e 53 54 49 54 55 54 49 4f 4e 5f 4e 55 4d 42 45 52 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 49 6e 73 74 69 74 75 74 69 6f 6e 20 6e 75 6d 62 65 72 22 7d 29 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 67 28 7b 69 64 3a 22 45 46 54 5f 50 41 59 46 4c 4f 57 5f 49 4e 53 54 49 54 55 54 49 4f 4e 5f 4e 55 4d 42 45 52 5f 50 4c Data Ascii: r:s(r),onChange:l(r),onFocus:c(r,y),className:"flex-any",onPaste:e=>{e.preventDefault()},autoComplete:"off",label:(0,b.jsx)(i.Z,{id:"EFT_PAYFLOW_INSTITUTION_NUMBER",defaultMessage:"Institution number"}),placeholder:g({id:"EFT_PAYFLOW_INSTITUTION_NUMBER_PL
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 79 5d 5d 5d 29 2b 22 20 70 61 79 6d 65 6e 74 2d 69 74 65 6d 2d 72 61 64 69 6f 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 62 2e 6a 73 78 29 28 4b 65 2e 5a 2c 7b 76 61 6c 75 65 3a 63 2c 63 68 65 63 6b 65 64 3a 61 2c 68 6f 76 65 72 65 64 3a 68 2c 61 72 69 61 4c 61 62 65 6c 3a 65 2e 66 6f 72 6d 61 74 4d 65 73 73 61 67 65 28 7b 69 64 3a 22 52 41 44 49 4f 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 52 61 64 69 6f 22 7d 29 7d 29 7d 29 2c 28 30 2c 62 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 72 28 63 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 32 30 33 31 39 32 33 35 39 38 22 2c 5b 78 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 35 2c 78 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 78 Data Ascii: y]]])+" payment-item-radio",children:(0,b.jsx)(Ke.Z,{value:c,checked:a,hovered:h,ariaLabel:e.formatMessage({id:"RADIO",defaultMessage:"Radio"})})}),(0,b.jsxs)("div",{onClick:()=>r(c),className:n().dynamic([["2031923598",[x.colors.gray05,x.breakpoints.md,x
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 63 69 74 79 3a 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 22 2c 60 2e 63 70 53 77 69 74 63 68 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 33 36 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 24 7b 78 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 Data Ascii: city:0;cursor:pointer;height:1px;width:1px;border:0;margin:-1px;overflow:hidden;padding:0;}",`.cpSwitch.__jsx-style-dynamic-selector{display:block;position:relative;cursor:pointer;width:36px;height:20px;border-radius:10px;background-color:${x.colors.gray0
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 6c 28 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 29 7d 2c 6f 6e 43 6c 69 63 6b 3a 61 73 79 6e 63 20 65 3d 3e 7b 69 66 28 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 4d 2e 5a 2e 63 6f 75 6e 74 72 79 46 69 65 6c 64 43 6c 69 63 6b 65 64 28 29 2c 6c 28 22 22 29 2c 6d 29 7b 76 61 72 20 74 3b 6e 75 6c 6c 3d 3d 3d 28 74 3d 79 2e 63 75 72 72 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 66 6f 63 75 73 28 29 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 65 3d 28 61 77 61 69 74 20 61 2e 65 28 38 31 37 36 29 2e 74 68 65 6e 28 61 2e 74 2e 62 69 6e 64 28 61 2c 32 38 31 37 36 2c 31 39 29 29 29 2e 64 65 66 61 75 6c 74 3b 64 28 65 29 2c 66 28 21 30 29 7d 7d 2c 6f 6e 42 6c 75 72 3a 28 29 3d 3e 7b 6d 26 26 6c 28 6e 75 6c 6c 29 7d 2c 61 75 74 6f 43 6f 6d Data Ascii: l(e.target.value)},onClick:async e=>{if(e.stopPropagation(),M.Z.countryFieldClicked(),l(""),m){var t;null===(t=y.current)\|\|void 0===t\|\|t.focus()}else{const e=(await a.e(8176).then(a.t.bind(a,28176,19))).default;d(e),f(!0)}},onBlur:()=>{m&&l(null)},autoCom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49819	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:31 UTC	451	OUT	GET /_next/static/chunks/9661-dfcd811ec7b9d297.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:31 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11601 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: zKAZc429VuX2jsqsmVieetGdmXeON2uZ Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:31 GMT ETag: "7991bebee72492de178e3236737b8b96" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e5b93012e2bfb81dc9846f43efd610a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 9D_Pr6IfJVO73Rx5RvJCirpZEFQ4ai-k-oN2cz1Awt3zBgJpO-XFeQ== Age: 1 Vary: Origin
2024-09-11 17:25:31 UTC	11601	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 36 36 31 5d 2c 7b 39 33 34 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 73 29 7b 73 2e 64 28 69 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 29 3b 76 61 72 20 74 3d 73 28 39 35 36 32 37 29 2c 61 3d 73 2e 6e 28 74 29 2c 6e 3d 73 28 36 37 32 39 34 29 2c 6f 3d 73 28 33 34 32 34 32 29 2c 6c 3d 73 28 35 34 34 39 30 29 2c 72 3d 73 28 34 34 30 31 32 29 2c 63 3d 73 28 35 37 32 33 30 29 2c 64 3d 73 28 36 37 32 31 29 2c 75 3d 73 28 39 38 33 34 33 29 2c 78 3d 73 28 38 35 38 39 33 29 3b 76 61 72 20 79 3d 65 3d 3e 7b 6c 65 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9661],{93429:function(e,i,s){s.d(i,{Z:function(){return w}});var t=s(95627),a=s.n(t),n=s(67294),o=s(34242),l=s(54490),r=s(44012),c=s(57230),d=s(6721),u=s(98343),x=s(85893);var y=e=>{let

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49818	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:31 UTC	451	OUT	GET /_next/static/chunks/5544-4c8425f3484e6d6d.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1
2024-09-11 17:25:31 UTC	634	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 38182 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: BEL5wQX4VRZsHgcM09RRiKb9hXFeDu2x Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:30 GMT ETag: "3cbde6309cb722a79008599da2fc97ef" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 eb1a8c1b1275e33a016e623478052110.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: SK27yIeenle-mekJZMjQrJ01kCkdorUmXES4njOLF28B1s1B43schw== Age: 7917 Vary: Origin
2024-09-11 17:25:31 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 35 34 34 5d 2c 7b 35 39 35 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 39 35 36 32 37 29 2c 73 3d 6e 2e 6e 28 6f 29 2c 61 3d 6e 28 34 31 36 36 34 29 2c 72 3d 6e 2e 6e 28 61 29 2c 69 3d 6e 28 36 37 32 39 34 29 2c 6c 3d 6e 28 34 34 30 31 32 29 2c 63 3d 6e 28 32 33 32 34 30 29 2c 64 3d 6e 28 35 31 32 34 35 29 2c 70 3d 6e 28 32 38 37 30 29 2c 6d 3d 6e 28 38 35 38 39 33 29 3b 63 6f 6e 73 74 20 79 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 69 74 79 2e 69 6e 74 75 69 74 2e 63 6f 6d 2f 69 6e 64 65 78 2e 70 68 70 2f Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5544],{59596:function(e,t,n){var o=n(95627),s=n.n(o),a=n(41664),r=n.n(a),i=n(67294),l=n(44012),c=n(23240),d=n(51245),p=n(2870),m=n(85893);const y="https://security.intuit.com/index.php/
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 68 65 69 67 68 74 3a 30 3b 7d 22 5d 7d 29 5d 7d 29 7d 2c 67 3d 6e 28 35 34 35 32 35 29 2c 68 3d 6e 28 33 34 32 34 32 29 2c 62 3d 6e 28 39 39 33 34 30 29 2c 6a 3d 6e 28 39 38 33 34 33 29 2c 5f 3d 6e 28 32 30 30 32 33 29 2c 53 3d 6e 28 35 36 32 39 32 29 2c 77 3d 6e 28 32 38 37 30 29 3b 63 6f 6e 73 74 7b 41 4d 4f 55 4e 54 5f 43 4f 4e 46 49 47 3a 6b 7d 3d 77 2e 50 41 59 4d 45 4e 54 5f 4d 41 50 3b 63 6c 61 73 73 20 76 20 65 78 74 65 6e 64 73 20 72 2e 43 6f 6d 70 6f 6e 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 28 30 2c 6f Data Ascii: osition:absolute;top:0;left:0;visibility:hidden;white-space:nowrap;height:0;}"]})]})},g=n(54525),h=n(34242),b=n(99340),j=n(98343),_=n(20023),S=n(56292),w=n(2870);const{AMOUNT_CONFIG:k}=w.PAYMENT_MAP;class v extends r.Component{constructor(e){super(e),(0,o
2024-09-11 17:25:32 UTC	5414	IN	Data Raw: 6d 69 63 28 5b 5b 22 34 30 33 32 33 32 31 32 39 31 22 2c 5b 75 2c 74 68 69 73 2e 70 72 6f 70 73 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 49 63 6f 6e 50 6f 73 69 74 69 6f 6e 7c 7c 22 63 65 6e 74 65 72 22 2c 70 2e 66 6f 6e 74 53 69 7a 65 2e 73 6d 2c 75 2c 73 3f 3f 70 2e 66 6f 6e 74 53 69 7a 65 2e 78 78 73 2c 70 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 2c 70 2e 63 6f 6c 6f 72 73 2e 62 6c 75 65 5d 5d 5d 29 2b 22 20 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2d 69 63 6f 6e 22 2c 63 68 69 6c 64 72 65 6e 3a 22 65 72 72 6f 72 22 3d 3d 3d 65 3f 28 30 2c 6d 2e 6a 73 78 29 28 64 2e 64 65 66 61 75 6c 74 2c 7b 63 6f 6c 6f 72 3a 75 2c 68 65 69 67 68 74 3a 32 33 2c 77 69 64 74 68 3a 32 33 7d 29 3a 28 30 2c 6d 2e 6a 73 78 29 28 79 2c 7b 63 6f 6c 6f 72 3a 75 2c 68 65 69 67 68 74 3a Data Ascii: mic([["4032321291",[u,this.props.errorMessageIconPosition\|\|"center",p.fontSize.sm,u,s??p.fontSize.xxs,p.colors.gray,p.colors.blue]]])+" error-message-icon",children:"error"===e?(0,m.jsx)(d.default,{color:u,height:23,width:23}):(0,m.jsx)(y,{color:u,height:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49820	52.85.48.9	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:31 UTC	605	OUT	GET /next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:32 UTC	727	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1655 Connection: close Date: Wed, 11 Sep 2024 17:25:33 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Thu, 08 Aug 2024 06:57:15 GMT ETag: "d151cb0874ed5e13006e5f38364ec01e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: bp7FIk0PDVpWxkS.ft_VREe_7hxGWL_E Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3c1b8c037c66c46a8ac162f1eef5d682.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL50-C2 X-Amz-Cf-Id: _w1OHOeoEExUNaregMcikiLzo_Pm_pZYSISwDpmazPiqSSJLV--8JA==
2024-09-11 17:25:32 UTC	1655	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 57 6d 6f db 36 10 fe de 5f a1 70 80 2b 21 0c 6d 77 6d ba 59 e1 86 ac 05 ba 0e e9 5a ac db 8a c1 30 0c 46 64 1c 26 32 a9 91 54 bc cc d6 7f df 91 7a b1 ec c4 5d 3f 6d 40 10 f3 e5 ee 78 af cf 9d 56 52 71 bd 9a 3e 5d 68 bd c8 c5 09 e3 2b 6d b8 3d 51 62 f5 5a 14 f6 e9 2c a2 d1 14 0d a5 72 62 61 98 93 5a d9 e1 9d 00 16 33 cc f4 72 09 5b c2 4e c7 fc e5 a5 60 5f bf e4 cf b8 78 c1 9f 5f 9e 7e 4b 6e 2c 9a a5 ab 83 b2 2f 34 e3 c2 04 e9 57 a5 ca bc dc 38 89 d6 91 11 ae 34 2a 6a 18 d1 43 c6 b7 5b 45 d0 8c 76 bc 3a 59 b7 eb 48 c5 0a 76 da c4 77 cc 44 02 33 6c a9 9a 8e 66 98 c3 cf 78 86 33 f8 79 36 c3 25 1d e1 9c 4e 67 69 79 66 49 2e d4 c2 5d a7 e5 f1 71 c2 a8 9d 96 33 fc fe f2 46 64 8e 14 46 3b ed ee 0b 41 ae 99 7d bf 52 1f 8c 2e 84 71 Data Ascii: Wmo6_p+!mwmYZ0Fd&2Tz]?m@xVRq>]h+m=QbZ,rbaZ3r[N`_x_~Kn,/4W84*jC[Ev:YHvwD3lfx3y6%NgiyfI.]q3FdF;A}R.q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49822	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:31 UTC	683	OUT	GET /_next/static/chunks/8482.b28cf868ec59260b.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
2024-09-11 17:25:32 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21200 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: rAFFC7zRa7pYGkVXRaVUzwxo0ZRwD8kR Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:33 GMT ETag: "5d3acbee67e89b42766e3833a9ef5b9a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 32e3b86ae254a231182567c0124af892.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: aSrYIA4Xdysn0oPtky-ct5i0LgHTn9_bgeILfy5SQOMNCo7vF8OpeA== Vary: Origin
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 38 32 5d 2c 7b 38 38 34 38 32 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 73 2c 65 29 7b 65 2e 72 28 73 29 3b 76 61 72 20 61 3d 65 28 39 35 36 32 37 29 2c 4c 3d 65 2e 6e 28 61 29 2c 6c 3d 28 65 28 36 37 32 39 34 29 2c 65 28 38 36 38 39 36 29 29 2c 69 3d 65 28 34 34 30 31 32 29 2c 74 3d 65 28 38 35 38 39 33 29 3b 73 2e 64 65 66 61 75 6c 74 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 43 3d 28 30 2c 6c 2e 5a 29 28 29 2e 66 6f 72 6d 61 74 4d 65 73 73 61 67 65 28 7b 69 64 3a 22 50 41 59 46 4c 4f 57 5f 42 41 4e 4b 5f 52 4f 55 54 49 4e 47 5f 4e 55 4d 42 45 52 22 2c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8482],{88482:function(C,s,e){e.r(s);var a=e(95627),L=e.n(a),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ROUTING_NUMBER",
2024-09-11 17:25:32 UTC	4816	IN	Data Raw: 31 32 2e 34 31 38 36 36 35 32 2c 33 2e 35 35 38 33 30 37 37 33 20 31 32 2e 37 37 32 33 30 37 32 2c 33 20 31 33 2e 34 30 34 39 33 33 34 2c 33 20 43 31 34 2e 30 33 33 36 33 30 33 2c 33 20 31 34 2e 33 38 33 33 34 32 39 2c 33 2e 35 35 38 33 30 37 37 33 20 31 34 2e 33 38 33 33 34 32 39 2c 34 2e 34 35 32 33 38 30 39 35 20 5a 20 4d 31 33 2e 39 30 30 30 33 32 32 2c 34 2e 34 35 32 33 38 30 39 35 20 43 31 33 2e 39 30 30 30 33 32 32 2c 34 2e 30 36 35 38 36 30 32 32 20 31 33 2e 38 32 35 33 37 34 35 2c 33 2e 33 39 30 34 32 34 39 39 20 31 33 2e 34 30 34 39 33 33 34 2c 33 2e 33 39 30 34 32 34 39 39 20 43 31 32 2e 39 38 30 35 36 33 2c 33 2e 33 39 30 34 32 34 39 39 20 31 32 2e 39 30 31 39 37 35 39 2c 34 2e 30 36 35 38 36 30 32 32 20 31 32 2e 39 30 31 39 37 35 39 2c 34 2e Data Ascii: 12.4186652,3.55830773 12.7723072,3 13.4049334,3 C14.0336303,3 14.3833429,3.55830773 14.3833429,4.45238095 Z M13.9000322,4.45238095 C13.9000322,4.06586022 13.8253745,3.39042499 13.4049334,3.39042499 C12.980563,3.39042499 12.9019759,4.06586022 12.9019759,4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49823	13.35.58.148	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:32 UTC	405	OUT	GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:32 UTC	777	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1559 Connection: close Date: Tue, 16 Jul 2024 21:54:59 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 16 Jul 2024 17:27:04 GMT ETag: "3867b2388b619ff7fddc29ef359fc9aa" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: IKXrUoItkKbxZQ20ut9b8FhMghJH_Xd7 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: kRk7TkJ5iN3HWiab05vYSd4scslf1SdrYg8TyGFfOk_-ArHFPtu_mg== Age: 4908634
2024-09-11 17:25:32 UTC	1559	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 33 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 65 29 7b 76 61 72 20 74 2c 69 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 65 6e 61 62 6c 65 64 29 3f 65 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49826	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:32 UTC	506	OUT	GET /_next/static/chunks/6139-309dee1860ca094e.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
2024-09-11 17:25:32 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 58979 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: cPwlfe8sjgMFPsu06rRlkxhFaP6BSiMR Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Sep 2024 21:19:52 GMT ETag: "dbb61563fbe82c516a5dfa738dbfd1d9" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 91ba7c34719cd9c69e0357c149b94b90.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: GkIFZWUN8yTYTK8JszxWo-F1JZGss4vX5LYUJIaLrsh8lO2RT6Taaw== Age: 72341 Vary: Origin
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 33 39 5d 2c 7b 33 36 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 76 61 72 20 6f 3d 73 28 35 39 34 39 39 29 2c 61 3d 73 28 39 35 36 32 37 29 2c 6e 3d 73 2e 6e 28 61 29 2c 69 3d 73 28 36 37 32 39 34 29 2c 72 3d 73 28 38 36 38 39 36 29 2c 6c 3d 73 28 34 34 30 31 32 29 2c 63 3d 73 28 32 33 32 34 30 29 2c 64 3d 73 28 33 37 30 30 34 29 2c 6d 3d 73 28 35 31 32 34 35 29 2c 70 3d 73 28 38 35 38 39 33 29 3b 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6139],{3619:function(e,t,s){var o=s(59499),a=s(95627),n=s.n(a),i=s(67294),r=s(86896),l=s(44012),c=s(23240),d=s(37004),m=s(51245),p=s(85893);function x(e,t){var s=Object.keys(e);if(Objec
2024-09-11 17:25:32 UTC	16384	IN	Data Raw: 6f 77 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 5f 2e 6a 73 78 29 28 22 73 70 61 6e 22 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 4d 65 73 73 61 67 65 22 2c 73 74 79 6c 65 3a 7b 6d 61 72 67 69 6e 54 6f 70 3a 44 3f 22 32 34 70 78 22 3a 22 30 70 78 22 7d 2c 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 31 38 35 35 36 33 30 32 34 39 22 2c 5b 50 3f 22 62 6c 6f 63 6b 22 3a 22 6e 6f 6e 65 22 2c 79 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 35 2c 79 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 31 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 44 3f 22 32 35 70 78 22 3a 22 35 70 78 22 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 Data Ascii: ow",children:(0,_.jsx)("span",{"aria-label":"Message",style:{marginTop:D?"24px":"0px"},className:a().dynamic([["1855630249",[P?"block":"none",y.colors.gray05,y.colors.gray01,y.breakpoints.sm,D?"25px":"5px",y.breakpoints.sm,y.breakpoints.sm,y.breakpoints.s
2024-09-11 17:25:32 UTC	11500	IN	Data Raw: 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 73 2e 70 75 73 68 2e 61 70 70 6c 79 28 73 2c 6f 29 7d 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b Data Ascii: ){var s=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),s.push.apply(s,o)}return s}function G(e){for(var t=1;t<arguments.length;t+
2024-09-11 17:25:33 UTC	14711	IN	Data Raw: 78 6c 2c 79 2e 63 6f 6c 6f 72 73 2e 64 61 72 6b 47 72 61 79 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 5d 5d 5d 29 2b 22 20 6d 61 69 6e 2d 63 61 72 64 2d 77 72 61 70 70 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 5f 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 32 32 31 37 30 33 30 39 37 36 22 2c 5b 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 79 2e 66 6f 6e 74 53 69 7a 65 2e 78 78 73 2c 79 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 47 72 61 79 2c 79 2e 66 6f 6e 74 53 69 7a 65 2e 78 6c 2c 79 2e 63 6f 6c 6f 72 73 2e 64 61 72 6b 47 72 61 79 2c 79 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 5d 5d 5d 29 2b 22 20 70 61 79 Data Ascii: xl,y.colors.darkGray,y.breakpoints.md]]])+" main-card-wrapper",children:[(0,_.jsxs)("div",{className:a().dynamic([["2217030976",[y.breakpoints.md,y.breakpoints.md,y.fontSize.xxs,y.colors.whiteGray,y.fontSize.xl,y.colors.darkGray,y.breakpoints.md]]])+" pay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49825	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:32 UTC	522	OUT	GET /_next/static/1.30.0-release_1.30.0-80b42f1/_buildManifest.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
2024-09-11 17:25:32 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3095 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: iQDghs_rrn8tA7E14l5uxmOjp7D.M5lv Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 16:50:58 GMT ETag: "a6d46560df992895f59a39934f1155fe" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 57d93b321db68494cc6755a0d3fb29cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: xH8DGm9syFwmN64RAj0AV9m2r-twYPKpLGa8nDm7mUJ1ubgvxef4bg== Age: 2075 Vary: Origin
2024-09-11 17:25:32 UTC	2856	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 63 2c 61 2c 74 2c 69 2c 6e 2c 64 2c 72 2c 70 2c 75 2c 66 2c 6f 2c 6b 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 65 2c 73 2c 63 2c 61 2c 70 2c 69 2c 75 2c 66 2c 6b 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 62 32 66 32 63 35 30 38 36 31 30 35 37 62 63 30 2e 6a 73 22 5d 2c 22 2f 50 61 79 6d 65 6e 74 42 6c 6f 63 6b 65 64 22 3a 5b 65 2c 73 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 50 61 79 6d 65 6e 74 42 6c 6f 63 6b 65 64 2d 65 34 36 Data Ascii: self.__BUILD_MANIFEST=function(e,s,c,a,t,i,n,d,r,p,u,f,o,k){return{__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":[e,s,c,a,p,i,u,f,k,"static/chunks/pages/index-b2f2c50861057bc0.js"],"/PaymentBlocked":[e,s,"static/chunks/pages/PaymentBlocked-e46
2024-09-11 17:25:32 UTC	239	IN	Data Raw: 30 64 66 31 36 65 62 64 36 63 62 33 32 34 38 38 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 39 36 36 31 2d 64 66 63 64 38 31 31 65 63 37 62 39 64 32 39 37 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 35 34 32 38 2d 31 38 30 30 38 64 31 37 33 32 39 32 36 38 36 34 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 35 35 34 34 2d 34 63 38 34 32 35 66 33 34 38 34 65 36 64 36 64 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 36 31 33 39 2d 33 30 39 64 65 65 31 38 36 30 63 61 30 39 34 65 2e 6a 73 22 29 2c 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: 0df16ebd6cb32488.js","static/chunks/9661-dfcd811ec7b9d297.js","static/chunks/5428-18008d1732926864.js","static/chunks/5544-4c8425f3484e6d6d.js","static/chunks/6139-309dee1860ca094e.js"),self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49824	35.166.207.170	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:32 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/p HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 1560 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:32 UTC	1560	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 32 39 2e 38 31 30 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 74 68 22 3a 22 2f 74 2f 73 63 73 2d 76 31 2d 66 36 32 35 64 30 62 33 32 35 34 38 34 34 30 62 39 39 39 31 36 38 34 38 64 65 64 30 32 35 63 38 35 35 64 34 66 36 30 62 31 63 62 37 34 65 62 61 62 65 65 32 30 66 30 65 36 62 39 32 39 66 66 64 65 35 62 62 35 36 34 39 62 36 33 33 34 37 33 35 62 63 36 34 31 36 63 39 39 64 35 35 38 62 31 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 65 61 72 63 68 22 3a 22 3f 6c 6f 63 61 6c 65 3d 45 4e 5f 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 49 6e 74 75 69 Data Ascii: {"timestamp":"2024-09-11T17:25:29.810Z","integrations":{},"type":"page","properties":{"path":"/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11","referrer":"","search":"?locale=EN_US","title":"Intui
2024-09-11 17:25:32 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Wed, 11 Sep 2024 17:25:32 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:443b5548-4619-4cb0-a1d7-82a582de00a0\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Wed, 11-Sep-2024 17:26:02 GMT Set-Cookie: SameSite=None;Path=/;Expires=Wed, 11-Sep-2024 17:26:02 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: f5ac2360-d3be-48bf-8f98-f62c50382586 intuit_received_at: 1726075532834 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:2\|d:1;Path=/;Expires=Wed, 11-Sep-2024 17:26:02 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49827	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:32 UTC	506	OUT	GET /_next/static/chunks/5428-18008d1732926864.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
2024-09-11 17:25:33 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21337 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 7cQejTxz7aErTbnfuNwT9pYS3wWQoshQ Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:32 GMT ETag: "d8c386cd534bb038504df3aaf6e9357d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 58b222ebbb6cc6c8c8c9a46127ae3a3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: EOr7LwHZqGlj9-0FUUPt7uvPYKcs3cmJkpQLBlFYb8xPiJdHOrrhEQ== Age: 1 Vary: Origin
2024-09-11 17:25:33 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 32 38 2c 36 37 32 31 5d 2c 7b 31 30 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 74 29 7b 76 61 72 20 73 3d 74 28 39 35 36 32 37 29 2c 6e 3d 74 2e 6e 28 73 29 2c 6f 3d 74 28 36 37 32 39 34 29 2c 61 3d 74 28 34 34 30 31 32 29 2c 63 3d 74 28 33 36 34 35 36 29 2c 6c 3d 74 28 39 33 34 32 39 29 2c 72 3d 74 28 31 30 37 37 39 29 2c 64 3d 74 28 38 34 31 36 31 29 2c 6d 3d 74 28 36 37 32 31 34 29 2c 78 3d 74 28 35 34 36 32 33 29 2c 79 3d 74 28 37 30 36 37 38 29 2c 70 3d 74 28 39 36 35 35 34 29 2c 66 3d 74 28 37 31 32 39 35 29 2c 68 3d 74 28 38 32 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5428,6721],{10616:function(e,i,t){var s=t(95627),n=t.n(s),o=t(67294),a=t(44012),c=t(36456),l=t(93429),r=t(10779),d=t(84161),m=t(67214),x=t(54623),y=t(70678),p=t(96554),f=t(71295),h=t(82
2024-09-11 17:25:33 UTC	4953	IN	Data Raw: 73 6d 2c 63 2e 63 6f 6c 6f 72 73 2e 64 61 72 6b 47 72 61 79 5d 5d 5d 29 2b 22 20 70 61 79 6d 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 65 6d 61 69 6c 2d 6d 73 67 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 6c 2e 6a 73 78 29 28 61 2e 5a 2c 7b 69 64 3a 22 50 41 59 4e 4f 57 5f 50 41 59 4d 45 4e 54 5f 43 4f 4e 46 49 52 4d 41 54 49 4f 4e 5f 45 4d 41 49 4c 5f 53 45 4e 54 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 57 65 20 73 65 6e 74 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 6d 65 72 63 68 61 6e 74 20 61 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 65 6d 61 69 6c 22 7d 29 7d 29 2c 28 30 2c 6c 2e 6a 73 78 29 28 6e 28 29 2c 7b 69 64 3a 22 31 38 30 30 39 34 33 35 37 39 22 2c 64 79 6e 61 6d 69 63 3a 5b 63 2e 66 6f 6e 74 53 69 7a 65 2e 73 6d 2c 63 2e Data Ascii: sm,c.colors.darkGray]]])+" payment-confirmation-email-msg",children:(0,l.jsx)(a.Z,{id:"PAYNOW_PAYMENT_CONFIRMATION_EMAIL_SENT",defaultMessage:"We sent you and your merchant a confirmation email"})}),(0,l.jsx)(n(),{id:"1800943579",dynamic:[c.fontSize.sm,c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49829	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:33 UTC	1636	OUT	GET /portal/rest/pdf/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/invoice.pdf HTTP/1.1 Host: connect.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 intuit-realmid: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c0963-817d-45ce-8b08-8488f37b48d6 Accept: application/pdf sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; AWSALBCORS=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
2024-09-11 17:25:34 UTC	1025	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:34 GMT Content-Type: application/pdf Transfer-Encoding: chunked Connection: close x-spanid: a4b51917-feb9-38bc-e6cd-b1b35ed94c2e x-amzn-trace-id: Root=1-66e1d28d-1097817850800f0c0e5d8a16 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC; Expires=Wed, 18 Sep 2024 17:25:33 GMT; Path=/ Set-Cookie: AWSALBCORS=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC; Expires=Wed, 18 Sep 2024 17:25:33 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store x-envoy-upstream-service-time: 852 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c0963-817d-45ce-8b08-8488f37b48d6 x-request-id: cp-c0963-817d-45ce-8b08-8488f37b48d6 server: istio-envoy
2024-09-11 17:25:34 UTC	15359	IN	Data Raw: 33 64 34 63 0d 0a 25 50 44 46 2d 31 2e 34 0d 0a 25 ff ff ff ff 0d 0a 35 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4c 65 6e 67 74 68 20 32 38 35 34 0a 2f 46 69 6c 74 65 72 20 2f 46 6c 61 74 65 44 65 63 6f 64 65 3e 3e 0a 73 74 72 65 61 6d 0d 0a 78 9c d5 1b cb 8e e4 b8 ed 5e 5f e1 73 80 f5 58 6f 09 58 14 90 ee ae 0a b2 40 0e c1 ce 6d b1 a7 2c 36 39 74 4f b0 a7 fd fd 48 b4 1e 24 65 5b e5 ea 3c 90 19 f4 8c 69 91 34 5f 22 f5 60 ff 76 11 3e 4c 4b fc eb cd 6c cc a4 ec 64 dd 32 6b 33 fd ed e3 f2 e5 cf 1f 7a 7a fb e7 e5 af 97 2f 77 31 c9 65 0e 76 51 d3 d7 5f 2f 2f 5f 2f cb f4 f7 8b 00 42 31 69 6f 67 3b 39 a5 67 3d 7d fd b8 fc f4 fd b2 e8 10 7f 6e cb 62 6c fc ff 9e 61 15 7f cc f5 e7 e9 eb 0f 97 db d7 c8 53 4e 7e 0e be 70 ac dc ac 8c 1f 9a 9c 58 66 61 2b 3f bd 2c 56 2c 8b 4b Data Ascii: 3d4c%PDF-1.4%5 0 obj<</Length 2854/Filter /FlateDecode>>streamx^_sXoX@m,69tOH$e[<i4_"`v>LKld2k3zz/w1evQ_//_/B1iog;9g=}nblaSN~pXfa+?,V,K
2024-09-11 17:25:34 UTC	341	IN	Data Raw: 47 6a 74 4a 44 55 50 44 65 63 6e 43 56 49 4a 43 76 43 69 76 30 2f 6d 58 46 4e 50 64 2f 4a 2f 6d 2f 52 50 4e 32 67 57 2b 75 36 4c 4b 30 6c 6c 63 56 46 48 48 47 52 48 55 30 61 4f 52 64 36 4d 70 2f 71 4e 73 55 4a 31 69 71 47 31 4b 26 23 78 41 3b 38 57 79 73 5a 72 6c 76 39 31 71 53 6f 38 57 4f 79 6a 37 38 78 39 58 6e 47 4c 46 4b 5a 36 44 2b 78 73 77 34 2b 4f 51 6a 33 76 50 64 4b 52 72 6e 56 37 59 4f 65 52 6b 6d 56 6e 4a 37 2f 46 56 73 34 54 52 78 4f 54 50 47 2b 73 68 39 26 23 78 41 3b 37 30 47 63 38 4f 4d 2b 35 6d 65 76 2b 59 44 70 54 77 49 73 49 6c 4d 6f 59 74 56 71 55 41 70 37 48 4f 74 37 53 37 54 2f 41 43 78 69 4b 34 72 64 50 70 64 4c 34 6f 4f 39 55 68 50 4f 38 51 66 54 59 4a 68 76 77 6c 70 58 32 5a 54 2f 26 23 78 41 3b 41 45 47 59 76 74 42 43 38 4d 5a 64 Data Ascii: GjtJDUPDecnCVIJCvCiv0/mXFNPd/J/m/RPN2gW+u6LK0llcVFHHGRHU0aORd6Mp/qNsUJ1iqG1K 8WysZrlv91qSo8WOyj78x9XnGLFKZ6D+xsw4+OQj3vPdKRrnV7YOeRkmVnJ7/FVs4TRxOTPG+sh9 70Gc8OM+5mev+YDpTwIsIlMoYtVqUAp7HOt7S7T/ACxiK4rdPpdL4oO9UhPO8QfTYJhvwlpX2ZT/ AEGYvtBC8MZd
2024-09-11 17:25:34 UTC	16384	IN	Data Raw: 34 30 63 35 0d 0a 2f 35 55 79 4d 77 71 59 37 36 32 5a 44 34 47 72 4c 2b 70 6a 69 6b 50 6e 37 38 6d 66 7a 52 30 44 79 48 64 61 6a 4c 71 75 67 70 71 7a 58 61 78 69 33 75 56 45 66 72 77 38 4b 38 6b 55 79 26 23 78 41 3b 41 2f 41 34 62 65 68 48 54 76 32 56 65 32 61 37 2b 59 4f 6a 2b 62 76 79 44 38 34 61 39 6f 57 6d 6e 52 36 4f 62 47 35 6a 34 78 71 7a 73 57 68 4c 73 57 6a 70 79 44 4a 63 55 33 39 38 56 65 56 66 38 34 74 36 54 70 47 71 66 6d 4e 64 26 23 78 41 3b 51 61 6e 5a 51 33 30 4b 61 58 63 50 48 48 63 52 72 4b 69 76 36 73 4b 63 75 4c 31 48 32 48 5a 66 70 78 55 73 54 38 72 73 75 6c 66 6e 46 70 67 74 78 77 69 74 4e 66 69 6a 56 45 5a 57 48 70 72 65 42 43 6f 5a 61 71 51 56 32 71 4d 56 26 23 78 41 3b 52 50 35 37 69 45 66 6d 33 35 6c 45 52 71 76 31 6c 53 54 2f 41 Data Ascii: 40c5/5UyMwqY762ZD4GrL+pjikPn78mfzR0DyHdajLqugpqzXaxi3uVEfrw8K8kUy A/A4behHTv2Ve2a7+YOj+bvyD84a9oWmnR6ObG5j4xqzsWhLsWjpyDJcU398VeVf84t6TpGqfmNd QanZQ30KaXcPHHcRrKiv6sKcuL1H2HZfpxUsT8rsulfnFpgtxwitNfijVEZWHpreBCoZaqQV2qMV RP57iEfm35lERqv1lST/A
2024-09-11 17:25:34 UTC	205	IN	Data Raw: 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 a4 00 a9 00 ae 00 b2 00 b7 00 bc 00 c1 00 c6 00 cb 00 d0 00 d5 00 db 00 e0 00 e5 00 eb 00 f0 00 f6 00 fb 01 01 01 07 01 0d 01 13 01 19 01 1f 01 25 01 2b 01 32 01 38 01 3e 01 45 01 4c 01 52 01 59 01 60 01 67 01 6e 01 75 01 7c 01 83 01 8b 01 92 01 9a 01 a1 01 a9 01 b1 01 b9 01 c1 01 c9 01 d1 01 d9 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 0d 0a Data Ascii: mrw\|%+28>ELRY`gnu\|&/8AKT]gqz!-8COZf
2024-09-11 17:25:34 UTC	16384	IN	Data Raw: 34 32 38 38 0d 0a 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a Data Ascii: 4288r~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi*
2024-09-11 17:25:34 UTC	656	IN	Data Raw: 76 be 3f 7a bd 83 2e d8 26 ac 0f 57 72 b8 c9 3a 40 f2 0e 16 72 dd a0 a8 71 6e 51 49 20 32 68 00 94 a5 02 26 50 ec 20 01 40 9a 16 12 a2 37 9e 12 f1 9a cd cc 3e 57 60 6e 39 56 63 1f 3f fe f4 2c d0 f1 d6 77 cc 1b 2a e9 48 a8 15 5f a4 59 39 25 01 22 9b b5 26 6d 45 45 8e 71 d8 00 0b d4 74 12 74 45 c9 fa 92 88 68 03 40 25 fe 5b df ff 00 92 b1 2c 8c 73 45 fc 53 17 63 fe 98 cc 00 76 30 37 39 44 ce 8f d3 f0 f1 80 93 fa 4e 1a e9 3f af 7e 6b 7f 0d f0 15 dc bd a9 53 31 9e 7e 4c 7a f7 1a ad d7 dd b9 ee 77 cd 1c db c8 3e 14 fd 4b 5f 8d c9 aa db b0 b7 df 7a f0 2f bd 8f d9 63 63 61 08 7f d7 72 f6 38 8d 12 0a 89 9e 5d 92 ab a6 1b f5 49 aa c0 e8 e1 f2 f5 db b5 31 df 5e 2b fa 69 e1 ff 00 d5 39 81 a6 65 e9 54 f3 36 e4 d7 5c 61 25 39 6c ec 8b 3b ad cc cd 43 f2 bc 3f 9a b9 b1 Data Ascii: v?z.&Wr:@rqnQI 2h&P @7>W`n9Vc?,w*H_Y9%"&mEEqttEh@%[,sEScv079DN?~kS1~Lzw>K_z/ccar8]I1^+i9eT6\a%9l;C?
2024-09-11 17:25:34 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 9b 54 be be 45 eb a2 24 9a cb 9d c3 82 89 c3 c8 3f 29 7b 4a 00 05 29 40 24 a9 29 55 91 52 fb 9d fd 53 e5 9b fe 55 c4 7c be e2 76 06 95 c8 a8 d8 63 0b 55 cd 75 0a 5c 1b 89 39 04 24 d9 bb 3a f1 72 87 8f 88 45 55 d4 07 29 39 3b 65 55 29 04 a5 14 52 03 6c 27 01 18 37 5a 9f 43 23 01 35 ea a3 d9 9c 0a 71 8a be e0 0e 61 5c b2 e8 f9 da 83 2c 79 69 92 31 09 dd db b2 c5 8e 64 b8 a0 7d c3 f7 15 02 9b 6e bb 6d a1 b7 7d 13 c9 f5 93 c3 7e 43 cf 7a 14 b0 70 c3 92 58 c5 7a 4e 45 b6 d7 b2 54 35 0b 1f 59 d6 7b 12 e1 06 f3 8f 5f c8 c3 fe a6 2c 15 fa a6 c4 fa d7 22 63 10 40 a7 2a 5b 00 93 6e 82 2b ce 4b 7a a4 13 6f fe a3 bd 9e e3 6b 3c 95 4a 7f 81 39 56 52 4e 2c e6 4d 77 b0 14 a9 db 54 61 c4 a3 b6 e8 c8 d6 5b bf 68 a9 47 f0 14 d5 10 d0 b0 a6 85 a7 ea a3 d5 Data Ascii: 3ffaTE$?){J)@$)URSU\|vcUu\9$:rEU)9;eU)Rl'7ZC#5qa\,yi1d}nm}~CzpXzNET5Y{_,"c@*[n+Kzok<J9VRN,MwTa[hG
2024-09-11 17:25:34 UTC	16384	IN	Data Raw: 0d 0a 33 66 66 38 0d 0a db ed 6d d4 f5 3b 2f 97 85 ab 6a 10 54 8c 52 49 75 25 82 47 9b 54 cd c7 65 c6 58 1f 23 e5 55 91 52 bf 0a 66 90 66 36 cb d9 de 01 90 62 40 01 d8 7b 4e 20 22 a8 87 fa d4 c0 c2 1f 8e df 1d 76 23 92 fe 97 38 c3 8e 6e 29 64 2c 38 65 9b c6 fd ca c6 d2 eb a3 a5 66 d7 54 14 9a e9 a2 c4 e3 be 34 e6 96 8f a1 45 ab f7 2b 77 a2 11 c6 5e d5 fb bd f2 6b b2 a3 8c e3 0e 22 e3 7a 2f d3 c8 d8 52 fe 7b b0 a5 b1 be a1 e2 65 06 29 1c 3a ff 00 0d ae e6 28 ff 00 4a 82 6f cc 36 d7 af bc 94 f4 07 c1 dc 31 bb 98 cf af d4 33 6b 1a dc 4b ca 8b fe 8d ac 53 ef 9b 9f 5a dd 3a 7f c6 dc ff 00 d6 75 4a db b0 ff 00 2f 65 f4 45 fb cf be 78 3f bb 4e da 8a b0 84 22 64 22 69 90 13 4d 30 02 90 85 00 00 28 00 6c 00 00 1f 00 0d 77 a2 dd b8 c2 2a 31 54 4b 04 97 41 c1 32 93 Data Ascii: 3ff8m;/jTRIu%GTeX#URff6b@{N "v#8n)d,8efT4E+w^k"z/R{e):(Jo613kKSZ:uJ/eEx?N"d"iM0(lw*1TKA2
2024-09-11 17:25:34 UTC	16384	IN	Data Raw: 0d 0a 37 66 66 32 0d 0a b3 b6 20 a4 44 f1 ea 4a af c7 69 ec 97 3d 9f 9b bf 87 92 34 8c 3c fc aa ed 0e 58 32 45 2e eb e9 8c c5 d0 b2 32 69 a9 f5 0a 9f 60 00 00 1c 3b d6 b7 23 e0 f1 3f 1e 7d 57 70 5b 33 40 db ea dc 9b c8 5c 75 ad 4f b7 89 99 af cb 20 8b 70 a6 d7 62 63 a5 59 48 3a 7a 42 99 bb f6 e7 5c 9d ed d5 28 18 a1 b0 1b b4 4c 40 30 09 23 da 77 ae 29 cf 61 7e c8 38 f1 57 7e f2 d7 8f 29 55 4c 0d 91 5f d6 73 54 64 62 cf aa f1 d7 f8 dc 83 51 93 80 69 38 93 94 4c c2 45 00 59 3f ac 34 5b 83 80 2e 08 00 ed b1 04 74 07 5d ca 99 ef 2d e7 de 0d 4d 53 b9 83 eb 86 57 34 dc b1 55 f2 0a 9b cf 1c 1e ca bf 60 72 d1 f4 02 62 2a 2f 78 c6 66 49 21 5e 71 12 1c cd 5e b3 23 35 41 d2 01 e5 28 89 55 44 a2 70 35 3f 55 d6 3b b3 8e 58 e4 8a b7 19 a7 73 a5 bf d6 0c 2e 3a 6c 58 49 Data Ascii: 7ff2 DJi=4<X2E.2i`;#?}Wp[3@\uO pbcYH:zB\(L@0#w)a~8W~)UL_sTdbQi8LEY?4[.t]-MSW4U`rb*/xfI!^q^#5A(UDp5?U;Xs.:lXI
2024-09-11 17:25:34 UTC	16380	IN	Data Raw: dc 43 60 57 e0 b6 6a 81 0b 08 12 88 e1 4e 29 16 72 b8 a2 42 b1 fa 60 04 4a e9 5d 84 3f 8d 4f 62 ef 8a 4f 66 5f fa f6 db ef c7 21 9c 48 80 ed 6f 82 59 f1 58 df 8b 18 2c d2 1b cd 5c 0e e6 b0 53 6e 72 8d 09 0f 88 1f e0 0f c8 87 ec 87 1c b7 8a dc c8 ae e1 76 e2 1d e4 01 76 17 b7 5b 14 19 a4 e1 0b c4 85 64 11 db 2a ae c6 82 13 d9 f8 11 28 c8 4f 40 57 f2 57 c3 2a 19 42 24 8c 2c b0 78 9e 61 59 89 e3 2d 1c c7 33 7d 64 ae ac e1 11 dc d5 70 67 60 c2 1d 26 73 e8 37 c4 74 eb 35 2c 5e c7 76 b2 9f b2 83 2c cb f6 61 8d ac 5e c7 74 32 9f 32 83 0c 4b cd f3 b3 40 c1 60 e6 30 d6 20 42 e6 c8 aa 42 8c b1 53 f8 d9 bc 8b 01 8b 13 34 b0 e5 7c 4b 4b c8 41 9d 10 1a 25 55 56 0c 6d e0 46 d2 6b 61 c3 48 c7 e5 b7 c3 40 af 31 79 2f 3c 0b 57 42 13 84 d3 2d ca a5 80 3b c0 2f 43 21 0c 56 Data Ascii: C`WjN)rB`J]?ObOf_!HoYX,\Snrvv[d(O@WWB$,xaY-3}dpg`&s7t5,^v,a^t22K@`0 BBS4\|KKA%UVmFkaH@1y/<WB-;/C!V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49830	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:33 UTC	1951	OUT	POST /portal/rest/invoice/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/view HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 70 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Intuit-RealmId: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c0551-9c90-4654-b82e-9bfc89702d71 Content-Type: application/json Accept: application/json, text/javascript, /; q=0.01 Intuit-DomainId: INVOICE:193514612387714_193514612387714_E408B8-1722543575 Intuit-ACSToken: scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11 sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; AWSALBCORS=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
2024-09-11 17:25:33 UTC	70	OUT	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 56 49 45 57 45 44 22 2c 22 61 70 70 53 6f 75 72 63 65 4f 66 66 65 72 69 6e 67 22 3a 22 49 6e 74 75 69 74 2e 73 62 67 2e 71 75 69 63 6b 62 6f 6f 6b 73 2d 77 69 6e 2d 75 73 22 7d Data Ascii: {"status":"VIEWED","appSourceOffering":"Intuit.sbg.quickbooks-win-us"}
2024-09-11 17:25:33 UTC	961	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:33 GMT Transfer-Encoding: chunked Connection: close x-spanid: d663a8f0-934a-df34-3bd6-70e6ab7c63f1 x-amzn-trace-id: Root=1-66e1d28d-468fc66e1cdb11e812395708 Set-Cookie: AWSALB=yLw/P5jvwNGPw4zxOPJGXcdMTg4HdKReoUFqwMpmOoZQlV5GcD9SAW2T2Br0sHqQfWMuJqBQoidW4UEtNlCp5uWPHfWoHb7EZER4U2Xw8gtpiURiWa6pYR9W3Jn8; Expires=Wed, 18 Sep 2024 17:25:33 GMT; Path=/ Set-Cookie: AWSALBCORS=yLw/P5jvwNGPw4zxOPJGXcdMTg4HdKReoUFqwMpmOoZQlV5GcD9SAW2T2Br0sHqQfWMuJqBQoidW4UEtNlCp5uWPHfWoHb7EZER4U2Xw8gtpiURiWa6pYR9W3Jn8; Expires=Wed, 18 Sep 2024 17:25:33 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store x-envoy-upstream-service-time: 456 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c0551-9c90-4654-b82e-9bfc89702d71 x-request-id: cp-c0551-9c90-4654-b82e-9bfc89702d71 server: istio-envoy
2024-09-11 17:25:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49831	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:33 UTC	1937	OUT	POST /portal/rest/reporting/prometheus/view HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 85 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: de5d3f8d-e21d-4427-94d5-b0de3b939741 sec-ch-ua-mobile: ?0 Intuit-RealmId: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-ce9e5-dc1e-4608-94d2-d35d8bfdbff1 Content-Type: application/json Accept: application/json, text/javascript, /; q=0.01 Intuit-DomainId: INVOICE:193514612387714_193514612387714_E408B8-1722543575 Intuit-ACSToken: scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11 user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; AWSALBCORS=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
2024-09-11 17:25:33 UTC	85	OUT	Data Raw: 7b 22 66 6c 6f 77 22 3a 22 69 6e 76 6f 69 63 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 45 4e 5f 55 53 22 2c 22 6f 66 66 65 72 69 6e 67 49 64 22 3a 22 51 42 44 54 22 2c 22 69 73 53 61 6c 65 73 43 68 65 63 6b 6f 75 74 49 6e 76 6f 69 63 65 22 3a 74 72 75 65 7d Data Ascii: {"flow":"invoice","locale":"EN_US","offeringId":"QBDT","isSalesCheckoutInvoice":true}
2024-09-11 17:25:33 UTC	1089	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:33 GMT Content-Type: text/plain;charset=utf-8 Content-Length: 2 Connection: close x-spanid: c982bf2e-897a-f064-03b8-33ca0054748d x-amzn-trace-id: Root=1-66e1d28d-47b392b34b2131502c526f75 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=G3aVPx4tVxgXegKG+NQrKjwCc1EVbAsliFc/TxVu5gVmuanswpo0EiTPLK/5QxFUixQ/DPWtIeH8EMfMcG03ynoONQs+2j9yrndAqHL6LNY3aEYoOl5H2U+pEbFE; Expires=Wed, 18 Sep 2024 17:25:33 GMT; Path=/ Set-Cookie: AWSALBCORS=G3aVPx4tVxgXegKG+NQrKjwCc1EVbAsliFc/TxVu5gVmuanswpo0EiTPLK/5QxFUixQ/DPWtIeH8EMfMcG03ynoONQs+2j9yrndAqHL6LNY3aEYoOl5H2U+pEbFE; Expires=Wed, 18 Sep 2024 17:25:33 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Vary: Accept-Encoding x-envoy-upstream-service-time: 159 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-ce9e5-dc1e-4608-94d2-d35d8bfdbff1 x-request-id: cp-ce9e5-dc1e-4608-94d2-d35d8bfdbff1 server: istio-envoy
2024-09-11 17:25:33 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49828	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:33 UTC	683	OUT	GET /_next/static/chunks/6835-37c4d58b85c794a8.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7
2024-09-11 17:25:34 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 64792 Connection: close Date: Wed, 11 Sep 2024 17:25:35 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT ETag: "b525f837e538a326542620abd7712e55" x-amz-server-side-encryption: AES256 x-amz-version-id: Uo3E7yZHPB5utYTevwSsMuHqgGzb7uEE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 71dbd5706c5b0c7b733248e1171f2d4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: sNYvWLy6aIMYqq1Hx0nWtpCe1Ivv-DGF7RXGm6Wug79WLjg1qCLLNg== Vary: Origin
2024-09-11 17:25:34 UTC	15760	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 33 35 2c 33 31 34 38 5d 2c 7b 35 34 34 35 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 73 2e 64 28 74 2c 7b 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 7d 29 3b 76 61 72 20 72 3d 73 28 39 35 36 32 37 29 2c 69 3d 73 2e 6e 28 72 29 2c 61 3d 73 28 36 37 32 39 34 29 2c 6e 3d 73 28 34 34 30 31 32 29 2c 6f 3d 73 28 37 32 30 30 32 29 2c 63 3d 73 28 35 31 39 37 32 29 2c 6c 3d 73 28 35 31 32 34 35 29 2c 64 3d 73 28 38 35 38 39 33 29 3b 63 6f 6e 73 74 20 6d 3d 65 3d 3e 7b 6c 65 74 7b 61 75 74 6f 50 61 79 49 6e 74 65 72 76 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6835,3148],{54459:function(e,t,s){s.d(t,{D:function(){return m}});var r=s(95627),i=s.n(r),a=s(67294),n=s(44012),o=s(72002),c=s(51972),l=s(51245),d=s(85893);const m=e=>{let{autoPayInterv
2024-09-11 17:25:34 UTC	2065	IN	Data Raw: 2c 5b 69 5d 29 2c 28 30 2c 67 2e 6a 73 78 73 29 28 67 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 67 2e 6a 73 78 73 29 28 54 2e 5a 2c 7b 68 69 64 65 3a 74 2c 68 69 64 65 4f 6e 43 6f 6e 74 69 6e 75 65 46 69 6e 69 73 68 3a 21 31 2c 77 69 74 68 43 61 6e 63 65 6c 42 74 6e 3a 21 31 2c 63 75 73 74 6f 6d 44 65 73 69 67 6e 4b 65 79 3a 22 66 72 65 65 54 65 78 74 4d 6f 64 61 6c 22 2c 6d 61 72 67 69 6e 54 6f 70 3a 22 35 35 70 78 22 2c 62 6f 64 79 43 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 3a 22 31 30 30 25 22 2c 6f 6e 43 6f 6e 74 69 6e 75 65 3a 61 73 79 6e 63 28 29 3d 3e 7b 78 28 28 30 2c 5a 2e 66 31 29 28 7b 66 65 65 64 62 61 63 6b 3a 7b 73 75 72 76 65 79 56 65 72 73 69 6f 6e 3a 72 2c 72 65 70 65 61 74 42 69 7a 3a 63 7d 7d 29 29 2c 69 7c Data Ascii: ,[i]),(0,g.jsxs)(g.Fragment,{children:[(0,g.jsxs)(T.Z,{hide:t,hideOnContinueFinish:!1,withCancelBtn:!1,customDesignKey:"freeTextModal",marginTop:"55px",bodyContainerWidth:"100%",onContinue:async()=>{x((0,Z.f1)({feedback:{surveyVersion:r,repeatBiz:c}})),i\|
2024-09-11 17:25:34 UTC	1024	IN	Data Raw: 6e 70 75 74 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 7d 22 2c 60 2e 72 65 66 65 72 72 61 6c 2d 64 69 73 63 6c 61 69 6d 65 72 2d 74 65 78 74 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 24 7b 66 2e 70 61 64 64 69 6e 67 53 69 7a 65 2e 6c 67 7d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 24 7b 66 2e 66 6f 6e 74 53 69 7a 65 2e 78 73 7d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 24 7b 66 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 33 7d 3b 7d 60 2c 60 2e 72 65 66 65 72 72 61 6c 2d 66 6f 72 6d 2d 65 72 72 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2e Data Ascii: nput.__jsx-style-dynamic-selector{width:100%;}",`.referral-disclaimer-text.__jsx-style-dynamic-selector{margin-top:${f.paddingSize.lg};font-weight:400;font-size:${f.fontSize.xs};line-height:16px;color:${f.colors.gray03};}`,`.referral-form-error-container.
2024-09-11 17:25:34 UTC	16384	IN	Data Raw: 74 5f 64 65 74 61 69 6c 3a 22 70 72 6f 5f 73 65 72 76 69 63 65 73 5f 72 65 76 69 6e 74 65 6c 22 2c 75 69 5f 61 63 63 65 73 73 5f 70 6f 69 6e 74 3a 22 70 6f 73 74 5f 69 6e 76 6f 69 63 65 5f 73 75 72 76 65 79 22 2c 75 69 5f 61 63 74 69 6f 6e 3a 22 73 6b 69 70 70 65 64 22 2c 73 75 72 76 65 79 5f 74 79 70 65 3a 22 72 65 70 65 61 74 5f 62 75 73 69 6e 65 73 73 22 7d 29 2c 65 28 42 2e 24 2e 73 65 74 53 75 72 76 65 79 4f 70 65 6e 28 7b 73 75 72 76 65 79 4f 70 65 6e 3a 59 2e 73 2e 4e 6f 6e 65 7d 29 29 7d 2c 6f 6e 53 75 62 6d 69 74 3a 6e 3d 3e 7b 76 61 72 20 6f 2c 6c 3b 6c 65 74 7b 74 72 61 63 6b 69 6e 67 50 72 6f 70 73 3a 64 7d 3d 6e 3b 6e 75 6c 6c 3d 3d 3d 28 6f 3d 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 6f 2e Data Ascii: t_detail:"pro_services_revintel",ui_access_point:"post_invoice_survey",ui_action:"skipped",survey_type:"repeat_business"}),e(B.$.setSurveyOpen({surveyOpen:Y.s.None}))},onSubmit:n=>{var o,l;let{trackingProps:d}=n;null===(o=window)\|\|void 0===o\|\|null===(l=o.
2024-09-11 17:25:34 UTC	16384	IN	Data Raw: 2c 66 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 32 5d 5d 5d 29 2b 22 20 66 65 65 64 62 61 63 6b 2d 6d 6f 64 61 6c 2d 73 75 62 68 65 61 64 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 67 2e 6a 73 78 29 28 63 2e 5a 2c 7b 69 64 3a 22 43 52 4d 5f 53 43 4f 52 45 5f 4d 4f 44 41 4c 5f 53 55 42 48 45 41 44 45 52 22 2c 76 61 6c 75 65 73 3a 7b 63 6f 6d 70 61 6e 79 4e 61 6d 65 3a 65 7d 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 48 6f 77 20 6c 69 6b 65 6c 79 20 69 73 20 69 74 20 74 68 61 74 20 79 6f 75 20 77 6f 75 6c 64 20 72 65 63 6f 6d 6d 65 6e 64 20 74 68 69 73 20 63 6f 6d 70 61 6e 79 20 74 6f 20 61 20 66 72 69 65 6e 64 20 6f 72 20 63 6f 6c 6c 65 61 67 75 65 3f 22 7d 29 7d 29 2c 28 30 2c 67 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d Data Ascii: ,f.colors.gray02]]])+" feedback-modal-subheader",children:(0,g.jsx)(c.Z,{id:"CRM_SCORE_MODAL_SUBHEADER",values:{companyName:e},defaultMessage:"How likely is it that you would recommend this company to a friend or colleague?"})}),(0,g.jsxs)("div",{classNam
2024-09-11 17:25:34 UTC	1776	IN	Data Raw: 64 61 72 6b 47 72 61 79 2c 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 66 2e 66 6f 6e 74 53 69 7a 65 2e 6d 73 2c 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 66 2e 66 6f 6e 74 53 69 7a 65 2e 78 73 2c 66 2e 63 6f 6c 6f 72 73 2e 62 6c 75 65 5d 5d 5d 29 2b 22 20 74 69 74 6c 65 2d 73 65 63 6f 6e 64 61 72 79 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 67 2e 6a 73 78 29 28 63 2e 5a 2c 7b 69 64 3a 22 53 55 43 43 45 53 53 5f 53 43 52 45 45 4e 5f 50 41 59 4d 45 4e 54 5f 53 43 48 45 44 55 4c 45 44 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 50 61 79 6d 65 6e 74 20 73 63 68 65 64 75 6c 65 64 22 7d 29 7d 29 2c 28 30 2c 67 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 28 Data Ascii: darkGray,f.breakpoints.md,f.fontSize.ms,f.breakpoints.md,f.breakpoints.md,f.fontSize.xs,f.colors.blue]]])+" title-secondary",children:(0,g.jsx)(c.Z,{id:"SUCCESS_SCREEN_PAYMENT_SCHEDULED",defaultMessage:"Payment scheduled"})}),(0,g.jsx)("div",{className:a(
2024-09-11 17:25:34 UTC	11399	IN	Data Raw: 43 45 5f 53 55 4d 4d 41 52 59 5f 44 55 45 5f 44 41 54 45 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 44 75 65 20 64 61 74 65 22 2c 76 61 6c 75 65 3a 28 30 2c 67 2e 6a 73 78 29 28 62 65 2e 5a 2c 7b 76 61 6c 75 65 3a 73 7d 29 7d 29 2c 69 65 26 26 28 30 2c 67 2e 6a 73 78 29 28 66 65 2e 5a 2c 7b 69 64 56 61 6c 75 65 3a 22 53 43 48 45 44 55 4c 45 44 5f 46 4f 52 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 53 63 68 65 64 75 6c 65 64 20 66 6f 72 20 22 2c 76 61 6c 75 65 3a 28 30 2c 67 2e 6a 73 78 29 28 62 65 2e 5a 2c 7b 76 61 6c 75 65 3a 58 7d 29 7d 29 2c 28 30 2c 67 2e 6a 73 78 29 28 66 65 2e 5a 2c 7b 69 64 56 61 6c 75 65 3a 22 49 4e 56 4f 49 43 45 5f 53 55 4d 4d 41 52 59 5f 49 4e 56 4f 49 43 45 5f 41 4d 4f 55 4e 54 22 2c 64 65 66 61 75 6c 74 Data Ascii: CE_SUMMARY_DUE_DATE",defaultMessage:"Due date",value:(0,g.jsx)(be.Z,{value:s})}),ie&&(0,g.jsx)(fe.Z,{idValue:"SCHEDULED_FOR",defaultMessage:"Scheduled for ",value:(0,g.jsx)(be.Z,{value:X})}),(0,g.jsx)(fe.Z,{idValue:"INVOICE_SUMMARY_INVOICE_AMOUNT",default

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49833	35.166.207.170	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:33 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2988 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:33 UTC	2988	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 33 31 2e 34 34 38 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 49 6e 76 6f 69 63 65 5f 76 69 65 77 5f 69 6e 5f 63 70 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 69 6e 74 75 69 74 5f 61 63 73 74 6f 6b 65 6e 22 3a 22 73 63 73 2d 76 31 2d 66 36 32 35 64 30 62 33 32 35 34 38 34 34 30 62 39 39 39 31 36 38 34 38 64 65 64 30 32 35 63 38 35 35 64 34 66 36 30 62 31 63 62 37 34 65 62 61 62 65 65 32 30 66 30 65 36 62 39 32 39 66 66 64 65 35 62 62 35 36 34 39 62 36 33 33 34 37 33 35 62 63 36 34 31 36 63 39 39 64 35 35 38 62 31 31 22 2c 22 73 73 72 74 69 64 22 3a 22 64 65 35 64 33 Data Ascii: {"timestamp":"2024-09-11T17:25:31.448Z","integrations":{},"event":"Invoice_view_in_cp","type":"track","properties":{"intuit_acstoken":"scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11","ssrtid":"de5d3
2024-09-11 17:25:33 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Wed, 11 Sep 2024 17:25:33 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:e009eed4-88bc-403b-a07a-0fcafe4b9935\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Wed, 11-Sep-2024 17:26:03 GMT Set-Cookie: SameSite=None;Path=/;Expires=Wed, 11-Sep-2024 17:26:03 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 6044e4ae-28b1-4021-91ca-cf2b0134d2db intuit_received_at: 1726075533881 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:2\|d:2;Path=/;Expires=Wed, 11-Sep-2024 17:26:03 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49835	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:33 UTC	1917	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 10326 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: de5d3f8d-e21d-4427-94d5-b0de3b939741 sec-ch-ua-mobile: ?0 Intuit-RealmId: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c541e-f03b-4fd6-b561-c404d9d1efd0 Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:193514612387714_193514612387714_E408B8-1722543575 Intuit-ACSToken: scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11 user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; AWSALBCORS=7K/KOU9nA68THK3vNz3iwaArOTO90PXDrVklbXmUjt6KHp6+8xyh/GnmlELETiBp4ttetKZTXOce1iBMSi/cyFVxCi5hlgnmQQdfecM60XPT+lxeSGOxBwywiqqB; ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
2024-09-11 17:25:33 UTC	10326	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 33 31 2e 31 30 39 5a 22 2c 22 65 76 65 6e 74 22 3a 22 76 69 65 77 22 2c 22 61 63 74 69 6f 6e 22 3a 22 72 65 6e 64 65 72 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 61 63 74 69 76 69 74 79 4f 62 6a 65 63 74 22 3a 22 44 65 73 6b 74 6f 70 50 61 79 6d 65 6e 74 4d 65 74 68 6f 64 54 61 62 73 22 2c 22 6e 75 6d 62 65 72 4f 66 54 61 62 73 22 3a 32 2c 22 61 6c 6c 6f 77 65 64 50 61 79 6d 65 6e 74 4d 65 74 68 6f 64 73 22 3a 5b 22 64 63 22 2c 22 63 63 22 5d 2c 22 62 61 6c 61 6e 63 65 41 6d 6f 75 6e 74 22 3a 34 33 36 2e 34 35 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 Data Ascii: {"messages":[{"data":{"timestamp":"2024-09-11T17:25:31.109Z","event":"view","action":"render","activityInfo":{"activityObject":"DesktopPaymentMethodTabs","numberOfTabs":2,"allowedPaymentMethods":["dc","cc"],"balanceAmount":436.45},"logInfo":{"logLevel":"i
2024-09-11 17:25:34 UTC	1101	IN	HTTP/1.1 201 Created Date: Wed, 11 Sep 2024 17:25:33 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: 17055ed8-e073-0a5a-65f6-154b3cf24b81 x-amzn-trace-id: Root=1-66e1d28d-4e00dbeb0b72007c027ca400 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=BD0UWKfk8wwX9GQRTLGWAZx/2w030TXXPOGQWCeehDBx7vJSuwfmL3QSMHXrLb8FRYqNOfY3oA5sNtWOJ5crgu3GwGSAA8Km+wGr4bF6L/KTs+kjeJHdclPpUD70; Expires=Wed, 18 Sep 2024 17:25:33 GMT; Path=/ Set-Cookie: AWSALBCORS=BD0UWKfk8wwX9GQRTLGWAZx/2w030TXXPOGQWCeehDBx7vJSuwfmL3QSMHXrLb8FRYqNOfY3oA5sNtWOJ5crgu3GwGSAA8Km+wGr4bF6L/KTs+kjeJHdclPpUD70; Expires=Wed, 18 Sep 2024 17:25:33 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 48 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c541e-f03b-4fd6-b561-c404d9d1efd0 x-request-id: cp-c541e-f03b-4fd6-b561-c404d9d1efd0 server: istio-envoy
2024-09-11 17:25:34 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49836	35.166.207.170	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:33 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2787 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:33 UTC	2787	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 33 31 2e 34 37 31 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 3a 76 69 65 77 65 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 62 72 6f 77 73 65 72 5f 68 65 69 67 68 74 22 3a 39 30 37 2c 22 62 72 6f 77 73 65 72 5f 77 69 64 74 68 22 3a 31 32 38 30 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 69 76 69 64 22 3a 22 64 65 35 64 33 66 38 64 2d 65 32 31 64 2d 34 34 32 37 2d 39 34 64 35 2d 62 30 64 65 33 62 39 33 39 37 34 31 22 2c 22 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 3a 22 51 42 44 54 22 2c 22 66 65 61 74 75 72 65 Data Ascii: {"timestamp":"2024-09-11T17:25:31.471Z","integrations":{},"event":"transaction:viewed","type":"track","properties":{"browser_height":907,"browser_width":1280,"platform":"Windows","ivid":"de5d3f8d-e21d-4427-94d5-b0de3b939741","product_name":"QBDT","feature
2024-09-11 17:25:33 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Wed, 11 Sep 2024 17:25:33 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:958169f3-acd5-4545-8bc7-2669b1498000\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Wed, 11-Sep-2024 17:26:03 GMT Set-Cookie: SameSite=None;Path=/;Expires=Wed, 11-Sep-2024 17:26:03 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: b584b331-e993-4af9-a4f4-8a7dd2d3f81c intuit_received_at: 1726075533897 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:4\|d:2;Path=/;Expires=Wed, 11-Sep-2024 17:26:03 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49834	35.166.207.170	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:33 UTC	635	OUT	POST /v2/segment/sbseg-qbo-clickstream/t HTTP/1.1 Host: eventbus.intuit.com Connection: keep-alive Content-Length: 2648 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:33 UTC	2648	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 33 31 2e 35 30 32 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 63 68 61 6e 67 65 5f 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 69 6e 74 75 69 74 5f 61 63 73 74 6f 6b 65 6e 22 3a 22 73 63 73 2d 76 31 2d 66 36 32 35 64 30 62 33 32 35 34 38 34 34 30 62 39 39 39 31 36 38 34 38 64 65 64 30 32 35 63 38 35 35 64 34 66 36 30 62 31 63 62 37 34 65 62 61 62 65 65 32 30 66 30 65 36 62 39 32 39 66 66 64 65 35 62 62 35 36 34 39 62 36 33 33 34 37 33 35 62 63 36 34 31 36 63 39 39 64 35 35 38 62 31 31 22 2c 22 73 73 72 74 69 64 22 3a 22 64 65 Data Ascii: {"timestamp":"2024-09-11T17:25:31.502Z","integrations":{},"event":"change_payment_method","type":"track","properties":{"intuit_acstoken":"scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11","ssrtid":"de
2024-09-11 17:25:33 UTC	1211	IN	HTTP/1.1 202 Accepted Date: Wed, 11 Sep 2024 17:25:33 GMT Content-Type: text/plain Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ADRUM_BTa=R:27\|g:2ee3ad78-6a86-4ce5-b9a0-b595962be2c4\|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Wed, 11-Sep-2024 17:26:03 GMT Set-Cookie: SameSite=None;Path=/;Expires=Wed, 11-Sep-2024 17:26:03 GMT;Secure Cache-Control: private, no-cache, no-transform Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Request-Method: GET,POST,OPTIONS Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=10886400; includeSubDomains; preload intuit_appid: Intuit.ldcp.mds.trinity intuit_offeringid: Intuit.ldcp.mds.trinity X-Application-Id: event-bus Server: Jetty event_id: 50c7da91-9232-4db5-89f1-96027fff1765 intuit_received_at: 1726075533899 Set-Cookie: ADRUM_BT1=R:27\|i:636215\|e:2\|d:3;Path=/;Expires=Wed, 11-Sep-2024 17:26:03 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49842	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:34 UTC	1916	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 4620 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: de5d3f8d-e21d-4427-94d5-b0de3b939741 sec-ch-ua-mobile: ?0 Intuit-RealmId: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-cafd8-2f49-4260-98fa-24bef1cb5e2d Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:193514612387714_193514612387714_E408B8-1722543575 Intuit-ACSToken: scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11 user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; AWSALB=yLw/P5jvwNGPw4zxOPJGXcdMTg4HdKReoUFqwMpmOoZQlV5GcD9SAW2T2Br0sHqQfWMuJqBQoidW4UEtNlCp5uWPHfWoHb7EZER4U2Xw8gtpiURiWa6pYR9W3Jn8; AWSALBCORS=yLw/P5jvwNGPw4zxOPJGXcdMTg4HdKReoUFqwMpmOoZQlV5GcD9SAW2T2Br0sHqQfWMuJqBQoidW4UEtNlCp5uWPHfWoHb7EZER4U2Xw8gtpiURiWa6pYR9W3Jn8
2024-09-11 17:25:34 UTC	4620	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 33 32 2e 34 38 32 5a 22 2c 22 65 76 65 6e 74 22 3a 22 70 72 6f 66 69 6c 69 6e 67 22 2c 22 61 63 74 69 6f 6e 22 3a 22 50 4f 53 54 3a 20 2f 70 6f 72 74 61 6c 2f 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 2f 70 72 6f 6d 65 74 68 65 75 73 2f 76 69 65 77 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 6c 6f 67 67 65 72 22 3a 22 72 65 70 6f 72 74 69 6e 67 2f 50 72 6f 66 69 6c 65 72 22 2c 22 6c 6f 67 54 79 70 65 22 3a 22 6f 75 74 62 6f 75 6e 64 22 7d 2c 22 Data Ascii: {"messages":[{"data":{"timestamp":"2024-09-11T17:25:32.482Z","event":"profiling","action":"POST: /portal/rest/reporting/prometheus/view","activityInfo":{"status":"success"},"logInfo":{"logLevel":"info","logger":"reporting/Profiler","logType":"outbound"},"
2024-09-11 17:25:34 UTC	1101	IN	HTTP/1.1 201 Created Date: Wed, 11 Sep 2024 17:25:34 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: 3f4f2cb4-1a7b-c7de-b339-65ceade53fec x-amzn-trace-id: Root=1-66e1d28e-2ef7a36b3d1017dc0275f2ff X-Content-Type-Options: nosniff Set-Cookie: AWSALB=1gCOCNgR5KUAIjvQULCpxcC9aYugR3svmbzxYW15fPYkolct+sBAekUEySfyaiowJROS+8SZd4/Eeo1SHlGdIHBlBWnXT7hDtOjUiZDBQULxvPfQVbepQvjYd/gY; Expires=Wed, 18 Sep 2024 17:25:34 GMT; Path=/ Set-Cookie: AWSALBCORS=1gCOCNgR5KUAIjvQULCpxcC9aYugR3svmbzxYW15fPYkolct+sBAekUEySfyaiowJROS+8SZd4/Eeo1SHlGdIHBlBWnXT7hDtOjUiZDBQULxvPfQVbepQvjYd/gY; Expires=Wed, 18 Sep 2024 17:25:34 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 33 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-cafd8-2f49-4260-98fa-24bef1cb5e2d x-request-id: cp-cafd8-2f49-4260-98fa-24bef1cb5e2d server: istio-envoy
2024-09-11 17:25:34 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49843	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:34 UTC	762	OUT	GET /i33jrfiwxn31hedn.js?9xqf08dnc54dm8lt=v60nf4oj&wkzxu6z39p8c5fqp=16888CCFE5EA4EE5ACCBC28664B129CC HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
2024-09-11 17:25:35 UTC	788	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:34 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Robots-Tag: noindex, nofollow Set-Cookie: thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None; P3P: CP=IVAa PSAa Set-Cookie: tmx_guid=AAxwFG5nsDspC9blQ_dJf3C2ftGe4yQBiR5CHs7tDpqD5-aYPkFdvl6Pn_my1RtgLH14hcPRAMs_mUeCUVhWM3Jr7uQUSg; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None; Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-09-11 17:25:35 UTC	7404	IN	Data Raw: 66 66 66 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 64 5f 32 76 3d 74 64 5f 32 76 7c 7c 7b 7d 3b 74 64 5f 32 76 2e 74 64 5f 34 53 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 73 2c 74 64 5f 71 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 64 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4e 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 49 3d 30 3b 74 64 5f 49 3c 74 64 5f 71 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 49 29 7b 74 64 5f 64 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 73 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4e 29 5e 74 64 5f 71 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 49 29 29 29 3b 74 64 5f 4e 2b 2b 3b 0a 69 66 28 74 64 5f 4e 3e 3d 74 64 5f 73 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 4e 3d 30 3b 7d 7d 72 Data Ascii: fff8(function(){var td_2v=td_2v\|\|{};td_2v.td_4S=function(td_s,td_q){try{var td_d=[""];var td_N=0;for(var td_I=0;td_I<td_q.length;++td_I){td_d.push(String.fromCharCode(td_s.charCodeAt(td_N)^td_q.charCodeAt(td_I)));td_N++;if(td_N>=td_s.length){td_N=0;}}r
2024-09-11 17:25:35 UTC	16384	IN	Data Raw: 36 51 28 74 64 5f 58 4a 29 3b 74 64 5f 58 4a 2e 69 64 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 65 32 65 61 63 30 63 39 37 39 38 62 34 32 36 38 62 63 33 64 35 63 34 65 33 34 66 39 36 30 64 64 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 65 32 65 61 63 30 63 39 37 39 38 62 34 32 36 38 62 63 33 64 35 63 34 65 33 34 66 39 36 30 64 64 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 65 32 65 61 63 30 63 39 37 39 38 62 34 32 36 38 62 63 33 64 35 63 34 65 33 34 66 39 36 30 64 64 2e 74 64 5f 66 28 33 38 2c 31 35 29 29 3a 6e 75 6c 6c 29 3b 0a 74 64 5f 58 4a 2e 74 69 74 6c 65 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 65 32 Data Ascii: 6Q(td_XJ);td_XJ.id=((typeof(td_2v.tdz_e2eac0c9798b4268bc3d5c4e34f960dd)!=="undefined"&&typeof(td_2v.tdz_e2eac0c9798b4268bc3d5c4e34f960dd.td_f)!=="undefined")?(td_2v.tdz_e2eac0c9798b4268bc3d5c4e34f960dd.td_f(38,15)):null);td_XJ.title=((typeof(td_2v.tdz_e2
2024-09-11 17:25:35 UTC	16384	IN	Data Raw: 36 63 65 62 37 62 61 33 35 38 39 35 34 30 38 63 31 36 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 36 62 35 39 32 32 36 30 63 34 61 38 34 36 63 65 62 37 62 61 33 35 38 39 35 34 30 38 63 31 36 33 2e 74 64 5f 66 28 37 2c 33 29 29 3a 6e 75 6c 6c 29 2c 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 36 62 35 39 32 32 36 30 63 34 61 38 34 36 63 65 62 37 62 61 33 35 38 39 35 34 30 38 63 31 36 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 36 62 35 39 32 32 36 30 63 34 61 38 34 36 63 65 62 37 62 61 33 35 38 39 35 34 30 38 63 31 36 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 36 62 35 Data Ascii: 6ceb7ba35895408c163.td_f)!=="undefined")?(td_2v.tdz_6b592260c4a846ceb7ba35895408c163.td_f(7,3)):null),((typeof(td_2v.tdz_6b592260c4a846ceb7ba35895408c163)!=="undefined"&&typeof(td_2v.tdz_6b592260c4a846ceb7ba35895408c163.td_f)!=="undefined")?(td_2v.tdz_6b5
2024-09-11 17:25:35 UTC	16384	IN	Data Raw: 65 72 73 69 6f 6e 53 65 61 72 63 68 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 31 34 2c 31 30 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 Data Ascii: ersionSearch:((typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13)!=="undefined"&&typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f)!=="undefined")?(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f(14,10)):null),identity:((typeof(td_2v.tdz_feaa74886f14
2024-09-11 17:25:35 UTC	8978	IN	Data Raw: 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 32 38 34 2c 37 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: eaa74886f14491db9e3cb1d6053be13)!=="undefined"&&typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f)!=="undefined")?(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f(284,7)):null),identity:((typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13)!=="undefine
2024-09-11 17:25:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-11 17:25:35 UTC	8192	IN	Data Raw: 37 64 63 65 0d 0a 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 34 35 35 2c 31 30 29 29 3a 6e 75 6c 6c 29 2c 72 3a 2f 28 57 69 6e 64 6f 77 73 20 39 38 7c 57 69 6e 39 38 29 2f 7d 2c 7b 73 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 Data Ascii: 7dcez_feaa74886f14491db9e3cb1d6053be13.td_f)!=="undefined")?(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f(455,10)):null),r:/(Windows 98\|Win98)/},{s:((typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13)!=="undefined"&&typeof(td_2v.tdz_feaa74886f14491db
2024-09-11 17:25:35 UTC	16384	IN	Data Raw: 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 36 31 31 2c 37 29 29 3a 6e 75 6c 6c 29 3b 0a 76 61 72 20 74 64 5f 52 3d 74 64 5f 63 2e 6c 65 6e 67 74 68 3e 3d 33 3f 74 64 5f 63 5b 33 5d 7c 22 30 22 3a 22 30 22 3b 74 64 5f 4d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 Data Ascii: tdz_feaa74886f14491db9e3cb1d6053be13.td_f)!=="undefined")?(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f(611,7)):null);var td_R=td_c.length>=3?td_c[3]\|"0":"0";td_M=((typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13)!=="undefined"&&typeof(td_2v.tdz_fea
2024-09-11 17:25:35 UTC	7636	IN	Data Raw: 5c 78 33 36 5c 78 33 30 5c 78 33 33 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 33 35 5c 78 33 31 5c 78 36 32 5c 78 33 30 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 30 5c 78 33 30 5c 78 33 31 5c 78 33 34 5c 78 33 35 5c 78 33 31 5c 78 33 31 5c 78 33 38 5c 78 33 35 5c 78 33 31 5c 78 33 31 5c 78 33 38 5c 78 33 35 5c 78 36 35 5c 78 33 31 5c 78 33 34 5c 78 33 35 5c 78 33 37 5c 78 33 35 5c 78 33 34 5c 78 33 35 5c 78 36 32 5c 78 33 35 5c 78 33 32 5c 78 33 34 5c 78 33 36 5c 78 33 30 5c 78 33 32 5c 78 33 35 5c 78 36 33 5c 78 33 35 5c 78 33 31 5c 78 33 35 5c 78 33 33 5c 78 33 31 5c 78 33 36 5c 78 33 35 5c 78 36 36 5c 78 33 31 5c 78 33 38 5c 78 33 31 5c 78 33 31 5c 78 33 30 5c 78 33 39 5c 78 33 31 5c 78 33 35 5c 78 33 35 5c 78 33 39 5c 78 33 31 5c 78 33 37 5c 78 33 Data Ascii: \x36\x30\x33\x35\x36\x35\x35\x31\x62\x30\x31\x31\x35\x30\x30\x31\x34\x35\x31\x31\x38\x35\x31\x31\x38\x35\x65\x31\x34\x35\x37\x35\x34\x35\x62\x35\x32\x34\x36\x30\x32\x35\x63\x35\x31\x35\x33\x31\x36\x35\x66\x31\x38\x31\x31\x30\x39\x31\x35\x35\x39\x31\x37\x3
2024-09-11 17:25:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49844	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:34 UTC	561	OUT	GET /_next/static/chunks/pages/payable-f99486b740249e9c.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
2024-09-11 17:25:35 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 23482 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 7N5E3AuKvugmehGITXMh0mAGDxT0euPt Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:32 GMT ETag: "c688c797224f889413a44be90805f57f" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f8fe53d5464b299529d281799da8de30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: kZiJJfX4iWJRLFtjlhimaLRZsF3IpRAj7WG0OK5Sw-CQ6f5BcL4t2w== Age: 4 Vary: Origin
2024-09-11 17:25:35 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 30 38 2c 37 31 32 5d 2c 7b 36 30 37 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 61 28 36 37 32 39 34 29 3b 76 61 72 20 6f 3d 61 28 35 31 32 34 35 29 2c 6e 3d 61 28 38 35 38 39 33 29 3b 74 2e 64 65 66 61 75 6c 74 3d 65 3d 3e 7b 6c 65 74 7b 77 69 64 74 68 3a 74 3d 32 30 2c 68 65 69 67 68 74 3a 61 3d 32 30 2c 63 6f 6c 6f 72 3a 73 3d 6f 2e 63 6f 6c 6f 72 73 2e 6c 69 67 68 74 42 6c 75 65 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 6e 2e 6a 73 78 29 28 22 73 76 67 22 2c 7b 77 69 64 74 68 3a 74 2c 68 65 69 67 68 74 3a 61 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7908,712],{60712:function(e,t,a){"use strict";a.r(t);a(67294);var o=a(51245),n=a(85893);t.default=e=>{let{width:t=20,height:a=20,color:s=o.colors.lightBlue}=e;return(0,n.jsx)("svg",{width:t,height:a
2024-09-11 17:25:35 UTC	6464	IN	Data Raw: 65 63 74 6f 72 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 32 30 70 78 20 30 3b 7d 2e 6d 61 69 6e 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 6d 61 69 6e 2d 63 61 72 64 2d 77 72 61 70 70 65 72 2e 62 6f 74 74 6f 6d 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 7d 7d 60 2c 22 2e 6d 61 69 6e 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 6d 61 69 6e 2d 63 61 72 64 2d 77 72 61 70 70 65 72 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 73 65 6c 65 63 74 6f 72 20 2e 70 61 79 6d 65 6e 74 2d 61 6d 6f 75 6e 74 2d 77 72 61 70 70 65 72 2e 5f 5f 6a 73 78 2d 73 74 79 6c 65 Data Ascii: ector{padding:20px 20px 0;}.main.__jsx-style-dynamic-selector .main-card-wrapper.bottom.__jsx-style-dynamic-selector{padding:0 20px;}}`,".main.__jsx-style-dynamic-selector .main-card-wrapper.__jsx-style-dynamic-selector .payment-amount-wrapper.__jsx-style
2024-09-11 17:25:35 UTC	634	IN	Data Raw: 74 3a 22 76 69 65 77 53 61 6c 65 22 2c 61 63 74 69 6f 6e 3a 22 72 65 6e 64 65 72 22 2c 61 63 74 69 76 69 74 79 49 6e 66 6f 3a 7b 69 73 42 6c 6f 63 6b 57 69 74 68 44 75 65 44 61 74 65 3a 21 30 2c 62 6c 6f 63 6b 69 6e 67 44 75 65 44 61 74 65 3a 65 2c 6c 6f 63 61 6c 65 54 69 6d 65 53 74 72 69 6e 67 3a 6f 2c 73 6f 75 72 63 65 3a 22 62 61 6e 6b 20 6e 61 6e 6f 70 61 79 22 7d 7d 29 7d 63 6f 6e 73 74 20 6b 3d 7b 70 61 79 6d 65 6e 74 54 79 70 65 3a 67 3f 22 73 63 68 65 64 75 6c 65 22 3a 68 3f 22 61 75 74 6f 70 61 79 22 3a 22 70 61 79 6d 65 6e 74 22 2c 70 61 79 6d 65 6e 74 4d 65 74 68 6f 64 3a 78 2c 73 63 72 65 65 6e 3a 22 70 61 79 61 62 6c 65 22 7d 3b 72 65 74 75 72 6e 20 61 3f 28 30 2c 63 2e 6a 73 78 29 28 6e 2e 5a 2c 7b 61 63 74 69 76 69 74 79 49 6e 66 6f 3a 6b Data Ascii: t:"viewSale",action:"render",activityInfo:{isBlockWithDueDate:!0,blockingDueDate:e,localeTimeString:o,source:"bank nanopay"}})}const k={paymentType:g?"schedule":h?"autopay":"payment",paymentMethod:x,screen:"payable"};return a?(0,c.jsx)(n.Z,{activityInfo:k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49845	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:34 UTC	566	OUT	GET /_next/static/1.30.0-release_1.30.0-80b42f1/_ssgManifest.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
2024-09-11 17:25:35 UTC	628	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 77 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: dwaBff2Shuq_8k4igTKlalX2ZzOMo5Sc Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:32 GMT ETag: "b6652df95db52feb4daf4eca35380933" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 edfd22ec6695cdc9d7ac634220af1314.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: wBMHeBaHGl33SB1vOVPJUmUDEJ2yVK8MFg61dS_zKibkgqA4spOCtQ== Age: 3 Vary: Origin
2024-09-11 17:25:35 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49847	52.85.48.9	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:35 UTC	589	OUT	GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:35 UTC	727	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21911 Connection: close Date: Wed, 11 Sep 2024 17:25:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Thu, 08 Aug 2024 06:57:13 GMT ETag: "c467a63b2e7c3a99be423ace649014d8" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: aAixXKmCEkR1rfYrRzV2.EPYhnGmH0W2 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 3c1b8c037c66c46a8ac162f1eef5d682.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL50-C2 X-Amz-Cf-Id: 0MMkh1SMxqUF0EpavtdNu4_0Gq9xc3iZQXq4c8xJQKqDC4CWFNJr1Q==
2024-09-11 17:25:35 UTC	8175	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 69 7b db 38 b2 30 fa fd fe 0a 99 b7 a3 90 11 ac d5 ab 64 46 6f 96 4e 27 3d d9 4e c7 e9 3e 13 45 c9 a1 25 c8 62 22 91 6a 92 b2 e3 58 9a df 7e ab 0a 0b c1 45 b2 32 db 99 fb 3c ef 4c c7 22 41 a0 50 d8 0a 85 42 2d f6 b5 1f 8c c3 eb fa 35 bf 58 78 a3 af bf c6 61 b0 f8 1c 78 73 fe f9 45 90 f0 cb c8 4b fc 30 70 77 c9 b4 5a 0d 86 4e 7d b1 8c a7 f6 60 d0 1c b2 5b ab f6 f8 65 cb ea 4e 96 c1 08 bf db 09 e3 2c 72 6e ad 65 cc 2b 71 12 f9 a3 c4 ea a9 8f 15 f8 ec dc 5e 79 51 85 bb 49 3d 09 df c1 f7 e0 d2 76 7a 11 4f 96 51 50 69 b9 ae cb eb 33 1e 5c 26 d3 be d5 b4 6a bc cb d7 49 9d 7f 5b 84 51 12 bb 69 1d ce ad 2c 91 d4 2f 79 f2 fe fc c9 b3 e5 6c f6 57 ee 45 b6 53 b3 f6 ad 1a 64 91 1f 5e 85 41 32 85 d4 56 fe c3 53 2f e1 b6 03 a9 e7 66 Data Ascii: i{80dFoN'=N>E%b"jX~E2<L"APB-5XxaxsEK0pwZN}`[eN,rne+q^yQI=vzOQPi3\&jI[Qi,/ylWESd^A2VS/f
2024-09-11 17:25:35 UTC	9000	IN	Data Raw: 0f bd da e4 d6 61 f4 15 3d a6 31 20 19 9b 6e fd 19 5e 73 a2 24 56 9e c1 1b 95 07 bd ca 83 86 a3 24 01 01 1e c5 d5 15 66 ee d6 33 e3 23 3f 1a 2c 6d 60 e1 82 ec 71 1e 95 6d 9c a1 bb 84 39 d7 4a b5 04 22 d2 1f 36 45 5d 7a c2 43 97 0d 92 61 4e b1 7e 77 99 0a 9c 86 a9 f9 95 ff 11 19 ed 7b a1 f3 3f 95 fd 0a fa d5 12 1e 90 34 e4 e5 0e a2 96 52 c8 22 63 11 f2 9d c2 b7 bc 6a b2 38 8c 55 3a 5d fa 69 2b 09 57 68 8a bf 2a 2d 43 20 e7 14 2f de 49 8a f5 f6 f8 bf 5f e5 8e 8b 25 d3 45 1e 67 84 ce 56 7f d3 21 99 0b 9d af e5 82 47 9f 5d ce 8c e3 8f 9b 01 60 73 c3 59 d1 ad e1 97 a8 7b 2b 3c 01 01 34 c3 5f 50 cb 74 07 94 f7 1d b4 c6 bb fa ee 96 63 3b 5d 78 29 9c e4 29 db bc a4 ed 19 9e 93 5c 13 31 13 7d a4 26 91 99 62 7a 53 02 2e 13 3a f2 bf 5e 1f ff 57 e9 b9 5b 79 73 eb ed Data Ascii: a=1 n^s$V$f3#?,m`qm9J"6E]zCaN~w{?4R"cj8U:]i+Wh*-C /I_%EgV!G]`sY{+<4_Ptc;]x))\1}&bzS.:^W[ys
2024-09-11 17:25:36 UTC	4736	IN	Data Raw: 80 88 14 16 e9 f0 ea 2a 75 92 4a 31 a0 cd 53 70 73 03 5e ce c7 fa 7a 2d 07 34 f5 2a 8f 13 75 0f 43 af fb f1 6b ef b5 e1 1f 0a 7d 77 04 97 fd 91 bd 74 13 e6 33 ea 72 07 19 d3 25 0b 99 e8 57 f9 1a 30 d5 4f 32 21 62 aa d5 90 b0 84 35 85 28 e5 9d 30 3d 74 7d 55 95 f0 b4 8a a2 4e 58 84 3e 2c c2 31 f9 20 86 2c 61 69 96 10 b2 4c 55 96 a0 34 4b 00 59 e6 2a 4b 54 9a 25 72 70 9d 6b f2 5f c3 8e a3 fe 29 38 6d bc f2 66 15 3f 26 f7 3b 1e fc 0d f6 f9 7c 91 dc 54 c4 62 af 84 e8 6a 02 b2 c0 a9 46 f4 6a 1d df 5c ab 56 88 be 8b 27 c2 d9 e9 ef bf ee 12 69 06 b6 3b ed 6f b1 96 28 8f 8b b5 c4 8c 7a a2 ef f8 b4 67 c8 5d fd 41 16 f2 ad cb 6f cc b7 87 c4 6c 76 53 64 73 61 30 23 3a ff 42 73 af 0e 4e 36 04 4b 32 d5 10 73 c6 09 78 35 af ce 1e 6a d7 c7 4d 40 87 9a 85 9d 20 dc b7 03 Data Ascii: uJ1Sps^z-4uCk}wt3r%W0O2!b5(0=t}UNX>,1 ,aiLU4KY*KT%rpk_)8mf?&;\|TbjFj\V'i;o(zg]AolvSdsa0#:BsN6K2sx5jM@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49848	65.9.86.56	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:35 UTC	551	OUT	GET /scripts/04e01638/04e01638.js HTTP/1.1 Host: bcdn-god.we-stats.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:35 UTC	547	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 132098 Connection: close Date: Wed, 11 Sep 2024 17:25:36 GMT Last-Modified: Sun, 23 Apr 2023 18:39:18 GMT ETag: "b87bf31c73ec4335bbbd7517da66af7b" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 bf5caee39117de5337c47c748b716e80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-C1 X-Amz-Cf-Id: izSMooWmVpMjRavr6dXS1Biafm-DNL94-v-zlbQ6WG_wHB9iop0Ycw==
2024-09-11 17:25:35 UTC	15837	IN	Data Raw: 1f 8b 08 08 55 7b 45 64 02 ff 30 34 65 30 31 36 33 38 2e 6a 73 00 ec bd 6d 57 dc 46 d2 30 fc fd 3e e7 f9 0f 83 ce 7d 93 51 10 e3 c1 6f 9b 68 ac e5 60 c0 1b 36 c6 26 06 c7 9b 65 59 8e 98 69 40 eb 41 9a 48 1a 63 02 f3 df 9f aa 7e 6f 75 b7 66 c0 0e 09 7b 76 af 2b 58 d3 ef 5d 5d 5d 5d 55 5d 5d f5 e8 db ce 68 14 77 1e f7 1f 3f 59 ed 3f 5d 7d fc e4 f8 78 ed bb d5 27 df af ae 3d ef 7c fb e8 ff fb 3f 4b a7 d3 7c 58 67 45 de 25 e1 75 30 ad 48 a7 aa cb 6c 58 07 83 8a 8c 4f 7b c3 d1 c6 24 4b ae 8f c9 27 92 d7 af b3 aa 26 39 29 ab f8 7a 16 0d 8b fc 34 3b 9b 96 29 56 fe 91 5c 41 e2 e5 74 b2 4f ca 4f a4 7c ff ee 75 1c e8 bf 82 68 5c 9c 69 79 fa af 20 22 79 7a 32 26 af ca f4 82 54 7b 65 31 24 55 95 e5 67 71 e0 4e 0f 66 d1 19 a9 37 f5 ee ab 58 9f c5 a7 b4 ec e4 c9 f5 6c Data Ascii: U{Ed04e01638.jsmWF0>}Qoh`6&eYi@AHc~ouf{v+X]]]]U]]hw?Y?]}x'=\|?K\|XgE%u0HlXO{$K'&9)z4;)V\AtOO\|uh\iy "yz2&T{e1$UgqNf7Xl
2024-09-11 17:25:35 UTC	153	IN	Data Raw: 73 d9 0b 64 f5 e8 58 c3 dc 70 b3 99 2b 1f 55 ce ce 92 3c 51 26 7f 6a d9 05 38 61 1c d8 a2 f3 4e 40 78 ec c8 f1 21 eb 52 e1 64 86 d8 15 0e 1a 83 a1 b7 4e d8 2a 34 d3 18 01 dd ef 5d ea 79 0d ef 79 c2 a8 70 30 3f d0 45 52 ea 4f e0 5a fc c3 9b ea 0d 47 4b 8b 79 83 f7 d7 4f 6a 7d 18 1b e3 b1 6b 24 90 dc 9d 37 16 25 5d fb 21 63 cb d7 2d 50 64 1a a3 80 bd c0 0e 96 44 68 38 e9 a1 99 b9 f3 2c af c4 b8 74 f1 5a 7b 80 35 d3 8a 0b db 20 d7 46 41 3d f8 04 c4 44 76 1e Data Ascii: sdXp+U<Q&j8aN@x!RdN*4]yyp0?EROZGKyOj}k$7%]!c-PdDh8,tZ{5 FA=Dv
2024-09-11 17:25:35 UTC	960	IN	Data Raw: 31 c5 71 2d bf 83 48 1c 70 71 20 8e 90 bb e9 c0 6f ab 67 6f b0 12 a6 de bc 25 33 88 80 05 33 6c d7 78 1d 67 32 2d fd 4e e3 df 54 61 2b 95 b5 cc 63 25 ef 92 3a 45 d6 49 6b dc 95 c3 ea d0 fe a8 a2 41 2b de 48 a4 25 81 d5 c1 d0 7a aa 94 9e 20 4a ec 35 4b ec 35 4b 88 a1 d0 10 7a b2 1d 3d f1 2e 77 12 b7 be 67 88 f6 95 28 21 cb 36 93 82 48 b0 68 cc 9f 1a 2f e7 48 54 25 37 46 80 57 6f 8a 11 1c b1 81 9d a6 ca bd a3 ba c2 66 49 3d 95 8e 31 1f a5 e5 68 27 9f 4c 6b 35 c8 46 5a a3 9c e2 8a 1a 85 55 46 a3 06 b2 53 ae 0a 32 5d 95 7f 9b 2b ae 53 95 d6 53 f5 b2 9c 69 6b 16 d6 92 83 88 b3 74 fa a8 ad 24 59 4a 1b 69 33 45 ef f7 55 51 5e ec d3 48 c9 56 df 8d 2c a8 75 95 d7 e7 04 24 2b 3a 65 e4 73 44 1d 77 06 50 18 b9 16 9b 72 05 36 8b c9 95 24 33 13 41 8b 40 e2 94 db 4a 7d Data Ascii: 1q-Hpq ogo%33lxg2-NTa+c%:EIkA+H%z J5K5Kz=.wg(!6Hh/HT%7FWofI=1h'Lk5FZUFS2]+SSikt$YJi3EUQ^HV,u$+:esDwPr6$3A@J}
2024-09-11 17:25:35 UTC	7865	IN	Data Raw: a7 e9 b8 22 71 3f aa 4b 18 c3 5a 24 8d 60 e3 c7 11 35 d0 7a ac 49 05 4a db a7 30 8c 29 1a d5 f0 ba fe 42 49 20 77 48 22 14 94 fb 57 17 27 c5 78 79 39 a8 e8 47 33 a3 97 d5 f8 de bd 28 d7 75 fd b3 d0 ad 72 1d e7 2c 76 64 12 68 d3 df 1d 7d c5 ce 02 e1 16 25 9c a1 32 7d 49 7c ab 8d b5 2e c6 16 cb 0e 43 54 9a b6 82 e5 21 51 d4 d6 89 c0 19 bf 27 20 81 be eb 70 1a 2d 2b 6d 16 4f 78 e7 66 ea ba 33 95 b1 f4 a1 11 31 c1 d7 35 ec 81 e3 63 ba 40 c7 c7 20 85 d0 05 c1 67 12 ad 33 61 04 76 7f 8a be 8d 65 98 ab d6 1a f8 be 1d 83 da bf 23 a7 f4 ea 57 a0 4c 97 29 db 95 c1 b8 c4 2f 5e 12 d6 89 7f 29 3c 0b 45 fc 43 f4 cb 69 e5 f6 aa f3 f4 c2 28 e2 c0 5e 80 c6 e7 2b 51 a8 af ab f3 5f 16 c5 98 a4 b9 42 5a e6 aa 13 a0 8a c7 94 dd 5d 97 57 88 0e 8f 74 8f 87 b3 10 6d 70 d5 75 80 Data Ascii: "q?KZ$`5zIJ0)BI wH"W'xy9G3(ur,vdh}%2}I\|.CT!Q' p-+mOxf315c@ g3ave#WL)/^)<ECi(^+Q_BZ]Wtmpu
2024-09-11 17:25:35 UTC	16384	IN	Data Raw: d8 a4 d8 e0 9c 6f 97 62 d7 b9 bd 6d 8a 97 2c fd e9 4c a7 ed 91 fe 29 ed a7 e7 2e e4 ef 64 21 33 b7 df b6 73 e6 cf 68 8c f2 1f 8f 31 8a 83 f0 fc cf 20 45 33 48 59 e8 38 9a d9 48 20 0d 53 5c 38 ac 9f 05 56 6e 1b 97 e3 30 b6 76 b4 7e 4f b6 29 f6 c8 17 36 bb f6 81 c4 b0 3a 10 94 d1 b5 08 0b 18 20 2c c4 0f dd c9 08 01 ce 7b c7 b2 b5 bc 58 65 02 dc 83 7b b7 ba b1 c8 bb 55 79 77 b1 d4 3e f9 3f e6 09 2b eb 3c 8c 0c 2f b9 d4 59 d9 9c f7 ab 62 d4 0b bc 62 f5 ae ee 9c b7 ac 7e ac f8 2a 2f 5a 59 f3 c2 42 46 4c fd 16 4e c0 44 95 5b 39 00 3b 31 c7 e0 ed ae be 4d 77 78 bb c5 ae d8 7a 66 fb d4 71 8b ec 9b 9a d2 cc 7d b9 ab 3a aa 80 c3 d1 5d 6c b9 dc 6a 29 f7 25 aa 1a 8b 03 21 ee 8f c8 08 0f 1c a1 11 89 11 b5 0c c7 5d e6 aa b8 fa b0 1f 82 bb 7a ec 89 c7 1f 2d 3d 47 26 78 Data Ascii: obm,L).d!3sh1 E3HY8H S\8Vn0v~O)6: ,{Xe{Uyw>?+</Ybb~*/ZYBFLND[9;1Mwxzfq}:]lj)%!]z-=G&x
2024-09-11 17:25:35 UTC	1024	IN	Data Raw: 85 50 dc a6 70 03 4b dc 4c 61 77 b5 6c 83 13 78 4f 8f 13 12 d2 e8 9b a2 bd 56 54 34 4c 2c fc 21 5e bc c1 09 fc 61 13 64 11 5a 88 b8 9b c3 a0 83 f0 27 ae b8 49 f3 48 da 8f a2 76 52 a5 7f 63 b9 7d 9a fb e2 fb c2 1f 0b 0c 70 d8 f5 84 d3 24 03 4b 29 b6 8a f6 96 bf df 4e 18 93 92 59 d4 b6 a6 79 0c b7 42 40 4d c0 56 a3 d2 55 40 51 02 9a c0 83 85 05 3e 74 59 6c 84 66 d3 08 00 88 ab 50 9b 52 98 73 52 e5 bb a2 9d 18 32 28 de 63 ea 84 03 8a a5 76 de 59 3a 66 b7 8a 40 4e 68 0f 04 6e a7 59 b6 05 12 c3 84 38 7e f6 47 2c 69 42 17 df 47 24 ca 1f 7c 5a b6 bf ee e6 d9 b0 17 f0 f3 c7 83 71 ba 37 18 47 ef 87 d1 04 87 2a c4 66 e8 3e 8e 4a 9c 2a fd 09 9b 32 59 1c a4 6c 1e a9 d2 38 bc fa 4d 0d 52 d3 47 4f 03 71 5a 69 ee 99 18 7b 3c a2 a1 c8 b1 93 41 14 da 96 3e f9 36 8c da 15 Data Ascii: PpKLawlxOVT4L,!^adZ'IHvRc}p$K)NYyB@MVU@Q>tYlfPRsR2(cvY:f@NhnY8~G,iBG$\|Zq7Gf>J2Yl8MRGOqZi{<A>6
2024-09-11 17:25:35 UTC	16384	IN	Data Raw: 87 28 af e3 3f 3f 4e f8 59 20 ed 30 87 75 92 f5 7d 05 30 99 6b 44 4a 65 66 90 2b 31 70 6b 0b 6b 51 4e cc 4b 69 46 a0 94 ce e4 31 3a 06 cd 65 c9 ae 7a 27 21 f2 9f a4 1c de 2e 8d 09 b1 35 01 25 1e 13 8d 09 37 80 a8 bf b8 14 19 d1 a3 96 22 ee 0e 40 0f 7c 6f 49 41 a4 22 39 88 54 b4 d3 3b 9d 2d 45 7f 74 6f 99 23 90 82 8e 06 dc 5b 0b f6 f4 a4 76 f2 d2 8e 56 61 84 21 86 26 ec cc 3a bd 0a 6c e4 cb b6 d3 59 3c ba 2d c2 aa aa 00 67 a7 67 80 6e 87 db 7e 06 8c 80 56 4d 57 46 92 10 4b c9 22 2b 56 e4 87 77 60 a8 00 e0 46 06 fe 71 e0 d2 74 17 e0 d3 70 fb 76 dd d1 1b 8e 03 b5 d1 36 97 ef 40 18 55 8d ca 13 db a8 4e 85 2b 0b 74 e4 9b 23 57 d4 23 7b 9d 4f 21 90 ce 11 02 c9 8e d2 ea 78 48 f6 7a cd 83 23 79 05 91 eb 12 29 c9 0e a4 2b 5a 92 1c bc a8 16 7a 3f 50 24 a3 66 50 97 Data Ascii: (??NY 0u}0kDJef+1pkkQNKiF1:ez'!.5%7"@\|oIA"9T;-Eto#[vVa!&:lY<-ggn~VMWFK"+Vw`Fqtpv6@UN+t#W#{O!xHz#y)+Zz?P$fP
2024-09-11 17:25:35 UTC	16384	IN	Data Raw: 24 ac 29 78 65 6b 9e eb 11 65 54 82 36 64 55 cf e4 72 d0 aa 99 17 57 09 5b 35 74 02 17 0c 5c d9 24 6c d1 d0 55 69 4e 1d 30 04 bf 7b 96 f9 83 11 af ef 4d f2 33 e6 82 6f c6 4d 02 a2 2f ac 87 9a 51 8a 62 2c 6b 7f bf d7 eb f1 68 c1 c1 81 36 a4 e5 84 41 4a 41 ad 2a e9 15 36 68 5b c7 47 0b 7a d2 31 fe 13 e2 3f 51 df 12 8c 61 5d 72 ae d0 9d 8f 7a 80 2a 77 ef 75 02 c4 8d 1d 90 58 84 8a bb bc c8 a0 1f 70 3f 6b b7 12 6b 09 ba dd 4b 5c b9 12 08 0c 80 7e 3b 80 56 ae 2b c0 7e d9 6a 0f f2 da 7d 51 7b d2 f7 d5 da 65 20 26 bf 24 99 d3 41 01 12 bc 38 38 f3 e0 fc 1e 23 4c 23 c0 a8 df 03 f0 3a 9f b3 71 c2 90 21 e0 d8 65 29 a3 62 ca 88 52 4a df 07 6c c3 fd fb f1 2a 0f 9a 23 69 d8 94 b5 27 f9 70 d0 ca ff 0a 43 8a a2 3e 1e 54 b4 8c 91 42 58 f1 9f c9 67 df 0d cc d7 a4 fc 56 91 Data Ascii: $)xekeT6dUrW[5t\$lUiN0{M3oM/Qb,kh6AJA6h[Gz1?Qa]rzwuXp?kkK\~;V+~j}Q{e &$A88#L#:q!e)bRJl*#i'pC>TBXgV
2024-09-11 17:25:35 UTC	16384	IN	Data Raw: 42 7f 3b 1a 0a bb b8 7a 4b f3 5e 40 27 f0 7c e0 23 3f ed 40 28 83 57 93 00 6f a1 ec 11 23 b2 20 3a 23 c2 2b a5 e8 c0 3c 97 33 d6 a3 e8 69 e7 34 ea ee ca b1 8a 78 99 82 a7 8a d7 b4 bf 75 80 5b 61 fa f8 c3 93 5e d8 bd 7a 2f 2c a7 66 0f af 8e 4d c0 70 74 79 6b ca af fb 6e e1 9e cb 39 a8 59 b5 95 59 01 3d a9 7a f9 6a 43 f1 99 22 4c e0 0c 62 f8 c1 d8 0f 25 f6 ab 5c 0f 92 e7 8a ca ee a8 45 4b 2a b4 87 46 b3 9e 30 70 aa 17 1e f4 c4 f9 40 42 40 c8 ca 13 65 ab 1a 37 34 54 94 90 7e 69 a4 d0 c6 21 f1 31 e1 aa 8f 13 b5 4a 82 b4 b5 2a a4 a5 44 9a 41 da a3 69 7e 4e ca 42 1d 9a bd d3 0d 8a 80 1f fa 0c ed 11 36 9b 07 57 e7 aa c0 f5 01 59 95 c5 af 7f 39 5f 31 d3 8a 82 53 e4 d6 f5 73 a1 34 b8 d8 41 4f 75 5c 30 3e 03 63 5f 97 ac e0 f0 5c 5d 05 c2 34 bf a1 d7 55 5e 0a 0d f9 Data Ascii: B;zK^@'\|#?@(Wo# :#+<3i4xu[a^z/,fMptykn9YY=zjC"Lb%\EKF0p@B@e74T~i!1JDAi~NB6WY9_1Ss4AOu\0>c_\]4U^
2024-09-11 17:25:35 UTC	14808	IN	Data Raw: 58 b6 d4 5f 97 a2 06 52 1b 68 d9 0f b8 c6 55 84 77 5d f0 8d 24 65 76 6e 7c 2e 11 85 64 60 54 93 fe c6 97 f2 d8 df f9 6e 8b c0 41 d5 d6 86 d3 5d 6c 74 43 b2 0f 33 8d 84 09 f4 b5 74 29 0e e7 81 06 d7 ec c2 ea 7f 60 9f ca 9b 12 ca fd aa 2f 4f 56 2b 9b 0e 6c 43 69 ba 77 c7 3d f5 25 68 68 23 0f c7 c5 69 c2 a5 78 77 37 c8 bb c6 38 04 b0 f5 ab e2 3e f0 b4 54 2c 30 1f f8 7d 66 63 3b f0 f1 f8 c3 df 76 6c 99 54 af 36 7c 5f 8b d8 1c 5c fd 50 ca b0 1b ea b5 90 27 5d f2 da 14 9a 24 45 93 72 1c 75 3a 6e 7a 1c 9d 84 68 f4 c0 12 f9 44 6a 13 33 4f 7e 8c b9 4e 42 cc a1 d5 27 d5 91 d6 10 91 ab cb e8 fa df 0e 16 37 19 86 ef 94 c9 6d 00 6d de 04 9a 82 20 ad 42 c0 2f fd 94 74 e9 27 3f 4e 4e 42 93 85 e4 96 de 5d db 23 c7 26 df 24 d1 45 96 78 56 55 ff 4b ce d9 5a 96 f3 ee a8 c5 Data Ascii: X_RhUw]$evn\|.d`TnA]ltC3t)`/OV+lCiw=%hh#ixw78>T,0}fc;vlT6\|_\P']$Eru:nzhDj3O~NB'7mm B/t'?NNB]#&$ExVUKZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49849	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:35 UTC	552	OUT	GET /_next/static/chunks/2766.b29c036bad593b19.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
2024-09-11 17:25:36 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21018 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2Bs70vMc6gJJpBAUyrlKxdz1mgrSdb3_ Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:33 GMT ETag: "9507d9bd19ef23cfa07cf7346001111b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 217b7bc19321a4945b685521fa4f11ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 4YzsNkiMkoImzjo971i5EUbAGaUs-A-khH3J1l6ka5FhDDVAAHet9w== Age: 4 Vary: Origin
2024-09-11 17:25:36 UTC	15753	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 36 36 5d 2c 7b 33 32 37 36 36 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 73 2c 65 29 7b 65 2e 72 28 73 29 3b 76 61 72 20 4c 3d 65 28 39 35 36 32 37 29 2c 61 3d 65 2e 6e 28 4c 29 2c 6c 3d 28 65 28 36 37 32 39 34 29 2c 65 28 38 36 38 39 36 29 29 2c 69 3d 65 28 34 34 30 31 32 29 2c 74 3d 65 28 38 35 38 39 33 29 3b 73 2e 64 65 66 61 75 6c 74 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 43 3d 28 30 2c 6c 2e 5a 29 28 29 2e 66 6f 72 6d 61 74 4d 65 73 73 61 67 65 28 7b 69 64 3a 22 50 41 59 46 4c 4f 57 5f 42 41 4e 4b 5f 41 43 43 4f 55 4e 54 5f 4e 55 4d 42 45 52 22 2c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2766],{32766:function(C,s,e){e.r(s);var L=e(95627),a=e.n(L),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ACCOUNT_NUMBER",
2024-09-11 17:25:36 UTC	5265	IN	Data Raw: 35 31 2e 31 39 35 37 36 36 39 2c 33 37 2e 34 30 36 33 36 30 37 20 35 30 2e 37 33 31 39 37 38 36 2c 33 37 2e 34 30 36 33 36 30 37 20 43 35 30 2e 32 36 33 38 35 35 39 2c 33 37 2e 34 30 36 33 36 30 37 20 35 30 2e 31 37 37 31 36 36 35 2c 33 38 2e 31 30 39 33 36 34 37 20 35 30 2e 31 37 37 31 36 36 35 2c 33 38 2e 35 31 31 36 36 31 38 20 43 35 30 2e 31 37 37 31 36 36 35 2c 33 38 2e 39 31 33 39 35 38 39 20 35 30 2e 32 36 33 38 35 35 39 2c 33 39 2e 36 30 38 38 33 35 37 20 35 30 2e 37 33 31 39 37 38 36 2c 33 39 2e 36 30 38 38 33 35 37 20 43 35 31 2e 31 39 35 37 36 36 39 2c 33 39 2e 36 30 38 38 33 35 37 20 35 31 2e 32 37 38 31 32 31 39 2c 33 38 2e 39 31 33 39 35 38 39 20 35 31 2e 32 37 38 31 32 31 39 2c 33 38 2e 35 31 31 36 36 31 38 20 5a 20 4d 35 34 2e 34 35 35 32 Data Ascii: 51.1957669,37.4063607 50.7319786,37.4063607 C50.2638559,37.4063607 50.1771665,38.1093647 50.1771665,38.5116618 C50.1771665,38.9139589 50.2638559,39.6088357 50.7319786,39.6088357 C51.1957669,39.6088357 51.2781219,38.9139589 51.2781219,38.5116618 Z M54.4552

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49850	13.35.58.148	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:35 UTC	427	OUT	GET /next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:36 UTC	728	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1655 Connection: close Date: Wed, 11 Sep 2024 17:25:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Thu, 08 Aug 2024 06:57:15 GMT ETag: "d151cb0874ed5e13006e5f38364ec01e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: bp7FIk0PDVpWxkS.ft_VREe_7hxGWL_E Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Gwx7o8CktPClb8_JI_K9HTACuwiXx9aktPmZrZV0ajE6hJhx7YDGHA==
2024-09-11 17:25:36 UTC	1655	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 57 6d 6f db 36 10 fe de 5f a1 70 80 2b 21 0c 6d 77 6d ba 59 e1 86 ac 05 ba 0e e9 5a ac db 8a c1 30 0c 46 64 1c 26 32 a9 91 54 bc cc d6 7f df 91 7a b1 ec c4 5d 3f 6d 40 10 f3 e5 ee 78 af cf 9d 56 52 71 bd 9a 3e 5d 68 bd c8 c5 09 e3 2b 6d b8 3d 51 62 f5 5a 14 f6 e9 2c a2 d1 14 0d a5 72 62 61 98 93 5a d9 e1 9d 00 16 33 cc f4 72 09 5b c2 4e c7 fc e5 a5 60 5f bf e4 cf b8 78 c1 9f 5f 9e 7e 4b 6e 2c 9a a5 ab 83 b2 2f 34 e3 c2 04 e9 57 a5 ca bc dc 38 89 d6 91 11 ae 34 2a 6a 18 d1 43 c6 b7 5b 45 d0 8c 76 bc 3a 59 b7 eb 48 c5 0a 76 da c4 77 cc 44 02 33 6c a9 9a 8e 66 98 c3 cf 78 86 33 f8 79 36 c3 25 1d e1 9c 4e 67 69 79 66 49 2e d4 c2 5d a7 e5 f1 71 c2 a8 9d 96 33 fc fe f2 46 64 8e 14 46 3b ed ee 0b 41 ae 99 7d bf 52 1f 8c 2e 84 71 Data Ascii: Wmo6_p+!mwmYZ0Fd&2Tz]?m@xVRq>]h+m=QbZ,rbaZ3r[N`_x_~Kn,/4W84*jC[Ev:YHvwD3lfx3y6%NgiyfI.]q3FdF;A}R.q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49851	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:35 UTC	552	OUT	GET /_next/static/chunks/8482.b28cf868ec59260b.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC
2024-09-11 17:25:36 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21200 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 04 Sep 2024 13:57:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: rAFFC7zRa7pYGkVXRaVUzwxo0ZRwD8kR Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Sep 2024 17:25:33 GMT ETag: "5d3acbee67e89b42766e3833a9ef5b9a" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 286eb4b50e0acf373dd03645aee00b7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: b-cGfwxNZgPQVLip5k2Vrhshi3RZmH7iOr5CS6e-h0Y5WBeeyYKk8A== Age: 4 Vary: Origin
2024-09-11 17:25:36 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 38 32 5d 2c 7b 38 38 34 38 32 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 73 2c 65 29 7b 65 2e 72 28 73 29 3b 76 61 72 20 61 3d 65 28 39 35 36 32 37 29 2c 4c 3d 65 2e 6e 28 61 29 2c 6c 3d 28 65 28 36 37 32 39 34 29 2c 65 28 38 36 38 39 36 29 29 2c 69 3d 65 28 34 34 30 31 32 29 2c 74 3d 65 28 38 35 38 39 33 29 3b 73 2e 64 65 66 61 75 6c 74 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 43 3d 28 30 2c 6c 2e 5a 29 28 29 2e 66 6f 72 6d 61 74 4d 65 73 73 61 67 65 28 7b 69 64 3a 22 50 41 59 46 4c 4f 57 5f 42 41 4e 4b 5f 52 4f 55 54 49 4e 47 5f 4e 55 4d 42 45 52 22 2c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8482],{88482:function(C,s,e){e.r(s);var a=e(95627),L=e.n(a),l=(e(67294),e(86896)),i=e(44012),t=e(85893);s.default=()=>{const C=(0,l.Z)().formatMessage({id:"PAYFLOW_BANK_ROUTING_NUMBER",
2024-09-11 17:25:36 UTC	2180	IN	Data Raw: 31 32 2e 34 31 38 36 36 35 32 2c 33 2e 35 35 38 33 30 37 37 33 20 31 32 2e 37 37 32 33 30 37 32 2c 33 20 31 33 2e 34 30 34 39 33 33 34 2c 33 20 43 31 34 2e 30 33 33 36 33 30 33 2c 33 20 31 34 2e 33 38 33 33 34 32 39 2c 33 2e 35 35 38 33 30 37 37 33 20 31 34 2e 33 38 33 33 34 32 39 2c 34 2e 34 35 32 33 38 30 39 35 20 5a 20 4d 31 33 2e 39 30 30 30 33 32 32 2c 34 2e 34 35 32 33 38 30 39 35 20 43 31 33 2e 39 30 30 30 33 32 32 2c 34 2e 30 36 35 38 36 30 32 32 20 31 33 2e 38 32 35 33 37 34 35 2c 33 2e 33 39 30 34 32 34 39 39 20 31 33 2e 34 30 34 39 33 33 34 2c 33 2e 33 39 30 34 32 34 39 39 20 43 31 32 2e 39 38 30 35 36 33 2c 33 2e 33 39 30 34 32 34 39 39 20 31 32 2e 39 30 31 39 37 35 39 2c 34 2e 30 36 35 38 36 30 32 32 20 31 32 2e 39 30 31 39 37 35 39 2c 34 2e Data Ascii: 12.4186652,3.55830773 12.7723072,3 13.4049334,3 C14.0336303,3 14.3833429,3.55830773 14.3833429,4.45238095 Z M13.9000322,4.45238095 C13.9000322,4.06586022 13.8253745,3.39042499 13.4049334,3.39042499 C12.980563,3.39042499 12.9019759,4.06586022 12.9019759,4.
2024-09-11 17:25:36 UTC	2636	IN	Data Raw: 32 2e 31 30 38 34 35 35 39 2c 33 2e 37 36 39 31 33 37 32 32 20 43 32 32 2e 31 30 38 34 35 35 39 2c 33 2e 33 30 30 36 32 37 32 34 20 32 32 2e 35 30 31 33 39 31 34 2c 33 20 32 32 2e 39 38 38 36 33 31 35 2c 33 20 5a 20 4d 32 32 2e 39 38 38 36 33 31 35 2c 33 2e 33 38 36 35 32 30 37 34 20 43 32 32 2e 37 35 36 37 39 39 35 2c 33 2e 33 38 36 35 32 30 37 34 20 32 32 2e 35 38 37 38 33 37 33 2c 33 2e 35 33 38 37 38 36 34 38 20 32 32 2e 35 38 37 38 33 37 33 2c 33 2e 37 37 36 39 34 35 37 32 20 43 32 32 2e 35 38 37 38 33 37 33 2c 33 2e 39 39 39 34 38 37 39 37 20 32 32 2e 37 34 35 30 31 31 35 2c 34 2e 31 37 39 30 38 33 34 36 20 32 32 2e 39 38 38 36 33 31 35 2c 34 2e 31 37 39 30 38 33 34 36 20 43 32 33 2e 32 31 32 36 30 34 38 2c 34 2e 31 37 39 30 38 33 34 36 20 32 33 2e Data Ascii: 2.1084559,3.76913722 C22.1084559,3.30062724 22.5013914,3 22.9886315,3 Z M22.9886315,3.38652074 C22.7567995,3.38652074 22.5878373,3.53878648 22.5878373,3.77694572 C22.5878373,3.99948797 22.7450115,4.17908346 22.9886315,4.17908346 C23.2126048,4.17908346 23.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49854	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:36 UTC	1916	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 2362 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: de5d3f8d-e21d-4427-94d5-b0de3b939741 sec-ch-ua-mobile: ?0 Intuit-RealmId: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-c3bc4-ed10-4eea-997e-d6d3fd0c8622 Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:193514612387714_193514612387714_E408B8-1722543575 Intuit-ACSToken: scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11 user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; AWSALB=1gCOCNgR5KUAIjvQULCpxcC9aYugR3svmbzxYW15fPYkolct+sBAekUEySfyaiowJROS+8SZd4/Eeo1SHlGdIHBlBWnXT7hDtOjUiZDBQULxvPfQVbepQvjYd/gY; AWSALBCORS=1gCOCNgR5KUAIjvQULCpxcC9aYugR3svmbzxYW15fPYkolct+sBAekUEySfyaiowJROS+8SZd4/Eeo1SHlGdIHBlBWnXT7hDtOjUiZDBQULxvPfQVbepQvjYd/gY
2024-09-11 17:25:36 UTC	2362	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 33 33 2e 37 34 36 5a 22 2c 22 65 76 65 6e 74 22 3a 22 70 64 66 22 2c 22 61 63 74 69 6f 6e 22 3a 22 47 45 54 3a 20 2f 70 6f 72 74 61 6c 2f 72 65 73 74 2f 70 64 66 2f 69 6e 76 6f 69 63 65 2f 3a 74 6f 6b 65 6e 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 6c 6f 67 67 65 72 22 3a 22 72 65 70 6f 72 74 69 6e 67 2f 50 72 6f 66 69 6c 65 72 22 2c 22 6c 6f 67 54 79 70 65 22 3a 22 6f 75 74 62 6f 75 6e 64 22 7d 2c 22 6e 65 74 77 6f 72 6b 22 3a 7b 22 69 6e 74 Data Ascii: {"messages":[{"data":{"timestamp":"2024-09-11T17:25:33.746Z","event":"pdf","action":"GET: /portal/rest/pdf/invoice/:token","activityInfo":{"status":"success"},"logInfo":{"logLevel":"info","logger":"reporting/Profiler","logType":"outbound"},"network":{"int
2024-09-11 17:25:36 UTC	1101	IN	HTTP/1.1 201 Created Date: Wed, 11 Sep 2024 17:25:36 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: acb3bccf-bb76-3c57-b454-d79438d918d9 x-amzn-trace-id: Root=1-66e1d290-2d6a6e965d354d5865f8eed1 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=+Fgd3sLzXMkKjVcE9p1lNlBLfrZQ8MPKjeVFdL798Wu5VdqDgS4vvEjCf/icTpm/gNQPBEwjOX656TudWKediPCWAUsyHgKFwzC7O1cYw2jsZAsEJexoP2OqAEbx; Expires=Wed, 18 Sep 2024 17:25:36 GMT; Path=/ Set-Cookie: AWSALBCORS=+Fgd3sLzXMkKjVcE9p1lNlBLfrZQ8MPKjeVFdL798Wu5VdqDgS4vvEjCf/icTpm/gNQPBEwjOX656TudWKediPCWAUsyHgKFwzC7O1cYw2jsZAsEJexoP2OqAEbx; Expires=Wed, 18 Sep 2024 17:25:36 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 32 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c3bc4-ed10-4eea-997e-d6d3fd0c8622 x-request-id: cp-c3bc4-ed10-4eea-997e-d6d3fd0c8622 server: istio-envoy
2024-09-11 17:25:36 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49853	52.35.79.138	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:36 UTC	801	OUT	GET /portal/rest/reporting/prometheus/view HTTP/1.1 Host: connect.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; AWSALB=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC; AWSALBCORS=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC
2024-09-11 17:25:36 UTC	1103	IN	HTTP/1.1 400 Bad Request Date: Wed, 11 Sep 2024 17:25:36 GMT Content-Type: application/json;charset=utf-8 Content-Length: 47 Connection: close x-spanid: 7a87103c-2441-a03d-d0d6-9426d3b833c3 x-amzn-trace-id: Root=1-66e1d290-2a0e206e4d4e1993255b1d44 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=fvRNLorYgqWVm6pKRpTTAN2Tv2i9eYhVyy9gCe5rHSVqciedfNmWtdketX8odD/xjFjqzc3ezwVmrXiDnNKF00PcHREFtXHGlmkt9Q1q/yp4oE80ulQCYcnvrMEC; Expires=Wed, 18 Sep 2024 17:25:36 GMT; Path=/ Set-Cookie: AWSALBCORS=fvRNLorYgqWVm6pKRpTTAN2Tv2i9eYhVyy9gCe5rHSVqciedfNmWtdketX8odD/xjFjqzc3ezwVmrXiDnNKF00PcHREFtXHGlmkt9Q1q/yp4oE80ulQCYcnvrMEC; Expires=Wed, 18 Sep 2024 17:25:36 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2f-SA/AoURscYnfiZSulRnoFMIsOmQ" Vary: Accept-Encoding x-envoy-upstream-service-time: 24 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-66e1d290-2a0e206e4d4e1993255b1d44 x-request-id: 1-66e1d290-2a0e206e4d4e1993255b1d44 server: istio-envoy
2024-09-11 17:25:36 UTC	47	IN	Data Raw: 7b 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 68 65 61 64 65 72 73 20 61 72 65 20 6d 69 73 73 69 6e 67 22 7d Data Ascii: {"ErrorMessage":"Required headers are missing"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49852	52.35.79.138	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:36 UTC	892	OUT	GET /portal/rest/invoice/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/view HTTP/1.1 Host: connect.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; AWSALB=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC; AWSALBCORS=qa4nUtAbN1GJjqn3kPn6u66OyK1SPlLCuos/CchwWiget9PQ3PjlTVhsWvSpxRXLqvYi5qVxQu2M22PbWJdFG25nLkPnqfP2+5AKjbUnTU7Yrhsl8sVOfROwSMiC
2024-09-11 17:25:36 UTC	1143	IN	HTTP/1.1 302 Found Date: Wed, 11 Sep 2024 17:25:36 GMT Content-Type: text/plain;charset=utf-8 Content-Length: 96 Connection: close x-spanid: 25fb5dd4-19f0-0a76-8960-d7a7dffdf55f x-amzn-trace-id: Root=1-66e1d290-4d3b0d1e4581a7984ff42356 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=hJUME2OyVRH9ASfwUn+rGVU0mnZhLJ0smYOdimFXwY3Fqo6zjETFsFldZOGSV+ZjNUPqimp+JE1U9zVOUHpLdScWxng4EpLxrAyuOHPDV+6J8sjnq4Z8Qu43rQdX; Expires=Wed, 18 Sep 2024 17:25:36 GMT; Path=/ Set-Cookie: AWSALBCORS=hJUME2OyVRH9ASfwUn+rGVU0mnZhLJ0smYOdimFXwY3Fqo6zjETFsFldZOGSV+ZjNUPqimp+JE1U9zVOUHpLdScWxng4EpLxrAyuOHPDV+6J8sjnq4Z8Qu43rQdX; Expires=Wed, 18 Sep 2024 17:25:36 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store Location: https://quickbooks.intuit.com/payments/?cid=cp_connect-intuit-com_redirect Vary: Accept, Accept-Encoding x-envoy-upstream-service-time: 19 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-66e1d290-4d3b0d1e4581a7984ff42356 x-request-id: 1-66e1d290-4d3b0d1e4581a7984ff42356 server: istio-envoy
2024-09-11 17:25:36 UTC	96	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 71 75 69 63 6b 62 6f 6f 6b 73 2e 69 6e 74 75 69 74 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 73 2f 3f 63 69 64 3d 63 70 5f 63 6f 6e 6e 65 63 74 2d 69 6e 74 75 69 74 2d 63 6f 6d 5f 72 65 64 69 72 65 63 74 Data Ascii: Found. Redirecting to https://quickbooks.intuit.com/payments/?cid=cp_connect-intuit-com_redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49858	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:37 UTC	491	OUT	POST /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 172 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:37 UTC	172	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 6e 75 6c 6c 2c 22 63 73 69 64 22 3a 6e 75 6c 6c 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 32 36 30 37 35 35 33 34 39 31 39 2d 43 35 33 39 37 39 46 32 2d 46 30 32 44 2d 34 31 41 43 2d 38 36 43 34 2d 33 38 46 30 35 45 41 41 44 46 43 41 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 30 2c 22 63 22 3a 22 6a 73 22 2c 22 73 74 73 22 3a 6e 75 6c 6c 2c 22 73 74 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"ds":"js","cdsnum":null,"csid":null,"psid":null,"muid":"1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA","context_name":"","requestId":0,"c":"js","sts":null,"std":null}
2024-09-11 17:25:37 UTC	318	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1295 Connection: close date: Wed, 11 Sep 2024 17:25:36 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: cf949693-044a-471a-aaf1-2aac41e02480
2024-09-11 17:25:37 UTC	1295	IN	Data Raw: 7b 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b 52 38 51 54 4a 35 63 4d 44 65 71 33 69 53 55 6b 46 49 47 6b 39 69 39 46 74 6c 46 72 76 7a 5f 47 54 53 51 35 75 46 73 4d 32 70 77 39 5a 58 72 68 72 33 70 49 50 42 2d 4f 56 79 75 75 34 30 45 71 52 5f 71 72 4b 38 49 47 71 66 7a 6d 6f 58 6d 43 48 31 72 4b 4a 5f 50 6f 78 4b 73 54 37 6e 4a 66 77 70 2d 49 7a 4d 4d 63 73 51 53 72 6b 48 67 7a 79 68 68 33 71 6f 37 42 59 5f 32 73 46 67 4d 44 70 5f 5f 32 69 56 68 4c 2d 66 65 46 6b 77 79 30 6a 57 42 37 2d 6d 46 33 57 54 56 66 4f 4b 54 77 57 4f 39 2d 31 5a 76 5a 38 62 50 31 55 53 4b 6a 59 57 48 65 78 51 4d 31 39 68 63 65 50 72 30 72 68 50 41 6c 79 6e 64 63 66 44 51 35 6f 7a 73 51 78 59 75 35 64 59 4b 61 62 39 51 43 59 5f 6f 53 50 52 79 6f 64 48 6c 2d 46 63 31 77 Data Ascii: {"sts":"gAAAAABm4dKR8QTJ5cMDeq3iSUkFIGk9i9FtlFrvz_GTSQ5uFsM2pw9ZXrhr3pIPB-OVyuu40EqR_qrK8IGqfzmoXmCH1rKJ_PoxKsT7nJfwp-IzMMcsQSrkHgzyhh3qo7BY_2sFgMDp__2iVhL-feFkwy0jWB7-mF3WTVfOKTwWO9-1ZvZ8bP1USKjYWHexQM19hcePr0rhPAlyndcfDQ5ozsQxYu5dYKab9QCY_oSPRyodHl-Fc1w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49857	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:37 UTC	1989	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 2042 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: de5d3f8d-e21d-4427-94d5-b0de3b939741 sec-ch-ua-mobile: ?0 Intuit-RealmId: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-cda21-3bb7-47ff-a932-8ea4f1859e97 Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:193514612387714_193514612387714_E408B8-1722543575 Intuit-ACSToken: scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11 user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; AWSALB=hJUME2OyVRH9ASfwUn+rGVU0mnZhLJ0smYOdimFXwY3Fqo6zjETFsFldZOGSV+ZjNUPqimp+JE1U9zVOUHpLdScWxng4EpLxrAyuOHPDV+6J8sjnq4Z8Qu43rQdX; AWSALBCORS=hJUME2OyVRH9ASfwUn+rGVU0mnZhLJ0smYOdimFXwY3Fqo6zjETFsFldZOGSV+ZjNUPqimp+JE1U9zVOUHpLdScWxng4EpLxrAyuOHPDV+6J8sjnq4Z8Qu43rQdX
2024-09-11 17:25:37 UTC	2042	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 33 34 2e 39 32 35 5a 22 2c 22 65 76 65 6e 74 22 3a 22 72 69 73 6b 22 2c 22 61 63 74 69 6f 6e 22 3a 22 69 6e 69 74 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 72 69 73 6b 49 6e 74 75 69 74 54 69 64 22 3a 22 63 70 2d 63 33 66 38 64 2d 65 32 31 64 2d 34 34 32 37 2d 39 34 64 35 2d 62 30 64 65 33 62 39 33 39 37 34 31 22 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 6c 6f 67 67 65 72 22 3a 22 62 75 73 69 6e 65 73 73 4c 6f 67 69 63 2f 49 6e 73 69 67 68 74 2f 69 6e 64 65 78 22 2c 22 6c 6f 67 Data Ascii: {"messages":[{"data":{"timestamp":"2024-09-11T17:25:34.925Z","event":"risk","action":"init","activityInfo":{"status":"success","riskIntuitTid":"cp-c3f8d-e21d-4427-94d5-b0de3b939741"},"logInfo":{"logLevel":"info","logger":"businessLogic/Insight/index","log
2024-09-11 17:25:37 UTC	1101	IN	HTTP/1.1 201 Created Date: Wed, 11 Sep 2024 17:25:37 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: c863c92e-66ac-48f0-2a85-6338f8b43bdd x-amzn-trace-id: Root=1-66e1d291-41636f3232615fe64ade639b X-Content-Type-Options: nosniff Set-Cookie: AWSALB=ZHd7HOamjjgjntbDPn7uE4xi+et5MoKiDcXygNH6XTDu16vlBvK7TdQvQYWuk2th7gapnAbHC7Tfw1UCBDEYftfuU+d68J4yY8EA+3Wf7ulJmZQW8ivKtkm+IOc3; Expires=Wed, 18 Sep 2024 17:25:37 GMT; Path=/ Set-Cookie: AWSALBCORS=ZHd7HOamjjgjntbDPn7uE4xi+et5MoKiDcXygNH6XTDu16vlBvK7TdQvQYWuk2th7gapnAbHC7Tfw1UCBDEYftfuU+d68J4yY8EA+3Wf7ulJmZQW8ivKtkm+IOc3; Expires=Wed, 18 Sep 2024 17:25:37 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 21 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-cda21-3bb7-47ff-a932-8ea4f1859e97 x-request-id: cp-cda21-3bb7-47ff-a932-8ea4f1859e97 server: istio-envoy
2024-09-11 17:25:37 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49855	35.84.56.34	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:37 UTC	558	OUT	OPTIONS /v1/assessment HTTP/1.1 Host: risk-vendor-svc.api.intuit.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,intuit_tid Origin: https://connect.intuit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:37 UTC	969	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:37 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://connect.intuit.com Access-Control-Allow-Methods: DELETE,POST,GET,OPTIONS,PUT Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://connect.intuit.com Access-Control-Max-Age: 900 Access-Control-Allow-Headers: date,content-length,x-b3-parentspanid,expires,vary,origin,x-b3-sampled,authorization,keep-alive,tracestate,if-unmodified-since,content-transfer-encoding,content-disposition,x-xsrf-token,content-md5,fragment-location,content-type,connection,if-match,cache-control,intuit_tid,pragma,accept,x-b3-traceid,x-b3-spanid,traceparent,x-requested-with,content-location,content-range,x-csrf-token,etag,intuit_originalurl x-envoy-upstream-service-time: 1 strict-transport-security: max-age=31536000 intuit_tid: 1-66e1d291-507a6f35127f2ed1526cc567 x-request-id: 1-66e1d291-507a6f35127f2ed1526cc567 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49860	52.35.79.138	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:37 UTC	968	OUT	GET /portal/rest/pdf/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11/invoice.pdf HTTP/1.1 Host: connect.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; AWSALB=hJUME2OyVRH9ASfwUn+rGVU0mnZhLJ0smYOdimFXwY3Fqo6zjETFsFldZOGSV+ZjNUPqimp+JE1U9zVOUHpLdScWxng4EpLxrAyuOHPDV+6J8sjnq4Z8Qu43rQdX; AWSALBCORS=hJUME2OyVRH9ASfwUn+rGVU0mnZhLJ0smYOdimFXwY3Fqo6zjETFsFldZOGSV+ZjNUPqimp+JE1U9zVOUHpLdScWxng4EpLxrAyuOHPDV+6J8sjnq4Z8Qu43rQdX
2024-09-11 17:25:37 UTC	1103	IN	HTTP/1.1 400 Bad Request Date: Wed, 11 Sep 2024 17:25:37 GMT Content-Type: application/json;charset=utf-8 Content-Length: 47 Connection: close x-spanid: 8c6f7a34-4a10-96fc-5939-f32b4b7c1d9d x-amzn-trace-id: Root=1-66e1d291-34cf1f1a09d9e22508249fff X-Content-Type-Options: nosniff Set-Cookie: AWSALB=5dfWDZiHxu7rKiHXH1C8GL3BLefdievmAuobrz1SG4gitsf041nOO4x2chrJ95iSLVO8aLsuk+VEO/ciCMJiah83qe8pzpLrJ3nV3FvSj3O9mDDszj6DkTxcqs5b; Expires=Wed, 18 Sep 2024 17:25:37 GMT; Path=/ Set-Cookie: AWSALBCORS=5dfWDZiHxu7rKiHXH1C8GL3BLefdievmAuobrz1SG4gitsf041nOO4x2chrJ95iSLVO8aLsuk+VEO/ciCMJiah83qe8pzpLrJ3nV3FvSj3O9mDDszj6DkTxcqs5b; Expires=Wed, 18 Sep 2024 17:25:37 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2f-SA/AoURscYnfiZSulRnoFMIsOmQ" Vary: Accept-Encoding x-envoy-upstream-service-time: 56 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-66e1d291-34cf1f1a09d9e22508249fff x-request-id: 1-66e1d291-34cf1f1a09d9e22508249fff server: istio-envoy
2024-09-11 17:25:37 UTC	47	IN	Data Raw: 7b 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 68 65 61 64 65 72 73 20 61 72 65 20 6d 69 73 73 69 6e 67 22 7d Data Ascii: {"ErrorMessage":"Required headers are missing"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49861	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:37 UTC	625	OUT	GET /_next/static/chunks/6835-37c4d58b85c794a8.js HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2
2024-09-11 17:25:37 UTC	631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 64792 Connection: close Date: Wed, 11 Sep 2024 17:25:35 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Sep 2024 07:54:14 GMT ETag: "b525f837e538a326542620abd7712e55" x-amz-server-side-encryption: AES256 x-amz-version-id: Uo3E7yZHPB5utYTevwSsMuHqgGzb7uEE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1e498d046330e15095a1a2a958463bf4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: K2S_NYJIID0OnJGUEf3_kgwKzG4z8id1YyhIsszg0zETqODxeLLP5g== Age: 3 Vary: Origin
2024-09-11 17:25:37 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 33 35 2c 33 31 34 38 5d 2c 7b 35 34 34 35 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 73 2e 64 28 74 2c 7b 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 7d 29 3b 76 61 72 20 72 3d 73 28 39 35 36 32 37 29 2c 69 3d 73 2e 6e 28 72 29 2c 61 3d 73 28 36 37 32 39 34 29 2c 6e 3d 73 28 34 34 30 31 32 29 2c 6f 3d 73 28 37 32 30 30 32 29 2c 63 3d 73 28 35 31 39 37 32 29 2c 6c 3d 73 28 35 31 32 34 35 29 2c 64 3d 73 28 38 35 38 39 33 29 3b 63 6f 6e 73 74 20 6d 3d 65 3d 3e 7b 6c 65 74 7b 61 75 74 6f 50 61 79 49 6e 74 65 72 76 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6835,3148],{54459:function(e,t,s){s.d(t,{D:function(){return m}});var r=s(95627),i=s.n(r),a=s(67294),n=s(44012),o=s(72002),c=s(51972),l=s(51245),d=s(85893);const m=e=>{let{autoPayInterv
2024-09-11 17:25:37 UTC	10463	IN	Data Raw: 70 72 65 63 69 61 74 65 20 79 6f 75 72 20 66 65 65 64 62 61 63 6b 22 7d 2c 63 6f 6e 74 69 6e 75 65 49 6e 74 6c 3a 62 26 26 6d 3f 7b 69 64 3a 22 43 52 4d 5f 46 45 45 44 42 41 43 4b 5f 4d 4f 44 41 4c 5f 53 55 42 4d 49 54 5f 42 54 4e 5f 4e 45 58 54 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 4e 65 78 74 22 7d 3a 7b 69 64 3a 22 43 52 4d 5f 46 45 45 44 42 41 43 4b 5f 4d 4f 44 41 4c 5f 53 55 42 4d 49 54 5f 42 54 4e 22 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 22 53 75 62 6d 69 74 22 7d 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 67 2e 6a 73 78 29 28 50 2c 7b 6f 6e 54 6f 75 63 68 3a 28 29 3d 3e 7b 69 7c 7c 6f 28 21 30 29 7d 7d 29 2c 28 30 2c 67 2e 6a 73 78 29 28 4f 2c 7b 7d 29 5d 7d 29 2c 28 30 2c 67 2e 6a 73 78 29 28 61 28 29 2c 7b 69 64 3a 22 33 Data Ascii: preciate your feedback"},continueIntl:b&&m?{id:"CRM_FEEDBACK_MODAL_SUBMIT_BTN_NEXT",defaultMessage:"Next"}:{id:"CRM_FEEDBACK_MODAL_SUBMIT_BTN",defaultMessage:"Submit"},children:[(0,g.jsx)(P,{onTouch:()=>{i\|\|o(!0)}}),(0,g.jsx)(O,{})]}),(0,g.jsx)(a(),{id:"3
2024-09-11 17:25:37 UTC	8949	IN	Data Raw: 3a 66 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 7d 29 7d 29 2c 28 30 2c 67 2e 6a 73 78 29 28 63 2e 5a 2c 7b 69 64 3a 73 2e 6d 65 74 61 2e 69 64 2c 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 3a 73 2e 6d 65 74 61 2e 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 7d 29 5d 7d 29 2c 28 30 2c 67 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 31 36 37 35 32 38 38 31 38 34 22 2c 5b 66 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 2c 66 2e 63 6f 6c 6f 72 73 2e 65 72 72 6f 72 2c 66 2e 70 61 64 64 69 6e 67 53 69 7a 65 2e 78 73 2c 66 2e 70 61 64 64 69 6e 67 53 69 7a 65 2e 73 6d 2c 66 2e 70 61 64 64 69 6e 67 53 69 7a 65 2e 78 73 2c 66 2e 70 61 64 64 69 6e 67 53 69 7a 65 2e 6c 67 2c 66 2e 70 61 64 64 69 6e 67 53 69 Data Ascii: :f.colors.error})}),(0,g.jsx)(c.Z,{id:s.meta.id,defaultMessage:s.meta.defaultMessage})]}),(0,g.jsxs)("div",{className:a().dynamic([["1675288184",[f.colors.error,f.colors.error,f.paddingSize.xs,f.paddingSize.sm,f.paddingSize.xs,f.paddingSize.lg,f.paddingSi
2024-09-11 17:25:37 UTC	16384	IN	Data Raw: 77 72 61 70 70 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 67 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 31 30 37 30 39 33 31 33 35 31 22 2c 5b 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 60 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 24 7b 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 7d 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 60 2c 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 73 6d 2c 66 2e 66 6f 6e 74 53 69 7a 65 2e 6d 73 2c 66 2e 63 6f 6c 6f 72 73 2e 62 6c 61 63 6b 2c 66 2e 63 6f 6c 6f 72 73 2e 67 72 61 79 30 33 2c 66 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 2c 66 Data Ascii: wrapper",children:[(0,g.jsx)("div",{className:a().dynamic([["1070931351",[f.breakpoints.sm,`@media screen and (max-width: ${f.breakpoints.sm}) {\n \n }`,f.breakpoints.sm,f.fontSize.ms,f.colors.black,f.colors.gray03,f.colors.white,f
2024-09-11 17:25:37 UTC	12612	IN	Data Raw: 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 64 79 6e 61 6d 69 63 28 5b 5b 22 31 37 30 39 31 36 34 34 33 31 22 2c 5b 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 78 6c 2c 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 71 65 2c 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 66 2e 66 6f 6e 74 53 69 7a 65 2e 78 78 78 6c 2c 66 2e 63 6f 6c 6f 72 73 2e 67 72 65 65 6e 30 33 2c 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 66 2e 66 6f 6e 74 53 69 7a 65 2e 78 78 6c 2c 66 2e 66 6f 6e 74 53 69 7a 65 2e 6d 6c 2c 66 2e 63 6f 6c 6f 72 73 2e 64 61 72 6b 47 72 61 79 2c 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 66 2e 66 6f 6e 74 53 69 7a 65 2e 6d 73 2c 66 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6d 64 2c 66 2e 62 72 65 61 6b 70 6f 69 Data Ascii: ("div",{className:a().dynamic([["1709164431",[f.breakpoints.xl,f.breakpoints.md,qe,f.breakpoints.md,f.fontSize.xxxl,f.colors.green03,f.breakpoints.md,f.fontSize.xxl,f.fontSize.ml,f.colors.darkGray,f.breakpoints.md,f.fontSize.ms,f.breakpoints.md,f.breakpoi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49862	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:37 UTC	806	OUT	GET /i33jrfiwxn31hedn.js?9xqf08dnc54dm8lt=v60nf4oj&wkzxu6z39p8c5fqp=16888CCFE5EA4EE5ACCBC28664B129CC HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; tmx_guid=AAxwFG5nsDspC9blQ_dJf3C2ftGe4yQBiR5CHs7tDpqD5-aYPkFdvl6Pn_my1RtgLH14hcPRAMs_mUeCUVhWM3Jr7uQUSg; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2
2024-09-11 17:25:37 UTC	661	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:37 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Robots-Tag: noindex, nofollow Set-Cookie: tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None; P3P: CP=IVAa PSAa Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-09-11 17:25:37 UTC	7531	IN	Data Raw: 66 66 66 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 64 5f 35 46 3d 74 64 5f 35 46 7c 7c 7b 7d 3b 74 64 5f 35 46 2e 74 64 5f 30 46 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 70 2c 74 64 5f 76 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 69 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 50 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 6f 3d 30 3b 74 64 5f 6f 3c 74 64 5f 76 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 6f 29 7b 74 64 5f 69 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 70 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 50 29 5e 74 64 5f 76 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 6f 29 29 29 3b 74 64 5f 50 2b 2b 3b 0a 69 66 28 74 64 5f 50 3e 3d 74 64 5f 70 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 50 3d 30 3b 7d 7d 72 Data Ascii: fff8(function(){var td_5F=td_5F\|\|{};td_5F.td_0F=function(td_p,td_v){try{var td_i=[""];var td_P=0;for(var td_o=0;td_o<td_v.length;++td_o){td_i.push(String.fromCharCode(td_p.charCodeAt(td_P)^td_v.charCodeAt(td_o)));td_P++;if(td_P>=td_p.length){td_P=0;}}r
2024-09-11 17:25:37 UTC	16384	IN	Data Raw: 39 66 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 46 2e 74 64 7a 5f 35 39 64 31 61 65 35 64 63 66 62 37 34 61 35 37 61 31 30 33 64 61 33 36 63 61 33 62 36 36 39 66 2e 74 64 5f 66 28 33 2c 35 29 29 3a 6e 75 6c 6c 29 5d 5b 28 28 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 35 39 64 31 61 65 35 64 63 66 62 37 34 61 35 37 61 31 30 33 64 61 33 36 63 61 33 62 36 36 39 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 35 39 64 31 61 65 35 64 63 66 62 37 34 61 35 37 61 31 30 33 64 61 33 36 63 61 33 62 36 36 39 66 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 46 2e 74 64 7a 5f 35 39 64 31 61 65 35 64 63 66 62 37 34 61 35 37 61 31 30 Data Ascii: 9f.td_f)!=="undefined")?(td_5F.tdz_59d1ae5dcfb74a57a103da36ca3b669f.td_f(3,5)):null)][((typeof(td_5F.tdz_59d1ae5dcfb74a57a103da36ca3b669f)!=="undefined"&&typeof(td_5F.tdz_59d1ae5dcfb74a57a103da36ca3b669f.td_f)!=="undefined")?(td_5F.tdz_59d1ae5dcfb74a57a10
2024-09-11 17:25:37 UTC	16384	IN	Data Raw: 62 61 62 61 36 30 35 38 33 36 32 34 62 32 62 61 66 36 66 61 30 39 63 33 64 39 65 34 61 32 35 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 46 2e 74 64 7a 5f 65 62 61 62 61 36 30 35 38 33 36 32 34 62 32 62 61 66 36 66 61 30 39 63 33 64 39 65 34 61 32 35 2e 74 64 5f 66 28 32 32 36 2c 31 30 29 29 3a 6e 75 6c 6c 29 29 3b 0a 74 72 79 7b 74 64 5f 6a 35 3d 74 64 5f 64 41 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 7d 63 61 74 63 68 28 74 64 5f 4c 42 29 7b 74 64 5f 35 46 2e 74 64 5f 32 57 28 74 64 5f 64 41 2c 74 64 5f 35 46 2e 74 64 5f 32 73 29 3b 72 65 74 75 72 6e 3b 7d 7d 74 64 5f 35 46 2e 74 64 5f 33 53 28 74 64 5f 6a 35 29 2e 5f 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 79 70 65 6f 66 20 Data Ascii: baba60583624b2baf6fa09c3d9e4a25.td_f)!=="undefined")?(td_5F.tdz_ebaba60583624b2baf6fa09c3d9e4a25.td_f(226,10)):null));try{td_j5=td_dA.contentWindow.document;}catch(td_LB){td_5F.td_2W(td_dA,td_5F.td_2s);return;}}td_5F.td_3S(td_j5)._l=function(){if(typeof
2024-09-11 17:25:38 UTC	16384	IN	Data Raw: 36 5c 78 33 30 5c 78 33 38 5c 78 33 35 5c 78 33 39 5c 78 33 35 5c 78 33 37 5c 78 33 35 5c 78 36 31 5c 78 33 34 5c 78 33 34 5c 78 33 34 5c 78 36 32 5c 78 33 34 5c 78 33 31 5c 78 33 36 5c 78 33 38 5c 78 33 35 5c 78 33 31 5c 78 33 35 5c 78 36 36 5c 78 33 30 5c 78 36 31 5c 78 33 35 5c 78 33 33 5c 78 33 31 5c 78 33 37 5c 78 33 35 5c 78 36 35 5c 78 33 31 5c 78 36 31 5c 78 33 30 5c 78 33 39 5c 78 33 36 5c 78 36 35 5c 78 33 35 5c 78 33 30 5c 78 33 30 5c 78 36 33 5c 78 33 35 5c 78 33 30 5c 78 33 35 5c 78 36 32 5c 78 33 31 5c 78 33 34 5c 78 33 34 5c 78 33 34 5c 78 33 31 5c 78 33 31 5c 78 33 36 5c 78 33 38 5c 78 33 35 5c 78 33 30 5c 78 33 35 5c 78 36 35 5c 78 33 35 5c 78 33 39 5c 78 33 35 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 30 5c 78 36 35 5c 78 33 34 5c 78 Data Ascii: 6\x30\x38\x35\x39\x35\x37\x35\x61\x34\x34\x34\x62\x34\x31\x36\x38\x35\x31\x35\x66\x30\x61\x35\x33\x31\x37\x35\x65\x31\x61\x30\x39\x36\x65\x35\x30\x30\x63\x35\x30\x35\x62\x31\x34\x34\x34\x31\x31\x36\x38\x35\x30\x35\x65\x35\x39\x35\x31\x31\x35\x30\x65\x34\x
2024-09-11 17:25:38 UTC	8851	IN	Data Raw: 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 2e 74 64 5f 66 28 32 33 37 2c 32 29 29 3a 6e 75 6c 6c 29 7d 2c 7b 73 74 72 69 6e 67 3a 74 64 5f 47 2c 73 75 62 53 74 72 69 6e 67 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 46 2e 74 64 7a Data Ascii: _f)!=="undefined")?(td_5F.tdz_99b44c718817456aa73538a890d67f49.td_f(237,2)):null)},{string:td_G,subString:((typeof(td_5F.tdz_99b44c718817456aa73538a890d67f49)!=="undefined"&&typeof(td_5F.tdz_99b44c718817456aa73538a890d67f49.td_f)!=="undefined")?(td_5F.tdz
2024-09-11 17:25:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-11 17:25:38 UTC	8192	IN	Data Raw: 37 64 63 65 0d 0a 2c 7b 73 74 72 69 6e 67 3a 74 64 5f 69 2c 73 75 62 53 74 72 69 6e 67 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 2e 74 64 5f 66 28 33 32 30 2c 36 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 35 46 Data Ascii: 7dce,{string:td_i,subString:((typeof(td_5F.tdz_99b44c718817456aa73538a890d67f49)!=="undefined"&&typeof(td_5F.tdz_99b44c718817456aa73538a890d67f49.td_f)!=="undefined")?(td_5F.tdz_99b44c718817456aa73538a890d67f49.td_f(320,6)):null),identity:((typeof(td_5F
2024-09-11 17:25:38 UTC	16384	IN	Data Raw: 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 2e 74 64 5f 66 28 33 35 32 2c 31 30 29 29 3a 6e 75 6c 6c 29 29 7b 69 66 28 74 64 5f 35 6f 2e 74 64 5f 45 28 29 29 7b 74 64 5f 52 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 Data Ascii: eof(td_5F.tdz_99b44c718817456aa73538a890d67f49)!=="undefined"&&typeof(td_5F.tdz_99b44c718817456aa73538a890d67f49.td_f)!=="undefined")?(td_5F.tdz_99b44c718817456aa73538a890d67f49.td_f(352,10)):null)){if(td_5o.td_E()){td_R=((typeof(td_5F.tdz_99b44c718817456
2024-09-11 17:25:38 UTC	7636	IN	Data Raw: 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 2e 74 64 5f 66 28 31 33 32 2c 37 29 29 3a 6e 75 6c 6c 29 7c 7c 74 68 69 73 2e 74 64 5f 30 42 3d 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 46 2e 74 64 7a 5f 39 39 62 34 34 63 37 31 38 38 31 37 34 35 36 61 61 37 33 35 33 38 61 38 39 30 64 36 37 66 34 39 Data Ascii: 5F.tdz_99b44c718817456aa73538a890d67f49.td_f)!=="undefined")?(td_5F.tdz_99b44c718817456aa73538a890d67f49.td_f(132,7)):null)\|\|this.td_0B===((typeof(td_5F.tdz_99b44c718817456aa73538a890d67f49)!=="undefined"&&typeof(td_5F.tdz_99b44c718817456aa73538a890d67f49
2024-09-11 17:25:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49864	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:37 UTC	491	OUT	POST /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 989 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:37 UTC	989	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 32 36 30 37 35 35 33 37 31 33 39 2d 73 6a 6e 30 30 30 30 39 33 36 2d 33 35 36 39 66 62 38 37 2d 39 36 31 62 2d 34 61 36 33 2d 61 33 34 63 2d 66 30 37 39 64 65 36 31 62 37 63 34 22 2c 22 63 73 69 64 22 3a 22 62 34 34 38 66 39 32 35 2d 39 35 30 31 2d 34 62 34 61 2d 61 64 35 63 2d 32 34 65 32 30 37 64 66 61 64 63 65 5f 31 39 33 35 31 34 36 31 32 33 38 37 37 31 34 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 32 36 30 37 35 35 33 34 39 31 39 2d 43 35 33 39 37 39 46 32 2d 46 30 32 44 2d 34 31 41 43 2d 38 36 43 34 2d 33 38 46 30 35 45 41 41 44 46 43 41 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 31 2c 22 64 22 3a 5b Data Ascii: {"ds":"js","cdsnum":"1726075537139-sjn0000936-3569fb87-961b-4a63-a34c-f079de61b7c4","csid":"b448f925-9501-4b4a-ad5c-24e207dfadce_193514612387714","psid":null,"muid":"1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA","context_name":"","requestId":1,"d":[
2024-09-11 17:25:37 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 710 Connection: close date: Wed, 11 Sep 2024 17:25:37 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 3af41b98-1447-4382-ab5b-96f746a05b39
2024-09-11 17:25:37 UTC	710	IN	Data Raw: 7b 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b 52 48 36 67 52 79 6e 30 4a 42 50 63 6f 4e 5a 66 76 6a 41 7a 33 71 56 62 45 68 5a 72 70 57 30 66 34 5a 69 31 44 30 4c 30 53 52 4e 59 32 46 52 43 6d 65 6a 4e 56 65 62 68 76 68 57 72 32 62 56 6b 4e 6e 75 51 55 64 32 6f 48 6d 56 5a 4c 63 54 70 2d 6e 63 4d 41 35 58 2d 55 46 68 76 30 6e 6f 6a 74 5f 52 49 76 52 46 62 4a 37 48 66 6e 75 69 75 52 4b 32 46 61 56 54 73 68 6c 49 49 45 4a 41 58 34 42 46 78 58 52 2d 47 6b 65 51 47 6e 44 4c 51 4e 34 4f 36 39 2d 72 59 36 75 72 54 67 72 6b 2d 69 2d 46 34 71 50 68 32 30 72 6b 5f 5a 54 47 66 6f 41 55 4e 45 4a 6a 65 50 39 41 69 45 72 69 5f 71 49 76 4c 68 69 59 63 76 47 31 42 52 41 49 34 62 54 58 6c 79 6f 50 6d 6d 47 56 43 71 41 50 4c 77 6c 4a 33 48 6d 51 54 7a 5a 44 32 Data Ascii: {"sts":"gAAAAABm4dKRH6gRyn0JBPcoNZfvjAz3qVbEhZrpW0f4Zi1D0L0SRNY2FRCmejNVebhvhWr2bVkNnuQUd2oHmVZLcTp-ncMA5X-UFhv0nojt_RIvRFbJ7HfnuiuRK2FaVTshlIIEJAX4BFxXR-GkeQGnDLQN4O69-rY6urTgrk-i-F4qPh20rk_ZTGfoAUNEJjeP9AiEri_qIvLhiYcvG1BRAI4bTXlyoPmmGVCqAPLwlJ3HmQTzZD2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49865	35.84.56.34	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:37 UTC	1103	OUT	POST /v1/assessment HTTP/1.1 Host: risk-vendor-svc.api.intuit.com Connection: keep-alive Content-Length: 184 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 intuit_tid: cp-c3f8d-e21d-4427-94d5-b0de3b939741-js Authorization: Intuit_APIKey intuit_apikey=prdakyresU43WvUVYwJlJ9PDRrLaWfAPdymzzS6S, intuit_apikey_version=1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; cdSNum=1726075537139-sjn0000936-3569fb87-961b-4a63-a34c-f079de61b7c4
2024-09-11 17:25:37 UTC	184	OUT	Data Raw: 7b 22 72 65 61 6c 6d 49 64 22 3a 22 31 39 33 35 31 34 36 31 32 33 38 37 37 31 34 22 2c 22 61 64 64 69 74 69 6f 6e 61 6c 44 61 74 61 22 3a 7b 22 74 72 61 6e 73 61 63 74 69 6f 6e 54 79 70 65 22 3a 22 43 50 20 49 6e 76 6f 69 63 65 20 50 61 79 6d 65 6e 74 22 7d 2c 22 63 6c 69 65 6e 74 54 6f 6b 65 6e 22 3a 22 22 2c 22 74 6d 54 6f 6b 65 6e 22 3a 22 22 2c 22 6d 65 72 63 68 61 6e 74 49 64 22 3a 22 22 2c 22 69 6e 74 75 69 74 54 69 64 22 3a 22 63 70 2d 63 33 66 38 64 2d 65 32 31 64 2d 34 34 32 37 2d 39 34 64 35 2d 62 30 64 65 33 62 39 33 39 37 34 31 22 7d Data Ascii: {"realmId":"193514612387714","additionalData":{"transactionType":"CP Invoice Payment"},"clientToken":"","tmToken":"","merchantId":"","intuitTid":"cp-c3f8d-e21d-4427-94d5-b0de3b939741"}
2024-09-11 17:25:38 UTC	1692	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:38 GMT Content-Type: application/json Content-Length: 69 Connection: close x-spanid: 357329e1-e4e1-8cd2-9f03-76a0f501b6b6 x-amzn-trace-id: Root=1-66e1d292-1b17216f7713ca177f409670 Access-Control-Expose-Headers: date,content-length,x-b3-parentspanid,expires,vary,origin,x-b3-sampled,authorization,keep-alive,tracestate,if-unmodified-since,content-transfer-encoding,content-disposition,x-xsrf-token,content-md5,fragment-location,content-type,connection,if-match,cache-control,intuit_tid,pragma,accept,x-b3-traceid,x-b3-spanid,traceparent,x-requested-with,content-location,content-range,x-csrf-token,etag,intuit_originalurl Access-Control-Allow-Origin: https://connect.intuit.com Timing-Allow-Origin: https://connect.intuit.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Set-Cookie: ADRUM_BTa=R:27\|g:09954651-abc9-4401-9fc4-223aee74784d; Max-Age=30; Expires=Wed, 11 Sep 2024 17:26:08 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:27\|g:09954651-abc9-4401-9fc4-223aee74784d\|n:intuit-sbg-prod_87bcfab1-ad5a-4af1-95e0-7eed4f8a1800; Max-Age=30; Expires=Wed, 11 Sep 2024 17:26:08 GMT; Path=/; Secure Set-Cookie: SameSite=None; Max-Age=30; Expires=Wed, 11 Sep 2024 17:26:08 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:27\|i:307331; Max-Age=30; Expires=Wed, 11 Sep 2024 17:26:08 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:27\|i:307331\|e:1; Max-Age=30; Expires=Wed, 11 Sep 2024 17:26:08 GMT; Path=/; Secure x-envoy-upstream-service-time: 6 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-c3f8d-e21d-4427-94d5-b0de3b939741-js x-request-id: cp-c3f8d-e21d-4427-94d5-b0de3b939741-js server: istio-envoy
2024-09-11 17:25:38 UTC	69	IN	Data Raw: 31 36 38 38 38 43 43 46 45 35 45 41 34 45 45 35 41 43 43 42 43 32 38 36 36 34 42 31 32 39 43 43 3a 64 63 38 62 35 37 34 30 2d 37 30 36 32 2d 31 31 65 66 2d 39 64 36 36 2d 37 37 62 36 30 61 31 61 63 64 64 30 Data Ascii: 16888CCFE5EA4EE5ACCBC28664B129CC:dc8b5740-7062-11ef-9d66-77b60a1acdd0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49868	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:37 UTC	387	OUT	GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:38 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Wed, 11 Sep 2024 17:25:37 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: d52cdbfa-bca0-44a5-a01a-69aed133743e
2024-09-11 17:25:38 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49866	13.35.58.148	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:38 UTC	411	OUT	GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:38 UTC	729	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21911 Connection: close Date: Wed, 11 Sep 2024 17:25:39 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Thu, 08 Aug 2024 06:57:13 GMT ETag: "c467a63b2e7c3a99be423ace649014d8" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: aAixXKmCEkR1rfYrRzV2.EPYhnGmH0W2 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: qKIABzyCXkpwa_RdOYKYGlKRZUc6ZQg1klI9cgzmrOojKz4Dlg-7Ug==
2024-09-11 17:25:38 UTC	8176	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 69 7b db 38 b2 30 fa fd fe 0a 99 b7 a3 90 11 ac d5 ab 64 46 6f 96 4e 27 3d d9 4e c7 e9 3e 13 45 c9 a1 25 c8 62 22 91 6a 92 b2 e3 58 9a df 7e ab 0a 0b c1 45 b2 32 db 99 fb 3c ef 4c c7 22 41 a0 50 d8 0a 85 42 2d f6 b5 1f 8c c3 eb fa 35 bf 58 78 a3 af bf c6 61 b0 f8 1c 78 73 fe f9 45 90 f0 cb c8 4b fc 30 70 77 c9 b4 5a 0d 86 4e 7d b1 8c a7 f6 60 d0 1c b2 5b ab f6 f8 65 cb ea 4e 96 c1 08 bf db 09 e3 2c 72 6e ad 65 cc 2b 71 12 f9 a3 c4 ea a9 8f 15 f8 ec dc 5e 79 51 85 bb 49 3d 09 df c1 f7 e0 d2 76 7a 11 4f 96 51 50 69 b9 ae cb eb 33 1e 5c 26 d3 be d5 b4 6a bc cb d7 49 9d 7f 5b 84 51 12 bb 69 1d ce ad 2c 91 d4 2f 79 f2 fe fc c9 b3 e5 6c f6 57 ee 45 b6 53 b3 f6 ad 1a 64 91 1f 5e 85 41 32 85 d4 56 fe c3 53 2f e1 b6 03 a9 e7 66 Data Ascii: i{80dFoN'=N>E%b"jX~E2<L"APB-5XxaxsEK0pwZN}`[eN,rne+q^yQI=vzOQPi3\&jI[Qi,/ylWESd^A2VS/f
2024-09-11 17:25:39 UTC	12792	IN	Data Raw: bd da e4 d6 61 f4 15 3d a6 31 20 19 9b 6e fd 19 5e 73 a2 24 56 9e c1 1b 95 07 bd ca 83 86 a3 24 01 01 1e c5 d5 15 66 ee d6 33 e3 23 3f 1a 2c 6d 60 e1 82 ec 71 1e 95 6d 9c a1 bb 84 39 d7 4a b5 04 22 d2 1f 36 45 5d 7a c2 43 97 0d 92 61 4e b1 7e 77 99 0a 9c 86 a9 f9 95 ff 11 19 ed 7b a1 f3 3f 95 fd 0a fa d5 12 1e 90 34 e4 e5 0e a2 96 52 c8 22 63 11 f2 9d c2 b7 bc 6a b2 38 8c 55 3a 5d fa 69 2b 09 57 68 8a bf 2a 2d 43 20 e7 14 2f de 49 8a f5 f6 f8 bf 5f e5 8e 8b 25 d3 45 1e 67 84 ce 56 7f d3 21 99 0b 9d af e5 82 47 9f 5d ce 8c e3 8f 9b 01 60 73 c3 59 d1 ad e1 97 a8 7b 2b 3c 01 01 34 c3 5f 50 cb 74 07 94 f7 1d b4 c6 bb fa ee 96 63 3b 5d 78 29 9c e4 29 db bc a4 ed 19 9e 93 5c 13 31 13 7d a4 26 91 99 62 7a 53 02 2e 13 3a f2 bf 5e 1f ff 57 e9 b9 5b 79 73 eb ed 10 Data Ascii: a=1 n^s$V$f3#?,m`qm9J"6E]zCaN~w{?4R"cj8U:]i+Wh*-C /I_%EgV!G]`sY{+<4_Ptc;]x))\1}&bzS.:^W[ys
2024-09-11 17:25:39 UTC	943	IN	Data Raw: da a4 2e 34 29 b9 ea bc 83 4d 29 ba 45 ee ab 87 6e 5e 9b a4 2f 99 a5 ee ed 5a 33 7d 8a ab 93 93 e9 84 c1 24 ca 5a 32 ad 25 49 07 42 25 6d 6b 2c a0 46 15 20 27 15 f8 41 1a 51 01 1a 80 4b 3f b6 58 3c 05 1e 01 87 a5 6b cd 1b e3 c6 cd 8d c5 50 47 6b 39 97 69 58 88 51 21 8b a1 b9 8d 4e 36 d2 27 d0 5e 91 8e 64 8f 55 b2 5f a9 06 1c bc ae 35 85 5a 2b e7 e7 aa 8a 34 11 50 a1 74 ac 21 9f 5a f9 60 c1 66 17 8a 0a 10 e4 fe 7c be 3f 1e 53 a2 c8 9b b6 46 e6 13 c9 69 de fb e7 f7 55 9e 90 32 bd 4f 46 69 3e dc e3 4a f3 de ff 70 df 62 c0 45 f9 11 8f 9f 73 6f cc a3 67 a4 d3 4c ed 64 15 d9 a7 99 0e 05 64 81 87 22 a2 0d dd 2f 09 3f d0 9a 77 cb 00 48 0c 2c 38 f8 7b be e4 f0 f7 0f 8e 44 e7 7c ba 84 bf cf 22 1f fe be f3 90 16 41 4e 34 64 a2 cc e2 01 f2 c7 e2 09 ca 04 ea 19 4a 46 Data Ascii: .4)M)En^/Z3}$Z2%IB%mk,F 'AQK?X<kPGk9iXQ!N6'^dU_5Z+4Pt!Z`f\|?SFiU2OFi>JpbEsogLdd"/?wH,8{D\|"AN4dJF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49867	13.32.121.110	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:38 UTC	373	OUT	GET /scripts/04e01638/04e01638.js HTTP/1.1 Host: bcdn-god.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:38 UTC	548	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 132098 Connection: close Date: Wed, 11 Sep 2024 17:25:39 GMT Last-Modified: Sun, 23 Apr 2023 18:39:18 GMT ETag: "b87bf31c73ec4335bbbd7517da66af7b" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 490f651effcacfa7d80143d3047d794e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: r9_GoWg5nKbpYupW5rp6MhaiLmqnz_0MzZS7YBpaeV3pXOpy0HsaWQ==
2024-09-11 17:25:38 UTC	1480	IN	Data Raw: 1f 8b 08 08 55 7b 45 64 02 ff 30 34 65 30 31 36 33 38 2e 6a 73 00 ec bd 6d 57 dc 46 d2 30 fc fd 3e e7 f9 0f 83 ce 7d 93 51 10 e3 c1 6f 9b 68 ac e5 60 c0 1b 36 c6 26 06 c7 9b 65 59 8e 98 69 40 eb 41 9a 48 1a 63 02 f3 df 9f aa 7e 6f 75 b7 66 c0 0e 09 7b 76 af 2b 58 d3 ef 5d 5d 5d 5d 55 5d 5d f5 e8 db ce 68 14 77 1e f7 1f 3f 59 ed 3f 5d 7d fc e4 f8 78 ed bb d5 27 df af ae 3d ef 7c fb e8 ff fb 3f 4b a7 d3 7c 58 67 45 de 25 e1 75 30 ad 48 a7 aa cb 6c 58 07 83 8a 8c 4f 7b c3 d1 c6 24 4b ae 8f c9 27 92 d7 af b3 aa 26 39 29 ab f8 7a 16 0d 8b fc 34 3b 9b 96 29 56 fe 91 5c 41 e2 e5 74 b2 4f ca 4f a4 7c ff ee 75 1c e8 bf 82 68 5c 9c 69 79 fa af 20 22 79 7a 32 26 af ca f4 82 54 7b 65 31 24 55 95 e5 67 71 e0 4e 0f 66 d1 19 a9 37 f5 ee ab 58 9f c5 a7 b4 ec e4 c9 f5 6c Data Ascii: U{Ed04e01638.jsmWF0>}Qoh`6&eYi@AHc~ouf{v+X]]]]U]]hw?Y?]}x'=\|?K\|XgE%u0HlXO{$K'&9)z4;)V\AtOO\|uh\iy "yz2&T{e1$UgqNf7Xl
2024-09-11 17:25:38 UTC	16384	IN	Data Raw: b4 f0 45 96 b3 5a 17 e9 67 20 a6 fd 10 a8 e9 ec 2d 1d 3a 6e aa b7 97 39 f0 ff 80 33 35 dd 3d 88 c0 fe cc c4 3a 18 80 ea c0 19 8c 07 69 dd c9 a0 e7 90 57 96 cb d1 3b 4f 2b ad 19 0e 1e 38 7d 11 71 f9 e1 20 8e e8 12 10 9f d7 67 c8 2c 6a 2d 2f 6b 48 0c e4 42 4c d4 59 b8 0b 67 69 f0 39 88 ae a1 b5 b5 19 70 31 c3 73 05 9b 19 30 2c b8 47 13 67 55 77 ef 89 e3 2c ca 43 6d 18 22 43 75 36 83 22 88 9c ac 3d 5c 2c 76 3a 20 9d e3 e7 82 b3 ab 0e 82 07 4e 0b 58 d1 bc c8 57 19 86 05 12 40 16 70 8f 8f 59 7d 20 82 b0 f3 8e 8f 61 17 c1 b2 05 b0 12 70 46 ce 2d 2d 17 23 2a 71 b5 25 f0 ed 1a fb aa fd 6a 7e fb fb 8e f6 2b 6c 3f f8 94 8e a7 84 57 ef 12 38 c1 92 b2 47 d3 80 e2 c1 72 a9 9d b6 24 76 9a 0b 4c 40 eb a1 ba 27 c7 58 2d ba 56 77 58 08 68 c7 b7 14 92 69 44 7c af 17 c3 77 Data Ascii: EZg -:n935=:iW;O+8}q g,j-/kHBLYgi9p1s0,GgUw,Cm"Cu6"=\,v: NXW@pY} apF--#*q%j~+l?W8Gr$vL@'X-VwXhiD\|w
2024-09-11 17:25:38 UTC	16384	IN	Data Raw: 8b 9f 61 05 be 7b 9e 2d 04 50 a7 e0 be 98 50 60 89 ef 0b ca 12 77 14 e2 5d e8 79 6b 51 5e ea d7 28 44 49 78 6b c1 5e bd 83 c9 9b 4d 1c d3 b0 2c 86 21 a7 5b 64 f7 15 54 3b 02 45 b9 33 74 b6 24 88 3e 93 ee 44 12 90 7b f1 ce 89 a1 97 ae 7a 53 70 8a ae 53 66 ed 0b 32 c6 40 59 57 f5 6c c9 3f 0f a3 2c f9 44 0e f3 9e 3c 07 30 ee 09 eb 42 e0 33 ad c7 be 41 4e 83 51 9d 61 dc fb b4 d5 7b fa 46 3e 62 26 15 db fa 39 c4 bc 9c 49 ef c0 be 57 62 f4 2d cd ea 9a e9 9c ba 59 ac 66 da 7a 28 36 c8 e5 f4 1c 3a 88 5c f4 36 b2 42 e8 50 98 1e 13 ce 94 18 be d9 8a fc 13 ee af 62 a3 2c d3 ab 97 57 bb e9 a4 7b 41 78 e4 49 31 9b 38 d5 3c 26 16 91 3c 55 81 a0 4b 68 c6 59 a4 9d aa 71 15 f1 53 35 2e 7b fc 6b 7d 37 ad cf 7b d4 0a b6 2b 13 43 38 ec f9 a9 2b 4b fe e2 2a f9 4b 28 d8 02 7a Data Ascii: a{-PP`w]ykQ^(DIxk^M,![dT;E3t$>D{zSpSf2@YWl?,D<0B3ANQa{F>b&9IWb-Yfz(6:\6BPb,W{AxI18<&<UKhYqS5.{k}7{+C8+K*K(z
2024-09-11 17:25:38 UTC	16384	IN	Data Raw: ab 16 f7 81 9d ec d9 03 3f 88 d3 a7 d3 1a 54 15 b1 74 76 fa 81 96 80 95 45 09 a5 08 2c a3 d7 11 b8 4c 83 15 03 f7 b4 06 6a 6f df 26 85 75 ec fa aa 18 a9 42 6a dc 6b b1 ac b7 ae 1a 20 a3 6c d4 36 b5 66 17 b6 52 6d 6f 7f 87 83 9c fe 6c 77 96 9d 97 d5 0f 0a 39 e4 a4 b5 1d 98 2a de 0e 0f 70 59 1e d8 52 6e e3 b8 e1 de ab ec 36 78 fe 36 68 d8 28 91 36 f4 85 88 52 07 ee 2c 4f 40 b0 49 bf 0f c2 75 f8 97 00 1d 58 84 11 69 70 37 ce 84 f8 be 62 eb 94 c6 d6 b6 ee 9c f2 e0 2f 7d f7 94 3a 67 4b 9c 64 e5 ce fb a7 33 f7 0e a1 40 ec df 25 fc 33 eb de 29 2a 28 e2 bc bb 85 d4 3c df 31 1a 47 d2 01 c5 0d 7e 1f a4 d9 49 98 f5 e9 c1 d9 94 e7 dc 8a e9 42 7f 11 0d 41 ef cd 4e 48 cc ed e5 b6 91 db 8a ac ee 16 86 af 69 65 ac 28 cd 62 1a 60 8e b1 51 84 9a 69 4b 9a 15 90 2d 78 a6 db Data Ascii: ?TtvE,Ljo&uBjk l6fRmolw9pYRn6x6h(6R,O@IuXip7b/}:gKd3@%3)(<1G~IBANHie(b`QiK-x
2024-09-11 17:25:38 UTC	1024	IN	Data Raw: 61 21 d1 c7 89 a5 d8 46 f7 28 1a 1e ee db 41 7e c8 83 2f ad c3 1a 7b cf 7f 6c 01 35 6e 0c 7e 9f 66 ca 8b 38 21 61 12 ff 70 ed 21 fc de 61 f5 b3 6c 4e 9f 8c 7d 92 b1 af 96 c8 32 33 39 80 14 b6 d1 2f 2f 18 5f 7d 92 70 55 90 46 4b 57 97 64 ba 33 87 61 09 cc e8 ce 47 96 96 f9 c8 44 d4 c6 44 89 da 48 62 38 0e a8 9f 0a 12 f7 0a e9 3f ef 9f ce f0 43 31 98 6c 0c de 6f 8d d3 09 06 55 f4 45 f5 0f 0a ce f5 5e 8a 3a 01 ec e0 df 92 0e c6 69 72 b0 89 34 8b 6a 6d 3a 2d ea b7 f6 54 ab 89 6d fe 40 da a4 ca 7d 19 84 05 43 83 f5 2d ef 29 e7 af bb 2f 92 48 8f bc 11 11 f6 44 6d 5b bc 3e 47 d3 3c 4e 8b da 32 7f 7b 8e 86 57 49 a0 3b 4b db d2 87 b9 9a 27 7c 78 0d 97 79 4c 49 c4 a8 4f 02 b0 4c 27 78 ce 12 8d a4 58 28 6d 5b f0 4c d7 f2 d5 ad 96 75 74 34 c3 58 59 4b b1 9b d3 46 69 Data Ascii: a!F(A~/{l5n~f8!ap!alN}239//_}pUFKWd3aGDDHb8?C1loUE^:ir4jm:-Tm@}C-)/HDm[>G<N2{WI;K'\|xyLIOL'xX(m[Lut4XYKFi
2024-09-11 17:25:38 UTC	15990	IN	Data Raw: 19 0d a4 2e 95 dc 06 65 a7 65 4c 77 b5 57 f6 5e f4 4b 78 ae 4d 33 a1 16 14 a6 4e a7 54 9a c5 bf 54 5b 21 c0 e3 71 0d a2 b0 05 dc 59 a8 26 c4 29 a1 63 1a 1b d5 30 b2 74 0d 57 c6 91 f5 14 fb 68 03 c9 5a c7 7c 33 23 c9 5a 87 e2 0b 25 5b a3 c2 d5 c5 92 b5 02 57 11 4c d6 5a e7 93 6f c1 79 a2 c9 5a 51 5a 23 9c ac b5 de 1c f1 64 7d ac eb da 04 94 b5 02 59 2b a2 6c 1d f4 7e a8 90 b2 8d a0 be aa 98 b2 75 10 54 b5 85 5d 47 df 83 1f 8d 48 b2 12 e8 17 e6 7f b0 78 61 d7 77 be 81 5d 2f fc b9 ea 54 1f 36 25 80 3d a0 a9 b5 f0 db 60 2f 7f 0e 9a 18 cc ee 4e f8 9d 2b 34 ac 9d 6d 7f 3a 75 97 63 c3 d6 dd dc 67 f6 35 20 9d be 57 ef ac d6 12 55 f2 64 d5 49 bc a3 db cb 8a 12 6b 1d d2 05 a4 4a 24 89 a6 e4 d6 b5 4c 86 f2 27 16 52 b6 01 df b5 67 2f f4 cd a0 11 3a b6 a6 80 6b c6 8e Data Ascii: .eeLwW^KxM3NTT[!qY&)c0tWhZ\|3#Z%[WLZoyZQZ#d}Y+l~uT]GHxaw]/T6%=`/N+4m:ucg5 WUdIkJ$L'Rg/:k
2024-09-11 17:25:38 UTC	394	IN	Data Raw: 45 b2 cd bc c9 25 30 ac 45 06 d7 84 5e cd 14 68 71 eb 02 a0 d5 05 c7 ac 0b ae 6e 2e 56 95 9c 5a 17 46 cd 81 a9 b9 7f aa f3 bd 59 12 e3 79 7a b6 64 df f4 8c 6e a5 cd b7 77 0a b7 d2 94 ba 39 db 9a 0c 37 3b 49 5b 21 ce 61 56 b6 92 e7 0e 53 2e 3b 0d 5b 61 a9 e3 bc 6b 25 df 82 13 ad 26 d5 b5 99 33 ab 15 6a 37 77 2a b5 ae 63 57 39 77 5a 57 77 9d 5d da 44 50 38 2b 1f 94 47 a4 6f de f1 78 03 db 2c 6e 55 81 de 61 d6 f2 b4 ad 8b 99 9d eb 05 37 3b 15 2f e8 d7 db 38 6d 8a 3a cf 8e 63 2a 70 0e f8 c6 6a 47 dd bc d6 29 d6 4a 93 bc 4e d4 0f 8a 47 e1 cd d2 60 8c eb bf a3 de e1 30 9a 7c a6 a7 94 9e e8 8c bc 18 7f a2 3f 2c 4f 70 7b 81 ee 60 88 6f c5 ad 5e 30 06 d1 7b ee b7 f9 d1 6e 62 f6 e6 f0 71 6f bb f7 7d 1b d3 f1 3d ef 7b b6 d4 94 2e 41 e7 9d 2f b7 ec ef b7 fd 61 04 f2 Data Ascii: E%0E^hqn.VZFYyzdnw97;I[!aVS.;[ak%&3j7wcW9wZWw]DP8+Gox,nUa7;/8m:cpjG)JNG`0\|?,Op{`o^0{nbqo}={.A/a
2024-09-11 17:25:38 UTC	1024	IN	Data Raw: 32 7f f6 b5 15 47 fc 05 74 5c 00 ee 71 08 4d 6b 1d 1f 89 17 d0 0d f4 6b 0a 23 68 9c d0 cf c9 11 e7 c3 c0 47 bf 3a a6 5f c9 38 0a b3 1f a2 3a 46 2f d2 19 35 6e 00 06 04 9a 2f 7e cd e2 22 fd f2 5d a1 d1 28 9d da 0f 83 91 3f c5 cd bf 63 fe 3b 06 7b 9a 04 fc 81 8d 53 06 9c 98 e0 03 78 55 f1 b1 3f a0 f2 a3 c1 28 20 02 23 a0 2f 24 ea a3 c9 74 06 dd 92 b3 0c 31 33 0c 33 96 33 24 a2 31 93 f2 d6 46 a8 5b 5a 47 63 7f 40 34 44 00 e5 f1 fd 90 7d f1 cf 66 2d 0e ea bc 36 1b 08 a5 d3 86 4e 9a 8e 20 37 fe 4c a6 d0 04 14 40 7c f8 3a 60 63 d0 9e c8 0b 00 91 31 9d 2c 88 bf 8f a1 95 fe 18 cb 3c 8e a2 74 1c 9c 8c 30 ef 71 cc 98 cc 7a 1c 07 bf b7 a0 1f 87 00 c9 30 dd 09 46 08 a2 10 73 9f 00 a3 82 d9 84 7e 45 f1 09 91 7c 32 8e 66 03 26 64 ef 24 9a 0d 8b 4c e7 6f 0a 9c e5 af 40 Data Ascii: 2Gt\qMkk#hG:_8:F/5n/~"](?c;{SxU?( #/$t1333$1F[ZGc@4D}f-6N 7L@\|:`c1,<t0qz0Fs~E\|2f&d$Lo@
2024-09-11 17:25:38 UTC	16384	IN	Data Raw: 13 fe 00 29 93 15 67 bf cb 76 23 e5 46 17 0c de 90 29 3d 08 e2 34 f1 49 dd 8d 7c 96 42 3f 43 36 18 60 63 61 48 02 fa 77 7c c6 52 e0 b7 fa 1b c6 3e 75 61 72 0e 83 b1 f5 e7 c7 db c2 d8 80 7e ca 0b cf 6c 8d a4 6e 14 91 03 15 10 ef f1 47 08 ee 5b ca 3b 3e c0 b8 08 5d 2e 4c 16 65 14 a2 ee 41 4b e2 f3 de 81 91 1e 29 86 84 17 48 03 b0 85 77 a1 22 7c 20 3b 10 c4 17 11 69 ff 41 1c 81 75 9c 10 9b 27 80 1a 62 ae 3b 51 d9 13 7f 84 52 13 63 97 97 37 b9 00 62 86 64 07 66 a0 c9 84 77 02 0f bf 03 88 6a 25 dc 40 24 79 0b 85 8d a0 02 f9 80 27 61 8f 60 54 52 bd 53 74 7e b8 ec 81 31 1d b0 61 74 1e f2 df 13 5f d6 39 4d e5 af 18 94 5d cb 1f 83 57 02 03 87 94 fb 19 31 39 06 b6 51 e3 85 6e 17 52 22 fc 11 f9 9c b0 93 88 ba e4 34 50 b5 7b 4e ac 50 e6 22 f5 05 f8 7b 28 ec a9 3f 8a Data Ascii: )gv#F)=4I\|B?C6`caHw\|R>uar~lnG[;>].LeAK)Hw"\| ;iAu'b;QRc7bdfwj%@$y'a`TRSt~1at_9M]W19QnR"4P{NP"{(?
2024-09-11 17:25:38 UTC	1024	IN	Data Raw: 41 ed b1 fc a2 39 07 2a 94 df ac 67 a5 44 32 95 75 17 7f 20 53 69 f6 98 26 7a b1 51 65 c1 6e c5 df b1 d4 c7 ce 7b 01 25 33 3c 62 5c 15 9d 93 a8 b9 e8 b8 58 b9 49 56 69 d1 b0 ed 6a 7d fe 32 85 45 07 f2 24 72 32 0d dc 87 64 05 3d ad 3a bd fe 51 52 1d 3a 67 4b 81 95 bc cc 22 c5 67 a1 c6 b3 e4 03 48 a1 e8 65 f4 53 94 7e 8a fd c1 a9 4a d1 bf 96 a2 28 2f b3 48 d1 bf 24 45 15 2a 9e c7 d1 39 74 22 02 be 02 67 7e 5a 8a 0e b5 d4 22 25 3f 15 28 f1 fe 11 69 80 8f 03 70 7b 93 7c 88 83 33 3f 65 54 13 18 3b 95 f6 70 01 a9 7e 16 69 65 b3 52 4f b1 35 61 54 68 4d 01 66 bd 06 ad 90 bc 64 29 a3 ca 04 ea 2f 20 e5 68 19 16 6b 8b 2f 61 e6 a8 b3 97 3b 4b 9c c4 ff 8e 54 1a ff 11 fb d3 51 30 e0 c5 68 48 fc 71 29 29 d0 95 5e a4 f0 c7 3a b9 e4 79 55 92 ce af 43 30 79 b1 45 5a ce 8d Data Ascii: A9gD2u Si&zQen{%3<b\XIVij}2E$r2d=:QR:gK"gHeS~J(/H$E9t"g~Z"%?(ip{\|3?eT;p~ieRO5aThMfd)/ hk/a;KTQ0hHq))^:yUC0yEZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49869	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:38 UTC	492	OUT	POST /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 1160 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:38 UTC	1160	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 32 36 30 37 35 35 33 37 31 33 39 2d 73 6a 6e 30 30 30 30 39 33 36 2d 33 35 36 39 66 62 38 37 2d 39 36 31 62 2d 34 61 36 33 2d 61 33 34 63 2d 66 30 37 39 64 65 36 31 62 37 63 34 22 2c 22 63 73 69 64 22 3a 22 64 65 35 64 33 66 38 64 65 32 31 64 34 34 32 37 39 34 64 35 62 30 64 65 33 62 39 33 39 37 34 31 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 32 36 30 37 35 35 33 34 39 31 39 2d 43 35 33 39 37 39 46 32 2d 46 30 32 44 2d 34 31 41 43 2d 38 36 43 34 2d 33 38 46 30 35 45 41 41 44 46 43 41 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 70 61 79 61 62 6c 65 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 32 2c 22 64 22 3a 5b 22 54 59 74 4e 43 6f 4a 41 47 45 43 68 Data Ascii: {"ds":"js","cdsnum":"1726075537139-sjn0000936-3569fb87-961b-4a63-a34c-f079de61b7c4","csid":"de5d3f8de21d442794d5b0de3b939741","psid":null,"muid":"1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA","context_name":"payable","requestId":2,"d":["TYtNCoJAGECh
2024-09-11 17:25:38 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 761 Connection: close date: Wed, 11 Sep 2024 17:25:37 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: fd5516e6-b738-439a-8869-155c44d81aaa
2024-09-11 17:25:38 UTC	761	IN	Data Raw: 7b 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b 53 6b 31 30 70 76 30 39 65 30 79 6e 34 70 51 58 74 49 43 47 78 4e 36 45 68 4a 4a 4e 79 38 47 4b 32 51 77 72 64 4c 69 4e 44 73 33 79 50 34 74 58 56 6d 46 6d 67 2d 7a 74 41 48 76 6e 2d 6e 73 4f 37 52 65 44 36 38 42 33 5a 45 64 63 6e 6a 77 4c 67 32 41 5a 33 53 46 67 6e 44 56 67 57 35 63 63 6b 4c 63 48 4d 39 75 61 2d 36 39 6d 6e 70 72 78 48 43 62 48 34 5a 38 69 30 70 5a 33 54 4f 52 61 52 66 73 54 32 43 55 36 66 78 5a 59 37 79 4b 6e 79 41 6c 4a 47 59 36 6b 4f 65 56 37 72 48 42 75 6d 76 47 58 34 2d 6c 4e 7a 57 75 45 43 78 6f 4f 6c 37 38 6a 4c 69 6e 52 74 59 43 5f 32 6e 53 43 58 73 47 4a 54 68 73 5f 5a 4e 68 4f 62 63 74 45 77 37 6a 6d 48 39 30 6a 72 6b 5a 45 58 31 4a 45 37 2d 67 5f 57 39 68 59 6a 31 4f 76 Data Ascii: {"sts":"gAAAAABm4dKSk10pv09e0yn4pQXtICGxN6EhJJNy8GK2QwrdLiNDs3yP4tXVmFmg-ztAHvn-nsO7ReD68B3ZEdcnjwLg2AZ3SFgnDVgW5cckLcHM9ua-69mnprxHCbH4Z8i0pZ3TORaRfsT2CU6fxZY7yKnyAlJGY6kOeV7rHBumvGX4-lNzWuECxoOl78jLinRtYC_2nSCXsGJThs_ZNhObctEw7jmH90jrkZEX1JE7-g_W9hYj1Ov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49870	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:38 UTC	387	OUT	GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:39 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Wed, 11 Sep 2024 17:25:38 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 3c873f7c-fb45-49c6-abfd-03d5e5d239af
2024-09-11 17:25:39 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49872	44.241.213.0	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:39 UTC	921	OUT	GET /v1/assessment HTTP/1.1 Host: risk-vendor-svc.api.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; cdSNum=1726075537139-sjn0000936-3569fb87-961b-4a63-a34c-f079de61b7c4; ADRUM_BTa=R:27\|g:09954651-abc9-4401-9fc4-223aee74784d\|n:intuit-sbg-prod_87bcfab1-ad5a-4af1-95e0-7eed4f8a1800; SameSite=None; ADRUM_BT1=R:27\|i:307331\|e:1; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1
2024-09-11 17:25:39 UTC	371	IN	HTTP/1.1 401 Unauthorized Date: Wed, 11 Sep 2024 17:25:39 GMT Content-Type: text/xml Content-Length: 227 Connection: close WWW-Authenticate: Bearer realm="Intuit" x-envoy-upstream-service-time: 0 strict-transport-security: max-age=31536000 intuit_tid: 1-66e1d293-2cd162f1456ec0e31d1a9f71 x-request-id: 1-66e1d293-2cd162f1456ec0e31d1a9f71 server: istio-envoy
2024-09-11 17:25:39 UTC	227	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 79 65 73 22 3f 3e 0a 3c 45 72 72 6f 72 73 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 69 6e 74 75 69 74 2e 63 6f 6d 2f 70 6c 61 74 66 6f 72 6d 2f 63 6f 6d 6d 6f 6e 2f 65 72 72 6f 72 2f 76 31 22 3e 0a 20 20 20 20 3c 65 72 72 6f 72 3e 0a 20 20 20 20 20 20 20 20 3c 63 6f 64 65 3e 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 46 61 69 6c 65 64 3c 2f 63 6f 64 65 3e 0a 20 20 20 20 20 20 20 20 3c 74 79 70 65 3e 49 4e 50 55 54 3c 2f 74 79 70 65 3e 0a 20 20 20 20 3c 2f 65 72 72 6f 72 3e 0a 3c 2f 45 72 72 6f 72 73 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="yes"?><Errors xmlns="http://schema.intuit.com/platform/common/error/v1"> <error> <code>AuthenticationFailed</code> <type>INPUT</type> </error></Errors>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49873	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:39 UTC	492	OUT	POST /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 1616 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:39 UTC	1616	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 32 36 30 37 35 35 33 38 35 39 32 2d 73 6a 63 30 30 30 30 36 37 35 2d 32 62 66 63 64 34 32 38 2d 38 65 36 36 2d 34 34 38 66 2d 61 36 64 34 2d 62 31 66 30 66 37 37 61 66 32 35 65 22 2c 22 63 73 69 64 22 3a 22 64 65 35 64 33 66 38 64 65 32 31 64 34 34 32 37 39 34 64 35 62 30 64 65 33 62 39 33 39 37 34 31 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 32 36 30 37 35 35 33 34 39 31 39 2d 43 35 33 39 37 39 46 32 2d 46 30 32 44 2d 34 31 41 43 2d 38 36 43 34 2d 33 38 46 30 35 45 41 41 44 46 43 41 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 70 61 79 61 62 6c 65 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 33 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b Data Ascii: {"ds":"js","cdsnum":"1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e","csid":"de5d3f8de21d442794d5b0de3b939741","psid":null,"muid":"1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA","context_name":"payable","requestId":3,"sts":"gAAAAABm4dK
2024-09-11 17:25:39 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 666 Connection: close date: Wed, 11 Sep 2024 17:25:38 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: abf62ace-7e2d-4e47-88a6-14866c9c9f81
2024-09-11 17:25:39 UTC	666	IN	Data Raw: 7b 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b 54 36 32 6d 6a 6e 56 56 41 6f 65 49 78 62 52 58 45 68 53 6a 4f 6b 4a 52 7a 53 42 62 73 50 32 4a 63 4e 63 66 63 39 52 6f 36 75 75 6e 62 70 35 61 59 48 77 37 76 4a 49 52 79 71 4b 54 75 4e 4f 71 47 33 41 4e 33 54 37 54 4f 75 67 34 6d 68 79 38 2d 51 68 6b 6a 62 6c 4b 59 41 64 52 71 45 38 4e 4c 44 45 66 4d 74 66 7a 6e 71 43 56 56 4e 68 6d 35 45 5a 64 46 6b 78 41 66 42 50 52 67 6d 64 39 74 57 75 50 32 35 46 57 58 69 78 48 30 51 68 6e 31 45 78 5f 41 49 6c 75 32 69 64 48 55 68 41 6c 6d 6f 77 5a 33 4a 78 57 41 35 68 47 46 50 50 47 6a 51 62 52 7a 58 75 44 65 6c 71 47 70 45 70 33 7a 52 69 4b 5a 37 4a 2d 49 49 31 54 55 79 6c 30 52 64 6f 55 47 75 4c 76 46 4b 53 52 46 36 4c 63 4c 32 33 76 30 52 31 77 34 4c 7a 7a Data Ascii: {"sts":"gAAAAABm4dKT62mjnVVAoeIxbRXEhSjOkJRzSBbsP2JcNcfc9Ro6uunbp5aYHw7vJIRyqKTuNOqG3AN3T7TOug4mhy8-QhkjblKYAdRqE8NLDEfMtfznqCVVNhm5EZdFkxAfBPRgmd9tWuP25FWXixH0Qhn1Ex_AIlu2idHUhAlmowZ3JxWA5hGFPPGjQbRzXuDelqGpEp3zRiKZ7J-II1TUyl0RdoUGuLvFKSRF6LcL23v0R1w4Lzz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49874	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:39 UTC	387	OUT	GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:39 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Wed, 11 Sep 2024 17:25:39 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 7bf8ef54-c818-4d37-b5e4-762584475613
2024-09-11 17:25:39 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49876	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:40 UTC	387	OUT	GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:40 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Wed, 11 Sep 2024 17:25:39 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: bd2cbb09-0e1b-453b-8b56-4738547fc326
2024-09-11 17:25:40 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49875	52.238.253.184	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:40 UTC	626	OUT	POST /api/v1/sendLogs?cid=ironfist&cdsnum=1726075537139-sjn0000936-3569fb87-961b-4a63-a34c-f079de61b7c4&csid=de5d3f8de21d442794d5b0de3b939741&ds=js&sdkVer=2.28.0.1370.1bbbfa1 HTTP/1.1 Host: log-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 72 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:40 UTC	72	OUT	Data Raw: 6d 39 69 38 4a 4c 38 6f 4d 33 31 4a 62 6d 4a 6d 33 70 4b 38 78 4e 7a 55 62 53 56 36 4a 5a 6d 35 71 53 47 5a 4f 54 6e 42 71 55 56 6c 71 55 58 4f 2b 58 6c 70 6d 65 6d 4c 79 78 4a 7a 54 6a 74 4d 33 47 34 4d 42 41 77 41 Data Ascii: m9i8JL8oM31JbmJm3pK8xNzUbSV6JZm5qSGZOTnBqUVlqUXO+XlpmemLyxJzTjtM3G4MBAwA
2024-09-11 17:25:40 UTC	170	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Date: Wed, 11 Sep 2024 17:25:40 GMT access-control-allow-origin: * access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49877	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:44 UTC	492	OUT	POST /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 3332 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:44 UTC	3332	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 32 36 30 37 35 35 33 38 35 39 32 2d 73 6a 63 30 30 30 30 36 37 35 2d 32 62 66 63 64 34 32 38 2d 38 65 36 36 2d 34 34 38 66 2d 61 36 64 34 2d 62 31 66 30 66 37 37 61 66 32 35 65 22 2c 22 63 73 69 64 22 3a 22 64 65 35 64 33 66 38 64 65 32 31 64 34 34 32 37 39 34 64 35 62 30 64 65 33 62 39 33 39 37 34 31 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 32 36 30 37 35 35 33 34 39 31 39 2d 43 35 33 39 37 39 46 32 2d 46 30 32 44 2d 34 31 41 43 2d 38 36 43 34 2d 33 38 46 30 35 45 41 41 44 46 43 41 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 70 61 79 61 62 6c 65 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 34 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b Data Ascii: {"ds":"js","cdsnum":"1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e","csid":"de5d3f8de21d442794d5b0de3b939741","psid":null,"muid":"1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA","context_name":"payable","requestId":4,"sts":"gAAAAABm4dK
2024-09-11 17:25:44 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 666 Connection: close date: Wed, 11 Sep 2024 17:25:44 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 0382311a-641d-48d6-9f22-494c8bd3acc8
2024-09-11 17:25:44 UTC	666	IN	Data Raw: 7b 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b 59 56 77 62 69 35 59 78 39 2d 66 32 61 39 54 31 51 71 42 55 50 5a 43 45 56 69 6c 31 51 59 56 63 59 52 72 5f 49 51 50 43 4c 33 65 74 31 72 77 30 4f 65 35 5a 68 49 43 59 38 63 44 72 61 51 70 58 68 38 43 50 46 32 6d 36 6e 64 63 69 47 51 36 71 67 75 32 58 55 6d 38 76 78 79 31 65 6e 70 56 36 53 67 38 65 48 4f 46 46 7a 36 61 6b 73 6b 33 61 5f 41 53 36 54 4b 35 37 41 67 53 47 6d 5a 51 33 30 4e 6e 72 49 32 50 56 7a 79 6f 6a 65 4d 7a 69 69 59 35 34 32 42 66 52 33 31 70 39 39 73 59 56 5a 50 53 4c 4a 41 51 66 4d 6f 34 65 4c 35 5a 2d 58 63 6d 36 67 79 4f 78 50 6e 4e 4c 6d 56 5f 35 61 51 71 37 52 6e 39 42 4b 65 4c 45 67 30 30 58 4a 33 7a 30 51 6f 74 51 72 6b 30 6d 44 5a 75 44 54 37 48 7a 62 57 64 68 45 6e 65 32 Data Ascii: {"sts":"gAAAAABm4dKYVwbi5Yx9-f2a9T1QqBUPZCEVil1QYVcYRr_IQPCL3et1rw0Oe5ZhICY8cDraQpXh8CPF2m6ndciGQ6qgu2XUm8vxy1enpV6Sg8eHOFFz6aksk3a_AS6TK57AgSGmZQ30NnrI2PVzyojeMziiY542BfR31p99sYVZPSLJAQfMo4eL5Z-Xcm6gyOxPnNLmV_5aQq7Rn9BKeLEg00XJ3z0QotQrk0mDZuDT7HzbWdhEne2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49878	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:45 UTC	387	OUT	GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:45 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Wed, 11 Sep 2024 17:25:45 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: fe5596f1-40b5-41bc-866b-fb205f42b987
2024-09-11 17:25:45 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49880	44.213.177.215	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:46 UTC	705	OUT	GET /privacy-seal/validation?rid=6218d0ea-ee8b-4472-87dd-ba4bf95aab3d HTTP/1.1 Host: privacy.truste.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:48 UTC	1114	IN	HTTP/1.1 302 Date: Wed, 11 Sep 2024 17:25:48 GMT Content-Length: 0 Connection: close Set-Cookie: JSESSIONID=E2DBD8B3401F15492EB1617BB8391E77; Path=/ctv; Secure; HttpOnly; SameSite=Strict Referrer-Policy: strict-origin-when-cross-origin Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD X-Frame-Options: SAMEORIGIN x-content-type-options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.truste.com ; upgrade-insecure-requests; block-all-mixed-content; Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Cross-Origin-Embedder-Policy: unsafe-none Permissions-Policy: autoplay=(self), document-domain=(self), encrypted-media=(self) Cache-Control: must-revalidate, no-cache, no-store Location: http://www.truste.com/consumer-resources/dispute-resolution-2 X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49881	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:47 UTC	2198	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 2153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: de5d3f8d-e21d-4427-94d5-b0de3b939741 sec-ch-ua-mobile: ?0 Intuit-RealmId: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-cf6d3-c39b-4ebd-99c0-b3602a406bf2 Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:193514612387714_193514612387714_E408B8-1722543575 Intuit-ACSToken: scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11 user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; AWSALB=5dfWDZiHxu7rKiHXH1C8GL3BLefdievmAuobrz1SG4gitsf041nOO4x2chrJ95iSLVO8aLsuk+VEO/ciCMJiah83qe8pzpLrJ3nV3FvSj3O9mDDszj6DkTxcqs5b; AWSALBCORS=5dfWDZiHxu7rKiHXH1C8GL3BLefdievmAuobrz1SG4gitsf041nOO4x2chrJ95iSLVO8aLsuk+VEO/ciCMJiah83qe8pzpLrJ3nV3FvSj3O9mDDszj6DkTxcqs5b; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:47 UTC	2153	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 34 32 2e 36 39 30 5a 22 2c 22 65 76 65 6e 74 22 3a 22 72 69 73 6b 22 2c 22 61 63 74 69 6f 6e 22 3a 22 67 65 74 52 69 73 6b 54 6f 6b 65 6e 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 72 69 73 6b 50 72 6f 66 69 6c 65 54 6f 6b 65 6e 22 3a 22 31 36 38 38 38 43 43 46 45 35 45 41 34 45 45 35 41 43 43 42 43 32 38 36 36 34 42 31 32 39 43 43 3a 64 63 38 62 35 37 34 30 2d 37 30 36 32 2d 31 31 65 66 2d 39 64 36 36 2d 37 37 62 36 30 61 31 61 63 64 64 30 22 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 Data Ascii: {"messages":[{"data":{"timestamp":"2024-09-11T17:25:42.690Z","event":"risk","action":"getRiskToken","activityInfo":{"status":"success","riskProfileToken":"16888CCFE5EA4EE5ACCBC28664B129CC:dc8b5740-7062-11ef-9d66-77b60a1acdd0"},"logInfo":{"logLevel":"info"
2024-09-11 17:25:47 UTC	1101	IN	HTTP/1.1 201 Created Date: Wed, 11 Sep 2024 17:25:47 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: 7f0bf566-af20-e491-fe10-01cf8b48b09e x-amzn-trace-id: Root=1-66e1d29b-67df175030f1f761746adaf2 X-Content-Type-Options: nosniff Set-Cookie: AWSALB=UYHBVrfMqmgCAQ/3HTnaJ+4Hkcv7VA26eTZXC7fWNUVl/J+qBkxC+L3BqkRiM6cf9YHrdiAEagnQC0Ph5hJ/y3rsSmhN0K/ARM5j9FXf4Gi//7TTpvA0bYM7aedc; Expires=Wed, 18 Sep 2024 17:25:47 GMT; Path=/ Set-Cookie: AWSALBCORS=UYHBVrfMqmgCAQ/3HTnaJ+4Hkcv7VA26eTZXC7fWNUVl/J+qBkxC+L3BqkRiM6cf9YHrdiAEagnQC0Ph5hJ/y3rsSmhN0K/ARM5j9FXf4Gi//7TTpvA0bYM7aedc; Expires=Wed, 18 Sep 2024 17:25:47 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 84 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-cf6d3-c39b-4ebd-99c0-b3602a406bf2 x-request-id: cp-cf6d3-c39b-4ebd-99c0-b3602a406bf2 server: istio-envoy
2024-09-11 17:25:47 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49882	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:47 UTC	2224	OUT	POST /portal/rest/reporting/prometheus/pageLoad HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: de5d3f8d-e21d-4427-94d5-b0de3b939741 sec-ch-ua-mobile: ?0 Intuit-RealmId: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-cf4cd-726e-4e63-9fde-989d4a93b010 Content-Type: application/json Accept: application/json, text/javascript, /; q=0.01 Intuit-DomainId: INVOICE:193514612387714_193514612387714_E408B8-1722543575 Intuit-ACSToken: scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11 user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; AWSALB=5dfWDZiHxu7rKiHXH1C8GL3BLefdievmAuobrz1SG4gitsf041nOO4x2chrJ95iSLVO8aLsuk+VEO/ciCMJiah83qe8pzpLrJ3nV3FvSj3O9mDDszj6DkTxcqs5b; AWSALBCORS=5dfWDZiHxu7rKiHXH1C8GL3BLefdievmAuobrz1SG4gitsf041nOO4x2chrJ95iSLVO8aLsuk+VEO/ciCMJiah83qe8pzpLrJ3nV3FvSj3O9mDDszj6DkTxcqs5b; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:47 UTC	115	OUT	Data Raw: 7b 22 66 6c 6f 77 22 3a 22 69 6e 76 6f 69 63 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 45 4e 5f 55 53 22 2c 22 6f 66 66 65 72 69 6e 67 49 64 22 3a 22 51 42 44 54 22 2c 22 69 73 53 61 6c 65 73 43 68 65 63 6b 6f 75 74 49 6e 76 6f 69 63 65 22 3a 74 72 75 65 2c 22 74 69 6d 65 49 6e 4d 73 22 3a 31 34 31 37 34 2e 31 39 39 39 39 39 39 39 39 39 38 33 7d Data Ascii: {"flow":"invoice","locale":"EN_US","offeringId":"QBDT","isSalesCheckoutInvoice":true,"timeInMs":14174.199999999983}
2024-09-11 17:25:47 UTC	1088	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:47 GMT Content-Type: text/plain;charset=utf-8 Content-Length: 2 Connection: close x-spanid: 78be13b0-83c1-d707-4bb3-3c43d83f20c4 x-amzn-trace-id: Root=1-66e1d29b-3193e92751a0ef2106dc149a X-Content-Type-Options: nosniff Set-Cookie: AWSALB=PiXqMhoj2PRhck/5rcgB1PoGeU1wJMeR22K9363vbJYeNnHFJXoxD+bEURFzN6+lXtCpHqu+dNZ3/v87PvhTP+8E6iia+ivwDnSHbSrbJOzAGs8hL7l33yhIFGrh; Expires=Wed, 18 Sep 2024 17:25:47 GMT; Path=/ Set-Cookie: AWSALBCORS=PiXqMhoj2PRhck/5rcgB1PoGeU1wJMeR22K9363vbJYeNnHFJXoxD+bEURFzN6+lXtCpHqu+dNZ3/v87PvhTP+8E6iia+ivwDnSHbSrbJOzAGs8hL7l33yhIFGrh; Expires=Wed, 18 Sep 2024 17:25:47 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Vary: Accept-Encoding x-envoy-upstream-service-time: 34 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-cf4cd-726e-4e63-9fde-989d4a93b010 x-request-id: cp-cf4cd-726e-4e63-9fde-989d4a93b010 server: istio-envoy
2024-09-11 17:25:47 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49887	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:47 UTC	492	OUT	POST /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 3568 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:47 UTC	3568	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 32 36 30 37 35 35 33 38 35 39 32 2d 73 6a 63 30 30 30 30 36 37 35 2d 32 62 66 63 64 34 32 38 2d 38 65 36 36 2d 34 34 38 66 2d 61 36 64 34 2d 62 31 66 30 66 37 37 61 66 32 35 65 22 2c 22 63 73 69 64 22 3a 22 64 65 35 64 33 66 38 64 65 32 31 64 34 34 32 37 39 34 64 35 62 30 64 65 33 62 39 33 39 37 34 31 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 32 36 30 37 35 35 33 34 39 31 39 2d 43 35 33 39 37 39 46 32 2d 46 30 32 44 2d 34 31 41 43 2d 38 36 43 34 2d 33 38 46 30 35 45 41 41 44 46 43 41 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 70 61 79 61 62 6c 65 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 35 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b Data Ascii: {"ds":"js","cdsnum":"1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e","csid":"de5d3f8de21d442794d5b0de3b939741","psid":null,"muid":"1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA","context_name":"payable","requestId":5,"sts":"gAAAAABm4dK
2024-09-11 17:25:47 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 666 Connection: close date: Wed, 11 Sep 2024 17:25:47 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 53b67b3d-84c8-4f8d-b609-6da7acb2e848
2024-09-11 17:25:47 UTC	666	IN	Data Raw: 7b 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b 62 42 58 2d 32 39 2d 6c 7a 37 78 34 4c 49 43 6f 52 49 58 34 71 77 73 63 74 5a 6d 44 72 71 51 56 68 43 6c 70 6c 6b 53 35 55 44 75 71 5f 75 43 49 38 6b 5f 51 63 38 6f 57 33 57 79 33 53 70 49 31 78 46 77 48 32 30 66 7a 6d 30 75 76 75 4f 59 70 66 55 48 77 6a 53 35 33 6d 37 55 4f 6a 64 36 45 63 36 58 68 70 73 78 53 68 6e 4d 30 70 68 49 4e 31 46 64 37 32 6e 6d 62 4d 77 52 50 43 4a 4c 57 48 39 38 72 64 41 59 43 45 53 5f 35 53 6c 73 46 51 6f 33 6f 47 61 58 78 38 77 78 30 6c 34 57 70 74 4e 37 62 46 57 6e 61 46 6b 33 46 72 5a 35 75 77 6b 74 2d 53 4d 35 74 65 4a 6a 2d 36 6c 62 67 42 58 50 54 6c 69 6a 71 56 32 2d 77 75 6d 38 4a 74 70 57 75 77 67 47 2d 44 75 37 74 34 41 74 62 50 6f 51 50 76 6f 39 44 50 59 77 56 Data Ascii: {"sts":"gAAAAABm4dKbBX-29-lz7x4LICoRIX4qwsctZmDrqQVhClplkS5UDuq_uCI8k_Qc8oW3Wy3SpI1xFwH20fzm0uvuOYpfUHwjS53m7UOjd6Ec6XhpsxShnM0phIN1Fd72nmbMwRPCJLWH98rdAYCES_5SlsFQo3oGaXx8wx0l4WptN7bFWnaFk3FrZ5uwkt-SM5teJj-6lbgBXPTlijqV2-wum8JtpWuwgG-Du7t4AtbPoQPvo9DPYwV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49884	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:47 UTC	1474	OUT	GET /LJVFYF6zeP6tRSLW?fdfb7b0627303635=78Ll-L1lmSGxLYtH5pMqCNj5q4qYe_KFHes5jXktGDINjjhOq6QqnnVBIp7UZ_fEuouoz5W8YEhGJwkNh2k4nTRfF-8caVOcptvC-aPbxSeQtZPO6-8wz4xZh1BVTx6b2vSbYQtszAEGoCVzYlcMM2RsiDev6ZM7swocAR9vwLdbtOwKTIVyTCZL5gulVFemzplbB9GR7QZal2NiL3BF_dM&jb=353b2e2e62716d773d57696e646f77732668716d3f55616c666f7573273a32333024627b6a773f4168726f6d65266a73623f416a706d656727323231333f HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:48 UTC	482	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:47 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT tmx-nonce: 7b25835e2ff541ab X-Robots-Tag: noindex, nofollow Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-09-11 17:25:48 UTC	7710	IN	Data Raw: 66 66 66 38 0d 0a 76 61 72 20 74 64 5f 32 76 3d 74 64 5f 32 76 7c 7c 7b 7d 3b 74 64 5f 32 76 2e 74 64 5f 34 53 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 73 2c 74 64 5f 71 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 64 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4e 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 49 3d 30 3b 74 64 5f 49 3c 74 64 5f 71 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 49 29 7b 74 64 5f 64 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 73 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4e 29 5e 74 64 5f 71 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 49 29 29 29 3b 74 64 5f 4e 2b 2b 3b 0a 69 66 28 74 64 5f 4e 3e 3d 74 64 5f 73 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 4e 3d 30 3b 7d 7d 72 65 74 75 72 6e 20 74 64 5f 64 2e 6a Data Ascii: fff8var td_2v=td_2v\|\|{};td_2v.td_4S=function(td_s,td_q){try{var td_d=[""];var td_N=0;for(var td_I=0;td_I<td_q.length;++td_I){td_d.push(String.fromCharCode(td_s.charCodeAt(td_N)^td_q.charCodeAt(td_I)));td_N++;if(td_N>=td_s.length){td_N=0;}}return td_d.j
2024-09-11 17:25:48 UTC	16384	IN	Data Raw: 62 64 38 61 35 37 32 64 37 33 66 37 39 36 36 35 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 33 30 37 61 37 36 61 65 35 31 37 34 34 36 37 36 62 64 38 61 35 37 32 64 37 33 66 37 39 36 36 35 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 33 30 37 61 37 36 61 65 35 31 37 34 34 36 37 36 62 64 38 61 35 37 32 64 37 33 66 37 39 36 36 35 2e 74 64 5f 66 28 31 37 2c 33 29 29 3a 6e 75 6c 6c 29 2c 74 64 5f 71 68 2c 74 64 5f 45 51 29 3b 0a 28 74 64 5f 41 31 5b 74 64 5f 32 76 2e 42 42 5f 43 4f 4d 4d 4f 4e 2e 4e 4f 54 5f 54 4f 4f 5f 4c 41 52 47 45 5d 29 3f 28 74 64 5f 68 72 2b 3d 74 64 5f 41 31 5b 74 64 5f 32 76 2e 42 42 5f 43 4f 4d 4d 4f 4e 2e 52 45 53 55 4c 54 Data Ascii: bd8a572d73f79665)!=="undefined"&&typeof(td_2v.tdz_307a76ae51744676bd8a572d73f79665.td_f)!=="undefined")?(td_2v.tdz_307a76ae51744676bd8a572d73f79665.td_f(17,3)):null),td_qh,td_EQ);(td_A1[td_2v.BB_COMMON.NOT_TOO_LARGE])?(td_hr+=td_A1[td_2v.BB_COMMON.RESULT
2024-09-11 17:25:48 UTC	16384	IN	Data Raw: 28 74 64 5f 5a 6c 29 29 3b 7d 7d 72 65 74 75 72 6e 20 74 64 5f 68 78 3b 0a 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 6f 41 28 74 64 5f 7a 55 29 7b 72 65 74 75 72 6e 20 74 64 5f 32 76 2e 67 65 74 45 76 65 6e 74 54 79 70 65 49 64 4e 61 6d 65 28 74 64 5f 7a 55 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 44 65 28 74 64 5f 72 44 29 7b 69 66 28 74 79 70 65 6f 66 20 74 64 5f 72 44 3d 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 7c 7c 74 64 5f 72 44 3d 3d 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 20 2d 31 3b 7d 69 66 28 28 74 64 5f 72 44 3e 3d 34 38 26 26 74 64 5f 72 44 3c 3d 35 37 29 7c 7c 28 74 64 5f 72 44 3e 3d 36 35 26 26 74 64 5f 72 44 3c 39 30 29 7c 7c 28 74 64 5f 72 44 3e 3d 39 36 26 26 74 64 5f 72 44 3c 3d 31 30 35 29 29 7b 72 65 74 75 72 6e 20 39 39 39 3b 0a 7d 72 65 74 Data Ascii: (td_Zl));}}return td_hx;}function td_oA(td_zU){return td_2v.getEventTypeIdName(td_zU);}function td_De(td_rD){if(typeof td_rD===[][[]]+""\|\|td_rD===null){return -1;}if((td_rD>=48&&td_rD<=57)\|\|(td_rD>=65&&td_rD<90)\|\|(td_rD>=96&&td_rD<=105)){return 999;}ret
2024-09-11 17:25:48 UTC	16384	IN	Data Raw: 66 28 74 64 5f 79 6a 29 7b 74 64 5f 6b 69 5b 74 64 5f 72 48 5d 2e 61 75 74 6f 66 69 6c 6c 2e 70 75 73 68 28 74 64 5f 4d 67 29 3b 74 64 5f 6b 69 5b 74 64 5f 72 48 5d 2e 66 69 6c 6c 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 62 64 62 31 33 62 39 32 61 39 31 32 34 38 32 63 39 36 30 64 36 66 63 30 30 30 64 38 33 30 66 39 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 62 64 62 31 33 62 39 32 61 39 31 32 34 38 32 63 39 36 30 64 36 66 63 30 30 30 64 38 33 30 66 39 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 62 64 62 31 33 62 39 32 61 39 31 32 34 38 32 63 39 36 30 64 36 66 63 30 30 30 64 38 33 30 66 39 2e 74 64 5f 66 28 33 36 2c 31 30 29 Data Ascii: f(td_yj){td_ki[td_rH].autofill.push(td_Mg);td_ki[td_rH].fill=((typeof(td_2v.tdz_bdb13b92a912482c960d6fc000d830f9)!=="undefined"&&typeof(td_2v.tdz_bdb13b92a912482c960d6fc000d830f9.td_f)!=="undefined")?(td_2v.tdz_bdb13b92a912482c960d6fc000d830f9.td_f(36,10)
2024-09-11 17:25:48 UTC	8672	IN	Data Raw: 28 28 74 64 5f 62 5a 26 26 74 64 5f 7a 44 26 26 74 64 5f 54 46 29 7c 7c 74 64 5f 52 75 28 29 2d 74 64 5f 74 48 3c 74 64 5f 6c 52 7c 7c 21 74 64 5f 70 54 29 7b 72 65 74 75 72 6e 3b 7d 76 61 72 20 74 64 5f 56 65 3d 74 64 5f 41 46 28 29 3b 74 64 5f 74 48 3d 74 64 5f 52 75 28 29 3b 74 64 5f 70 54 3d 66 61 6c 73 65 3b 69 66 28 74 64 5f 56 65 29 7b 74 64 5f 53 64 28 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 66 65 28 29 7b 74 64 5f 6b 69 2e 76 65 72 3d 74 64 5f 46 65 3b 74 64 5f 6a 5a 3d 74 64 5f 51 66 2e 67 65 74 42 61 73 65 54 69 6d 65 73 74 61 6d 70 28 29 3b 0a 74 64 5f 6b 69 5b 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 62 64 62 31 33 62 39 32 61 39 31 32 34 38 32 63 39 36 30 64 36 66 63 30 30 30 64 38 33 30 66 39 29 21 3d 3d 22 75 6e 64 Data Ascii: ((td_bZ&&td_zD&&td_TF)\|\|td_Ru()-td_tH<td_lR\|\|!td_pT){return;}var td_Ve=td_AF();td_tH=td_Ru();td_pT=false;if(td_Ve){td_Sd();}}function td_fe(){td_ki.ver=td_Fe;td_jZ=td_Qf.getBaseTimestamp();td_ki[((typeof(td_2v.tdz_bdb13b92a912482c960d6fc000d830f9)!=="und
2024-09-11 17:25:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-11 17:25:48 UTC	8192	IN	Data Raw: 66 66 66 38 0d 0a 78 33 30 5c 78 33 35 5c 78 33 35 5c 78 33 30 5c 78 33 31 5c 78 33 32 5c 78 33 35 5c 78 33 31 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 36 32 5c 78 33 34 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 30 5c 78 33 33 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 33 30 5c 78 33 30 5c 78 33 37 5c 78 33 34 5c 78 33 34 5c 78 33 34 5c 78 33 31 5c 78 33 35 5c 78 36 34 5c 78 33 31 5c 78 33 37 5c 78 33 35 5c 78 33 33 5c 78 33 35 5c 78 36 35 5c 78 33 31 5c 78 33 34 5c 78 33 35 5c 78 36 35 5c 78 33 34 5c 78 33 36 5c 78 33 35 5c 78 36 34 5c 78 33 35 5c 78 33 35 5c 78 33 30 5c 78 36 31 5c 78 33 31 5c 78 33 34 5c 78 33 31 5c 78 33 32 5c 78 33 35 5c 78 33 30 5c 78 33 30 5c 78 36 36 5c 78 33 34 5c 78 33 34 5c 78 33 35 5c 78 33 39 5c 78 Data Ascii: fff8x30\x35\x35\x30\x31\x32\x35\x31\x35\x36\x35\x62\x34\x31\x31\x35\x30\x33\x31\x31\x35\x36\x35\x30\x30\x37\x34\x34\x34\x31\x35\x64\x31\x37\x35\x33\x35\x65\x31\x34\x35\x65\x34\x36\x35\x64\x35\x35\x30\x61\x31\x34\x31\x32\x35\x30\x30\x66\x34\x34\x35\x39\x
2024-09-11 17:25:48 UTC	16384	IN	Data Raw: 64 5f 4e 48 29 3b 0a 74 64 5f 54 38 5b 4e 75 6d 62 65 72 28 31 32 38 35 39 31 34 29 2e 74 6f 53 74 72 69 6e 67 28 33 35 29 5d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 30 66 61 31 65 33 32 30 30 66 65 34 34 61 33 66 62 63 33 31 63 33 33 34 63 36 34 63 35 31 38 37 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 30 66 61 31 65 33 32 30 30 66 65 34 34 61 33 66 62 63 33 31 63 33 33 34 63 36 34 63 35 31 38 37 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 30 66 61 31 65 33 32 30 30 66 65 34 34 61 33 66 62 63 33 31 63 33 33 34 63 36 34 63 35 31 38 37 2e 74 64 5f 66 28 39 33 2c 31 30 29 29 3a 6e 75 6c 6c 29 3b 0a 7d 69 66 28 74 64 5f 53 75 Data Ascii: d_NH);td_T8[Number(1285914).toString(35)]=((typeof(td_2v.tdz_0fa1e3200fe44a3fbc31c334c64c5187)!=="undefined"&&typeof(td_2v.tdz_0fa1e3200fe44a3fbc31c334c64c5187.td_f)!=="undefined")?(td_2v.tdz_0fa1e3200fe44a3fbc31c334c64c5187.td_f(93,10)):null);}if(td_Su
2024-09-11 17:25:48 UTC	16384	IN	Data Raw: 31 30 32 63 62 63 37 65 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 32 31 66 35 62 36 38 33 38 30 63 35 34 65 65 37 61 32 36 31 36 36 36 66 31 30 32 63 62 63 37 65 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 32 31 66 35 62 36 38 33 38 30 63 35 34 65 65 37 61 32 36 31 36 36 36 66 31 30 32 63 62 63 37 65 2e 74 64 5f 66 28 31 30 2c 32 29 29 3a 6e 75 6c 6c 29 2b 74 64 5f 78 78 2b 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 32 31 66 35 62 36 38 33 38 30 63 35 34 65 65 37 61 32 36 31 36 36 36 66 31 30 32 63 62 63 37 65 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 32 31 66 35 62 36 Data Ascii: 102cbc7e)!=="undefined"&&typeof(td_2v.tdz_21f5b68380c54ee7a261666f102cbc7e.td_f)!=="undefined")?(td_2v.tdz_21f5b68380c54ee7a261666f102cbc7e.td_f(10,2)):null)+td_xx+((typeof(td_2v.tdz_21f5b68380c54ee7a261666f102cbc7e)!=="undefined"&&typeof(td_2v.tdz_21f5b6
2024-09-11 17:25:48 UTC	16384	IN	Data Raw: 3b 74 64 5f 66 62 2b 2b 29 7b 74 64 5f 55 70 3d 74 64 5f 4c 31 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 66 62 29 3b 74 64 5f 69 45 2b 3d 74 64 5f 79 4d 2e 63 68 61 72 41 74 28 28 74 64 5f 55 70 3e 3e 3e 34 29 26 31 35 29 2b 74 64 5f 79 4d 2e 63 68 61 72 41 74 28 74 64 5f 55 70 26 31 35 29 3b 7d 72 65 74 75 72 6e 20 74 64 5f 69 45 3b 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 4d 62 28 74 64 5f 47 67 29 7b 76 61 72 20 74 64 5f 47 77 3d 22 22 3b 0a 76 61 72 20 74 64 5f 47 41 3d 2d 31 3b 76 61 72 20 74 64 5f 69 39 2c 74 64 5f 4a 65 3b 77 68 69 6c 65 28 2b 2b 74 64 5f 47 41 3c 74 64 5f 47 67 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 69 39 3d 74 64 5f 47 67 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 47 41 29 3b 74 64 5f 4a 65 3d 74 64 5f 47 41 2b 31 3c 74 64 5f 47 Data Ascii: ;td_fb++){td_Up=td_L1.charCodeAt(td_fb);td_iE+=td_yM.charAt((td_Up>>>4)&15)+td_yM.charAt(td_Up&15);}return td_iE;}function td_Mb(td_Gg){var td_Gw="";var td_GA=-1;var td_i9,td_Je;while(++td_GA<td_Gg.length){td_i9=td_Gg.charCodeAt(td_GA);td_Je=td_GA+1<td_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49886	52.238.253.184	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:47 UTC	626	OUT	POST /api/v1/sendLogs?cid=ironfist&cdsnum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e&csid=de5d3f8de21d442794d5b0de3b939741&ds=js&sdkVer=2.28.0.1370.1bbbfa1 HTTP/1.1 Host: log-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 64 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:47 UTC	64	OUT	Data Raw: 6d 39 79 38 4a 4c 38 6f 4d 33 31 4a 62 6d 4a 6d 33 70 4b 38 78 4e 7a 55 54 53 56 36 4a 5a 6d 35 71 53 47 5a 4f 54 6b 42 69 65 6d 70 50 76 6d 4a 4b 59 76 4c 45 6e 50 4f 35 6a 36 6b 68 55 6f 41 Data Ascii: m9y8JL8oM31JbmJm3pK8xNzUTSV6JZm5qSGZOTkBiempPvmJKYvLEnPO5j6khUoA
2024-09-11 17:25:47 UTC	170	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Date: Wed, 11 Sep 2024 17:25:47 GMT access-control-allow-origin: * access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49883	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:47 UTC	1365	OUT	GET /3pUhvj1JZk_QAV2A?31cf279dc5a80175=JPP5rXlv-hmUheSvnvXyEQbQGzmaJZr6_WPUjweJeSTIvo1hdNGAeQ-zkcjCklozwAcWejdKqV8WqIx0dU1syFQRHOXazd4qBup01Bkv1JDARPWSVv2h83WQGOk8OyEfxAgWBT55fb7fjGV5kFJO75RBZmlWT0u5q3-sDYiZYfz7Ow HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:48 UTC	357	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:47 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 81 Content-Type: image/png
2024-09-11 17:25:48 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49885	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:47 UTC	1038	OUT	GET /favicon.png HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:48 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2785 Connection: close Date: Fri, 16 Aug 2024 19:39:11 GMT Last-Modified: Mon, 13 May 2019 07:16:14 GMT ETag: "7dbe4596b420ff7fdac169a69e4bbfc9" Cache-Control: public, max-age=31536000 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cc0ab20766d57035422a2c4c69fe0620.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: PnHOpY5ZEHF4A1_hqAjFIyjMYWaMDetQ1NX0llYuXKEr_vicUiIRYw== Age: 2238398 Vary: Origin
2024-09-11 17:25:48 UTC	2785	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 06 00 00 00 c3 3e 61 cb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 83 49 44 41 54 78 da ec 5d 4f 68 14 57 18 9f 59 c5 8b 4a a3 07 2d 06 21 a8 d0 14 ab 89 d0 1c b4 07 37 da 16 4b 0b d9 80 97 52 ad c9 a9 a0 d0 c4 0a f5 60 a9 46 f4 60 a1 35 16 14 3c ed fa a7 f4 62 c9 06 5a da c6 7f 9b 8b 3d 58 e8 6a 5b 9a 83 d1 2d 45 a9 15 34 45 bd d8 4b df 6f 7c 23 9b 75 76 f7 cd ec 7b 6f de 9b f9 7e 30 6c 48 26 3b 33 ef fb 7d 7f df fb de 38 0e 81 40 48 2f dc 34 3e f4 ea d3 5b da d8 47 77 c0 9f 2a bf bf ff 43 85 08 60 bf 80 b3 ec a3 83 1f 5d ec f0 05 de 16 f2 ab 4a fc b3 cc 8e 3f f9 67 99 91 64 86 08 60 8e b0 21 e4 2c 17 74 Data Ascii: PNGIHDR>atEXtSoftwareAdobe ImageReadyqe<IDATx]OhWYJ-!7KR`F`5<bZ=Xj[-E4EKo\|#uv{o~0lH&;3}8@H/4>[Gw*C`]J?gd`!,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49890	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:48 UTC	387	OUT	GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:48 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Wed, 11 Sep 2024 17:25:48 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: d5f68700-8bb2-4ba8-9c84-82a1b3673244
2024-09-11 17:25:48 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49889	52.35.79.138	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:48 UTC	1087	OUT	GET /portal/rest/reporting/prometheus/pageLoad HTTP/1.1 Host: connect.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; AWSALB=PiXqMhoj2PRhck/5rcgB1PoGeU1wJMeR22K9363vbJYeNnHFJXoxD+bEURFzN6+lXtCpHqu+dNZ3/v87PvhTP+8E6iia+ivwDnSHbSrbJOzAGs8hL7l33yhIFGrh; AWSALBCORS=PiXqMhoj2PRhck/5rcgB1PoGeU1wJMeR22K9363vbJYeNnHFJXoxD+bEURFzN6+lXtCpHqu+dNZ3/v87PvhTP+8E6iia+ivwDnSHbSrbJOzAGs8hL7l33yhIFGrh
2024-09-11 17:25:49 UTC	1103	IN	HTTP/1.1 400 Bad Request Date: Wed, 11 Sep 2024 17:25:49 GMT Content-Type: application/json;charset=utf-8 Content-Length: 47 Connection: close x-spanid: 28479057-abc2-b9dc-9fb8-45434c980669 x-amzn-trace-id: Root=1-66e1d29d-2054f7363b46a9ee1698b54d X-Content-Type-Options: nosniff Set-Cookie: AWSALB=rRg8KAB6o//jgp6zuE0cYb6zgGKXlsdY2EAJs63Q5Ztc6aDdP/uvBS0ILY+1w7XzqldBl/PMh4YrFnqbd9Go7YsMg28jX9YAiFyJYyabnqc6XYLy8brxOmGy4bmO; Expires=Wed, 18 Sep 2024 17:25:49 GMT; Path=/ Set-Cookie: AWSALBCORS=rRg8KAB6o//jgp6zuE0cYb6zgGKXlsdY2EAJs63Q5Ztc6aDdP/uvBS0ILY+1w7XzqldBl/PMh4YrFnqbd9Go7YsMg28jX9YAiFyJYyabnqc6XYLy8brxOmGy4bmO; Expires=Wed, 18 Sep 2024 17:25:49 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"2f-SA/AoURscYnfiZSulRnoFMIsOmQ" Vary: Accept-Encoding x-envoy-upstream-service-time: 22 Strict-Transport-Security: max-age=31536000 intuit_tid: 1-66e1d29d-2054f7363b46a9ee1698b54d x-request-id: 1-66e1d29d-2054f7363b46a9ee1698b54d server: istio-envoy
2024-09-11 17:25:49 UTC	47	IN	Data Raw: 7b 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 68 65 61 64 65 72 73 20 61 72 65 20 6d 69 73 73 69 6e 67 22 7d Data Ascii: {"ErrorMessage":"Required headers are missing"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49891	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:48 UTC	1128	OUT	GET /3pUhvj1JZk_QAV2A?31cf279dc5a80175=JPP5rXlv-hmUheSvnvXyEQbQGzmaJZr6_WPUjweJeSTIvo1hdNGAeQ-zkcjCklozwAcWejdKqV8WqIx0dU1syFQRHOXazd4qBup01Bkv1JDARPWSVv2h83WQGOk8OyEfxAgWBT55fb7fjGV5kFJO75RBZmlWT0u5q3-sDYiZYfz7Ow HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:49 UTC	357	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:49 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 81 Content-Type: image/png
2024-09-11 17:25:49 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49888	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:48 UTC	5202	OUT	GET /jh0Y8EVpwlX-K1OY?6bc8640c02812f3a=whqLv4z_J3VJHaa6wnc8A0kYl59sUwOD7kPMGF26PO8wwKESdHpDVOrPe0PCg3grY5lulX2cwR-c3VBVyIA1BMC9wYtcar10HwFsFzgaDr_3KjvgNOp065UC3xWCoKXLNQTlBvFA-6kpICJ41v_C0Q&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co. [TRUNCATED] Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:49 UTC	628	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:49 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Security-Policy: frame-src 'self'; connect-src 'self'; default-src 'none'; script-src 'self' 'unsafe-inline'; img-src *; style-src 'self' 'unsafe-inline' X-UA-Compatible: IE=Edge Content-Type: text/html;charset=UTF-8 Content-Language: en-US Vary: Accept-Encoding Transfer-Encoding: chunked
2024-09-11 17:25:49 UTC	7564	IN	Data Raw: 34 61 61 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 65 6d 70 74 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 37 62 32 35 38 33 35 65 32 66 66 35 34 31 61 62 22 20 73 72 63 Data Ascii: 4aa6<!doctype html><html> <head> <title>empty</title> <meta http-equiv="X-UA-Compatible" content="IE=Edge"> <meta name="robots" content="noindex,nofollow"> <script type="text/javascript" nonce="7b25835e2ff541ab" src
2024-09-11 17:25:49 UTC	11552	IN	Data Raw: 63 63 6f 75 6e 74 73 43 6f 6e 74 61 69 6e 65 72 22 20 63 6c 61 73 73 3d 22 22 3e 66 6f 6f 3c 2f 70 3e 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 73 62 63 5f 66 6f 6f 28 29 20 7b 20 69 66 28 66 61 6c 73 65 29 7b 0d 0a 76 61 72 20 68 73 62 63 52 6f 77 53 65 70 61 72 61 74 6f 72 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 2f 64 69 76 3e 27 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 2f 64 69 76 3e 27 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 22 27 29 3b 0d 0a 76 61 72 20 70 61 73 73 77 6f 72 64 20 3d 20 22 22 3b 0d 0a 64 6f 63 75 6d Data Ascii: ccountsContainer" class="">foo</p>-->...<script type="text/javascript">function hsbc_foo() { if(false){var hsbcRowSeparator;document.write('</div>'); document.write('</div>');document.write('<a href="javascript:"');var password = "";docum
2024-09-11 17:25:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-11 17:25:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49892	13.225.78.31	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:48 UTC	801	OUT	GET /favicon.png HTTP/1.1 Host: static.cns-icn-prod.a.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:49 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2785 Connection: close Date: Fri, 16 Aug 2024 19:39:11 GMT Last-Modified: Mon, 13 May 2019 07:16:14 GMT ETag: "7dbe4596b420ff7fdac169a69e4bbfc9" Cache-Control: public, max-age=31536000 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c7015d60d4f8f2170aaaa75e69e40618.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: gMb9cUVQKh9W2_f8P0K4-UAgJhuZk5Dv3X8-uzTmHcJcA4lwRtWZ0w== Age: 2238399 Vary: Origin
2024-09-11 17:25:49 UTC	2785	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 06 00 00 00 c3 3e 61 cb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a 83 49 44 41 54 78 da ec 5d 4f 68 14 57 18 9f 59 c5 8b 4a a3 07 2d 06 21 a8 d0 14 ab 89 d0 1c b4 07 37 da 16 4b 0b d9 80 97 52 ad c9 a9 a0 d0 c4 0a f5 60 a9 46 f4 60 a1 35 16 14 3c ed fa a7 f4 62 c9 06 5a da c6 7f 9b 8b 3d 58 e8 6a 5b 9a 83 d1 2d 45 a9 15 34 45 bd d8 4b df 6f 7c 23 9b 75 76 f7 cd ec 7b 6f de 9b f9 7e 30 6c 48 26 3b 33 ef fb 7d 7f df fb de 38 0e 81 40 48 2f dc 34 3e f4 ea d3 5b da d8 47 77 c0 9f 2a bf bf ff 43 85 08 60 bf 80 b3 ec a3 83 1f 5d ec f0 05 de 16 f2 ab 4a fc b3 cc 8e 3f f9 67 99 91 64 86 08 60 8e b0 21 e4 2c 17 74 Data Ascii: PNGIHDR>atEXtSoftwareAdobe ImageReadyqe<IDATx]OhWYJ-!7KR`F`5<bZ=Xj[-E4EKo\|#uv{o~0lH&;3}8@H/4>[Gw*C`]J?gd`!,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49893	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:48 UTC	492	OUT	POST /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 2508 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:48 UTC	2508	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 32 36 30 37 35 35 33 38 35 39 32 2d 73 6a 63 30 30 30 30 36 37 35 2d 32 62 66 63 64 34 32 38 2d 38 65 36 36 2d 34 34 38 66 2d 61 36 64 34 2d 62 31 66 30 66 37 37 61 66 32 35 65 22 2c 22 63 73 69 64 22 3a 22 64 65 35 64 33 66 38 64 65 32 31 64 34 34 32 37 39 34 64 35 62 30 64 65 33 62 39 33 39 37 34 31 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 32 36 30 37 35 35 33 34 39 31 39 2d 43 35 33 39 37 39 46 32 2d 46 30 32 44 2d 34 31 41 43 2d 38 36 43 34 2d 33 38 46 30 35 45 41 41 44 46 43 41 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 70 61 79 61 62 6c 65 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 36 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b Data Ascii: {"ds":"js","cdsnum":"1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e","csid":"de5d3f8de21d442794d5b0de3b939741","psid":null,"muid":"1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA","context_name":"payable","requestId":6,"sts":"gAAAAABm4dK
2024-09-11 17:25:49 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 666 Connection: close date: Wed, 11 Sep 2024 17:25:48 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 9dfc1206-18e8-4482-a43a-7e5388e2431e
2024-09-11 17:25:49 UTC	666	IN	Data Raw: 7b 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b 64 39 6c 63 4d 58 61 49 57 58 5a 43 7a 72 63 78 44 5f 58 33 57 6d 64 53 61 6d 4b 51 5f 4a 35 52 49 58 52 59 77 65 54 2d 72 62 69 58 4e 65 4b 75 67 33 44 45 56 59 46 74 44 69 2d 66 7a 50 66 55 69 59 67 45 6a 63 74 38 35 55 56 70 4b 70 6e 62 63 38 62 6b 42 6c 76 56 4b 37 2d 76 75 31 67 6d 55 44 4d 31 43 6c 4b 75 36 30 35 75 77 63 34 4f 47 70 36 6b 6b 71 54 42 57 58 70 35 69 78 46 6e 4a 63 44 65 38 30 35 4e 6d 47 2d 33 78 36 45 2d 45 4c 37 5f 7a 64 7a 77 38 54 74 54 6b 71 79 6f 2d 79 34 44 35 4a 53 6b 2d 51 2d 78 64 42 46 55 41 52 6b 73 58 32 53 51 36 6a 77 46 6a 6b 45 33 75 30 38 51 43 69 4f 68 45 48 79 31 53 6f 4f 51 63 37 49 52 41 54 35 43 5f 4f 71 6b 34 49 5a 4b 77 49 46 57 4a 55 6f 53 78 54 68 4e Data Ascii: {"sts":"gAAAAABm4dKd9lcMXaIWXZCzrcxD_X3WmdSamKQ_J5RIXRYweT-rbiXNeKug3DEVYFtDi-fzPfUiYgEjct85UVpKpnbc8bkBlvVK7-vu1gmUDM1ClKu605uwc4OGp6kkqTBWXp5ixFnJcDe805NmG-3x6E-EL7_zdzw8TtTkqyo-y4D5JSk-Q-xdBFUARksX2SQ6jwFjkE3u08QCiOhEHy1SoOQc7IRAT5C_Oqk4IZKwIFWJUoSxThN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49896	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:49 UTC	1512	OUT	GET /YocZRwxdsxEx-CRk?f40d530d3d770f8f=h5oDc3GmJDzGVFi8yvbcTX6xNkp4pvsf7XoQuE_CuCz7fiZLaXb-bOHMtq5_IswqZlIOK9etJhcuB3VX_EQx8V3wfCuhpX4Q25t91eLwHvUl9k7-Zd5M7nSqkOWDahBmuM08blDBQOebUGpWQXex5v4h-JQh6Mw7dIHTqJdbZXM8d56ospqE9IidpR3FV4-U0oz0vJk7BH98yOFs2ga6qLckhQ HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:49 UTC	593	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:49 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-src 'self'; connect-src 'self'; default-src 'self'; script-src 'self' 'unsafe-inline' ; style-src 'unsafe-inline' Content-Type: text/html;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-09-11 17:25:49 UTC	7599	IN	Data Raw: 66 66 66 38 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 74 69 74 6c 65 3e 65 6d 70 74 79 3c 2f 74 69 74 6c 65 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 74 64 5f 32 76 3d 74 64 5f 32 76 7c 7c 7b 7d 3b 74 64 5f 32 76 2e 74 64 5f 34 53 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 73 2c 74 64 5f 71 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 64 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4e 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 49 3d 30 3b 74 64 5f 49 3c 74 64 5f 71 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 49 29 7b 74 64 5f 64 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 73 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4e 29 5e 74 64 5f Data Ascii: fff8<html lang="en"><title>empty</title><body><script type="text/javascript">var td_2v=td_2v\|\|{};td_2v.td_4S=function(td_s,td_q){try{var td_d=[""];var td_N=0;for(var td_I=0;td_I<td_q.length;++td_I){td_d.push(String.fromCharCode(td_s.charCodeAt(td_N)^td_
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 74 68 69 73 2e 62 79 74 65 73 25 34 32 39 34 39 36 37 32 39 36 3b 0a 7d 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 3b 74 64 5f 67 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 66 69 6e 61 6c 69 7a 65 64 29 7b 72 65 74 75 72 6e 3b 7d 74 68 69 73 2e 66 69 6e 61 6c 69 7a 65 64 3d 74 72 75 65 3b 76 61 72 20 74 64 5f 50 4a 3d 74 68 69 73 2e 62 6c 6f 63 6b 73 2c 74 64 5f 41 73 3d 74 68 69 73 2e 6c 61 73 74 42 79 74 65 49 6e 64 65 78 3b 74 64 5f 50 4a 5b 31 36 5d 3d 74 68 69 73 2e 62 6c 6f 63 6b 3b 74 64 5f 50 4a 5b 74 64 5f 41 73 3e 3e 32 5d 7c 3d 74 64 5f 44 6c 5b 74 64 5f 41 73 26 33 5d 3b 74 68 69 73 2e 62 6c 6f 63 6b 3d 74 64 5f 50 4a 5b 31 36 5d 3b 0a 69 66 28 74 64 5f 41 73 3e 3d 35 36 29 Data Ascii: this.bytes%4294967296;}return this;};td_g.prototype.finalize=function(){if(this.finalized){return;}this.finalized=true;var td_PJ=this.blocks,td_As=this.lastByteIndex;td_PJ[16]=this.block;td_PJ[td_As>>2]\|=td_Dl[td_As&3];this.block=td_PJ[16];if(td_As>=56)
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 72 6e 20 44 61 74 65 2e 6e 6f 77 28 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 53 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 5a 28 29 7b 72 65 74 75 72 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 63 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 31 61 28 74 64 5f 7a 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 74 64 5f 7a 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 35 72 28 74 64 5f 45 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 74 64 5f 45 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 34 Data Ascii: rn Date.now();}function td_S(){return new Date().getTime();}function td_Z(){return performance.now();}function td_c(){return window.performance.now();}function td_1a(td_z){return parseFloat(td_z);}function td_5r(td_E){return parseInt(td_E);}function td_4
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 5c 78 33 34 5c 78 33 37 5c 78 33 31 5c 78 33 34 5c 78 33 35 5c 78 33 37 5c 78 33 35 5c 78 36 35 5c 78 33 31 5c 78 33 30 5c 78 33 34 5c 78 33 32 5c 78 33 35 5c 78 33 38 5c 78 33 34 5c 78 33 35 5c 78 33 34 5c 78 33 35 5c 78 33 30 5c 78 33 32 5c 78 33 30 5c 78 36 35 5c 78 33 35 5c 78 33 38 5c 78 33 30 5c 78 33 30 5c 78 33 31 5c 78 33 36 5c 78 33 36 5c 78 33 35 5c 78 33 36 5c 78 33 37 5c 78 33 37 5c 78 36 36 5c 78 33 30 5c 78 36 34 5c 78 33 30 5c 78 33 37 5c 78 33 35 5c 78 36 32 5c 78 33 35 5c 78 33 36 5c 78 33 30 5c 78 33 35 5c 78 33 31 5c 78 33 31 5c 78 33 33 5c 78 36 31 5c 78 33 30 5c 78 36 35 5c 78 33 35 5c 78 33 35 5c 78 33 35 5c 78 36 35 5c 78 33 35 5c 78 36 34 5c 78 33 35 5c 78 36 32 5c 78 33 34 5c 78 33 32 5c 78 33 34 5c 78 33 36 5c 78 33 36 5c 78 33 Data Ascii: \x34\x37\x31\x34\x35\x37\x35\x65\x31\x30\x34\x32\x35\x38\x34\x35\x34\x35\x30\x32\x30\x65\x35\x38\x30\x30\x31\x36\x36\x35\x36\x37\x37\x66\x30\x64\x30\x37\x35\x62\x35\x36\x30\x35\x31\x31\x33\x61\x30\x65\x35\x35\x35\x65\x35\x64\x35\x62\x34\x32\x34\x36\x36\x3
2024-09-11 17:25:49 UTC	8783	IN	Data Raw: 6e 75 6c 6c 29 7d 2c 7b 73 74 72 69 6e 67 3a 74 64 5f 4d 2c 73 75 62 53 74 72 69 6e 67 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 32 34 34 2c 37 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 Data Ascii: null)},{string:td_M,subString:((typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13)!=="undefined"&&typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f)!=="undefined")?(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f(244,7)):null),identity:((typeof(td_2v
2024-09-11 17:25:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-11 17:25:49 UTC	8192	IN	Data Raw: 37 34 31 64 0d 0a 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 33 33 37 2c 34 29 29 3a 6e 75 6c 6c 29 7d 5d 3b 0a 74 68 69 73 2e 74 64 5f 78 3d 5b 7b 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f Data Ascii: 741d),identity:((typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13)!=="undefined"&&typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f)!=="undefined")?(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f(337,4)):null)}];this.td_x=[{identity:((typeof(td_
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 35 31 31 2c 38 29 29 3a 6e 75 6c 6c 29 3a 74 64 5f 4d 3d 6e 75 6c 6c 3b 0a 76 61 72 20 74 64 5f 6f 3d 2f 28 4d 61 63 20 4f 53 20 58 20 31 30 5b 5c 2e 5c 5f 5c 64 5d 2b 29 2f 2e 65 78 65 63 28 74 64 5f 50 29 3b 69 66 28 74 64 5f 6f 21 3d 3d 6e 75 6c 6c 26 26 74 64 5f 6f 2e 6c 65 6e 67 74 68 3e 3d 31 29 7b 74 64 5f 4d 3d 74 64 5f 6f 5b 31 5d 3b 7d 69 66 28 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 26 26 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 21 3d 3d 6e 75 6c 6c 26 26 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 3d 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a Data Ascii: 86f14491db9e3cb1d6053be13.td_f(511,8)):null):td_M=null;var td_o=/(Mac OS X 10[\.\_\d]+)/.exec(td_P);if(td_o!==null&&td_o.length>=1){td_M=td_o[1];}if(typeof navigator.platform!==[][[]]+""&&navigator.platform!==null&&navigator.platform===((typeof(td_2v.tdz
2024-09-11 17:25:49 UTC	5155	IN	Data Raw: 61 74 63 68 28 74 64 5f 49 29 7b 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 2c 74 64 5f 64 3a 7b 7d 2c 74 64 5f 4e 3a 7b 7d 2c 74 64 5f 58 3a 7b 7d 2c 74 64 5f 78 3a 7b 7d 7d 3b 74 64 5f 32 76 2e 74 64 7a 5f 39 61 38 37 35 61 66 63 31 35 61 39 34 63 66 64 38 64 61 62 65 61 61 31 66 33 32 66 30 64 61 35 3d 6e 65 77 20 74 64 5f 32 76 2e 74 64 5f 32 4b 28 22 5c 78 33 39 5c 78 36 31 5c 78 33 38 5c 78 33 37 5c 78 33 35 5c 78 36 31 5c 78 36 36 5c 78 36 33 5c 78 33 31 5c 78 33 35 5c 78 36 31 5c 78 33 39 5c 78 33 34 5c 78 36 33 5c 78 36 36 5c 78 36 34 5c 78 33 38 5c 78 36 34 5c 78 36 31 5c 78 36 32 5c 78 36 35 5c 78 36 31 5c 78 36 31 5c 78 33 31 5c 78 36 36 5c 78 33 33 5c 78 33 32 5c 78 36 36 5c 78 33 30 5c 78 36 34 5c 78 36 31 5c 78 33 35 5c 78 33 34 5c 78 36 Data Ascii: atch(td_I){}return false;},td_d:{},td_N:{},td_X:{},td_x:{}};td_2v.tdz_9a875afc15a94cfd8dabeaa1f32f0da5=new td_2v.td_2K("\x39\x61\x38\x37\x35\x61\x66\x63\x31\x35\x61\x39\x34\x63\x66\x64\x38\x64\x61\x62\x65\x61\x61\x31\x66\x33\x32\x66\x30\x64\x61\x35\x34\x6
2024-09-11 17:25:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49895	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:49 UTC	1297	OUT	GET /LJVFYF6zeP6tRSLW?fdfb7b0627303635=78Ll-L1lmSGxLYtH5pMqCNj5q4qYe_KFHes5jXktGDINjjhOq6QqnnVBIp7UZ_fEuouoz5W8YEhGJwkNh2k4nTRfF-8caVOcptvC-aPbxSeQtZPO6-8wz4xZh1BVTx6b2vSbYQtszAEGoCVzYlcMM2RsiDev6ZM7swocAR9vwLdbtOwKTIVyTCZL5gulVFemzplbB9GR7QZal2NiL3BF_dM&jb=353b2e2e62716d773d57696e646f77732668716d3f55616c666f7573273a32333024627b6a773f4168726f6d65266a73623f416a706d656727323231333f HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:49 UTC	482	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:49 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT tmx-nonce: 7b25835e2ff541ab X-Robots-Tag: noindex, nofollow Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-09-11 17:25:49 UTC	7710	IN	Data Raw: 66 66 66 38 0d 0a 76 61 72 20 74 64 5f 32 76 3d 74 64 5f 32 76 7c 7c 7b 7d 3b 74 64 5f 32 76 2e 74 64 5f 34 53 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 73 2c 74 64 5f 71 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 64 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4e 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 49 3d 30 3b 74 64 5f 49 3c 74 64 5f 71 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 49 29 7b 74 64 5f 64 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 73 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4e 29 5e 74 64 5f 71 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 49 29 29 29 3b 74 64 5f 4e 2b 2b 3b 0a 69 66 28 74 64 5f 4e 3e 3d 74 64 5f 73 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 4e 3d 30 3b 7d 7d 72 65 74 75 72 6e 20 74 64 5f 64 2e 6a Data Ascii: fff8var td_2v=td_2v\|\|{};td_2v.td_4S=function(td_s,td_q){try{var td_d=[""];var td_N=0;for(var td_I=0;td_I<td_q.length;++td_I){td_d.push(String.fromCharCode(td_s.charCodeAt(td_N)^td_q.charCodeAt(td_I)));td_N++;if(td_N>=td_s.length){td_N=0;}}return td_d.j
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 64 5f 4b 41 29 7b 74 64 5f 71 41 28 74 64 5f 64 48 2c 74 64 5f 4b 41 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2c 74 64 5f 65 6a 29 3b 7d 3b 74 64 5f 79 44 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 48 30 29 7b 69 66 28 74 64 5f 65 6a 3d 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 30 66 61 31 65 33 32 30 30 66 65 34 34 61 33 66 62 63 33 31 63 33 33 34 63 36 34 63 35 31 38 37 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 30 66 61 31 65 33 32 30 30 66 65 34 34 61 33 66 62 63 33 31 63 33 33 34 63 36 34 63 35 31 38 37 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 30 66 61 31 65 33 32 30 30 66 65 34 34 61 33 66 62 Data Ascii: d_KA){td_qA(td_dH,td_KA.target.result,td_ej);};td_yD.onerror=function(td_H0){if(td_ej===((typeof(td_2v.tdz_0fa1e3200fe44a3fbc31c334c64c5187)!=="undefined"&&typeof(td_2v.tdz_0fa1e3200fe44a3fbc31c334c64c5187.td_f)!=="undefined")?(td_2v.tdz_0fa1e3200fe44a3fb
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 7a 5f 63 33 38 62 63 66 66 64 32 33 36 37 34 32 61 30 61 34 33 63 35 35 66 63 62 36 62 35 66 65 30 65 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 63 33 38 62 63 66 66 64 32 33 36 37 34 32 61 30 61 34 33 63 35 35 66 63 62 36 62 35 66 65 30 65 2e 74 64 5f 66 28 39 37 2c 36 29 29 3a 6e 75 6c 6c 29 29 3b 0a 69 66 28 21 74 64 5f 65 48 29 7b 74 64 5f 61 7a 3d 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 69 66 28 21 28 74 64 5f 65 48 2e 67 65 74 43 6f 6e 74 65 78 74 29 29 7b 74 64 5f 61 7a 3d 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 76 61 72 20 74 64 5f 4c 6b 3d 74 64 5f 65 48 2e 67 65 74 43 6f 6e 74 65 78 74 28 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 63 33 38 62 Data Ascii: z_c38bcffd236742a0a43c55fcb6b5fe0e.td_f)!=="undefined")?(td_2v.tdz_c38bcffd236742a0a43c55fcb6b5fe0e.td_f(97,6)):null));if(!td_eH){td_az=false;return null;}if(!(td_eH.getContext)){td_az=false;return null;}var td_Lk=td_eH.getContext(((typeof(td_2v.tdz_c38b
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3b 76 61 72 20 74 64 5f 4e 4f 3d 31 30 30 30 30 3b 76 61 72 20 74 64 5f 66 39 3d 6e 75 6c 6c 3b 74 68 69 73 2e 74 72 79 41 67 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 64 5f 51 54 3d 3d 3d 6e 75 6c 6c 3b 7d 3b 74 68 69 73 2e 67 65 74 46 50 50 61 72 61 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 64 5f 51 54 3d 3d 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 72 65 74 75 72 6e 28 74 64 5f 51 54 3f 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 62 32 37 63 66 65 61 34 31 34 34 34 34 37 61 32 62 32 31 64 34 34 31 65 66 31 38 31 31 35 36 32 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 62 32 37 63 66 65 61 34 31 34 34 34 34 37 61 32 Data Ascii: null;var td_NO=10000;var td_f9=null;this.tryAgain=function(){return td_QT===null;};this.getFPParams=function(){if(td_QT===null){return null;}return(td_QT?((typeof(td_2v.tdz_b27cfea4144447a2b21d441ef1811562)!=="undefined"&&typeof(td_2v.tdz_b27cfea4144447a2
2024-09-11 17:25:49 UTC	8672	IN	Data Raw: 5f 74 61 28 29 3b 69 66 28 74 64 5f 63 36 3d 3d 3d 30 7c 7c 74 64 5f 63 36 3d 3d 3d 2d 31 29 7b 72 65 74 75 72 6e 3b 7d 76 61 72 20 74 64 5f 4b 37 3d 74 64 5f 63 36 2e 67 6c 3b 69 66 28 74 79 70 65 6f 66 20 74 64 5f 4b 37 2e 67 65 74 45 78 74 65 6e 73 69 6f 6e 21 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 33 38 34 39 63 33 64 66 61 39 30 33 34 37 61 66 38 61 36 61 33 64 61 31 64 33 65 31 38 37 31 34 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 33 38 34 39 63 33 64 66 61 39 30 33 34 37 61 66 38 61 36 61 33 64 61 31 64 33 65 31 38 37 31 34 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 33 38 34 39 63 33 64 66 61 39 30 33 34 37 61 Data Ascii: _ta();if(td_c6===0\|\|td_c6===-1){return;}var td_K7=td_c6.gl;if(typeof td_K7.getExtension!==((typeof(td_2v.tdz_3849c3dfa90347af8a6a3da1d3e18714)!=="undefined"&&typeof(td_2v.tdz_3849c3dfa90347af8a6a3da1d3e18714.td_f)!=="undefined")?(td_2v.tdz_3849c3dfa90347a
2024-09-11 17:25:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-11 17:25:49 UTC	8192	IN	Data Raw: 66 66 66 38 0d 0a 78 35 33 5c 78 37 30 5c 78 36 31 5c 78 36 33 5c 78 36 35 5c 78 36 32 5c 78 36 31 5c 78 37 32 22 3a 33 32 2c 22 5c 78 34 31 5c 78 36 33 5c 78 36 33 5c 78 36 35 5c 78 37 30 5c 78 37 34 22 3a 33 30 2c 22 5c 78 34 31 5c 78 37 34 5c 78 37 34 5c 78 36 65 22 3a 32 34 30 2c 22 5c 78 34 33 5c 78 36 31 5c 78 36 65 5c 78 36 33 5c 78 36 35 5c 78 36 63 22 3a 33 2c 22 5c 78 34 33 5c 78 36 66 5c 78 36 65 5c 78 37 34 5c 78 36 35 5c 78 37 38 5c 78 37 34 5c 78 34 64 5c 78 36 35 5c 78 36 65 5c 78 37 35 22 3a 39 33 2c 22 5c 78 34 35 5c 78 37 33 5c 78 36 33 5c 78 36 31 5c 78 37 30 5c 78 36 35 22 3a 32 37 2c 22 5c 78 34 35 5c 78 37 33 5c 78 36 33 22 3a 32 37 2c 22 5c 78 34 35 5c 78 37 38 5c 78 36 35 5c 78 36 33 5c 78 37 35 5c 78 37 34 5c 78 36 35 22 3a 34 33 Data Ascii: fff8x53\x70\x61\x63\x65\x62\x61\x72":32,"\x41\x63\x63\x65\x70\x74":30,"\x41\x74\x74\x6e":240,"\x43\x61\x6e\x63\x65\x6c":3,"\x43\x6f\x6e\x74\x65\x78\x74\x4d\x65\x6e\x75":93,"\x45\x73\x63\x61\x70\x65":27,"\x45\x73\x63":27,"\x45\x78\x65\x63\x75\x74\x65":43
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 34 37 26 26 74 64 5f 63 34 3c 35 38 7c 7c 74 64 5f 63 34 3e 36 34 26 26 74 64 5f 63 34 3c 39 31 29 7b 72 65 74 75 72 6e 20 74 64 5f 63 34 3b 7d 69 66 28 74 64 5f 63 34 3e 39 36 26 26 74 64 5f 63 34 3c 31 32 33 29 7b 72 65 74 75 72 6e 20 74 64 5f 63 34 2d 33 32 3b 7d 69 66 28 74 79 70 65 6f 66 20 74 64 5f 59 51 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 26 26 74 64 5f 59 51 21 3d 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 20 74 64 5f 59 51 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 64 5f 63 34 29 3f 74 64 5f 59 51 5b 74 64 5f 63 34 5d 3a 6e 75 6c 6c 3b 0a 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 6d 7a 28 74 64 5f 6f 76 29 7b 69 66 28 74 79 70 65 6f 66 20 74 64 5f 6f 76 2e 6d 65 74 61 4b 65 79 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 26 26 21 74 64 5f 6f 76 2e 6d Data Ascii: 47&&td_c4<58\|\|td_c4>64&&td_c4<91){return td_c4;}if(td_c4>96&&td_c4<123){return td_c4-32;}if(typeof td_YQ!==[][[]]+""&&td_YQ!==null){return td_YQ.hasOwnProperty(td_c4)?td_YQ[td_c4]:null;}}function td_mz(td_ov){if(typeof td_ov.metaKey!==[][[]]+""&&!td_ov.m
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 62 64 62 31 33 62 39 32 61 39 31 32 34 38 32 63 39 36 30 64 36 66 63 30 30 30 64 38 33 30 66 39 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 62 64 62 31 33 62 39 32 61 39 31 32 34 38 32 63 39 36 30 64 36 66 63 30 30 30 64 38 33 30 66 39 2e 74 64 5f 66 28 34 2c 33 29 29 3a 6e 75 6c 6c 29 29 3b 0a 62 72 65 61 6b 3b 63 61 73 65 20 74 64 5f 67 77 3a 74 64 5f 64 38 2e 70 75 73 68 28 74 64 5f 77 5a 2b 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 62 64 62 31 33 62 39 32 61 39 31 32 34 38 32 63 39 36 30 64 36 66 63 30 30 30 64 38 33 30 66 39 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 Data Ascii: "undefined"&&typeof(td_2v.tdz_bdb13b92a912482c960d6fc000d830f9.td_f)!=="undefined")?(td_2v.tdz_bdb13b92a912482c960d6fc000d830f9.td_f(4,3)):null));break;case td_gw:td_d8.push(td_wZ+((typeof(td_2v.tdz_bdb13b92a912482c960d6fc000d830f9)!=="undefined"&&typeof
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 64 5f 61 67 5b 74 64 5f 32 76 2e 6b 62 2e 4d 41 58 5f 53 49 5a 45 5f 42 48 53 4b 53 54 5d 3d 74 64 5f 52 45 3b 74 64 5f 61 67 5b 74 64 5f 32 76 2e 6b 62 2e 4d 41 58 5f 53 49 5a 45 5f 42 48 53 46 44 43 58 54 5d 3d 74 64 5f 72 66 3b 0a 74 64 5f 61 67 5b 74 64 5f 32 76 2e 6b 62 2e 48 45 4c 50 45 52 53 5f 52 45 46 5d 3d 74 64 5f 72 58 28 29 3b 74 64 5f 61 67 5b 74 64 5f 32 76 2e 6b 62 2e 43 52 49 54 5f 53 45 4c 45 43 54 4f 52 5d 3d 74 64 5f 79 4e 3b 69 66 28 74 79 70 65 6f 66 20 74 64 5f 35 77 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 26 26 74 64 5f 35 77 21 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 74 64 5f 66 64 3d 74 64 5f 35 77 28 74 64 5f 61 67 29 3b 74 64 5f 61 67 5b 74 64 5f 32 76 2e 6b 62 2e 4c 45 47 41 43 59 5f 52 45 50 4f 52 54 5f 52 45 46 5d 3d 74 64 5f 67 36 Data Ascii: d_ag[td_2v.kb.MAX_SIZE_BHSKST]=td_RE;td_ag[td_2v.kb.MAX_SIZE_BHSFDCXT]=td_rf;td_ag[td_2v.kb.HELPERS_REF]=td_rX();td_ag[td_2v.kb.CRIT_SELECTOR]=td_yN;if(typeof td_5w!==[][[]]+""&&td_5w!==null){var td_fd=td_5w(td_ag);td_ag[td_2v.kb.LEGACY_REPORT_REF]=td_g6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49897	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:49 UTC	618	OUT	GET /fp/clear.png HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: /, v60nf4oj/7b25835e2ff541ab16888ccfe5ea4ee5accbc28664b129cc sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:49 UTC	416	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:49 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Last-Modified: Wed, 11 Sep 2024 17:25:49 GMT Expires: Mon, 10 Sep 2029 17:25:49 GMT Etag: 43af4d9b3e7c47079e0b63cc3cd71ad3 Cache-Control: private, must-revalidate, max-age=0 Access-Control-Allow-Origin: https://connect.intuit.com Content-Length: 81 Connection: close Content-Type: image/png
2024-09-11 17:25:49 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49898	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:49 UTC	1513	OUT	GET /NfOpx-RLutCFq1dn?27f2e3b7cb9047b0=ZPvAywB5fIwacgCX0emF994U9IaW7vfygBgwYztfdQRp2-UXl6iIJlr-umeZHrZgmrGgTxROGccZmruL70PVh7UrcnWskAEeJ_YeITWytng1wLisPuiazozX-8TjSd-_4Fj2pGVJQtQCZXh1d9nRQWMWNvPW_Elk-ljsg5CtFJkVKJ2hRzGcPB29tG5QKB-KuTCMvHYe1sRmDDCK-loAVnYC36k HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:49 UTC	593	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:49 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-src 'self'; connect-src 'self'; default-src 'self'; script-src 'self' 'unsafe-inline' ; style-src 'unsafe-inline' Content-Type: text/html;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-09-11 17:25:49 UTC	7599	IN	Data Raw: 66 66 66 38 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 74 69 74 6c 65 3e 65 6d 70 74 79 3c 2f 74 69 74 6c 65 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 74 64 5f 32 76 3d 74 64 5f 32 76 7c 7c 7b 7d 3b 74 64 5f 32 76 2e 74 64 5f 34 53 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 73 2c 74 64 5f 71 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 64 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4e 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 49 3d 30 3b 74 64 5f 49 3c 74 64 5f 71 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 49 29 7b 74 64 5f 64 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 73 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4e 29 5e 74 64 5f Data Ascii: fff8<html lang="en"><title>empty</title><body><script type="text/javascript">var td_2v=td_2v\|\|{};td_2v.td_4S=function(td_s,td_q){try{var td_d=[""];var td_N=0;for(var td_I=0;td_I<td_q.length;++td_I){td_d.push(String.fromCharCode(td_s.charCodeAt(td_N)^td_
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 64 43 68 69 6c 64 28 74 64 5f 56 29 3b 7d 3b 74 64 5f 32 76 2e 63 73 70 5f 6e 6f 6e 63 65 3d 6e 75 6c 6c 3b 74 64 5f 32 76 2e 74 64 5f 30 4a 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 6d 29 7b 69 66 28 74 79 70 65 6f 66 20 74 64 5f 6d 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 26 26 74 64 5f 6d 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 21 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 74 64 5f 61 3d 74 64 5f 6d 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 34 35 62 64 38 61 66 66 30 63 34 64 34 34 33 31 39 30 38 61 34 61 31 65 34 31 38 34 33 32 38 30 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 Data Ascii: dChild(td_V);};td_2v.csp_nonce=null;td_2v.td_0J=function(td_m){if(typeof td_m.currentScript!==[][[]]+""&&td_m.currentScript!==null){var td_a=td_m.currentScript.getAttribute(((typeof(td_2v.tdz_45bd8aff0c4d4431908a4a1e41843280)!=="undefined"&&typeof(td_2v.t
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 2b 74 64 5f 6d 5b 28 74 64 5f 6c 70 3e 3e 31 36 29 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 6c 70 3e 3e 31 32 29 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 6c 70 3e 3e 38 29 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 6c 70 3e 3e 34 29 26 31 35 5d 2b 74 64 5f 6d 5b 74 64 5f 6c 70 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 67 46 3e 3e 32 38 29 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 67 46 3e 3e 32 34 29 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 67 46 3e 3e 32 30 29 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 67 46 3e 3e 31 36 29 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 67 46 3e 3e 31 32 29 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 67 46 3e 3e 38 29 26 31 35 5d 2b 74 64 5f 6d 5b 28 74 64 5f 67 46 3e 3e 34 29 26 31 35 5d 2b 74 64 5f 6d 5b 74 64 5f 67 46 26 31 Data Ascii: +td_m[(td_lp>>16)&15]+td_m[(td_lp>>12)&15]+td_m[(td_lp>>8)&15]+td_m[(td_lp>>4)&15]+td_m[td_lp&15]+td_m[(td_gF>>28)&15]+td_m[(td_gF>>24)&15]+td_m[(td_gF>>20)&15]+td_m[(td_gF>>16)&15]+td_m[(td_gF>>12)&15]+td_m[(td_gF>>8)&15]+td_m[(td_gF>>4)&15]+td_m[td_gF&1
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 64 5f 32 76 2e 74 64 5f 35 51 3d 74 64 5f 6b 3b 76 61 72 20 74 64 5f 31 57 3d 7b 74 64 5f 35 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 29 7b 74 68 69 73 2e 74 64 5f 6e 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 6e 61 76 69 67 61 74 6f 72 2e 76 65 6e 64 6f 72 2c 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 2c 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 2c 77 69 6e 64 6f 77 2e 6f 70 65 72 61 29 3b 0a 7d 7d 2c 74 64 5f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 64 5f 4d 2c 74 64 5f 62 2c 74 64 5f 74 2c 74 64 5f 52 2c 74 64 5f 48 29 7b 74 68 69 73 2e 74 64 5f 64 3d 5b 7b 73 74 72 69 6e 67 3a 74 64 5f 4d 2c 73 75 62 53 74 72 69 6e 67 Data Ascii: d_2v.td_5Q=td_k;var td_1W={td_5Z:function(){if(typeof navigator!==[][[]]+""){this.td_n(navigator.userAgent,navigator.vendor,navigator.platform,navigator.appVersion,window.opera);}},td_n:function(td_M,td_b,td_t,td_R,td_H){this.td_d=[{string:td_M,subString
2024-09-11 17:25:49 UTC	8783	IN	Data Raw: 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 32 36 31 2c 33 29 29 3a 6e 75 6c 6c 29 7d 2c 7b 73 74 72 69 6e 67 3a 74 64 5f 4d 2c 73 75 62 53 74 72 69 6e 67 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 Data Ascii: dz_feaa74886f14491db9e3cb1d6053be13)!=="undefined"&&typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f)!=="undefined")?(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f(261,3)):null)},{string:td_M,subString:((typeof(td_2v.tdz_feaa74886f14491db9e3cb1d60
2024-09-11 17:25:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-11 17:25:49 UTC	8192	IN	Data Raw: 36 62 31 38 0d 0a 28 33 38 32 2c 39 29 29 3a 6e 75 6c 6c 29 2c 72 3a 2f 28 57 69 6e 64 6f 77 73 20 37 7c 57 69 6e 64 6f 77 73 20 4e 54 20 36 2e 31 29 2f 7d 2c 7b 73 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 33 39 31 2c 31 33 29 29 3a 6e 75 Data Ascii: 6b18(382,9)):null),r:/(Windows 7\|Windows NT 6.1)/},{s:((typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13)!=="undefined"&&typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f)!=="undefined")?(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f(391,13)):nu
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 7d 69 66 28 74 64 5f 55 3d 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 66 65 61 61 37 34 38 38 36 66 31 34 34 39 31 64 62 39 65 33 63 62 31 64 36 30 35 33 62 65 31 33 2e 74 64 5f 66 28 31 30 36 2c 36 29 29 3a 6e 75 6c 6c 29 26 26 74 64 5f 69 3e 3d 31 31 30 29 7b 74 64 5f 32 76 2e 74 64 5f 35 51 3d 74 64 5f 57 3b 0a 74 64 5f 31 57 2e 74 64 5f 51 28 29 Data Ascii: }if(td_U===((typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13)!=="undefined"&&typeof(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f)!=="undefined")?(td_2v.tdz_feaa74886f14491db9e3cb1d6053be13.td_f(106,6)):null)&&td_i>=110){td_2v.td_5Q=td_W;td_1W.td_Q()
2024-09-11 17:25:49 UTC	2846	IN	Data Raw: 2d 74 64 5f 78 44 3b 69 66 28 74 64 5f 67 76 3c 30 7c 7c 74 64 5f 67 76 3e 33 36 30 30 30 30 30 29 7b 74 64 5f 58 48 2b 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 32 34 30 34 30 63 33 35 35 37 65 32 34 30 66 32 61 63 38 32 63 32 61 36 63 66 66 65 65 33 33 30 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 76 2e 74 64 7a 5f 32 34 30 34 30 63 33 35 35 37 65 32 34 30 66 32 61 63 38 32 63 32 61 36 63 66 66 65 65 33 33 30 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 76 2e 74 64 7a 5f 32 34 30 34 30 63 33 35 35 37 65 32 34 30 66 32 61 63 38 32 63 32 61 36 63 66 66 65 65 33 33 30 2e 74 64 5f 66 28 35 2c 38 29 29 3a 6e 75 6c 6c 29 2b 74 64 5f 78 44 2b 28 28 74 79 70 65 6f 66 Data Ascii: -td_xD;if(td_gv<0\|\|td_gv>3600000){td_XH+=((typeof(td_2v.tdz_24040c3557e240f2ac82c2a6cffee330)!=="undefined"&&typeof(td_2v.tdz_24040c3557e240f2ac82c2a6cffee330.td_f)!=="undefined")?(td_2v.tdz_24040c3557e240f2ac82c2a6cffee330.td_f(5,8)):null)+td_xD+((typeof
2024-09-11 17:25:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49899	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:49 UTC	5218	OUT	GET /YbxrASaDVd3Kc50e?c36b7dc3a8f47772=_6WGV0IKupf2sDLowowrHE5d-CNLDavGE7JHc6bkw8vxK4hipz483WKFXhkTTHCwqO4EIHtUZQ0bmoRG511DgtuTHNWZ7kg7mX6zfgUwpjnq118c266Rm-2-wmVSiq3znVgRlgXMo2LumzDAW1BrZ-R7lYGn0eNvNgCvu_o HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qfp.intuit.com/jh0Y8EVpwlX-K1OY?6bc8640c02812f3a=whqLv4z_J3VJHaa6wnc8A0kYl59sUwOD7kPMGF26PO8wwKESdHpDVOrPe0PCg3grY5lulX2cwR-c3VBVyIA1BMC9wYtcar10HwFsFzgaDr_3KjvgNOp065UC3xWCoKXLNQTlBvFA-6kpICJ41v_C0Q&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consume [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:49 UTC	482	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:49 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT tmx-nonce: 7b25835e2ff541ab X-Robots-Tag: noindex, nofollow Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-09-11 17:25:49 UTC	7710	IN	Data Raw: 66 66 66 38 0d 0a 76 61 72 20 74 64 5f 35 42 3d 74 64 5f 35 42 7c 7c 7b 7d 3b 74 64 5f 35 42 2e 74 64 5f 33 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 4b 2c 74 64 5f 5a 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 54 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 6f 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 41 3d 30 3b 74 64 5f 41 3c 74 64 5f 5a 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 41 29 7b 74 64 5f 54 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 4b 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 6f 29 5e 74 64 5f 5a 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 41 29 29 29 3b 74 64 5f 6f 2b 2b 3b 0a 69 66 28 74 64 5f 6f 3e 3d 74 64 5f 4b 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 6f 3d 30 3b 7d 7d 72 65 74 75 72 6e 20 74 64 5f 54 2e 6a Data Ascii: fff8var td_5B=td_5B\|\|{};td_5B.td_3M=function(td_K,td_Z){try{var td_T=[""];var td_o=0;for(var td_A=0;td_A<td_Z.length;++td_A){td_T.push(String.fromCharCode(td_K.charCodeAt(td_o)^td_Z.charCodeAt(td_A)));td_o++;if(td_o>=td_K.length){td_o=0;}}return td_T.j
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 7b 69 66 28 74 68 69 73 2e 66 69 6e 61 6c 69 7a 65 64 29 7b 72 65 74 75 72 6e 3b 7d 74 68 69 73 2e 66 69 6e 61 6c 69 7a 65 64 3d 74 72 75 65 3b 76 61 72 20 74 64 5f 74 76 3d 74 68 69 73 2e 62 6c 6f 63 6b 73 2c 74 64 5f 5a 6b 3d 74 68 69 73 2e 6c 61 73 74 42 79 74 65 49 6e 64 65 78 3b 74 64 5f 74 76 5b 31 36 5d 3d 74 68 69 73 2e 62 6c 6f 63 6b 3b 74 64 5f 74 76 5b 74 64 5f 5a 6b 3e 3e 32 5d 7c 3d 74 64 5f 71 59 5b 74 64 5f 5a 6b 26 33 5d 3b 74 68 69 73 2e 62 6c 6f 63 6b 3d 74 64 5f 74 76 5b 31 36 5d 3b 0a 69 66 28 74 64 5f 5a 6b 3e 3d 35 36 29 7b 69 66 28 21 74 68 69 73 2e 68 61 73 68 65 64 29 7b 74 68 69 73 2e 68 61 73 68 28 29 3b 7d 74 64 5f 74 76 5b 30 5d 3d 74 68 69 73 2e 62 6c 6f 63 6b 3b 74 64 5f 74 76 5b 31 36 5d 3d 74 64 5f 74 76 5b 31 5d 3d 74 64 Data Ascii: {if(this.finalized){return;}this.finalized=true;var td_tv=this.blocks,td_Zk=this.lastByteIndex;td_tv[16]=this.block;td_tv[td_Zk>>2]\|=td_qY[td_Zk&3];this.block=td_tv[16];if(td_Zk>=56){if(!this.hashed){this.hash();}td_tv[0]=this.block;td_tv[16]=td_tv[1]=td
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 74 64 5f 44 70 29 7b 7d 74 72 79 7b 74 64 5f 61 42 2e 70 75 73 68 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 7d 63 61 74 63 68 28 74 64 5f 44 70 29 7b 7d 74 72 79 7b 74 64 5f 61 42 2e 70 75 73 68 28 6e 61 76 69 67 61 74 6f 72 2e 76 65 6e 64 6f 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 0a 7d 63 61 74 63 68 28 74 64 5f 44 70 29 7b 7d 74 72 79 7b 74 64 5f 61 42 2e 70 75 73 68 28 6e 61 76 69 67 61 74 6f 72 2e 76 65 6e 64 6f 72 53 75 62 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 7d 63 61 74 63 68 28 74 64 5f 44 70 29 7b 7d 74 72 79 7b 74 64 5f 61 42 2e 70 75 73 68 28 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4d 69 6e 6f 72 56 65 72 73 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 7d 63 61 74 63 68 28 74 64 5f Data Ascii: td_Dp){}try{td_aB.push(navigator.userAgent.toString());}catch(td_Dp){}try{td_aB.push(navigator.vendor.toString());}catch(td_Dp){}try{td_aB.push(navigator.vendorSub.toString());}catch(td_Dp){}try{td_aB.push(navigator.appMinorVersion.toString());}catch(td_
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 36 5c 78 33 37 5c 78 33 35 5c 78 36 33 5c 78 33 31 5c 78 36 31 5c 78 33 31 5c 78 36 34 5c 78 33 37 5c 78 33 30 5c 78 33 36 5c 78 33 30 5c 78 33 36 5c 78 36 34 5c 78 33 36 5c 78 33 30 5c 78 33 33 5c 78 33 30 5c 78 33 35 5c 78 33 38 5c 78 33 34 5c 78 36 34 5c 78 33 31 5c 78 33 36 5c 78 33 34 5c 78 33 39 5c 78 33 34 5c 78 33 39 5c 78 33 33 5c 78 33 30 5c 78 33 37 5c 78 33 36 5c 78 33 36 5c 78 33 35 5c 78 33 37 5c 78 33 38 5c 78 33 33 5c 78 33 34 5c 78 33 33 5c 78 33 34 5c 78 33 37 5c 78 33 36 5c 78 33 37 5c 78 33 35 5c 78 33 30 5c 78 36 31 5c 78 33 34 5c 78 36 33 5c 78 33 31 5c 78 33 37 5c 78 33 37 5c 78 36 31 5c 78 33 32 5c 78 36 32 5c 78 33 36 5c 78 33 32 5c 78 33 32 5c 78 33 39 5c 78 33 37 5c 78 33 34 5c 78 33 32 5c 78 33 31 5c 78 33 31 5c 78 33 34 5c 78 Data Ascii: 6\x37\x35\x63\x31\x61\x31\x64\x37\x30\x36\x30\x36\x64\x36\x30\x33\x30\x35\x38\x34\x64\x31\x36\x34\x39\x34\x39\x33\x30\x37\x36\x36\x35\x37\x38\x33\x34\x33\x34\x37\x36\x37\x35\x30\x61\x34\x63\x31\x37\x37\x61\x32\x62\x36\x32\x32\x39\x37\x34\x32\x31\x31\x34\x
2024-09-11 17:25:49 UTC	8672	IN	Data Raw: 35 5c 78 33 32 5c 78 33 30 5c 78 33 38 5c 78 33 34 5c 78 33 31 5c 78 33 35 5c 78 33 37 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 33 37 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 33 34 5c 78 33 30 5c 78 33 36 5c 78 33 33 5c 78 33 37 5c 78 33 33 5c 78 33 30 5c 78 33 37 5c 78 33 30 5c 78 33 32 5c 78 33 35 5c 78 33 30 5c 78 33 39 5c 78 33 30 5c 78 36 36 5c 78 33 34 5c 78 33 33 5c 78 33 35 5c 78 33 39 5c 78 33 35 5c 78 33 39 5c 78 33 30 5c 78 33 34 5c 78 33 30 5c 78 33 38 5c 78 33 34 5c 78 33 31 5c 78 33 34 5c 78 33 30 5c 78 33 35 5c 78 33 31 5c 78 33 31 5c 78 33 31 5c 78 33 34 5c 78 36 32 5c 78 33 35 5c 78 36 33 5c 78 33 32 5c 78 36 31 5c 78 33 35 5c 78 36 35 5c 78 33 31 5c 78 33 32 5c 78 33 34 5c 78 36 31 5c 78 33 30 5c 78 33 31 5c 78 33 34 5c 78 36 34 5c 78 Data Ascii: 5\x32\x30\x38\x34\x31\x35\x37\x35\x36\x35\x37\x35\x36\x35\x34\x30\x36\x33\x37\x33\x30\x37\x30\x32\x35\x30\x39\x30\x66\x34\x33\x35\x39\x35\x39\x30\x34\x30\x38\x34\x31\x34\x30\x35\x31\x31\x31\x34\x62\x35\x63\x32\x61\x35\x65\x31\x32\x34\x61\x30\x31\x34\x64\x
2024-09-11 17:25:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-11 17:25:49 UTC	8192	IN	Data Raw: 66 66 66 38 0d 0a 66 67 2b 31 5d 3d 3d 3d 22 21 22 26 26 74 64 5f 6b 66 5b 74 64 5f 66 67 2b 32 5d 3d 3d 3d 22 2d 22 26 26 74 64 5f 6b 66 5b 74 64 5f 66 67 2b 33 5d 3d 3d 3d 22 2d 22 29 7b 74 64 5f 6f 6a 3d 74 72 75 65 3b 74 64 5f 6b 66 5b 74 64 5f 66 67 5d 3d 22 22 3b 0a 7d 7d 7d 72 65 74 75 72 6e 20 74 64 5f 6b 66 2e 6a 6f 69 6e 28 22 22 29 2e 73 6c 69 63 65 28 32 2c 2d 32 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 70 70 28 74 64 5f 6d 65 29 7b 74 64 5f 6d 65 3d 74 64 5f 6d 65 2e 72 65 70 6c 61 63 65 28 28 28 74 79 70 65 6f 66 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 42 2e 74 64 7a Data Ascii: fff8fg+1]==="!"&&td_kf[td_fg+2]==="-"&&td_kf[td_fg+3]==="-"){td_oj=true;td_kf[td_fg]="";}}}return td_kf.join("").slice(2,-2);}function td_pp(td_me){td_me=td_me.replace(((typeof(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8)!=="undefined"&&typeof(td_5B.tdz
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 2e 74 64 5f 66 28 32 35 34 2c 37 29 29 3a 6e 75 6c 6c 29 2c 74 64 5f 6d 49 2e 63 6c 61 73 73 4e 61 6d 65 5d 29 3b 0a 7d 74 64 5f 57 66 28 74 64 5f 48 4c 2c 74 64 5f 6d 49 2c 28 28 74 79 70 65 6f 66 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 Data Ascii: undefined")?(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8.td_f(254,7)):null),td_mI.className]);}td_Wf(td_HL,td_mI,((typeof(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8)!=="undefined"&&typeof(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8.td_f)!=="undefined")?(td
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 28 35 35 39 2c 31 31 29 29 3a 6e 75 6c 6c 29 2c 74 64 5f 61 75 2c 74 64 5f 70 6d 29 3b 0a 74 64 5f 56 44 28 74 64 5f 73 76 2c 74 64 5f 73 76 2e 6f 6e 6d 6f 75 73 65 6f 75 74 2c 28 28 74 79 70 65 6f 66 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 2e 74 64 5f 66 28 35 37 30 2c 31 30 29 29 Data Ascii: (559,11)):null),td_au,td_pm);td_VD(td_sv,td_sv.onmouseout,((typeof(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8)!=="undefined"&&typeof(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8.td_f)!=="undefined")?(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8.td_f(570,10))
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 2e 74 64 5f 66 28 31 31 34 30 2c 39 29 29 3a 6e 75 6c 6c 29 2c 74 64 5f 61 75 2c 74 64 5f 70 6d 29 3b 0a 74 64 5f 56 44 28 74 64 5f 73 76 2c 74 64 5f 73 76 2e 6f 6e 6f 6e 6c 69 6e 65 2c 28 28 74 79 70 65 6f 66 28 74 64 5f 35 42 2e 74 64 7a 5f 39 63 30 66 39 64 39 37 66 35 32 38 34 39 30 63 62 62 39 66 66 62 33 36 37 61 66 35 30 30 63 38 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 Data Ascii: undefined"&&typeof(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8.td_f)!=="undefined")?(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8.td_f(1140,9)):null),td_au,td_pm);td_VD(td_sv,td_sv.ononline,((typeof(td_5B.tdz_9c0f9d97f528490cbb9ffb367af500c8)!=="undefined"&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49900	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:49 UTC	1365	OUT	GET /lpDGnmvXq62r7PSf?637c223a99a163ea=CAYim9EfYdnzPtCTte2Qz-24SiiSkfhl3FKGWsa_-AcX0CXRlplUCdosJbvMWs_4BKlLSPrJEqRaZ22T0NufRZ0tYkGfEJn0JdLt4IGZI-6M4Vte8mHlLA4CIv-HaYramB3zh-xRBSC-JAAkDsAflg05mzZDsOMXGkJ4GedL4-5ETA HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:49 UTC	357	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:49 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 81 Content-Type: image/png
2024-09-11 17:25:49 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49901	91.235.132.130	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:49 UTC	937	OUT	GET /j__WaTLYPrl6qGp7?aa873481f3a0bc61=rMN_jfGojP1IOt5ffuqdQbUIR_O3ddu83uiIa6E5RArI2qrysOpxwlnqYmGGx9Odr7atDG8tbBeG7E9xQmj7fHcE6YVAB_1tPhKx6LywQbuzYIBiAmWoufj_aV_icUbQ1aXU2oS2ngbaQD26QZuufYenD10zRqrj9-noNdXIZNUpUHNEzDbolGJ68lFWa0MdHlzZxOJb_obHuqOKYKhNnNlO3dg HTTP/1.1 Host: h.online-metrix.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:49 UTC	593	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:49 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-src 'self'; connect-src 'self'; default-src 'self'; script-src 'self' 'unsafe-inline' ; style-src 'unsafe-inline' Content-Type: text/html;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-09-11 17:25:49 UTC	7599	IN	Data Raw: 66 66 66 38 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 74 69 74 6c 65 3e 65 6d 70 74 79 3c 2f 74 69 74 6c 65 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 74 64 5f 33 7a 3d 74 64 5f 33 7a 7c 7c 7b 7d 3b 74 64 5f 33 7a 2e 74 64 5f 36 55 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 4b 2c 74 64 5f 6a 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 42 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 66 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 61 3d 30 3b 74 64 5f 61 3c 74 64 5f 6a 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 61 29 7b 74 64 5f 42 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 4b 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 66 29 5e 74 64 5f Data Ascii: fff8<html lang="en"><title>empty</title><body><script type="text/javascript">var td_3z=td_3z\|\|{};td_3z.td_6U=function(td_K,td_j){try{var td_B=[""];var td_f=0;for(var td_a=0;td_a<td_j.length;++td_a){td_B.push(String.fromCharCode(td_K.charCodeAt(td_f)^td_
2024-09-11 17:25:49 UTC	16384	IN	Data Raw: 36 32 5c 78 33 37 5c 78 36 36 5c 78 33 36 5c 78 33 35 5c 78 33 36 5c 78 36 35 5c 78 33 30 5c 78 33 33 5c 78 33 37 5c 78 33 36 5c 78 33 31 5c 78 33 34 5c 78 33 35 5c 78 33 37 5c 78 33 31 5c 78 33 34 5c 78 33 34 5c 78 33 32 5c 78 33 35 5c 78 33 34 5c 78 33 34 5c 78 36 31 5c 78 33 36 5c 78 33 38 5c 78 33 30 5c 78 33 32 5c 78 33 35 5c 78 36 31 5c 78 33 30 5c 78 33 35 5c 78 33 35 5c 78 36 34 5c 78 33 34 5c 78 36 33 5c 78 33 33 5c 78 33 30 5c 78 33 35 5c 78 33 34 5c 78 33 35 5c 78 36 31 5c 78 33 31 5c 78 33 31 5c 78 33 34 5c 78 33 30 5c 78 33 30 5c 78 33 38 5c 78 33 35 5c 78 33 30 5c 78 33 37 5c 78 36 32 5c 78 33 34 5c 78 33 36 5c 78 33 35 5c 78 36 32 5c 78 33 31 5c 78 33 34 5c 78 33 31 5c 78 33 37 5c 78 33 30 5c 78 33 31 5c 78 33 31 5c 78 33 30 5c 78 33 33 5c Data Ascii: 62\x37\x66\x36\x35\x36\x65\x30\x33\x37\x36\x31\x34\x35\x37\x31\x34\x34\x32\x35\x34\x34\x61\x36\x38\x30\x32\x35\x61\x30\x35\x35\x64\x34\x63\x33\x30\x35\x34\x35\x61\x31\x31\x34\x30\x30\x38\x35\x30\x37\x62\x34\x36\x35\x62\x31\x34\x31\x37\x30\x31\x31\x30\x33\
2024-09-11 17:25:50 UTC	16384	IN	Data Raw: 66 37 39 34 34 63 64 64 62 62 30 36 37 62 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 34 66 38 63 31 31 38 31 63 34 61 38 34 63 35 37 62 35 66 37 39 34 34 63 64 64 62 62 30 36 37 62 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 33 7a 2e 74 64 7a 5f 34 66 38 63 31 31 38 31 63 34 61 38 34 63 35 37 62 35 66 37 39 34 34 63 64 64 62 62 30 36 37 62 2e 74 64 5f 66 28 31 38 30 2c 34 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 34 66 38 63 31 31 38 31 63 34 61 38 34 63 35 37 62 35 66 37 39 34 34 63 64 64 62 62 30 36 37 62 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e Data Ascii: f7944cddbb067b)!=="undefined"&&typeof(td_3z.tdz_4f8c1181c4a84c57b5f7944cddbb067b.td_f)!=="undefined")?(td_3z.tdz_4f8c1181c4a84c57b5f7944cddbb067b.td_f(180,4)):null),identity:((typeof(td_3z.tdz_4f8c1181c4a84c57b5f7944cddbb067b)!=="undefined"&&typeof(td_3z.
2024-09-11 17:25:50 UTC	16384	IN	Data Raw: 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 34 66 38 63 31 31 38 31 63 34 61 38 34 63 35 37 62 35 66 37 39 34 34 63 64 64 62 62 30 36 37 62 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 33 7a 2e 74 64 7a 5f 34 66 38 63 31 31 38 31 63 34 61 38 34 63 35 37 62 35 66 37 39 34 34 63 64 64 62 62 30 36 37 62 2e 74 64 5f 66 28 34 36 35 2c 31 30 29 29 3a 6e 75 6c 6c 29 2c 72 3a 2f 28 57 69 6e 64 6f 77 73 20 39 35 7c 57 69 6e 39 35 7c 57 69 6e 64 6f 77 73 5f 39 35 29 2f 7d 2c 7b 73 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 34 66 38 63 31 31 38 31 63 34 61 38 34 63 35 37 62 35 66 37 39 34 34 63 64 64 62 62 30 36 37 62 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 Data Ascii: ed"&&typeof(td_3z.tdz_4f8c1181c4a84c57b5f7944cddbb067b.td_f)!=="undefined")?(td_3z.tdz_4f8c1181c4a84c57b5f7944cddbb067b.td_f(465,10)):null),r:/(Windows 95\|Win95\|Windows_95)/},{s:((typeof(td_3z.tdz_4f8c1181c4a84c57b5f7944cddbb067b)!=="undefined"&&typeof(td
2024-09-11 17:25:50 UTC	8783	IN	Data Raw: 62 35 66 37 39 34 34 63 64 64 62 62 30 36 37 62 2e 74 64 5f 66 28 37 31 2c 36 29 29 3a 6e 75 6c 6c 29 3b 0a 7d 7d 63 61 74 63 68 28 65 72 72 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 2c 74 64 5f 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 64 5f 54 3d 74 68 69 73 2e 74 64 5f 35 55 3b 69 66 28 74 64 5f 54 3d 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 34 66 38 63 31 31 38 31 63 34 61 38 34 63 35 37 62 35 66 37 39 34 34 63 64 64 62 62 30 36 37 62 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 34 66 38 63 31 31 38 31 63 34 61 38 34 63 35 37 62 35 66 37 39 34 34 63 64 64 62 62 30 36 37 62 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 33 7a Data Ascii: b5f7944cddbb067b.td_f(71,6)):null);}}catch(err){}return null;},td_C:function(){var td_T=this.td_5U;if(td_T===((typeof(td_3z.tdz_4f8c1181c4a84c57b5f7944cddbb067b)!=="undefined"&&typeof(td_3z.tdz_4f8c1181c4a84c57b5f7944cddbb067b.td_f)!=="undefined")?(td_3z
2024-09-11 17:25:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-11 17:25:50 UTC	8192	IN	Data Raw: 61 31 39 36 0d 0a 38 36 61 61 35 64 32 37 36 39 37 63 63 39 66 30 35 62 61 2e 74 64 5f 66 28 32 33 2c 38 29 29 3a 6e 75 6c 6c 29 29 3b 0a 76 61 72 20 74 64 5f 4c 41 3d 74 64 5f 44 33 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 64 5f 66 46 29 3b 76 61 72 20 74 64 5f 45 66 3d 74 64 5f 4c 41 2e 67 65 74 28 74 64 5f 59 74 29 3b 74 64 5f 45 66 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 74 64 5f 45 66 2e 72 65 73 75 6c 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 74 64 5f 45 66 2e 72 65 73 75 6c 74 3d 3d 3d 6e 75 6c 6c 7c 7c 74 64 5f 45 66 2e 72 65 73 75 6c 74 2e 70 72 69 76 61 74 65 4b 65 79 3d 3d 3d 6e 75 6c 6c 7c 7c 74 64 5f 45 66 2e 72 65 73 75 6c 74 2e 70 75 62 6c 69 63 4b 65 79 3d 3d 3d 6e 75 6c 6c 7c 7c 74 64 5f Data Ascii: a19686aa5d27697cc9f05ba.td_f(23,8)):null));var td_LA=td_D3.objectStore(td_fF);var td_Ef=td_LA.get(td_Yt);td_Ef.onsuccess=function(){try{if(td_Ef.result===undefined\|\|td_Ef.result===null\|\|td_Ef.result.privateKey===null\|\|td_Ef.result.publicKey===null\|\|td_
2024-09-11 17:25:50 UTC	16384	IN	Data Raw: 64 7a 5f 30 64 63 65 65 34 35 64 63 66 63 34 34 38 36 61 61 35 64 32 37 36 39 37 63 63 39 66 30 35 62 61 2e 74 64 5f 66 28 31 30 39 2c 33 29 29 3a 6e 75 6c 6c 29 5d 3d 74 64 5f 6a 32 28 74 64 5f 6f 67 28 74 64 5f 68 4b 28 74 64 5f 4c 41 29 29 2b 74 64 5f 6f 67 28 74 64 5f 68 4b 28 74 64 5f 54 45 29 29 29 3b 0a 7d 65 6c 73 65 7b 74 64 5f 6c 7a 5b 28 28 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 30 64 63 65 65 34 35 64 63 66 63 34 34 38 36 61 61 35 64 32 37 36 39 37 63 63 39 66 30 35 62 61 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 30 64 63 65 65 34 35 64 63 66 63 34 34 38 36 61 61 35 64 32 37 36 39 37 63 63 39 66 30 35 62 61 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f Data Ascii: dz_0dcee45dcfc4486aa5d27697cc9f05ba.td_f(109,3)):null)]=td_j2(td_og(td_hK(td_LA))+td_og(td_hK(td_TE)));}else{td_lz[((typeof(td_3z.tdz_0dcee45dcfc4486aa5d27697cc9f05ba)!=="undefined"&&typeof(td_3z.tdz_0dcee45dcfc4486aa5d27697cc9f05ba.td_f)!=="undefined")?
2024-09-11 17:25:50 UTC	16384	IN	Data Raw: 31 39 33 66 63 34 38 31 37 38 35 34 66 66 62 36 32 31 34 62 63 37 64 65 62 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 33 7a 2e 74 64 7a 5f 32 37 62 32 31 61 31 31 39 33 66 63 34 38 31 37 38 35 34 66 66 62 36 32 31 34 62 63 37 64 65 62 2e 74 64 5f 66 28 35 37 2c 36 29 29 3a 6e 75 6c 6c 29 29 7b 69 66 28 74 64 5f 78 53 3d 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 32 37 62 32 31 61 31 31 39 33 66 63 34 38 31 37 38 35 34 66 66 62 36 32 31 34 62 63 37 64 65 62 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 32 37 62 32 31 61 31 31 39 33 66 63 34 38 31 37 38 35 34 66 66 62 36 32 31 34 62 63 37 64 65 62 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e Data Ascii: 193fc4817854ffb6214bc7deb.td_f)!=="undefined")?(td_3z.tdz_27b21a1193fc4817854ffb6214bc7deb.td_f(57,6)):null)){if(td_xS===((typeof(td_3z.tdz_27b21a1193fc4817854ffb6214bc7deb)!=="undefined"&&typeof(td_3z.tdz_27b21a1193fc4817854ffb6214bc7deb.td_f)!=="undefin
2024-09-11 17:25:50 UTC	412	IN	Data Raw: 2e 74 64 7a 5f 35 36 66 66 61 65 30 33 30 39 35 63 34 66 34 63 38 63 62 30 38 61 39 33 65 33 37 62 35 62 61 38 2e 74 64 5f 66 28 31 37 37 2c 31 34 29 29 3a 6e 75 6c 6c 29 2c 28 28 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 35 36 66 66 61 65 30 33 30 39 35 63 34 66 34 63 38 63 62 30 38 61 39 33 65 33 37 62 35 62 61 38 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 7a 2e 74 64 7a 5f 35 36 66 66 61 65 30 33 30 39 35 63 34 66 34 63 38 63 62 30 38 61 39 33 65 33 37 62 35 62 61 38 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 33 7a 2e 74 64 7a 5f 35 36 66 66 61 65 30 33 30 39 35 63 34 66 34 63 38 63 62 30 38 61 39 33 65 33 37 62 35 62 61 38 2e 74 64 5f 66 28 31 39 31 2c 31 37 29 29 3a Data Ascii: .tdz_56ffae03095c4f4c8cb08a93e37b5ba8.td_f(177,14)):null),((typeof(td_3z.tdz_56ffae03095c4f4c8cb08a93e37b5ba8)!=="undefined"&&typeof(td_3z.tdz_56ffae03095c4f4c8cb08a93e37b5ba8.td_f)!=="undefined")?(td_3z.tdz_56ffae03095c4f4c8cb08a93e37b5ba8.td_f(191,17)):

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49902	52.24.39.108	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:49 UTC	2198	OUT	POST /portal/rest/reporting/batch HTTP/1.1 Host: connect.intuit.com Connection: keep-alive Content-Length: 2368 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ssr-session-id: de5d3f8d-e21d-4427-94d5-b0de3b939741 sec-ch-ua-mobile: ?0 Intuit-RealmId: 193514612387714 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLWY2MjVkMGIzMjU0ODQ0MGI5OTkxNjg0OGRlZDAyNWM4NTVkNGY2MGIxY2I3NGViYWJlZTIwZjBlNmI5MjlmZmRlNWJiNTY0OWI2MzM0NzM1YmM2NDE2Yzk5ZDU1OGIxMSIsInJlYWxtSWQiOiIxOTM1MTQ2MTIzODc3MTQifSwiaWF0IjoxNzI2MDc1NTIxLCJleHAiOjE3MjYxMDQzMjF9.eUZWGwfr0ERXxGwV9eu3GdOjX-bHcWHbsbWA9iKftl4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 intuit_tid: cp-cae1d-875d-422f-a876-8399d92001a8 Content-Type: application/json Accept: application/json, text/plain, / Intuit-DomainId: INVOICE:193514612387714_193514612387714_E408B8-1722543575 Intuit-ACSToken: scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11 user-signed-in: false sec-ch-ua-platform: "Windows" Origin: https://connect.intuit.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.intuit.com/t/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545; AWSALB=PiXqMhoj2PRhck/5rcgB1PoGeU1wJMeR22K9363vbJYeNnHFJXoxD+bEURFzN6+lXtCpHqu+dNZ3/v87PvhTP+8E6iia+ivwDnSHbSrbJOzAGs8hL7l33yhIFGrh; AWSALBCORS=PiXqMhoj2PRhck/5rcgB1PoGeU1wJMeR22K9363vbJYeNnHFJXoxD+bEURFzN6+lXtCpHqu+dNZ3/v87PvhTP+8E6iia+ivwDnSHbSrbJOzAGs8hL7l33yhIFGrh
2024-09-11 17:25:49 UTC	2368	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 31 54 31 37 3a 32 35 3a 34 36 2e 37 39 30 5a 22 2c 22 65 76 65 6e 74 22 3a 22 70 72 6f 66 69 6c 69 6e 67 22 2c 22 61 63 74 69 6f 6e 22 3a 22 50 4f 53 54 3a 20 2f 70 6f 72 74 61 6c 2f 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 2f 70 72 6f 6d 65 74 68 65 75 73 2f 70 61 67 65 4c 6f 61 64 22 2c 22 61 63 74 69 76 69 74 79 49 6e 66 6f 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 2c 22 6c 6f 67 49 6e 66 6f 22 3a 7b 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 6c 6f 67 67 65 72 22 3a 22 72 65 70 6f 72 74 69 6e 67 2f 50 72 6f 66 69 6c 65 72 22 2c 22 6c 6f 67 54 79 70 65 22 3a 22 6f 75 74 62 6f 75 6e 64 Data Ascii: {"messages":[{"data":{"timestamp":"2024-09-11T17:25:46.790Z","event":"profiling","action":"POST: /portal/rest/reporting/prometheus/pageLoad","activityInfo":{"status":"success"},"logInfo":{"logLevel":"info","logger":"reporting/Profiler","logType":"outbound
2024-09-11 17:25:49 UTC	1101	IN	HTTP/1.1 201 Created Date: Wed, 11 Sep 2024 17:25:49 GMT Content-Type: application/json;charset=utf-8 Content-Length: 36 Connection: close x-spanid: 32451746-cbe0-cb72-5017-1e3bc34a9989 x-amzn-trace-id: Root=1-66e1d29d-60104be3352e101a6fc7a89d X-Content-Type-Options: nosniff Set-Cookie: AWSALB=f4H9jNYBOmqw3G/7hvsPIb+vG2oqLXYs4HTg2fkPIarPDEmc0o5+4wF0D64zWoDc8m/TVpb5G/qqPWzYZtI0UEKJBzwB4Ywl4Lsa8Sw99tdenMQu7SGk4p/eiYr8; Expires=Wed, 18 Sep 2024 17:25:49 GMT; Path=/ Set-Cookie: AWSALBCORS=f4H9jNYBOmqw3G/7hvsPIb+vG2oqLXYs4HTg2fkPIarPDEmc0o5+4wF0D64zWoDc8m/TVpb5G/qqPWzYZtI0UEKJBzwB4Ywl4Lsa8Sw99tdenMQu7SGk4p/eiYr8; Expires=Wed, 18 Sep 2024 17:25:49 GMT; Path=/; SameSite=None; Secure x-frame-options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate Cache-Control: no-store ETag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI" Vary: Accept-Encoding x-envoy-upstream-service-time: 20 Strict-Transport-Security: max-age=31536000 intuit_tid: cp-cae1d-875d-422f-a876-8399d92001a8 x-request-id: cp-cae1d-875d-422f-a876-8399d92001a8 server: istio-envoy
2024-09-11 17:25:49 UTC	36	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 72 65 73 74 2f 72 65 70 6f 72 74 69 6e 67 20 73 75 63 63 65 73 73 22 7d Data Ascii: {"message":"rest/reporting success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49903	3.229.155.61	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:49 UTC	676	OUT	GET /consumer-resources/dispute-resolution-2 HTTP/1.1 Host: www.truste.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:50 UTC	1100	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 11 Sep 2024 17:25:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: Apache X-Redirect-By: Yoast SEO Premium X-Content-Type-Options: nosniff Location: https://trustarc.com/dispute-resolution-2/ Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; connect-src 'self' https:; font-src 'self' https: data: .fontawesome.com fonts.googleapis.com .googletagmanager.com; media-src 'self' http: https: data: blob: .vimeo.com; form-action 'self' https:; frame-ancestors 'self' https:; object-src 'self'; frame-src 'self' https: .trustarc.com X-XSS-Protection: 1; mode=block Cache-Control: max-age=600 Pragma: no-cache Expires: 0 X-Frame-Options: ALLOW-FROM .google.com/ Strict-Transport-Security: max-age=63072000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: autoplay=(self), document-domain=(self), encrypted-media=(self)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49907	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:50 UTC	492	OUT	POST /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive Content-Length: 1204 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://connect.intuit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:50 UTC	1204	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 32 36 30 37 35 35 33 38 35 39 32 2d 73 6a 63 30 30 30 30 36 37 35 2d 32 62 66 63 64 34 32 38 2d 38 65 36 36 2d 34 34 38 66 2d 61 36 64 34 2d 62 31 66 30 66 37 37 61 66 32 35 65 22 2c 22 63 73 69 64 22 3a 22 64 65 35 64 33 66 38 64 65 32 31 64 34 34 32 37 39 34 64 35 62 30 64 65 33 62 39 33 39 37 34 31 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 32 36 30 37 35 35 33 34 39 31 39 2d 43 35 33 39 37 39 46 32 2d 46 30 32 44 2d 34 31 41 43 2d 38 36 43 34 2d 33 38 46 30 35 45 41 41 44 46 43 41 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 70 61 79 61 62 6c 65 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 37 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b Data Ascii: {"ds":"js","cdsnum":"1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e","csid":"de5d3f8de21d442794d5b0de3b939741","psid":null,"muid":"1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA","context_name":"payable","requestId":7,"sts":"gAAAAABm4dK
2024-09-11 17:25:50 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 666 Connection: close date: Wed, 11 Sep 2024 17:25:49 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 766485e2-20fa-4561-975d-023da6b30b2c
2024-09-11 17:25:50 UTC	666	IN	Data Raw: 7b 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6d 34 64 4b 65 7a 6e 79 74 67 31 31 4a 76 79 4e 73 72 49 6b 75 78 46 63 55 6a 65 6a 67 48 68 4b 68 36 68 4f 6d 6d 32 4f 36 41 53 31 79 57 44 4b 4f 50 50 67 70 6b 6c 59 42 61 61 5a 6e 59 65 6c 7a 58 37 75 47 38 42 5a 31 30 31 37 66 7a 50 2d 36 50 5f 39 55 33 4b 75 2d 78 4e 35 38 2d 51 72 33 69 44 68 67 7a 6e 2d 49 58 47 51 33 58 6d 70 38 4c 64 71 6e 77 43 50 48 68 55 4b 32 33 33 54 4d 68 66 38 71 53 41 44 75 48 6d 41 62 4a 74 51 39 57 52 75 79 30 35 2d 4d 50 6a 36 67 52 51 4d 50 31 77 2d 59 6e 6b 64 61 6d 61 72 70 32 38 77 6e 45 4a 6e 68 46 65 6f 75 48 50 61 55 58 42 44 42 32 6a 33 34 41 55 6d 6e 6f 65 4a 7a 4e 71 68 6b 39 4f 4a 49 72 4d 4e 55 54 39 55 76 67 4e 4c 74 63 4e 6b 68 63 79 68 6d 31 52 5f 4b 79 65 55 Data Ascii: {"sts":"gAAAAABm4dKeznytg11JvyNsrIkuxFcUjejgHhKh6hOmm2O6AS1yWDKOPPgpklYBaaZnYelzX7uG8BZ1017fzP-6P_9U3Ku-xN58-Qr3iDhgzn-IXGQ3Xmp8LdqnwCPHhUK233TMhf8qSADuHmAbJtQ9WRuy05-MPj6gRQMP1w-Ynkdamarp28wnEJnhFeouHPaUXBDB2j34AUmnoeJzNqhk9OJIrMNUT9UvgNLtcNkhcyhm1R_KyeU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49904	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:50 UTC	1375	OUT	GET /dToK1MV5MGu3tON6?54906d7b2a507590=e68J4le_aX5FwXPztJQEBqorlBykjp6odpX6FNw9PlEU7I_GBQjvoSeOzKeo2mw8x8a9C1izvY9Ni5zyrMNNugjnBpPdxTzJL49xljnsAsDGb2E9Fa4H9YvRawU9m0b5m3gzk3GeHCSvTzohBqHAhh-S2ISEt2O6HA&jb=33342e647b633f3737383431333963646134643634673d3b343031633b6e33373535393f6c6132 HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://connect.intuit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:50 UTC	362	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:50 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 0 Content-Type: text/javascript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49908	52.141.217.134	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:50 UTC	387	OUT	GET /client/v3.1/web/wup?cid=ironfist HTTP/1.1 Host: wup-04e01638.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-11 17:25:50 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Wed, 11 Sep 2024 17:25:49 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 5695ab98-a7fb-4775-b45c-85b5026a414a
2024-09-11 17:25:50 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49909	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:50 UTC	932	OUT	GET /fp/clear.png HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:50 UTC	359	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:50 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Last-Modified: Wed, 11 Sep 2024 17:25:50 GMT Expires: Mon, 10 Sep 2029 17:25:50 GMT Etag: 49921306d4574ac8a68b4fda58a9fa56 Cache-Control: private, must-revalidate, max-age=0 Content-Length: 81 Connection: close Content-Type: image/png
2024-09-11 17:25:50 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49910	91.235.133.106	443	3288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 17:25:50 UTC	1625	OUT	GET /aVktxHr1yxfM_xzW?4a8d7d6febec4476=FKCAGmo7QSqkyWEi9jtKITg7GcpP_pxtSLXM6DoA018fuE13nE6FOJ0lOMN8u5yWkEDn8JdQv-b2ahtER3VP10E2lnbA0VANsej3TTL575_OQK1n0YGXesjvufg9lGgvDCncsV1OrI1sl8uJ39RgZW6fEEaGEVjM7w&jf=33342e647b603f666335346161333164376335363b60393b67396064636c633561333f6b393666 HTTP/1.1 Host: qfp.intuit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qfp.intuit.com/YocZRwxdsxEx-CRk?f40d530d3d770f8f=h5oDc3GmJDzGVFi8yvbcTX6xNkp4pvsf7XoQuE_CuCz7fiZLaXb-bOHMtq5_IswqZlIOK9etJhcuB3VX_EQx8V3wfCuhpX4Q25t91eLwHvUl9k7-Zd5M7nSqkOWDahBmuM08blDBQOebUGpWQXex5v4h-JQh6Mw7dIHTqJdbZXM8d56ospqE9IidpR3FV4-U0oz0vJk7BH98yOFs2ga6qLckhQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ivid=e162b04c-db4a-44b9-9aef-db95ef5870e1; ajs_anonymous_id=75987883-ec90-47c8-aa8d-ff8c16d5eec7; ius_session=16888CCFE5EA4EE5ACCBC28664B129CC; thx_guid=baff9c9c1fd2b1dc8a0afc6747c733e6; bmuid=1726075534919-C53979F2-F02D-41AC-86C4-38F05EAADFCA; cdContextId=2; tmx_guid=AAzIsk62dM2BQrWwI4EIJ4lVURsoygGvFzjlqUHw4EEVAfY3LGP7tSNR4ASJBC85pMJHvL0EZZx_A60Ppk-UT9W_DTR_MA; priorityCode=3468337910; AKES_GEO=US~NY; akid=gip127.0.0.1_gsip2.16.101.55_clip127.0.0.1_rclip127.0.0.1; cdSNum=1726075538592-sjc0000675-2bfcd428-8e66-448f-a6d4-b1f0f77af25e; _gcl_au=1.1.711362503.1726075545
2024-09-11 17:25:50 UTC	362	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 17:25:50 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 0 Content-Type: text/javascript

Target ID:	0
Start time:	13:25:12
Start date:	11/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	13:25:14
Start date:	11/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:25:17
Start date:	11/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	13:25:37
Start date:	11/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4264 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	13:25:37
Start date:	11/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4388 --field-trial-handle=2368,i,3901602984508429509,12818552599674573648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x800000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	13:26:31
Start date:	11/09/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	13:26:33
Start date:	11/09/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	13:26:33
Start date:	11/09/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2068 --field-trial-handle=1736,i,407474587202690358,5460987275091151970,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\de10eb08-25e5-4d1e-89fb-48b950014108.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240911172637Z-169.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Windows Analysis Report
https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-f625d0b32548440b99916848ded025c855d4f60b1cb74ebabee20f0e6b929ffde5bb5649b6334735bc6416c99d558b11?locale=EN_US