Edit tour

Windows Analysis Report
http://www.xn--invitacionesdecumpleaos-dic.org/

Overview

General Information

Sample URL:	http://www.xn--invitacionesdecumpleaos-dic.org/
Analysis ID:	1541615
Tags:	urlscan
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML page contains obfuscated script src

Javascript checks online IP of machine

PE file contains an invalid checksum

PE file contains sections with non-standard names

PE file does not import any functions

PE file overlay found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5772 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5788 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.xn--invitacionesdecumpleaos-dic.org/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\Downloads\Unconfirmed 634769.crdownload	ReversingLabs: Detection: 20%
Source: Chrome Cache Entry: 245	ReversingLabs: Detection: 20%

Source: https://www.xn--invitacionesdecumpleaos-dic.org/

HTTP Parser: Total embedded image size: 10395

Source: https://www.xn--invitacionesdecumpleaos-dic.org/

HTTP Parser: Base64 decoded: ai=Ce535qM4aZ-PAB-6cjuwPocismAmW-uapevK-tLO5ErGQHxABIIjd2SdgyabujOSkwBOgAffim7QoyAECqAMByAPJBKoEmwJP0Kb7rCmWsGG5OZKBJOOmwkypt3AGJWMpJOINzE0B6_J3DK-k0-sS6ruYbsothC5dGX5IhwZ-IpaWqQqrbE0Z9FBJx6x1cjt1uprfGKbKhHHfekPBB1q7SZMRaF0h34gAkobByH3mKalZ1xBEpgIfzWRfeWC...

Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: Script src: data:text/javascript;base64,CiAgd2luZG93LmRhdGFMYXllciA9IHdpbmRvdy5kYXRhTGF5ZXIgfHwgW107CiAgZnVuY3Rpb24gZ3RhZygpe2RhdGFMYXllci5wdXNoKGFyZ3VtZW50cyk7fQogIGd0YWcoJ2pzJywgbmV3IERhdGUoKSk7CgogIGd0YWcoJ2NvbmZpZycsICdVQS0xNjI5NjYyMjMtOCcpOwo=
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: Script src: data:text/javascript;base64,CgkJZnVuY3Rpb24gb3JiaXRhbF9leHBhbmRfbmF2YmFyKCkgewoKCQkJdmFyIGVsZW1lbnQgPSBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgic2VhcmNoLW5hdmJhciIpOwoKCQkJaWYgKGVsZW1lbnQuY2xhc3NMaXN0LmNvbnRhaW5zKCdleHBhbmQtc2VhcmNoZm9ybScpKSB7CgkJCQllbGVtZW
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: Script src: data:text/javascript;base64,CgkJZnVuY3Rpb24gb3JiaXRhbF9leHBhbmRfbmF2YmFyKCkgewoKCQkJdmFyIGVsZW1lbnQgPSBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgic2VhcmNoLW5hdmJhciIpOwoKCQkJaWYgKGVsZW1lbnQuY2xhc3NMaXN0LmNvbnRhaW5zKCdleHBhbmQtc2VhcmNoZm9ybScpKSB7CgkJCQllbGVtZW
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: Script src: data:text/javascript;base64,Cgl3aW5kb3cuYWRkRXZlbnRMaXN0ZW5lcigibG9hZCIsIGZ1bmN0aW9uKCl7IHdpbmRvdy5jb29raWVjb25zZW50LmluaXRpYWxpc2UoewoJCWNvbnRhaW5lcjogZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoImNvb2tpZXMtd3JhcHBlciIpLAoJCSJwYWxldHRlIjogewoJCQkicG9wdXAiOiB7Cg
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: Script src: data:text/javascript;base64,Ci8qIDwhW0NEQVRBWyAqLwoidXNlIHN0cmljdCI7dmFyIF9jcmVhdGVDbGFzcz1mdW5jdGlvbigpe2Z1bmN0aW9uIGRlZmluZVByb3BlcnRpZXModGFyZ2V0LHByb3BzKXtmb3IodmFyIGk9MDtpPHByb3BzLmxlbmd0aDtpKyspe3ZhciBkZXNjcmlwdG9yPXByb3BzW2ldO2Rlc2NyaXB0b3IuZW
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: Script src: data:text/javascript;base64,Ci8qIDwhW0NEQVRBWyAqLwooZnVuY3Rpb24oKSB7CiJ1c2Ugc3RyaWN0Ijt2YXIgcj0iZnVuY3Rpb24iPT10eXBlb2YgU3ltYm9sJiYic3ltYm9sIj09dHlwZW9mIFN5bWJvbC5pdGVyYXRvcj9mdW5jdGlvbihlKXtyZXR1cm4gdHlwZW9mIGV9OmZ1bmN0aW9uKGUpe3JldHVybiBlJiYiZnVuY3

Source: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/themes/orbital/assets/js/cookies.min.js?ver=20190101

HTTP Parser: !function(e){if(!e.hasinitialised){var t={escaperegexp:function(e){return e.replace(/[\-\[\]\/\{\}\*\+\?\.\\\^\$\|]/g,"\\$&")},hasclass:function(e,t){var i=" ";return 1===e.nodetype&&(i+e.classname+i).replace(/[\n\t]/g,i).indexof(i+t+i)>=0},addclass:function(e,t){e.classname+=" "+t},removeclass:function(e,t){var i=new regexp("\\b"+this.escaperegexp(t)+"\\b");e.classname=e.classname.replace(i,"")},interpolatestring:function(e,t){var i=/{{([a-z][a-z0-9\-_]*)}}/gi;return e.replace(i,function(e){return t(arguments[1])||""})},getcookie:function(e){var t=("; "+document.cookie).split("; "+e+"=");return 2!=t.length?void 0:t.pop().split(";").shift()},setcookie:function(e,t,i,o,n){var s=new date;s.setdate(s.getdate()+(i||365));var r=[e+"="+t,"expires="+s.toutcstring(),"path="+(n||"/")];o&&r.push("domain="+o),document.cookie=r.join(";")},deepextend:function(e,t){for(var i in t)t.hasownproperty(i)&&(i in e&&this.isplainobject(e[i])&&this.isplainobject(t[i])?this.deepextend(e[i],t[i]):e[i]=t[i]);return e},throttle:fun...

Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: No favicon
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: No favicon
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: No favicon
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: No favicon
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: No favicon
Source: https://www.xn--invitacionesdecumpleaos-dic.org/	HTTP Parser: No favicon
Source: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE	HTTP Parser: No favicon
Source: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE	HTTP Parser: No favicon
Source: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE	HTTP Parser: No favicon
Source: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE	HTTP Parser: No favicon
Source: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE	HTTP Parser: No favicon
Source: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE	HTTP Parser: No favicon
Source: https://free.webcompanion.com/minime/us_es/thank-you.php	HTTP Parser: No favicon
Source: https://free.webcompanion.com/minime/us_es/thank-you.php	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:50250 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/04/Invitaciones-para-cumplea%C3%B1os-Banner-1536x346.jpg HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/04/Estrellas-1536x90.jpg HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/wp-plugin-hostgator/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=1721138300 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/releases/v5.7.2/js/all.js?ver=1721138301 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/orbital/assets/js/cookies.min.js?ver=20190101 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/orbital/assets/js/navigation.js?ver=20190101 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/orbital/assets/js/social.min.js?ver=20190101 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/themes/orbital/assets/js/main.js?ver=1721138301 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/04/Estrellas-1536x90.jpg HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/04/Invitaciones-para-cumplea%C3%B1os-Banner-1536x346.jpg HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/wp-plugin-hostgator/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=1721138300 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/orbital/assets/js/cookies.min.js?ver=20190101 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/Invitaciones-de-cumpleanos-pagina-R.jpg HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/releases/v5.7.2/js/all.js?ver=1721138301 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/orbital/assets/js/navigation.js?ver=20190101 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/orbital/assets/js/social.min.js?ver=20190101 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/themes/orbital/assets/js/main.js?ver=1721138301 HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/07/Invitaciones-de-cumpleanos-pagina-R.jpg HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gda&tv=r20241022&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.xn--invitacionesdecumpleaos-dic.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gda&tv=r20241022&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2/232/runner.html HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ClzwDoULPAu65Hm&MD=52pr2yry HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-7820871901371481?href=https%3A%2F%2Fwww.xn--invitacionesdecumpleaos-dic.org&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUElS9I_rKA8CUE5vfInqASDBvdyrD-xTwFkOi30OquysbT4Zv3YCWiux7wNZ4b8sWy7bg1YkLjq89omzKVYIWIrkRuNePUT1P1a-TAfubgirRY2mkjmN-VauajJb_cMrA_5o_xdg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDkxLDY1NjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cueG4tLWludml0YWNpb25lc2RlY3VtcGxlYW9zLWRpYy5vcmcvIixudWxsLFtbOCwiWjdmeFZ6V2NISzQiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-7820871901371481?href=https%3A%2F%2Fwww.xn--invitacionesdecumpleaos-dic.org&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUElS9I_rKA8CUE5vfInqASDBvdyrD-xTwFkOi30OquysbT4Zv3YCWiux7wNZ4b8sWy7bg1YkLjq89omzKVYIWIrkRuNePUT1P1a-TAfubgirRY2mkjmN-VauajJb_cMrA_5o_xdg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDkxLDY1NjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cueG4tLWludml0YWNpb25lc2RlY3VtcGxlYW9zLWRpYy5vcmcvIixudWxsLFtbOCwiWjdmeFZ6V2NISzQiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaSweIXDP1BCjN1xkxC-rcnUk7oACc6FMXAxmdgItqlWkF4lYSw6XGVE_8UF9ycx8WwEGKbpylyalks0uesngYznJl4fyg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbm/vast?dbm_c=AKAmf-A9yQt3YvwzzLIIOKlYK_waZ1eHQbtEsAnayYZcd6bokL5gPGFd-WnJ_FM-GfBJG0dBRWW5VncoQcjxzITNoASrz-Mt3g&cry=1&dbm_d=AKAmf-CfBe8WD2J5dCpSTCu1P-zyHgRZSCSMFe2MHmCwqwCHTa9BsjaHmLGx_HnC5e-UxJQ0ApM7TNBKeXvMLTZVxd3_Fo8hy31NOTsGUt92vDc8VjqcsW132P6RTtaZX5u1QqXTixIcbiqiv6crAd5JOF-4A5DpH17u5QV1hCE_8nBuXd-3Ig0iWV3KRGKLrXa2bsViG8g7uiFMq4CODCmCeGAzNDpghKftXP3jTL9svbcRva4EjYt_KEVA2mQxeYvOoqdlOQ_SZ7PzI9aaM0dFbeIdQRdKooRpZLXMD_Lilq9Ejw7XOl-B0KypLvW9B2T7nqo93-fX4mr6yVvZsZTMK3oO5GPawNXL28KMzDx-bhTzwxE3mBIqhpy-9CH46I3KbQkh6p-P8sI5WfOd5PdqSiyah82JPHh0wb_s7gEZ95Ks0pDERE-vybOhN9h2n4Dvc6XhxlInGR9-xtlgJ4tFpGk1NaYXqLQujUmbmk7rF3nmhYEQ1NOE-pDkuWSlV_SA20cW0BgDt4koA4uUaerUQQtJy1QTwaxtDpluXmcd67inuA52nRNo5OHLrs9NjLm7cswCdu0GVfKmtKzcvQCDY1YOIQGbr8ZuQeG6I3v-sfBJkhPnULuFXKwpV2I6bH24pttotxvEu9qMtAZP6LYVpqukgUNK5NpEWM9PlnERWTxI485Y92PchO9tXcKQEchOgBRJJJDf_ugHdbesO1aErvI0tEsOEmzAjZtqQzU63vGcO9b4VcLOupCoeTCXka98bMcIzsbQ2jVLL6aTxnz24HfQjWCSFIvDXNtbjk995w7Ib8dmzEbnx5ZeJ3PPKQaKLaH0GQtfDtwNJSqz2zwhWMqev666WNTCPP3TYFHprbkf3QzHfFGpkKGroA6QS93a0KpQfJG2Wolxk880shBuUNKdcmwjzCN1wrOzD49OzZn-o5XW412oFjXl0B1UyvnF2lKzMh8QQOiiCU6Z53cJq_LvFsTCPEcBOQZ7YQq2S_xRr0rRs3VXLwy6v_U1WEUyenxyEDYvC1T9Q5ZRzXZBdYW-_6Z4i_VMWrMf4RR8vSAszJf-8Dt_QN5teBZoIN6rKZnD6oidpzXpYLLKnYXnV6bAcPkmDUgQ7MA27N52EsUiZbwof7cmu7M4GuSOdUJnDVghePIlK5PoetS6VwZz-r770VxzPpKF6oANmVIk1HOmNsZ5BOacyFkFzjITYQFOgI7KtusHCyB0gYw0SOiVoTd9O7qNUZE3ulda2_93AfNARJ-2EBs17bzTid-k-NFuehqhXIfcQ3LdeII0ziXSrSt3N-d_FyQE7wuDM2L68tYbiteO7kbUIFSKCJ8CvN0W9U6rm0Go2z6IK2wTUF2ZJZzzAUn7JxdWQoQR2W0sPhnOTNdSI1XlEHXTI0GyNM5q9nBFtqj8o0HheADV2VYhihrXSHkDBfBTQrnRAQVXAEWQ4TRqBFWliXAU-ZpAfdHN_-4YQ-PCfShfYkT0mOCzZINnkBUtzT187q6__NBFOe5sxvk-Hl2H_IeUEvAEbLabO7TnBbw0ZjcZfqmKx9LJX8_Hr-idgz68TX3QZgNbhWU2o_r-oX1l26Z0Hk2PzEhztXkPf4A5Til6t3u8axrCL3BCbIYlO4nTUo6gKa8p80oY7xModZ1EToQ1LPLxSD_D6dUVadZ2HoAHkWEWLX2yW-c23vp701TsrSnbTFL5f7SlBuZ9Ki5u7A7fEzidLVfpoBtmmkss-WSA60KllciN3o78GEBFkWEZjxmZJbsnKtz2WqBKftg_0HiZRqWMEfgpZ-IBHZINQ04s93i6WV_YmvpMrU2l_J50tOs7ovlbTzsncDjMzRueI2UOVeQrgqRTLTd9HASn9PEpWWKo0UbHR-Q7KhJU3AGESkina2RBY_KXCNJW15sLvPmsfZ42kN3E_gKSVusPvpRm1wa7RPrGYRZ5hVxAWcyh_-Of4fVlGXD6w5ihpTyWf8rOVV0in05bOsGLszvqbMwP2MPLC4OuR7MpkpCS_6QD08BXPmeCUY9vF_cMECKBQaNlCw4nNnax_PvKxkaJ97qFsc5L1v_vYAOjGritAXBI90KCbgqQZ6PTS6dSlKndH8o19x4Dxk_jgJLuZDZqwj9yg051WPlgLEykpKjqzw_DjqT-t8a49hOsS_TUuR7hQmtXIjtKX16gEV9Lq7-tHq7Hj4oESv3FCn_VTWArt6e_mL9ZgpcqoBC6ftPJPuUeGc0fEadvhc6pEXp4B-iUzjPn-_3YQBKr67mea0FvGVdEEe5soO3CaTJOKS_4tO-UAkU93vPDHDLQu5QxJQkz5jDKfIdpkC5Q1Ba50V7KNLZdzbb4xVoePpkLD_XFAkR5gS2VWYxudHAFYDkhgz_p_br7c-VERF3urvqF3ll5jhvSMw4dln4swCFBUTHo31JyA_wKRUcREZpEIf-SZ0ywmVdysJOeCAc81Jp00kKBk8R_zi_DKv2QC2no3d6pp2nzWRzNSZCJky7ja4hpB6AXnTAEhAZ8fN9ZNsEALHqpq3nLG2P_EUOa07bDrNTRejaVuQCfrliCElw6bB41xYAaHT0NoLOdZRIrqvxFZTyv6Rbn_6lno9Ny3UsRfjrrlkn8IMFF6SNRvCorGYYKOlEzTniC4eQ7wLtHTvLIlB96f1ddLlYW8Gwh-ZzwOuTCT2s3pnqQZqxJwZ0IoUa_awoVoCtKXcw9vtOawi6hUu0nJvTt2g4PpXYbn6XpQ-sFkjc5hDL3dKWh9ks5xnIn0LfKsqTBAWcFfpEKTdd4vBa7teBtXYY20O7oqM2p9x7QcXm0u2w4sAjSzwJf8FMh734X-Ymoa6u9PXPNq7pATxHFjwnCmK85Pb13QlI6IFn69
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVj0DK1sRvTR19UsqrnxFeucgRs-KNQ80sUAUHXbfgCqcyDYz6b__swfJJl3oSzk-geBPeTb-XIIxkqLE1KuvuDnVa4hXH3zBWXFLWTLzfxiISiD7Ix5g6yJay4897baFSBTUEyv-cR1BBn9_OBMhL7Lf2VDOCynhbatqjt-mmPQd1ad0Qhl5iCOfZ6/_/blog_ad?/AdForm_trackpoint_/ad728t./overlay_ad_/vghd2.gif HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbm/vast?dbm_c=AKAmf-AfC0uDWPf4lJVl5yNcYt99LMNojNAyB28W9FQzTutldpMeqVRcg4KTF8x8AbAjLR0g9E-6qUgoCT92YCX7Vqta6FyoEQ&cry=1&dbm_d=AKAmf-BXnmIyXEaue3V3L75d7SIhkmkkkxjQyOsm1io_muQf68TpQzVdlB9T3MMzsgmEuqRbOscvCI-uUCvg3pjmrXB_Wez2RiTtFT7FpoMMPTE43AthCck28QrXoCqYANmjr9IwJzOhpoTeXUMYTjoNgrtomYx4UztXguptTaK6m9pgDOq4G7NZctZRy4EZjCuazJg0Saan0bcySrNX8LGoJ0AFDQX_3z8sPkXl61y2PQ-VCWDNPVdybu_6WfIavZKrJVHP7DdiUM8S1c1nXkhX8ewj50P_6ymfD57SQRe2FTuaG1Ixusc6PQCdTuSK0L0tC5zTW5W0_rI15NtVAZL_ifoAwoFcD578IqNlafztGZHSkTX9Esh7MjiaXZf8UtCs8p7RVAlVnrwXciVfbBLLpO49BmFqIBRweJjbf5oSCWru7ny70_GJfeZRtCpa51NyocipkjEeXzadbH4_Jcx4j4cU7ykB2BRieXhIKusQkC2Rx8Zomyto2gM9rboshd-PA3kb_G70Z8LnR48zGDyWWmsHMEd_AsfTGhh651icBgTDbIBGtrjkCcEUMvF4Uc-iZfLnS6oeAoGKoRauS1op3PRTsEM0xsgDu2TB0pb5q2dqxp1NNaUZKVC_sDRn-Vt29SfKjlsmSpk2WsKqUydnCHEWd9g8E4GEkBraMT5kZyEO2mD4bglJN6VzgWRX4WrHfIhCDfgt5ScvUakGzZV_EStE_9M_uFhMHLCDuoq0xOdyRAt296dwUseh1ztyyp8-VK4wRInQqN3ZeV3r1Ct_VDUH1DQ_Tet-eZpSI84kaYNWx8UQciyDxy8MM-7lABjGhEPq0dB_mYf-DjTaF_b_SB3iDraQJrCHK4PTRNSTnRFGQRVdKhsGGYYaxqFNxx216CtJryvp_TN020Lnsyput9LbAlBdaN6oNyoe4mNnZzcSGGkJj16Qp92qfmhlFIm6rszFAJP46B7VK_T1xAtxyNrCocbr5c4iin5b4YFiPzLaxL11XIHctBWIgoPNpH1f2m4VcLtUtYFfP-ZHkT4c0Viqvfq_Jehotus-9sAICfh4B14mNclUoccReyZxs8cjGdBNEqTS_Q-UPLzzEi--dgJpgzyWFZ-JnRq-BLARHPaQqa_mI3iP8O-XsS_um3JplHR96tElTcQnaWhc41C-DDB_vN2TEZQnjsxBk8GUDPjTqrPYFmHu5HRCPYuATBAxwz5MOVk4GG6ofJTBY5BTmovTdx3USzIfCxHoQBr_FeMLBw-LW_WJ7b6vd4fZHQUT3X1XqydKMm76geN1vrHoOG4weNe8JXUFmSEzzrHH08BPLOHu6S_Dr7t3_WKanP6Xbwfk88s7hO-9ZM3qBEXM5oll2QIOjclB3LDJFt2WeKaxo0ZnhQQb0Y0wXv0Dz34IxKVPK-4dmGSyLHtmZWgF5O6NiZXG7kVybXO8T7-8iWCDAjx6jHm0n2Hytx9j9ndvjpY4XqUtMw-GACJJXq2ZiwzaFU3hVfjO3M5g0QfU2UQEySu41TrFCyX3IyJUtn9IXPtKvkJRtDwu6bXRekGn0KqSuhlso62Pq3loeBIsxmXDe0aZKvmmkmxiSpyZxeZdCKIdIfByQ2-c7ggwLVf-BBEEcyBKShs3yG2jQ8dySVddNKFSWy6enLDuTnDQ_W_onOtQbTkoa5kdTrjss0EYAmjrsMaDH20i57lUw_cdrkbpyBfNZ7ocEyRlqXOzWIAhXvsBQNrcFpO5fRD7330ap8bwbji29presmYYTHFbUqJi-M7fxAcxw6xFe8P1JDmkWYJl_vD-S1bxlk9xzDVKJON5taRasRWVi2FC8AMJ5f_cNCf7yf8rNpWiijkv2PnZ9wmUt8TSZj-ePFIdu6qnEzB706_SIw4JMwpXd4TrmUqo6tdgGUa33gS9N7BxGbxv-pfcmOM6BqFug9nuC_6aPC4J_pngsCVVoDThYReV20pyady6YlBUfKaKB8ASl5X9gHn-kojS5Oz-7HS0G_leAddC5cw8sO8pSN0USqq8SC9wgjcRclA_wicbUzNGIS-86vjBJj3CnT_zQSyT5_4BXz5siFNlPQRs8OVNQU_OvBrj_P91cxOHUzIfdu2zPWc5o6WLMYKElNoD24j7ANnseL1mKUHj2IIH-fCszqFWOcjfBkeAjSkh09dZLPk0EVUx_n0T5iJWPfHT2Vhg7UI_k-NrKNnFcYewFMsq2Izwfyc_9or4sRgmsUdcFgtX7Wgt5UY6ckiqdbkP70xs471VD3-Q1mgY7Bh3BbtSlbyiB0tWNc9oSDWkTEAm-k7joz5NPenSSiVS_bPETw8knHvY59ImQLrmcjE4Oj1GeS5ytDYLPFAOx_uVJ6obXcgmQpY1neqllr1SvRXhADOjBz4eBsK-n-Tsx92XBaPbTVtHGvW0QXPBY4Kf2mMzTMWBjlrYW_Vyb2ZBbqkW_xQ7-QmozxL6fgUv_hWUWdbYrVlUNheSlnc496nqbm-P4_T985bGhCBE4jAciC-9cub8S89ApqAgJiWiFelCNWI1v6DdQDYPuNc4xMcUsC5erWr94hsoIEI2WCAotMYRLr_gxBI9DoM_cKPAMUwsGRC53v-fwQorctCBndMqsf4pfSqH4PEsxEU8xYar4GpW2Fm7ppRNjkQL3yRKaG8zrd8QyIgwx4rtC90a2qmThA_BAGHGrsqrEl3lUwLjZfPelGy2lPXJLNJq5pvs5BEUiMp5n88XBCQmzG2O1P_Cavcab_8-rMPK0aE1vwpQyEqG0D5ov5EXxi5aHkLJpX0CieDNj8GGvkaGYBAR2jYLYZUeGjbl8gD4dp8R89h7TyN4PF7SjYWug62ZiQvVQvGgJmvQ1SyoMfnEqf0ix
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /generate_204?Oj1G2w HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/AdxPixel?google_gid=CAESEH0TxfleCdecceb5s-O5Jhw&google_cver=1&google_push=AXcoOmRepKFeoqcIsWkdOuUMfywMjPqeVl7pGHqeUpbaw3GbcIUPSYQqh4qZhpfVp6kkoFAosBYzKnoNBxNGurlRbZMY6v3fpaVe1bc HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=19&redir=1&google_gid=CAESEEjgybLKWpvTmOG3YwvTb1E&google_cver=1&google_push=AXcoOmQhelBJ1wSH0Emqb3WkFuG43WvNf_vcumYqWmVERJGxoaWuO0fjnuO8-WXIMbvVCgf3w1e903sl5dxzWdm72uQ3Ek0Y12jtKpc HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=559960&gp=1&google_gid=CAESECJtRE2ItFqaWG-x9yvagB0&google_cver=1&google_push=AXcoOmS4tHHGCtIOgdS7IzRliJTgSqBb63NKj_93oDpNUY8vgaXYWL3yTtZoE8sF7BzRsh8n7sV2Hy3D1w0D5akleQLR7iSfI0GbIXuw HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13I8PbalMp9BRXe9tqjULLelPKubrTLrxE3WNYBgXWMo6jRbzuEWY4J2y6DsBBF7f16-aVv3qYhm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
Source: global traffic	HTTP traffic detected: GET /match/google?google_gid=CAESEEtXcYn5XTz2aUPkx96L_5s&google_cver=1&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q HTTP/1.1Host: sync.gonet-ads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxWUioDyXwcVGf1wg8irhXOy6T0P2_ntxw6Cjkh5tBOOTi33DNT0Xyor2GXtFskIKdvQmHNAexvlC_nnKyvs-Bj6f_k8bMIMnRA8Rdo-oLzyf63ht042M3jTIHW46W70wkHhwrPUAg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDk1LDgwOTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3LnhuLS1pbnZpdGFjaW9uZXNkZWN1bXBsZWFvcy1kaWMub3JnLyIsbnVsbCxbWzgsIlo3ZnhWeldjSEs0Il0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/sodar?id=sodar2&v=232&t=2&li=gda_r20241022&jk=3613037213600863&bg=!LS6lLmHNAAbl67hexes7ADQBe5WfOMdfiGhO8QHrqQv9UCg34hgu9phBdt65j56Q8VFYbzH82B4Kv0RkPOpN4_7J7Yc0AgAAAVVSAAAACWgBB34ANhRUjccoubEfL36JNVCoidz1zoS4bM1RBFc5-FdpMhF3bSdbyJ3Ncqm2agtIa1qGC8yJ-0fMv5kCvtVxMI_NJmiuE1b1XE8qpWIJsBeDW8vCcr77jZ1poGPDa-pyJLNh8V1Niog3rCgq0G-DZfj4xGcrQjrUtq7kWTRahg1tOz9v-O0dolewmGDdLXufq3XceVWbKMqtZjW-88QhXGeNm2hpW3mjd_gGkgZF4KadYsSJuYDwhDvETcbhmaAKVhlhd2UxJ37R28_USq1Mh_hBI_XKbUJMNoYJl3U5kjHkcRy11d6cOWfKWLovujjAB2R6hVczW9NNGyvYfDXTcAq-9eEDtK_yn6BwLx746QO8k9RyBu9WA92Z3zasZJiaypnr2Z0RKoWsJox2-3-Q6U0GwMMYtqUOvQZdDnGCt7yIY7jakw69nBv9ZGT2PJVv_NVRXZMZgCzBThNj4-2aK2CatP7ukZwbXiq3CNRxSibegwg0e965kr9tDwcnw54xxM5BE8AbPgr6ttxpiOUOYXkPFDkGPVAoM_KMp2TVU5T4tmIReg7zmZaF1ZO3wCwC6Rgr5OeRa-n9cuY_9ONYsTP0cTrwFWu72c-JAvtHVJ2ub_Z8LKDhBH8V6FQyVl-b4GTVyqFQUHRxsnLDGxydPi1UEiXPMyJVar5KJflN_eGk5jhA3w0ovXKMeEdT0hOpjyOC8ELCt7b4hsJptkIP-iTCz5cQKfOcsmLOKIUw58S5KS88yvzCjvsoJwsBfMNUG2k7KzK6jM_62M3fW1d-npO_5G2_kGj07mlOVgBhIHFWusRartElkmJkh4yM6kv7ZChpai87BHLD8IORX3XQ_u-sTaq5pa5Qt9fEgxO_jQzQowFO371ww0dsCOKmzs0vUsdPTNsKyTtf6QfzBiKQ5Gl82IeTJCn8EbDuy_GSByn5yKoYf1JMh1HcwZC-6cLuuIwI8Qzbb2udQH6YWTVa7hIHeVjMKTQa9TVdTdRxL3CcDxYYQBv_9mx2OQ HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=rDZxZPsmhcfpRBrokqox_1729810097453; ts=1729810097
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pulsepoint_inc_&google_push=AXcoOmS4tHHGCtIOgdS7IzRliJTgSqBb63NKj_93oDpNUY8vgaXYWL3yTtZoE8sF7BzRsh8n7sV2Hy3D1w0D5akleQLR7iSfI0GbIXuw&google_hm=UkV6VmxpZVIwa0tI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
Source: global traffic	HTTP traffic detected: GET /dbm/vast?dbm_c=AKAmf-AfC0uDWPf4lJVl5yNcYt99LMNojNAyB28W9FQzTutldpMeqVRcg4KTF8x8AbAjLR0g9E-6qUgoCT92YCX7Vqta6FyoEQ&cry=1&dbm_d=AKAmf-BXnmIyXEaue3V3L75d7SIhkmkkkxjQyOsm1io_muQf68TpQzVdlB9T3MMzsgmEuqRbOscvCI-uUCvg3pjmrXB_Wez2RiTtFT7FpoMMPTE43AthCck28QrXoCqYANmjr9IwJzOhpoTeXUMYTjoNgrtomYx4UztXguptTaK6m9pgDOq4G7NZctZRy4EZjCuazJg0Saan0bcySrNX8LGoJ0AFDQX_3z8sPkXl61y2PQ-VCWDNPVdybu_6WfIavZKrJVHP7DdiUM8S1c1nXkhX8ewj50P_6ymfD57SQRe2FTuaG1Ixusc6PQCdTuSK0L0tC5zTW5W0_rI15NtVAZL_ifoAwoFcD578IqNlafztGZHSkTX9Esh7MjiaXZf8UtCs8p7RVAlVnrwXciVfbBLLpO49BmFqIBRweJjbf5oSCWru7ny70_GJfeZRtCpa51NyocipkjEeXzadbH4_Jcx4j4cU7ykB2BRieXhIKusQkC2Rx8Zomyto2gM9rboshd-PA3kb_G70Z8LnR48zGDyWWmsHMEd_AsfTGhh651icBgTDbIBGtrjkCcEUMvF4Uc-iZfLnS6oeAoGKoRauS1op3PRTsEM0xsgDu2TB0pb5q2dqxp1NNaUZKVC_sDRn-Vt29SfKjlsmSpk2WsKqUydnCHEWd9g8E4GEkBraMT5kZyEO2mD4bglJN6VzgWRX4WrHfIhCDfgt5ScvUakGzZV_EStE_9M_uFhMHLCDuoq0xOdyRAt296dwUseh1ztyyp8-VK4wRInQqN3ZeV3r1Ct_VDUH1DQ_Tet-eZpSI84kaYNWx8UQciyDxy8MM-7lABjGhEPq0dB_mYf-DjTaF_b_SB3iDraQJrCHK4PTRNSTnRFGQRVdKhsGGYYaxqFNxx216CtJryvp_TN020Lnsyput9LbAlBdaN6oNyoe4mNnZzcSGGkJj16Qp92qfmhlFIm6rszFAJP46B7VK_T1xAtxyNrCocbr5c4iin5b4YFiPzLaxL11XIHctBWIgoPNpH1f2m4VcLtUtYFfP-ZHkT4c0Viqvfq_Jehotus-9sAICfh4B14mNclUoccReyZxs8cjGdBNEqTS_Q-UPLzzEi--dgJpgzyWFZ-JnRq-BLARHPaQqa_mI3iP8O-XsS_um3JplHR96tElTcQnaWhc41C-DDB_vN2TEZQnjsxBk8GUDPjTqrPYFmHu5HRCPYuATBAxwz5MOVk4GG6ofJTBY5BTmovTdx3USzIfCxHoQBr_FeMLBw-LW_WJ7b6vd4fZHQUT3X1XqydKMm76geN1vrHoOG4weNe8JXUFmSEzzrHH08BPLOHu6S_Dr7t3_WKanP6Xbwfk88s7hO-9ZM3qBEXM5oll2QIOjclB3LDJFt2WeKaxo0ZnhQQb0Y0wXv0Dz34IxKVPK-4dmGSyLHtmZWgF5O6NiZXG7kVybXO8T7-8iWCDAjx6jHm0n2Hytx9j9ndvjpY4XqUtMw-GACJJXq2ZiwzaFU3hVfjO3M5g0QfU2UQEySu41TrFCyX3IyJUtn9IXPtKvkJRtDwu6bXRekGn0KqSuhlso62Pq3loeBIsxmXDe0aZKvmmkmxiSpyZxeZdCKIdIfByQ2-c7ggwLVf-BBEEcyBKShs3yG2jQ8dySVddNKFSWy6enLDuTnDQ_W_onOtQbTkoa5kdTrjss0EYAmjrsMaDH20i57lUw_cdrkbpyBfNZ7ocEyRlqXOzWIAhXvsBQNrcFpO5fRD7330ap8bwbji29presmYYTHFbUqJi-M7fxAcxw6xFe8P1JDmkWYJl_vD-S1bxlk9xzDVKJON5taRasRWVi2FC8AMJ5f_cNCf7yf8rNpWiijkv2PnZ9wmUt8TSZj-ePFIdu6qnEzB706_SIw4JMwpXd4TrmUqo6tdgGUa33gS9N7BxGbxv-pfcmOM6BqFug9nuC_6aPC4J_pngsCVVoDThYReV20pyady6YlBUfKaKB8ASl5X9gHn-kojS5Oz-7HS0G_leAddC5cw8sO8pSN0USqq8SC9wgjcRclA_wicbUzNGIS-86vjBJj3CnT_zQSyT5_4BXz5siFNlPQRs8OVNQU_OvBrj_P91cxOHUzIfdu2zPWc5o6WLMYKElNoD24j7ANnseL1mKUHj2IIH-fCszqFWOcjfBkeAjSkh09dZLPk0EVUx_n0T5iJWPfHT2Vhg7UI_k-NrKNnFcYewFMsq2Izwfyc_9or4sRgmsUdcFgtX7Wgt5UY6ckiqdbkP70xs471VD3-Q1mgY7Bh3BbtSlbyiB0tWNc9oSDWkTEAm-k7joz5NPenSSiVS_bPETw8knHvY59ImQLrmcjE4Oj1GeS5ytDYLPFAOx_uVJ6obXcgmQpY1neqllr1SvRXhADOjBz4eBsK-n-Tsx92XBaPbTVtHGvW0QXPBY4Kf2mMzTMWBjlrYW_Vyb2ZBbqkW_xQ7-QmozxL6fgUv_hWUWdbYrVlUNheSlnc496nqbm-P4_T985bGhCBE4jAciC-9cub8S89ApqAgJiWiFelCNWI1v6DdQDYPuNc4xMcUsC5erWr94hsoIEI2WCAotMYRLr_gxBI9DoM_cKPAMUwsGRC53v-fwQorctCBndMqsf4pfSqH4PEsxEU8xYar4GpW2Fm7ppRNjkQL3yRKaG8zrd8QyIgwx4rtC90a2qmThA_BAGHGrsqrEl3lUwLjZfPelGy2lPXJLNJq5pvs5BEUiMp5n88XBCQmzG2O1P_Cavcab_8-rMPK0aE1vwpQyEqG0D5ov5EXxi5aHkLJpX0CieDNj8GGvkaGYBAR2jYLYZUeGjbl8gD4dp8R89h7TyN4PF7SjYWug62ZiQvVQvGgJmvQ1SyoMfnEqf0ix
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmQhelBJ1wSH0Emqb3WkFuG43WvNf_vcumYqWmVERJGxoaWuO0fjnuO8-WXIMbvVCgf3w1e903sl5dxzWdm72uQ3Ek0Y12jtKpc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
Source: global traffic	HTTP traffic detected: GET /dbm/vast?dbm_c=AKAmf-A9yQt3YvwzzLIIOKlYK_waZ1eHQbtEsAnayYZcd6bokL5gPGFd-WnJ_FM-GfBJG0dBRWW5VncoQcjxzITNoASrz-Mt3g&cry=1&dbm_d=AKAmf-CfBe8WD2J5dCpSTCu1P-zyHgRZSCSMFe2MHmCwqwCHTa9BsjaHmLGx_HnC5e-UxJQ0ApM7TNBKeXvMLTZVxd3_Fo8hy31NOTsGUt92vDc8VjqcsW132P6RTtaZX5u1QqXTixIcbiqiv6crAd5JOF-4A5DpH17u5QV1hCE_8nBuXd-3Ig0iWV3KRGKLrXa2bsViG8g7uiFMq4CODCmCeGAzNDpghKftXP3jTL9svbcRva4EjYt_KEVA2mQxeYvOoqdlOQ_SZ7PzI9aaM0dFbeIdQRdKooRpZLXMD_Lilq9Ejw7XOl-B0KypLvW9B2T7nqo93-fX4mr6yVvZsZTMK3oO5GPawNXL28KMzDx-bhTzwxE3mBIqhpy-9CH46I3KbQkh6p-P8sI5WfOd5PdqSiyah82JPHh0wb_s7gEZ95Ks0pDERE-vybOhN9h2n4Dvc6XhxlInGR9-xtlgJ4tFpGk1NaYXqLQujUmbmk7rF3nmhYEQ1NOE-pDkuWSlV_SA20cW0BgDt4koA4uUaerUQQtJy1QTwaxtDpluXmcd67inuA52nRNo5OHLrs9NjLm7cswCdu0GVfKmtKzcvQCDY1YOIQGbr8ZuQeG6I3v-sfBJkhPnULuFXKwpV2I6bH24pttotxvEu9qMtAZP6LYVpqukgUNK5NpEWM9PlnERWTxI485Y92PchO9tXcKQEchOgBRJJJDf_ugHdbesO1aErvI0tEsOEmzAjZtqQzU63vGcO9b4VcLOupCoeTCXka98bMcIzsbQ2jVLL6aTxnz24HfQjWCSFIvDXNtbjk995w7Ib8dmzEbnx5ZeJ3PPKQaKLaH0GQtfDtwNJSqz2zwhWMqev666WNTCPP3TYFHprbkf3QzHfFGpkKGroA6QS93a0KpQfJG2Wolxk880shBuUNKdcmwjzCN1wrOzD49OzZn-o5XW412oFjXl0B1UyvnF2lKzMh8QQOiiCU6Z53cJq_LvFsTCPEcBOQZ7YQq2S_xRr0rRs3VXLwy6v_U1WEUyenxyEDYvC1T9Q5ZRzXZBdYW-_6Z4i_VMWrMf4RR8vSAszJf-8Dt_QN5teBZoIN6rKZnD6oidpzXpYLLKnYXnV6bAcPkmDUgQ7MA27N52EsUiZbwof7cmu7M4GuSOdUJnDVghePIlK5PoetS6VwZz-r770VxzPpKF6oANmVIk1HOmNsZ5BOacyFkFzjITYQFOgI7KtusHCyB0gYw0SOiVoTd9O7qNUZE3ulda2_93AfNARJ-2EBs17bzTid-k-NFuehqhXIfcQ3LdeII0ziXSrSt3N-d_FyQE7wuDM2L68tYbiteO7kbUIFSKCJ8CvN0W9U6rm0Go2z6IK2wTUF2ZJZzzAUn7JxdWQoQR2W0sPhnOTNdSI1XlEHXTI0GyNM5q9nBFtqj8o0HheADV2VYhihrXSHkDBfBTQrnRAQVXAEWQ4TRqBFWliXAU-ZpAfdHN_-4YQ-PCfShfYkT0mOCzZINnkBUtzT187q6__NBFOe5sxvk-Hl2H_IeUEvAEbLabO7TnBbw0ZjcZfqmKx9LJX8_Hr-idgz68TX3QZgNbhWU2o_r-oX1l26Z0Hk2PzEhztXkPf4A5Til6t3u8axrCL3BCbIYlO4nTUo6gKa8p80oY7xModZ1EToQ1LPLxSD_D6dUVadZ2HoAHkWEWLX2yW-c23vp701TsrSnbTFL5f7SlBuZ9Ki5u7A7fEzidLVfpoBtmmkss-WSA60KllciN3o78GEBFkWEZjxmZJbsnKtz2WqBKftg_0HiZRqWMEfgpZ-IBHZINQ04s93i6WV_YmvpMrU2l_J50tOs7ovlbTzsncDjMzRueI2UOVeQrgqRTLTd9HASn9PEpWWKo0UbHR-Q7KhJU3AGESkina2RBY_KXCNJW15sLvPmsfZ42kN3E_gKSVusPvpRm1wa7RPrGYRZ5hVxAWcyh_-Of4fVlGXD6w5ihpTyWf8rOVV0in05bOsGLszvqbMwP2MPLC4OuR7MpkpCS_6QD08BXPmeCUY9vF_cMECKBQaNlCw4nNnax_PvKxkaJ97qFsc5L1v_vYAOjGritAXBI90KCbgqQZ6PTS6dSlKndH8o19x4Dxk_jgJLuZDZqwj9yg051WPlgLEykpKjqzw_DjqT-t8a49hOsS_TUuR7hQmtXIjtKX16gEV9Lq7-tHq7Hj4oESv3FCn_VTWArt6e_mL9ZgpcqoBC6ftPJPuUeGc0fEadvhc6pEXp4B-iUzjPn-_3YQBKr67mea0FvGVdEEe5soO3CaTJOKS_4tO-UAkU93vPDHDLQu5QxJQkz5jDKfIdpkC5Q1Ba50V7KNLZdzbb4xVoePpkLD_XFAkR5gS2VWYxudHAFYDkhgz_p_br7c-VERF3urvqF3ll5jhvSMw4dln4swCFBUTHo31JyA_wKRUcREZpEIf-SZ0ywmVdysJOeCAc81Jp00kKBk8R_zi_DKv2QC2no3d6pp2nzWRzNSZCJky7ja4hpB6AXnTAEhAZ8fN9ZNsEALHqpq3nLG2P_EUOa07bDrNTRejaVuQCfrliCElw6bB41xYAaHT0NoLOdZRIrqvxFZTyv6Rbn_6lno9Ny3UsRfjrrlkn8IMFF6SNRvCorGYYKOlEzTniC4eQ7wLtHTvLIlB96f1ddLlYW8Gwh-ZzwOuTCT2s3pnqQZqxJwZ0IoUa_awoVoCtKXcw9vtOawi6hUu0nJvTt2g4PpXYbn6XpQ-sFkjc5hDL3dKWh9ks5xnIn0LfKsqTBAWcFfpEKTdd4vBa7teBtXYY20O7oqM2p9x7QcXm0u2w4sAjSzwJf8FMh734X-Ymoa6u9PXPNq7pATxHFjwnCmK85Pb13QlI6IFn69
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVj0DK1sRvTR19UsqrnxFeucgRs-KNQ80sUAUHXbfgCqcyDYz6b__swfJJl3oSzk-geBPeTb-XIIxkqLE1KuvuDnVa4hXH3zBWXFLWTLzfxiISiD7Ix5g6yJay4897baFSBTUEyv-cR1BBn9_OBMhL7Lf2VDOCynhbatqjt-mmPQd1ad0Qhl5iCOfZ6/_/blog_ad?/AdForm_trackpoint_/ad728t./overlay_ad_/vghd2.gif HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /155970/FY24Q3_CC_Photography_Photoshop_US_EN_Psjuly2024release-Circularneonportal-2_VID_1920x1080_NA_NA_1920_1080_15100_2398.mp4?cb=1729721580000 HTTP/1.1Host: cdn.flashtalking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://googleads.g.doubleclick.net/Accept-Language: en-US,en;q=0.9Cookie: flashtalkingad1="GUID=614198FC21CB80"Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmT0ctLnTozoBHAE1-jS0rDag3zRFVmI9FMtJkWsXyWgiHUsql5PZVwUPMg1jDvUJ2jyUVsQBfCRq2FWZYtUnvK3I80qb-D3lfg&google_hm=MjU2NTAzNDIyMzU1Nzc4NzYzMg== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
Source: global traffic	HTTP traffic detected: GET /match/google?google_gid=CAESEEtXcYn5XTz2aUPkx96L_5s&google_cver=1&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q&chk=1 HTTP/1.1Host: sync.gonet-ads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chk=1
Source: global traffic	HTTP traffic detected: GET /videoplayback/id/346941773297da68/itag/347/source/web_video_ads/xpc/EgVovf3BOg%3D%3D/ctier/L/acao/yes/ip/0.0.0.0/ipbits/0/expire/1761346096/sparams/acao,ctier,expire,id,ip,ipbits,itag,met,mh,mip,mm,mn,ms,mv,mvi,pl,rms,source,xpc/signature/48C3F8B294E93BCE46020542EC1F00E0F157B6BA.698B24BA89FEC14079D6A3F27867742E34277915/key/cms1/cms_redirect/yes/met/1729810097,/mh/R-/mip/173.254.250.71/mm/42/mn/sn-q4flrne7/ms/onc/mt/1729809583/mv/u/mvi/3/pl/23/rms/onc,onc/file/file.mp4 HTTP/1.1Host: r3---sn-q4flrne7.c.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Origin: https://googleads.g.doubleclick.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: videoReferer: https://googleads.g.doubleclick.net/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /videoplayback/id/346941773297da68/itag/347/source/web_video_ads/xpc/EgVovf3BOg%3D%3D/ctier/L/acao/yes/ip/0.0.0.0/ipbits/0/expire/1761346096/sparams/acao,ctier,expire,id,ip,ipbits,itag,met,mh,mip,mm,mn,ms,mv,mvi,pl,rms,source,xpc/signature/48C3F8B294E93BCE46020542EC1F00E0F157B6BA.698B24BA89FEC14079D6A3F27867742E34277915/key/cms1/cms_redirect/yes/met/1729810097,/mh/R-/mip/173.254.250.71/mm/42/mn/sn-q4flrne7/ms/onc/mt/1729809583/mv/u/mvi/3/pl/23/rms/onc,onc/file/file.mp4 HTTP/1.1Host: r3---sn-q4flrne7.c.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=n08H3X-PwKP0NrNRb-fL27VqjJYJVoKi36K2UOcJI7g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU&tc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxWUioDyXwcVGf1wg8irhXOy6T0P2_ntxw6Cjkh5tBOOTi33DNT0Xyor2GXtFskIKdvQmHNAexvlC_nnKyvs-Bj6f_k8bMIMnRA8Rdo-oLzyf63ht042M3jTIHW46W70wkHhwrPUAg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDk1LDgwOTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3LnhuLS1pbnZpdGFjaW9uZXNkZWN1bXBsZWFvcy1kaWMub3JnLyIsbnVsbCxbWzgsIlo3ZnhWeldjSEs0Il0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUwBRZpG3FjTDvRcwCWmdrlMp_HbM0HFO1te4fBjKDKvQjDPrtCkInE07FocwFSEa3HqK9bwgiaODB_r5uK7WfN7kVpsOMT9dUpZSyWdVoJVdTGnJXZv0GZBkmS16NVyiYKhw4OaA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDk3LDYzNzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxNV0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3LnhuLS1pbnZpdGFjaW9uZXNkZWN1bXBsZWFvcy1kaWMub3JnLyIsbnVsbCxbWzgsIlo3ZnhWeldjSEs0Il0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXSxbMiwiW251bGwsW251bGwsMSxbMTcyOTgxMDA5OCwyMzY1MTMwMDBdXV0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=MTY4MjgyOTQzNDA2NjE5NDcyMQ&google_push=AXcoOmQI8g3JD5ydIRX6xAgC6hAbNnXg-ytDyy7hPbgZCgOSMMYDo0JlCTLDfBjXeLLyFvBqWHjKQCf9LeKutZyDfqsL2xE64CdHTw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
Source: global traffic	HTTP traffic detected: GET /minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAttribution-Reporting-Eligible: navigation-source=trigger;event-sourceReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /minime/us_es/css/style-main.css?v=3 HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /minime/us_es/css/custom-bootstrap-margin-padding.css HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/us_es/css/animate.css HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/us_es/css/style.css?v=3.7 HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/us_es/js/jquery-plugin-collection.js HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /images/wc-logo.svg HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gonet_ads_&google_hm=MmFlMmY1Mjg4NTVkYWIzOQ&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/3.3.6/js/bootstrap.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-1-sm.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmQhelBJ1wSH0Emqb3WkFuG43WvNf_vcumYqWmVERJGxoaWuO0fjnuO8-WXIMbvVCgf3w1e903sl5dxzWdm72uQ3Ek0Y12jtKpc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi6aw7Mth6PZF-YR7s6ddp4zzNSGJN5mDnmMsMYXKvhpVUBY8w
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmT0ctLnTozoBHAE1-jS0rDag3zRFVmI9FMtJkWsXyWgiHUsql5PZVwUPMg1jDvUJ2jyUVsQBfCRq2FWZYtUnvK3I80qb-D3lfg&google_hm=MjU2NTAzNDIyMzU1Nzc4NzYzMg== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi6aw7Mth6PZF-YR7s6ddp4zzNSGJN5mDnmMsMYXKvhpVUBY8w
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-2-sm.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pulsepoint_inc_&google_push=AXcoOmS4tHHGCtIOgdS7IzRliJTgSqBb63NKj_93oDpNUY8vgaXYWL3yTtZoE8sF7BzRsh8n7sV2Hy3D1w0D5akleQLR7iSfI0GbIXuw&google_hm=UkV6VmxpZVIwa0tI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi6aw7Mth6PZF-YR7s6ddp4zzNSGJN5mDnmMsMYXKvhpVUBY8w
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-3-sm.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /activeview/js/current/rx_omid_video.js HTTP/1.1Host: www.googletagservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUwBRZpG3FjTDvRcwCWmdrlMp_HbM0HFO1te4fBjKDKvQjDPrtCkInE07FocwFSEa3HqK9bwgiaODB_r5uK7WfN7kVpsOMT9dUpZSyWdVoJVdTGnJXZv0GZBkmS16NVyiYKhw4OaA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDk3LDYzNzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxNV0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3LnhuLS1pbnZpdGFjaW9uZXNkZWN1bXBsZWFvcy1kaWMub3JnLyIsbnVsbCxbWzgsIlo3ZnhWeldjSEs0Il0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXSxbMiwiW251bGwsW251bGwsMSxbMTcyOTgxMDA5OCwyMzY1MTMwMDBdXV0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=MTY4MjgyOTQzNDA2NjE5NDcyMQ&google_push=AXcoOmQI8g3JD5ydIRX6xAgC6hAbNnXg-ytDyy7hPbgZCgOSMMYDo0JlCTLDfBjXeLLyFvBqWHjKQCf9LeKutZyDfqsL2xE64CdHTw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi6aw7Mth6PZF-YR7s6ddp4zzNSGJN5mDnmMsMYXKvhpVUBY8w
Source: global traffic	HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=n08H3X-PwKP0NrNRb-fL27VqjJYJVoKi36K2UOcJI7g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU&tc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi6aw7Mth6PZF-YR7s6ddp4zzNSGJN5mDnmMsMYXKvhpVUBY8w
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/wc-logo.svg HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /consent/58290800-cf5c-4f05-9ec6-18c67ae77b2a/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-1.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/3.3.6/js/bootstrap.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-1-sm.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-2-sm.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-3-sm.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ajax/libs/smoothscroll/1.4.10/SmoothScroll.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/58290800-cf5c-4f05-9ec6-18c67ae77b2a/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /minime/us_es/js/custom.js HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-2.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-3.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/us_es/images/ico-privacy.png HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /consent/58290800-cf5c-4f05-9ec6-18c67ae77b2a/58290800-cf5c-4f05-9ec6-18c67ae77b2a.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /minime/us_es/images/ico-adblock.png HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/us_es/images/ico-malware.png HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://free.webcompanion.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/i1a7lqpchn HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/smoothscroll/1.4.10/SmoothScroll.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /minime/us_es/js/jquery-plugin-collection.js HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-1.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /consent/58290800-cf5c-4f05-9ec6-18c67ae77b2a/58290800-cf5c-4f05-9ec6-18c67ae77b2a.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.49/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=7b59fe2dea9c4f328b914423e0448ccf.20241024.20251024
Source: global traffic	HTTP traffic detected: GET /tag/i1a7lqpchn HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=7b59fe2dea9c4f328b914423e0448ccf.20241024.20251024
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /minime/us_es/images/ico-privacy.png HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-3.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /minime/us_es/images/ico-adblock.png HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/us_es/images/ico-malware.png HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /minime/images/main-wc-2.jpg HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/0.7.49/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=7b59fe2dea9c4f328b914423e0448ccf.20241024.20251024
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /minime/us_es/js/custom.js HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js?did=58290800-cf5c-4f05-9ec6-18c67ae77b2a&data-document-language=true HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js?did=58290800-cf5c-4f05-9ec6-18c67ae77b2a&data-document-language=true HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/58290800-cf5c-4f05-9ec6-18c67ae77b2a/019121d1-b64a-7a84-a779-732017e7ddd7/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /minime/us_es/images/favicon.png HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk; _clck=odsfuk%7C2%7Cfqa%7C0%7C1758; _gcl_aw=GCL.1729810107.EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE; _gcl_gs=2.1.k5$i1729810098$u146492643; _gcl_au=1.1.2095006060.1729810107; _clsk=1my6h8l%7C1729810108107%7C1%7C0%7Co.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/otFloatingRoundedCorner.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/v2/otPcTab.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/otCookieSettingsButton.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/58290800-cf5c-4f05-9ec6-18c67ae77b2a/019121d1-b64a-7a84-a779-732017e7ddd7/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /minime/us_es/images/favicon.png HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk; _clck=odsfuk%7C2%7Cfqa%7C0%7C1758; _gcl_aw=GCL.1729810107.EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE; _gcl_gs=2.1.k5$i1729810098$u146492643; _gcl_au=1.1.2095006060.1729810107; _clsk=1my6h8l%7C1729810108107%7C1%7C0%7Co.clarity.ms%2Fcollect; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+24+2024+18%3A48%3A31+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&consentId=d2b0f150-89cc-46b4-8b90-1c8c1397a65f&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/otFloatingRoundedCorner.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/otCookieSettingsButton.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/v2/otPcTab.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_company_logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_persistent_cookie_icon.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_persistent_cookie_icon.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_company_logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ClzwDoULPAu65Hm&MD=52pr2yry HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /request/v1/consentreceipts HTTP/1.1Host: privacyportal-eu.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /minime/us_es/thank-you.php HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk; _clck=odsfuk%7C2%7Cfqa%7C0%7C1758; _gcl_gs=2.1.k5$i1729810098$u146492643; _gcl_au=1.1.2095006060.1729810107; _clsk=1my6h8l%7C1729810108107%7C1%7C0%7Co.clarity.ms%2Fcollect; OptanonAlertBoxClosed=2024-10-24T22:48:50.035Z; _ga=GA1.1.654661085.1729810111; _gcl_aw=GCL.1729810111.EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE; _ga_156KYDXFJK=GS1.1.1729810110.1.1.1729810130.0.0.0; _ga_30HWN1Z1WV=GS1.1.1729810110.1.1.1729810130.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+24+2024+18%3A48%3A50+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&consentId=d2b0f150-89cc-46b4-8b90-1c8c1397a65f&interactionCount=1&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CSPDTA_BG%3A1%2CC0002%3A1%2CC0004%3A1&hosts=H615%3A1%2CH363%3A1%2CH362%3A1%2CH15%3A1%2CH653%3A1%2CH686%3A1&genVendors=V1%3A1%2CV2%3A1%2C&intType=6; FPID=FPID2.2.uEblszuhDVeA7E%2Bsv4x0u5zZQEGXefTj%2FMu%2FkbmAB1Y%3D.1729810111; FPLC=leCw22LQ4c%2BFyPpx49wL3ZM6U%2Br%2BtpM7mrW%2FN6d3uI3%2F%2BnOGZM4d06cBY3FAWNysCpcfbgI3XagLwPeixNUF1QeeKfXyY6uIxgBZSIDnO%2BV%2FPiHTlebsVrQvsAORSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /images/ty/card-top-right-mag.svg HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/thank-you.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk; _clck=odsfuk%7C2%7Cfqa%7C0%7C1758; _gcl_gs=2.1.k5$i1729810098$u146492643; _gcl_au=1.1.2095006060.1729810107; _clsk=1my6h8l%7C1729810108107%7C1%7C0%7Co.clarity.ms%2Fcollect; OptanonAlertBoxClosed=2024-10-24T22:48:50.035Z; _ga=GA1.1.654661085.1729810111; _gcl_aw=GCL.1729810111.EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+24+2024+18%3A48%3A50+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&consentId=d2b0f150-89cc-46b4-8b90-1c8c1397a65f&interactionCount=1&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CSPDTA_BG%3A1%2CC0002%3A1%2CC0004%3A1&hosts=H615%3A1%2CH363%3A1%2CH362%3A1%2CH15%3A1%2CH653%3A1%2CH686%3A1&genVendors=V1%3A1%2CV2%3A1%2C&intType=6; FPID=FPID2.2.uEblszuhDVeA7E%2Bsv4x0u5zZQEGXefTj%2FMu%2FkbmAB1Y%3D.1729810111; FPLC=leCw22LQ4c%2BFyPpx49wL3ZM6U%2Br%2BtpM7mrW%2FN6d3uI3%2F%2BnOGZM4d06cBY3FAWNysCpcfbgI3XagLwPeixNUF1QeeKfXyY6uIxgBZSIDnO%2BV%2FPiHTlebsVrQvsAORSQ%3D%3D; _ga_156KYDXFJK=GS1.1.1729810110.1.1.1729810145.0.0.0; _ga_30HWN1Z1WV=GS1.1.1729810110.1.1.1729810145.45.0.0
Source: global traffic	HTTP traffic detected: GET /images/icon-arrow-up-2.svg HTTP/1.1Host: free.webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://free.webcompanion.com/minime/us_es/thank-you.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk; _clck=odsfuk%7C2%7Cfqa%7C0%7C1758; _gcl_gs=2.1.k5$i1729810098$u146492643; _gcl_au=1.1.2095006060.1729810107; _clsk=1my6h8l%7C1729810108107%7C1%7C0%7Co.clarity.ms%2Fcollect; OptanonAlertBoxClosed=2024-10-24T22:48:50.035Z; _ga=GA1.1.654661085.1729810111; _gcl_aw=GCL.1729810111.EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+24+2024+18%3A48%3A50+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&consentId=d2b0f150-89cc-46b4-8b90-1c8c1397a65f&interactionCount=1&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CSPDTA_BG%3A1%2CC0002%3A1%2CC0004%3A1&hosts=H615%3A1%2CH363%3A1%2CH362%3A1%2CH15%3A1%2CH653%3A1%2CH686%3A1&genVendors=V1%3A1%2CV2%3A1%2C&intType=6; FPID=FPID2.2.uEblszuhDVeA7E%2Bsv4x0u5zZQEGXefTj%2FMu%2FkbmAB1Y%3D.1729810111; FPLC=leCw22LQ4c%2BFyPpx49wL3ZM6U%2Br%2BtpM7mrW%2FN6d3uI3%2F%2BnOGZM4d06cBY3FAWNysCpcfbgI3XagLwPeixNUF1QeeKfXyY6uIxgBZSIDnO%2BV%2FPiHTlebsVrQvsAORSQ%3D%3D; _ga_156KYDXFJK=GS1.1.1729810110.1.1.1729810145.0.0.0; _ga_30HWN1Z1WV=GS1.1.1729810110.1.1.1729810145.45.0.0
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/i1a7lqpchn HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=7b59fe2dea9c4f328b914423e0448ccf.20241024.20251024; MUID=1D06CBC48B0C6A520827DEE68A296BCB
Source: global traffic	HTTP traffic detected: GET /images/ty/card-top-right-mag.svg HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk; _clck=odsfuk%7C2%7Cfqa%7C0%7C1758; _gcl_gs=2.1.k5$i1729810098$u146492643; _gcl_au=1.1.2095006060.1729810107; _clsk=1my6h8l%7C1729810108107%7C1%7C0%7Co.clarity.ms%2Fcollect; OptanonAlertBoxClosed=2024-10-24T22:48:50.035Z; _ga=GA1.1.654661085.1729810111; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+24+2024+18%3A48%3A50+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&consentId=d2b0f150-89cc-46b4-8b90-1c8c1397a65f&interactionCount=1&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CSPDTA_BG%3A1%2CC0002%3A1%2CC0004%3A1&hosts=H615%3A1%2CH363%3A1%2CH362%3A1%2CH15%3A1%2CH653%3A1%2CH686%3A1&genVendors=V1%3A1%2CV2%3A1%2C&intType=6; FPID=FPID2.2.uEblszuhDVeA7E%2Bsv4x0u5zZQEGXefTj%2FMu%2FkbmAB1Y%3D.1729810111; FPLC=leCw22LQ4c%2BFyPpx49wL3ZM6U%2Br%2BtpM7mrW%2FN6d3uI3%2F%2BnOGZM4d06cBY3FAWNysCpcfbgI3XagLwPeixNUF1QeeKfXyY6uIxgBZSIDnO%2BV%2FPiHTlebsVrQvsAORSQ%3D%3D; _gcl_aw=GCL.1729810145.EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE; _ga_30HWN1Z1WV=GS1.1.1729810110.1.1.1729810145.45.0.0; _ga_156KYDXFJK=GS1.1.1729810110.1.1.1729810145.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/icon-arrow-up-2.svg HTTP/1.1Host: free.webcompanion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk; _clck=odsfuk%7C2%7Cfqa%7C0%7C1758; _gcl_gs=2.1.k5$i1729810098$u146492643; _gcl_au=1.1.2095006060.1729810107; _clsk=1my6h8l%7C1729810108107%7C1%7C0%7Co.clarity.ms%2Fcollect; OptanonAlertBoxClosed=2024-10-24T22:48:50.035Z; _ga=GA1.1.654661085.1729810111; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+24+2024+18%3A48%3A50+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&consentId=d2b0f150-89cc-46b4-8b90-1c8c1397a65f&interactionCount=1&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CSPDTA_BG%3A1%2CC0002%3A1%2CC0004%3A1&hosts=H615%3A1%2CH363%3A1%2CH362%3A1%2CH15%3A1%2CH653%3A1%2CH686%3A1&genVendors=V1%3A1%2CV2%3A1%2C&intType=6; FPID=FPID2.2.uEblszuhDVeA7E%2Bsv4x0u5zZQEGXefTj%2FMu%2FkbmAB1Y%3D.1729810111; FPLC=leCw22LQ4c%2BFyPpx49wL3ZM6U%2Br%2BtpM7mrW%2FN6d3uI3%2F%2BnOGZM4d06cBY3FAWNysCpcfbgI3XagLwPeixNUF1QeeKfXyY6uIxgBZSIDnO%2BV%2FPiHTlebsVrQvsAORSQ%3D%3D; _gcl_aw=GCL.1729810145.EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE; _ga_30HWN1Z1WV=GS1.1.1729810110.1.1.1729810145.45.0.0; _ga_156KYDXFJK=GS1.1.1729810110.1.1.1729810145.0.0.0
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://free.webcompanion.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1alpha/publicKeys HTTP/1.1Host: publickeyservice.aws.privacysandboxservices.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/10846925175/?random=1582803273&cv=11&fst=1729810145322&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200zb811825413&gcs=G111&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2Fthank-you.php&ref=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&label=3lcLCLvRwZUDEPfim7Qo&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&gtm_ee=1&npa=0&gclgs=5&gclst=47322&gcllp=146492643&gclaw=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&ssc=CjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2Sc&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECEhEIBxDJg62sTSiAgP732qWJAxIRCAQQyYOtrE0ogID-99qliQMSEQgMEMmDraxNKICA_vfapYkDIgEBKAE4AUABShVldmVudC1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CL_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_Yzt44yoiQNqBxD-AxgBIABwiN3ZJxoRCAcQyYOtrE0ogID-99qliQMaEQgEEMmDraxNKICA_vfapYkDGhEIDBDJg62sTSiAgP732qWJAygBMgIIAToECBYQAUIOCAEQAzDJg62sTTgAWAFCDggHEAEwyYOtrE04AFgBQg4IBBABMMmDraxNOABYAUIOCAwQATDJg62sTTgAWAFCDggWEAEwyYOtrE04AFgBSnYIERACGgI-YzDJg62sTTgBSmIIoMIeEAEY4NQDIODUAyoBATACOMdGQPwCSAJQAlgCYkEKEAjw4Oe4BhDF-Z33iLvfv20SKQBTw3qImynpcusTZnrwHpCs1ImFQmkViAtrtHtDkCW-1IwvpI8BVZpGGgKNzlgBMl4IChJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4IAhJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4ICxJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4IFRJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4IHxJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4IExJWCjdFQUlhSVFvYkNo
Source: global traffic	HTTP traffic detected: GET /tag/i1a7lqpchn HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=7b59fe2dea9c4f328b914423e0448ccf.20241024.20251024; MUID=1D06CBC48B0C6A520827DEE68A296BCB
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nano_download.php?savename=Setup.exe&partner=IN220101&nonadmin&direct&tych&campaign=20762542537 HTTP/1.1Host: webcompanion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://free.webcompanion.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _clck=odsfuk%7C2%7Cfqa%7C0%7C1758; _gcl_gs=2.1.k5$i1729810098$u146492643; _gcl_au=1.1.2095006060.1729810107; OptanonAlertBoxClosed=2024-10-24T22:48:50.035Z; _ga=GA1.1.654661085.1729810111; FPID=FPID2.2.uEblszuhDVeA7E%2Bsv4x0u5zZQEGXefTj%2FMu%2FkbmAB1Y%3D.1729810111; FPLC=leCw22LQ4c%2BFyPpx49wL3ZM6U%2Br%2BtpM7mrW%2FN6d3uI3%2F%2BnOGZM4d06cBY3FAWNysCpcfbgI3XagLwPeixNUF1QeeKfXyY6uIxgBZSIDnO%2BV%2FPiHTlebsVrQvsAORSQ%3D%3D; _gcl_aw=GCL.1729810145.EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE; _ga_30HWN1Z1WV=GS1.1.1729810110.1.1.1729810145.45.0.0; _ga_156KYDXFJK=GS1.1.1729810110.1.1.1729810145.0.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Oct+24+2024+18%3A49%3A07+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&consentId=d2b0f150-89cc-46b4-8b90-1c8c1397a65f&interactionCount=1&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CSPDTA_BG%3A1%2CC0002%3A1%2CC0004%3A1&hosts=H615%3A1%2CH363%3A1%2CH362%3A1%2CH15%3A1%2CH653%3A1%2CH686%3A1&genVendors=V1%3A1%2CV2%3A1%2C&intType=6&geolocation=US%3BTX&AwaitingReconsent=false; _clsk=1my6h8l%7C1729810147650%7C2%7C0%7Co.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/10846925175/?random=1582803273&cv=11&fst=1729810145322&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200zb811825413&gcs=G111&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2Fthank-you.php&ref=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&label=3lcLCLvRwZUDEPfim7Qo&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&gtm_ee=1&npa=0&gclgs=5&gclst=47322&gcllp=146492643&gclaw=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&ssc=CjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2Sc&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECEhEIBxDJg62sTSiAgP732qWJAxIRCAQQyYOtrE0ogID-99qliQMSEQgMEMmDraxNKICA_vfapYkDIgEBKAE4AUABShVldmVudC1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CL_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_Yzt44yoiQNqBxD-AxgBIABwiN3ZJxoRCAcQyYOtrE0ogID-99qliQMaEQgEEMmDraxNKICA_vfapYkDGhEIDBDJg62sTSiAgP732qWJAygBMgIIAToECBYQAUIOCAEQAzDJg62sTTgAWAFCDggHEAEwyYOtrE04AFgBQg4IBBABMMmDraxNOABYAUIOCAwQATDJg62sTTgAWAFCDggWEAEwyYOtrE04AFgBSnYIERACGgI-YzDJg62sTTgBSmIIoMIeEAEY4NQDIODUAyoBATACOMdGQPwCSAJQAlgCYkEKEAjw4Oe4BhDF-Z33iLvfv20SKQBTw3qImynpcusTZnrwHpCs1ImFQmkViAtrtHtDkCW-1IwvpI8BVZpGGgKNzlgBMl4IChJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4IAhJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4ICxJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4IFRJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4IHxJWCjdFQUlhSVFvYkNoTUk0N1RUM295b2lRTVZibzZEQngwaEpBdVRFQUVZQVNBQUVnSmVYdkRfQndFGAFIAVgAYP2M7eOMqIkDagcQ_gMYASAAcIjd2ScyAggCMl4IExJWCjdFQUlhSVFvYkNo
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.xn--invitacionesdecumpleaos-dic.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_347.2.dr, chromecache_344.2.dr	String found in binary or memory: $('a[href="#"]').not('[href="#"]').not('[href="#0"]').click(function(event){if(location.pathname.replace(/^\//,'')==this.pathname.replace(/^\//,'')&&location.hostname==this.hostname){var target=$(this.hash);target=target.length?target:$('[name='+this.hash.slice(1)+']');if(target.length){event.preventDefault();$('html, body').animate({scrollTop:target.offset().top},1000,function(){var $target=$(target);$target.focus();if($target.is(":focus")){return!1}else{$target.attr('tabindex','-1');$target.focus()}})}}});var $allVideos=$("iframe[src='//player.vimeo.com'], iframe[src='//www.youtube.com'], object, embed"),$fluidEl=$(".entry-content");$allVideos.each(function(){$(this).attr('data-aspectRatio',this.height/this.width).removeAttr('height').removeAttr('width')});$(window).resize(function(){var newWidth=$fluidEl.width();$allVideos.each(function(){var $el=$(this);$el.width(newWidth).height(newWidth$el.attr('data-aspectRatio'))})}).resize()});(function(){if(document.body.classList.contains('woocommerce-cart')\|\|document.body.classList.contains('woocommerce-checkout')\|\|window.innerWidth<768\|\|!document.getElementById('site-header-cart')){return} equals www.youtube.com (Youtube)
Source: chromecache_421.2.dr	String found in binary or memory: <script type="application/javascript">const rocket_pairs = [{"selector":".rll-youtube-player .play","style":".rll-youtube-player .play{--wpr-bg-3ed5a2d8-0497-48d1-9177-ba6ef7d7e882: url('https:\/\/www.xn--invitacionesdecumpleaos-dic.org\/wp-content\/plugins\/wp-rocket\/assets\/img\/youtube.png');}","hash":"3ed5a2d8-0497-48d1-9177-ba6ef7d7e882","url":"https:\/\/www.xn--invitacionesdecumpleaos-dic.org\/wp-content\/plugins\/wp-rocket\/assets\/img\/youtube.png"}]; const rocket_excluded_pairs = [];</script></head> equals www.youtube.com (Youtube)
Source: chromecache_421.2.dr	String found in binary or memory: <style id="wpr-lazyload-bg-nostyle">.rll-youtube-player .play{--wpr-bg-3ed5a2d8-0497-48d1-9177-ba6ef7d7e882: url('https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/plugins/wp-rocket/assets/img/youtube.png');}</style> equals www.youtube.com (Youtube)
Source: chromecache_270.2.dr, chromecache_260.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},lk:function(){e=zb()},ud:function(){d()}}};var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_279.2.dr, chromecache_296.2.dr	String found in binary or memory: Yf.getAttribute("id");switch(Yf.nodeName){case "ClickThrough":Q=Wx(Yf,ii);break;case "ClickTracking":var BF=Qx(Yf);ia.push(new pt(ii,qu,BF));break;case "CustomClick":O.push(new pt(ii,qu))}}}k=new At({za:Q,gb:ia,gd:O});break;case "MediaFiles":for(var bm=[],ru=[],cm=[],su=u(E(B)),dm=su.next();!dm.done;dm=su.next()){var La=dm.value;switch(La.nodeName){case "MediaFile":var tu=void 0,Zf=V(La);if(Zf==null)var uu=null;else{Zf.indexOf("www.youtube.com/get_video")!=-1?M(L.g(),"hgvu","1"):Zf.indexOf("redirector.gvt1.com/get_video")!= equals www.youtube.com (Youtube)
Source: chromecache_279.2.dr, chromecache_296.2.dr	String found in binary or memory: function Bw(a){var b=Number(Te(a,"itag"));return b?b:(a=a.match(ww))&&a.length===2?Number(a[1]):null}function Cw(a){var b=iu[a];a=ku[a];b?(b=sd(b).toLowerCase(),b=a?b+'; codecs="'+sd(a)+'"':b):b="";return b}function Dw(a,b,c){c=c===void 0?[]:c;var d=P;a=new P(a);c.length&&a.o.set("itag",c.join(","));a.o.set("br","1");d=new d(a.toString());d.o.set("alr","yes");return zw(d.toString(),b)}function Ew(a){a=new P(a);return a.j==="www.youtube.com"&&a.g==="/get_video"} equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: function ex(a){try{var b=typeof a==="string"?new P(a):a;if(dx(b)){var c=Sr(b,"url");return typeof c==="undefined"?null:c}}catch(d){}return null}function cx(a,b){return(new RegExp("^https?://([a-z0-9-]{1,63}\\.)("+b.join("\|").replace(/\./g,"\\.")+")(:[0-9]+)?([/?#]\|$)","i")).test(a)};var fx=/Android ([\d\.]+)/;var gx="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),hx=/\bocr\b/;function ix(a){if(qc(sd(a))\|\|Cd&&a.length>2048)return!1;try{if((new P(a)).I().match(hx))return!0}catch(b){}return gx.find(function(b){return a.match(b)!=null})!=null};function jx(a){var b=Error.call(this,a);this.message=b.message;"stack"in b&&(this.stack=b.stack);this.errorCode=a}w(jx,Error);function kx(a){if(typeof DOMParser!="undefined"){var b=new DOMParser;a=cd(a===null?"null":a===void 0?"undefined":a);return b.parseFromString(dd(a),"application/xml")}throw Error("Your browser does not support loading xml documents");};function lx(){}lx.prototype.get=function(a){return mx({url:a.url,timeout:a.timeout,withCredentials:a.withCredentials===void 0?!0:a.withCredentials,method:"GET",headers:a.headers===void 0?{}:a.headers})}; equals www.youtube.com (Youtube)
Source: chromecache_270.2.dr, chromecache_260.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={rh:e,ph:f,qh:g,bi:k,di:m,Je:n,Fb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(AD(w,"iframe_api")\|\|AD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!rD&&yD(x[A],p.Je))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_421.2.dr	String found in binary or memory: if(is_iframe){iframe_count+=1}}});if(image_count>0\|\|iframe_count>0\|\|rocketlazy_count>0){lazyLoadInstance.update()}});var b=document.getElementsByTagName("body")[0];var config={childList:!0,subtree:!0};observer.observe(b,config)}},!1)</script><script data-no-minify="1" async src="https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js"></script><script>function lazyLoadThumb(e,alt,l){var t='<img data-lazy-src="https://i.ytimg.com/vi/ID/hqdefault.jpg" alt="" width="480" height="360"><noscript><img src="https://i.ytimg.com/vi/ID/hqdefault.jpg" alt="" width="480" height="360"></noscript>',a='<button class="play" aria-label="play Youtube video"></button>';if(l){t=t.replace('data-lazy-','');t=t.replace('loading="lazy"','');t=t.replace(/<noscript>.*?<\/noscript>/g,'');}t=t.replace('alt=""','alt="'+alt+'"');return t.replace("ID",e)+a}function lazyLoadYoutubeIframe(){var e=document.createElement("iframe"),t="ID?autoplay=1";t+=0===this.parentNode.dataset.query.length?"":"&"+this.parentNode.dataset.query;e.setAttribute("src",t.replace("ID",this.parentNode.dataset.src)),e.setAttribute("frameborder","0"),e.setAttribute("allowfullscreen","1"),e.setAttribute("allow","accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture"),this.parentNode.parentNode.replaceChild(e,this.parentNode)}document.addEventListener("DOMContentLoaded",function(){var exclusions=[];var e,t,p,u,l,a=document.getElementsByClassName("rll-youtube-player");for(t=0;t<a.length;t++)(e=document.createElement("div")),(u='https://i.ytimg.com/vi/ID/hqdefault.jpg'),(u=u.replace('ID',a[t].dataset.id)),(l=exclusions.some(exclusion=>u.includes(exclusion))),e.setAttribute("data-id",a[t].dataset.id),e.setAttribute("data-query",a[t].dataset.query),e.setAttribute("data-src",a[t].dataset.src),(e.innerHTML=lazyLoadThumb(a[t].dataset.id,a[t].dataset.alt,l)),a[t].appendChild(e),(p=e.querySelector(".play")),(p.onclick=lazyLoadYoutubeIframe)});</script> equals www.youtube.com (Youtube)
Source: chromecache_366.2.dr, chromecache_474.2.dr, chromecache_293.2.dr, chromecache_319.2.dr, chromecache_412.2.dr, chromecache_323.2.dr, chromecache_262.2.dr, chromecache_395.2.dr, chromecache_314.2.dr, chromecache_255.2.dr, chromecache_253.2.dr, chromecache_449.2.dr	String found in binary or memory: return b}nD.F="internal.enableAutoEventOnTimer";var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_262.2.dr, chromecache_314.2.dr	String found in binary or memory: var CC=function(a,b,c,d,e){var f=tA("fsl",c?"nv.mwt":"mwt",0),g;g=c?tA("fsl","nv.ids",[]):tA("fsl","ids",[]);if(!g.length)return!0;var k=yA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!fz(k,hz(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.xn--invitacionesdecumpleaos-dic.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: bid.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tr.blismedia.com
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: onetag-sys.com
Source: global traffic	DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic	DNS traffic detected: DNS query: a.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: sync.gonet-ads.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: gcdn.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: servedby.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: secure.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: r3---sn-q4flrne7.c.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: cdn.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic	DNS traffic detected: DNS query: free.webcompanion.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: cloud.webcompanion.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: o.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: privacyportal-eu.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.aws.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: webcompanion.com

Source: unknown

HTTP traffic detected: POST /el/AGSKWxWy3x9V2OEFveoc38wOdQ6ULu8hI3qhgInDkicneHIK0Uqoa7DBaoFEhUO-c7A8Vmt0gUAzYBinwTOdbDGJS1pP0wbDgK06jDXjZqCXQjzl3bgZoEKS5O9RtmaUVnQiPTztnZ5nsw== HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveContent-Length: 247sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.xn--invitacionesdecumpleaos-dic.orgX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.xn--invitacionesdecumpleaos-dic.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://aia.entrust.net/evcs2-chain.p7c01
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://api.flickr.com/services/feeds/
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: chromecache_340.2.dr	String found in binary or memory: http://codecanyon.net/licenses
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://crl.entrust.net/csbr1.crl0
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://crl.entrust.net/evcs2.crl0
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://crl.entrust.net/g2ca.crl0
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://css-tricks.com
Source: chromecache_289.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://daverupert.com
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://dev7studios.com/nivo-lightbox
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://flesler.blogspot.com
Source: chromecache_334.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_334.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://fullcalendar.io/
Source: chromecache_337.2.dr, chromecache_413.2.dr, chromecache_242.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: http://google.com
Source: chromecache_267.2.dr, chromecache_338.2.dr, chromecache_373.2.dr, chromecache_304.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://hilios.github.io/jQuery.countdown/)
Source: chromecache_289.2.dr	String found in binary or memory: http://ianlunn.co.uk/
Source: chromecache_289.2.dr	String found in binary or memory: http://ianlunn.github.io/Hover/)
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://infinite-scroll.com/
Source: chromecache_248.2.dr, chromecache_445.2.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpExt/2008-02-29/
Source: chromecache_365.2.dr	String found in binary or memory: http://ismail-hossain.me/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://isotope.metafizzy.co
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://jonthornton.github.com/Datepair.js
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://jonthornton.github.com/jquery-timepicker/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://jqueryvalidation.org/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://malsup.com/jquery/form/
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_248.2.dr, chromecache_445.2.dr	String found in binary or memory: http://ns.useplus.org/ldf/xmp/1.0/
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://ocsp.entrust.net00
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://ocsp.entrust.net01
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://ocsp.entrust.net02
Source: chromecache_289.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_267.2.dr, chromecache_338.2.dr, chromecache_373.2.dr, chromecache_304.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://prismjs.com/download.html?themes=prism&languages=markup
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://robert-fleischmann.de)
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: chromecache_421.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://www.aaronvanderzwan.com/maximage/2.0/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/
Source: chromecache_329.2.dr, chromecache_315.2.dr, chromecache_349.2.dr, chromecache_345.2.dr, chromecache_235.2.dr, chromecache_310.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_266.2.dr, chromecache_467.2.dr, chromecache_279.2.dr, chromecache_296.2.dr	String found in binary or memory: http://www.broofa.com
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://www.entrust.net/rpa0
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: http://www.entrust.net/rpa03
Source: chromecache_248.2.dr, chromecache_445.2.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://www.ianlunn.co.uk/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://www.ianlunn.co.uk/plugins/jquery-parallax/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://www.newmediacampaigns.com/page/jquery-flickr-plugin
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://www.no-margin-for-errors.com)
Source: chromecache_335.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: http://www.smoothscroll.net/
Source: chromecache_380.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjssTH2pG9KZbJy7JDJ_jvhnUwcttFgNFzN6H28FeEpnq_O4kr9L6yLI
Source: chromecache_321.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjssmTuDSHFQ_CrOh39VNyXazNxZ95V2eAuYO_X9Ko2SnDT13e_BN5-I
Source: chromecache_420.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjstMOskrFWLzwvLxQB5OGorG4RK2PVyit_TdZoYocTQyX0nTPb6JfZc
Source: chromecache_420.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjst__P3Tab7vnQtPJrcNl6p1QQcvqSgaC_W04kWcCt3PbVDbSqdboKH
Source: chromecache_430.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjsu37SquLfnuRsZOHe30gJG2SHXEeIe_4EkYDzfzXzgN4JptjJ0uAVF
Source: chromecache_420.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjsuInPpkzljkc7vWCEqb6heYeNt8UqX8eLlK_kxlUaMatIfSN5QNCH4
Source: chromecache_380.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjsuJ-QMaoNpfEiVjCQmX9vxhZyvAl7YLG9uziCt6xrbRBzkJBvGdSsn
Source: chromecache_420.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjsvFKla9lfU3c7QvhYnRNsjNRmpOyPmwMC-QH1TGGEV8rRLvEL6-tcK
Source: chromecache_380.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjsvUBLf0WqnTRI1x_tTKhhWcyOju-kkhLXEmGJ1DTgGggGBHd5kRlGa
Source: chromecache_380.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/click?xai=AKAOjsvdG9XRRi-HMSmjGnnj_habA59OiFuM7mzrHRz0_YuyCE8ysZuPkw7
Source: chromecache_420.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjssW_l3qmjKoqUH-8A9tj2PJZSiRs-IeC2NMmkPcE9cijhgx6-6Ne2TW
Source: chromecache_321.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjssfHby1MiIirAhz1ehckmzPIKPVtG5yMVpujQbzNHXlG0L-BkCV7CFH
Source: chromecache_420.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjstSU9AZe_h4MY6b3Unb_FMjtX8AoE6LMwK_TzfL1UfHdlig054onFJV
Source: chromecache_380.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjstZRkTRWD59GSx1csvYGjzN91L0zKWjyKZSzzlHicaPTuv8GInL9niW
Source: chromecache_380.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjstZdVXSEYSRsNVT9y7QCggAhjST04vjonlQ6mYq9H8cUHLPCSgdmFKx
Source: chromecache_430.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjsuF27RdWExVcTnHyZ9Oo8ny9yquy6SNH1qQWHYY6YoQ1gvyXIXDNbyR
Source: chromecache_380.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjsuFEZ0AqJYxa0toph0EpE0z0YPr5rTVXKrvgs3qKwfyy0PL-Kq9om5A
Source: chromecache_380.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjsuGS6nx2KeaSoeOxkUbE8E1jUCIEZQy6sgGujEN39Bioe1ruzKpoKjY
Source: chromecache_420.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjsvN_ClFx9ZD2u7-RM_cMOucVOHRNbxa9ggTo1a7prInAM7RE9ILYezx
Source: chromecache_420.2.dr	String found in binary or memory: https://ad.doubleclick.net/pcs/view?xai=AKAOjsv_XFmWiy_Ac0UIb8hrO996kG_vg2N9pGdo3DyuLnPIsWgyxU8mlAoa
Source: chromecache_380.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI15vf44yoiQMVdFwdCR2xJwLxEAAYACCMuYNpOhoIlLT
Source: chromecache_420.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI8Oe44oyoiQMVuln2CB0gMgZNEAAYACCMuYNpOhoIlLT
Source: chromecache_430.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIi9bf44yoiQMVf0T2CB1dJzFoEAAYACC_8YNrQhMI9Nb
Source: chromecache_321.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIw_y34oyoiQMVmDsGAB2QiRBkEAAYACC_8YNrQhMI9Nb
Source: chromecache_387.2.dr, chromecache_326.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_449.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_436.2.dr	String found in binary or memory: https://adssettings.google.com"
Source: chromecache_436.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=display
Source: chromecache_354.2.dr, chromecache_362.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_366.2.dr, chromecache_270.2.dr, chromecache_474.2.dr, chromecache_293.2.dr, chromecache_319.2.dr, chromecache_412.2.dr, chromecache_323.2.dr, chromecache_260.2.dr, chromecache_262.2.dr, chromecache_395.2.dr, chromecache_314.2.dr, chromecache_255.2.dr, chromecache_253.2.dr, chromecache_449.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_340.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome-animation/0.0.8/font-awesome-animation.min.css
Source: chromecache_340.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_266.2.dr, chromecache_467.2.dr	String found in binary or memory: https://developers.google.com/ad-placement
Source: chromecache_299.2.dr, chromecache_264.2.dr, chromecache_316.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_264.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_299.2.dr, chromecache_316.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_264.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_299.2.dr, chromecache_316.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_316.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_299.2.dr, chromecache_316.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_373.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_340.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Barlow:400
Source: chromecache_340.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=DM
Source: chromecache_373.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_340.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_A8s52Hs.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_Ass52Hs.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E30-8s6FospT4.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E30-8s6VospT4.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3q-0s51os.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3q-0s6FospT4.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3q-0s6VospT4.woff2)
Source: chromecache_425.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2)
Source: chromecache_425.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu6-K6h9Q.woff2)
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2)
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2)
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvD9oS_a.woff2)
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2)
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2)
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB77TKx9.woff2
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBD7TA.woff2)
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBP7TKx9.woff2
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBT7TKx9.woff2
Source: chromecache_377.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB_7TKx9.woff2
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_371.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/api/manifest/hls_variant/source/web_video_ads/id/346941773297da68/itag/0/playl
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/18/source/web_video_ads/xpc/EgVovf3BOg%
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/22/source/web_video_ads/xpc/EgVovf3BOg%
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/342/source/web_video_ads/xpc/EgVovf3BOg
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/343/source/web_video_ads/xpc/EgVovf3BOg
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/344/source/web_video_ads/xpc/EgVovf3BOg
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/345/source/web_video_ads/xpc/EgVovf3BOg
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/346/source/web_video_ads/xpc/EgVovf3BOg
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/347/source/web_video_ads/xpc/EgVovf3BOg
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/59/source/web_video_ads/xpc/EgVovf3BOg%
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://gcdn.2mdn.net/videoplayback/id/346941773297da68/itag/692/source/web_video_ads/xpc/EgVovf3BOg
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker
Source: chromecache_289.2.dr	String found in binary or memory: https://github.com/IanLunn/Hover
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/VodkaBears/Vide
Source: chromecache_289.2.dr	String found in binary or memory: https://github.com/angelorohit
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/eternicode/bootstrap-datepicker)
Source: chromecache_365.2.dr	String found in binary or memory: https://github.com/ismailcseku/Custom-Bootstrap-Margin-Padding
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/malsup/form
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/malsup/form#copyright-and-license
Source: chromecache_318.2.dr, chromecache_327.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/morr/jquery.appear/
Source: chromecache_289.2.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/objectivehtml/FlipClock
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/paulirish/infinite-scroll
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://github.com/rottenstudios/menufullpage
Source: chromecache_413.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_421.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_255.2.dr	String found in binary or memory: https://google.com
Source: chromecache_304.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_436.2.dr, chromecache_240.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png"
Source: chromecache_436.2.dr, chromecache_240.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png"
Source: chromecache_436.2.dr, chromecache_240.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png"
Source: chromecache_436.2.dr, chromecache_240.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png"
Source: chromecache_430.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJfnugEQw7j0ARim6tWgAiABMAE&v=APEucNVNmxkZ7jdIy5HgE
Source: chromecache_321.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJfnugEQw7j0ARim6tWgAiABMAE&v=APEucNXIXRGqwCU4hJNuO
Source: chromecache_420.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/xbbe/pixel?d=CLzGqAEQlLT_pAMYmLflmAIgATAB&v=APEucNW2cTguwhJdo9_7
Source: chromecache_380.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/xbbe/pixel?d=CLzGqAEQlLT_pAMYmLflmAIgATAB&v=APEucNX3Gdyy_04bIs46
Source: chromecache_421.2.dr	String found in binary or memory: https://i.ytimg.com/vi/ID/hqdefault.jpg
Source: chromecache_243.2.dr, chromecache_295.2.dr	String found in binary or memory: https://interactiveadvertisingbureau.github.io/Open-Measurement-SDKJS/iframes.html#om-sdk-js-session
Source: chromecache_449.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_299.2.dr, chromecache_264.2.dr, chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_279.2.dr, chromecache_296.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/canary/omweb-v1.js
Source: chromecache_279.2.dr, chromecache_296.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Source: chromecache_345.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_329.2.dr, chromecache_310.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=30&cb=rxov&v=
Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_235.2.dr, chromecache_310.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_345.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_345.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_345.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_345.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_345.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_345.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_345.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_345.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_465.2.dr, chromecache_363.2.dr, chromecache_418.2.dr, chromecache_348.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=adx&creative_id=588864408&cr
Source: chromecache_321.2.dr, chromecache_430.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=adx&creative_id=605386022&cr
Source: chromecache_387.2.dr, chromecache_326.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_266.2.dr, chromecache_467.2.dr, chromecache_338.2.dr, chromecache_304.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_264.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_299.2.dr, chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_366.2.dr, chromecache_270.2.dr, chromecache_474.2.dr, chromecache_293.2.dr, chromecache_319.2.dr, chromecache_412.2.dr, chromecache_323.2.dr, chromecache_260.2.dr, chromecache_262.2.dr, chromecache_395.2.dr, chromecache_314.2.dr, chromecache_255.2.dr, chromecache_253.2.dr, chromecache_449.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_373.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_267.2.dr, chromecache_338.2.dr, chromecache_373.2.dr, chromecache_304.2.dr, chromecache_421.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=$
Source: chromecache_387.2.dr, chromecache_267.2.dr, chromecache_326.2.dr, chromecache_279.2.dr, chromecache_296.2.dr, chromecache_338.2.dr, chromecache_373.2.dr, chromecache_304.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_387.2.dr, chromecache_267.2.dr, chromecache_326.2.dr, chromecache_373.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_373.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_373.2.dr, chromecache_304.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_284.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_264.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_299.2.dr, chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_306.2.dr	String found in binary or memory: https://quicklaunchapp.com/images/lifestyle/mountains.png);background-size:contain;position:relative
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://s0.2mdn.net/simgad/12992090363229625917
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://s0.2mdn.net/simgad/13668535107420412090
Source: chromecache_380.2.dr, chromecache_420.2.dr	String found in binary or memory: https://s0.2mdn.net/simgad/17404929272754490490
Source: chromecache_421.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_321.2.dr, chromecache_430.2.dr	String found in binary or memory: https://servedby.flashtalking.com/imp/8/246460;8827295;208;xml;DV360;DV360FY24CCPSPInMarketAffinityP
Source: chromecache_270.2.dr, chromecache_474.2.dr, chromecache_319.2.dr, chromecache_260.2.dr, chromecache_253.2.dr, chromecache_449.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_362.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_354.2.dr, chromecache_362.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_366.2.dr, chromecache_270.2.dr, chromecache_474.2.dr, chromecache_293.2.dr, chromecache_319.2.dr, chromecache_412.2.dr, chromecache_323.2.dr, chromecache_260.2.dr, chromecache_262.2.dr, chromecache_395.2.dr, chromecache_314.2.dr, chromecache_255.2.dr, chromecache_253.2.dr, chromecache_449.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_316.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_299.2.dr, chromecache_316.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://twitter.com/
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://twitter.com/$1
Source: chromecache_257.2.dr, chromecache_335.2.dr	String found in binary or memory: https://twitter.com/search?q=%23$1&src=hash
Source: chromecache_454.2.dr	String found in binary or memory: https://webcompanion.com/en/cookie-policy.php
Source: chromecache_421.2.dr	String found in binary or memory: https://wp-rocket.me
Source: Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	String found in binary or memory: https://www.entrust.net/rpa0
Source: chromecache_366.2.dr, chromecache_323.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_354.2.dr, chromecache_362.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_354.2.dr, chromecache_362.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_354.2.dr, chromecache_362.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_449.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_354.2.dr, chromecache_362.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_387.2.dr, chromecache_326.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_436.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://www.xn--in
Source: chromecache_390.2.dr	String found in binary or memory: https://www.google.com/pagead/drt/ui
Source: chromecache_299.2.dr, chromecache_264.2.dr, chromecache_267.2.dr, chromecache_316.2.dr, chromecache_373.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_436.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.google.com/url?ct=abg
Source: chromecache_255.2.dr, chromecache_253.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_329.2.dr, chromecache_345.2.dr, chromecache_235.2.dr, chromecache_310.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_293.2.dr, chromecache_412.2.dr, chromecache_395.2.dr, chromecache_255.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_354.2.dr, chromecache_362.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_421.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-162966223-8
Source: chromecache_293.2.dr, chromecache_412.2.dr, chromecache_395.2.dr, chromecache_255.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_373.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_436.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.gstatic.com"
Source: chromecache_436.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png"
Source: chromecache_267.2.dr, chromecache_373.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_270.2.dr, chromecache_474.2.dr, chromecache_319.2.dr, chromecache_260.2.dr, chromecache_253.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/#breadcrumb
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/#primaryimage
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/#website
Source: chromecache_321.2.dr, chromecache_430.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/&pub_id=1&sup_platform=1&pbMethods=
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/?s=
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/comments/feed/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/como-hacer-invitaciones-de-cumpleanos-en-computadora
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/como-hacer-tarjeta-de-invitacion-para-80-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/como-hacer-una-invitacion-de-cumpleanos-de-50-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/como-hacer-una-invitacion-de-cumpleanos-de-70-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/como-hacer-una-invitacion-para-40-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/como-hacer-una-tarjeta-de-invitacion-para-60-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/contacto/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/feed/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/fondos-de-cumpleanos-2/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/imagenes-de-cumpleanos-2/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-10-de-mayo/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-15-anos-varon/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-18-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-21-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-30-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-40-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-50-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-60-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-70-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-80-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-baby-shower-nino/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-bautizo-nina/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-bautizo-nino/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-boda/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-cumpleanos-para-adultos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-despedida-de-soltera/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-fiesta-mexicana/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-five-nights-at-freddys/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-futbol-para-editar-de-cumpleanos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-graduacion/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-halloween/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-la-casa-de-munecas-de-gabby/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-la-granja-de-zenon/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-la-virgen-de-guadalupe/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-messi/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-navidad/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-paw-patrol/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-poppy-playtime/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-primer-anito-nina/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-primer-anito-nino/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-san-judas-tadeo/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-xv-anos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-del-dia-del-maestro/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-dia-de-muertos/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-fin-de-ano/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-harry-potter/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-para-baby-shower-de-nina/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-para-cumpleanos-de-nina/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-para-cumpleanos-de-nino/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-primera-comunion-nina/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-primera-comunion-nino/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/politica-de-cookies/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/politica-de-privacidad/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/programa-de-afiliados/
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/cache/min/1/releases/v5.7.2/js/all.js?ver
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/cache/min/1/wp-content/plugins/wp-plugin-
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/cache/min/1/wp-content/themes/orbital/ass
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/plugins/wp-rocket/assets/img/youtube.png
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/themes/orbital/assets/js/cookies.min.js?v
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/themes/orbital/assets/js/navigation.js?ve
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/themes/orbital/assets/js/social.min.js?ve
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Como-hacer-Invitaciones-d
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Como-hacer-una-Invitacion
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Estrellas-1024x60.jpg
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Estrellas-1536x90.jpg
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Estrellas-300x18.jpg
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Estrellas-768x45.jpg
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Estrellas.jpg
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Fondos-De-cumplea
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Globos.png
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Im
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-de-30-a
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-de-40-a
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-de-50-a
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-de-60-a
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-de-70-a
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-de-80-a
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-para-Cumplea
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-para-cumplea
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2021/10/Invitaciones-de-dinosauri
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2021/10/Invitaciones-de-piratas-3
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/03/Invitaciones-de-30-anos-1
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/03/Invitaciones-de-30-anos-2
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/03/Invitaciones-de-40-anos-2
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/03/Invitaciones-de-50-anos-1
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/03/Invitaciones-de-60-anos-1
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/03/Invitaciones-de-80-anos-2
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-15-anos-homb
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-15-anos-g
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-baby-show
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-bautizo-n
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-bautizo-p
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-boda-para
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-cumpleano
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-graduacio
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-halloween
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-primer-an
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-primera-comu
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/09/Invitacion-de-La-Granja-d
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/09/Invitaciones-De-Minnie-Mo
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/09/Invitaciones-de-Paw-Patro
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/10/Invitacion-de-Poppy-Playt
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/10/Invitaciones-de-La-casa-d
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/10/Invitaciones-de-la-Sireni
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2023/03/Invitacion-Masha-y-el-Oso
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2023/03/Invitaciones-Dragon-Ball-
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2023/03/Invitaciones-de-futbol-9-
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2023/03/Invitaciones-de-futbol-9.
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2023/10/Invitaciones-de-Cinnamoro
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2023/12/Invitaciones-Fin-de-Ano-p
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_421.2.dr	String found in binary or memory: https://www.xn--invitacionesdecumpleaos-dic.org/xmlrpc.php?rsd
Source: chromecache_270.2.dr, chromecache_260.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_421.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:50250 version: TLS 1.2

Source: 89e82402-bbbd-4dca-9f2d-8ac190538981.tmp.0.dr

Static PE information: No import functions for PE file found

Source: 89e82402-bbbd-4dca-9f2d-8ac190538981.tmp.0.dr

Static PE information: Data appended to the last section found

Source: classification engine

Classification label: mal48.win@29/398@130/40

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.xn--invitacionesdecumpleaos-dic.org/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5772 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5788 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5772 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5788 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_245.2.dr	Static PE information: real checksum: 0x97c83 should be: 0x92f19
Source: 89e82402-bbbd-4dca-9f2d-8ac190538981.tmp.0.dr	Static PE information: real checksum: 0x97c83 should be: 0x5a71
Source: Unconfirmed 634769.crdownload.0.dr	Static PE information: real checksum: 0x97c83 should be: 0x92f19

Source: 89e82402-bbbd-4dca-9f2d-8ac190538981.tmp.0.dr	Static PE information: section name: .sxdata
Source: Unconfirmed 634769.crdownload.0.dr	Static PE information: section name: .sxdata
Source: chromecache_245.2.dr	Static PE information: section name: .sxdata

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\89e82402-bbbd-4dca-9f2d-8ac190538981.tmp	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 245	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 634769.crdownload	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 245
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 245			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
C:\Users\user\Downloads\Unconfirmed 634769.crdownload	21%	ReversingLabs
Chrome Cache Entry: 245	21%	ReversingLabs

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
http://daverupert.com	0%	URL Reputation	safe
https://ep2.adtrafficquality.google	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://fundingchoicesmessages.google.com/i/$	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://cdn.ampproject.org/amp4ads-host-v0.js	0%	URL Reputation	safe
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	0%	URL Reputation	safe
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	0%	URL Reputation	safe
http://www.entrust.net/rpa03	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://ep2.adtrafficquality.google/sodar/$	0%	URL Reputation	safe
http://sam.zoy.org/wtfpl/	0%	URL Reputation	safe
https://yoast.com/wordpress/plugins/seo/	0%	URL Reputation	safe
http://www.gimp.org/xmp/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
tr.blismedia.com	34.96.105.8	true	false	unknown
www.googletagservices.com	142.250.186.66	true	false	unknown
bid.g.doubleclick.net	64.233.167.157	true	false	unknown
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	unknown
sync.gonet-ads.com	23.109.14.96	true	false	unknown
r3.sn-q4flrne7.c.2mdn.net	209.85.165.168	true	false	unknown
adservice.google.com	142.250.186.34	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	66.102.1.154	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
cm.g.doubleclick.net	216.58.212.130	true	false	unknown
privacyportal-eu.onetrust.com	104.18.32.137	true	false	unknown
www.google.com	142.250.185.164	true	false	unknown
gcdn.2mdn.net	172.217.18.14	true	false	unknown
d3fxn7cse5tdjr.cloudfront.net	18.245.60.28	true	false	unknown
publickeyservice.msmt-1.aws.privacysandboxservices.com	18.66.122.6	true	false	unknown
xn--invitacionesdecumpleaos-dic.org	50.6.174.176	true	false	unknown
creativecdn.com	185.184.8.90	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
ep1.adtrafficquality.google	172.217.16.194	true	false	unknown
ep2.adtrafficquality.google	142.250.185.97	true	false	unknown
webcompanion.com	104.19.159.224	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
googleads.g.doubleclick.net	142.250.74.194	true	false	unknown
www3.l.google.com	142.250.184.238	true	false	unknown
onetag-sys.com	51.89.9.252	true	false	unknown
td.doubleclick.net	142.250.186.130	true	false	unknown
free.webcompanion.com	45.63.66.114	true	false	unknown
cdn.cookielaw.org	104.18.86.42	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
secure.flashtalking.com	unknown	unknown	false	unknown
a.rfihub.com	unknown	unknown	false	unknown
fundingchoicesmessages.google.com	unknown	unknown	false	unknown
publickeyservice.aws.privacysandboxservices.com	unknown	unknown	false	unknown
use.fontawesome.com	unknown	unknown	false	unknown
cdn.flashtalking.com	unknown	unknown	false	unknown
cloud.webcompanion.com	unknown	unknown	false	unknown
o.clarity.ms	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown
www.xn--invitacionesdecumpleaos-dic.org	unknown	unknown	false	unknown
servedby.flashtalking.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
c1.adform.net	unknown	unknown	false	unknown
bh.contextweb.com	unknown	unknown	false	unknown
r3---sn-q4flrne7.c.2mdn.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://free.webcompanion.com/minime/us_es/css/style.css?v=3.7	false	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	false	unknown
https://free.webcompanion.com/minime/images/main-wc-1.jpg	false	unknown
https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=n08H3X-PwKP0NrNRb-fL27VqjJYJVoKi36K2UOcJI7g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU&tc=1	false	unknown
https://free.webcompanion.com/minime/us_es/images/ico-privacy.png	false	unknown
https://free.webcompanion.com/minime/us_es/images/ico-adblock.png	false	unknown
https://sync.gonet-ads.com/match/google?google_gid=CAESEEtXcYn5XTz2aUPkx96L_5s&google_cver=1&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q	false	unknown
https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU	false	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/cache/min/1/wp-content/plugins/wp-plugin-hostgator/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=1721138300	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=gonet_ads_&google_hm=MmFlMmY1Mjg4NTVkYWIzOQ&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q	false	unknown
https://cdn.cookielaw.org/scripttemplates/202407.2.0/otBannerSdk.js	false	unknown
https://free.webcompanion.com/minime/images/main-wc-2-sm.jpg	false	unknown
https://privacyportal-eu.onetrust.com/request/v1/consentreceipts	false	unknown
https://www.clarity.ms/tag/i1a7lqpchn	false	unknown
https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE	false	unknown
https://free.webcompanion.com/minime/us_es/images/ico-malware.png	false	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2024/07/Invitaciones-de-cumpleanos-pagina-R.jpg	false	unknown
https://ep2.adtrafficquality.google/generate_204?Oj1G2w	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://robert-fleischmann.de)	chromecache_257.2.dr, chromecache_335.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2023/03/Invitaciones-de-futbol-9.	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/feed/	chromecache_421.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_270.2.dr, chromecache_474.2.dr, chromecache_319.2.dr, chromecache_260.2.dr, chromecache_253.2.dr, chromecache_449.2.dr	false	URL Reputation: safe	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2023/03/Invitaciones-de-futbol-9-	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/03/Invitaciones-de-30-anos-2	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/03/Invitaciones-de-30-anos-1	chromecache_421.2.dr	false		unknown
http://daverupert.com	chromecache_257.2.dr, chromecache_335.2.dr	false	URL Reputation: safe	unknown
https://adssettings.google.com/whythisad?source=display	chromecache_436.2.dr	false		unknown
https://googleads.g.doubleclick.net/xbbe/pixel?d=CJfnugEQw7j0ARim6tWgAiABMAE&v=APEucNVNmxkZ7jdIy5HgE	chromecache_430.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/politica-de-cookies/	chromecache_421.2.dr	false		unknown
https://ep2.adtrafficquality.google	chromecache_316.2.dr	false	URL Reputation: safe	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/#breadcrumb	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/09/Invitaciones-De-Minnie-Mo	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/#primaryimage	chromecache_421.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_354.2.dr, chromecache_362.2.dr	false	URL Reputation: safe	unknown
http://prismjs.com/download.html?themes=prism&languages=markup	chromecache_257.2.dr, chromecache_335.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-15-anos-homb	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2021/10/Invitaciones-de-dinosauri	chromecache_421.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_335.2.dr	false	URL Reputation: safe	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/xmlrpc.php?rsd	chromecache_421.2.dr	false		unknown
https://fundingchoicesmessages.google.com/i/$	chromecache_267.2.dr, chromecache_373.2.dr	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0)	chromecache_257.2.dr, chromecache_335.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/&pub_id=1&sup_platform=1&pbMethods=	chromecache_321.2.dr, chromecache_430.2.dr	false		unknown
http://getbootstrap.com)	chromecache_337.2.dr, chromecache_413.2.dr, chromecache_242.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.	chromecache_421.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_362.2.dr	false	URL Reputation: safe	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/03/Invitaciones-de-60-anos-1	chromecache_421.2.dr	false		unknown
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_267.2.dr, chromecache_373.2.dr	false	URL Reputation: safe	unknown
http://aia.entrust.net/evcs2-chain.p7c01	Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/10/Invitacion-de-Poppy-Playt	chromecache_421.2.dr	false		unknown
https://googleads.g.doubleclick.net/xbbe/pixel?d=CJfnugEQw7j0ARim6tWgAiABMAE&v=APEucNXIXRGqwCU4hJNuO	chromecache_321.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-40-anos/	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-de-40-a	chromecache_421.2.dr	false		unknown
https://github.com/microsoft/clarity	chromecache_318.2.dr, chromecache_327.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-60-anos/	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-80-anos/	chromecache_421.2.dr	false		unknown
http://codecanyon.net/licenses	chromecache_340.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-para-baby-shower-de-nina/	chromecache_421.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_264.2.dr	false	URL Reputation: safe	unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_299.2.dr, chromecache_316.2.dr	false	URL Reputation: safe	unknown
http://www.entrust.net/rpa03	Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	false	URL Reputation: safe	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-para-cumplea	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-primera-comunion-nina/	chromecache_421.2.dr	false		unknown
https://ad.doubleclick.net/pcs/view?xai=AKAOjstSU9AZe_h4MY6b3Unb_FMjtX8AoE6LMwK_TzfL1UfHdlig054onFJV	chromecache_420.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-despedida-de-soltera/	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2022/04/Invitaciones-de-halloween	chromecache_421.2.dr	false		unknown
https://schema.org	chromecache_421.2.dr	false	URL Reputation: safe	unknown
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_267.2.dr, chromecache_373.2.dr	false		unknown
https://ad.doubleclick.net/pcs/view?xai=AKAOjssW_l3qmjKoqUH-8A9tj2PJZSiRs-IeC2NMmkPcE9cijhgx6-6Ne2TW	chromecache_420.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-21-anos/	chromecache_421.2.dr	false		unknown
https://github.com/VodkaBears/Vide	chromecache_257.2.dr, chromecache_335.2.dr	false		unknown
https://github.com/eternicode/bootstrap-datepicker)	chromecache_257.2.dr, chromecache_335.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-boda/	chromecache_421.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_267.2.dr, chromecache_373.2.dr	false	URL Reputation: safe	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-para-Cumplea	chromecache_421.2.dr	false		unknown
https://www.google.com/adsense/search/async-ads.js	chromecache_267.2.dr, chromecache_373.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Im	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-de-50-a	chromecache_421.2.dr	false		unknown
http://ianlunn.co.uk/	chromecache_289.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-15-anos-varon/	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/themes/orbital/assets/js/cookies.min.js?v	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-poppy-playtime/	chromecache_421.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_413.2.dr	false		unknown
http://www.ianlunn.co.uk/plugins/jquery-parallax/	chromecache_257.2.dr, chromecache_335.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-para-cumpleanos-de-nina/	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/cache/min/1/releases/v5.7.2/js/all.js?ver	chromecache_421.2.dr	false		unknown
https://github.com/IanLunn/Hover	chromecache_289.2.dr	false		unknown
http://googleads.g.doubleclick.net	chromecache_267.2.dr, chromecache_338.2.dr, chromecache_373.2.dr, chromecache_304.2.dr	false		unknown
https://s0.2mdn.net/simgad/17404929272754490490	chromecache_380.2.dr, chromecache_420.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-xv-anos/	chromecache_421.2.dr	false		unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_267.2.dr, chromecache_373.2.dr	false	URL Reputation: safe	unknown
http://crl.entrust.net/g2ca.crl0	Unconfirmed 634769.crdownload.0.dr, chromecache_245.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/como-hacer-una-invitacion-de-cumpleanos-de-70-anos/	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/themes/orbital/assets/js/navigation.js?ve	chromecache_421.2.dr	false		unknown
http://sam.zoy.org/wtfpl/	chromecache_257.2.dr, chromecache_335.2.dr	false	URL Reputation: safe	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/invitaciones-de-san-judas-tadeo/	chromecache_421.2.dr	false		unknown
https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Estrellas-1024x60.jpg	chromecache_421.2.dr	false		unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_421.2.dr	false	URL Reputation: safe	unknown
http://www.gimp.org/xmp/	chromecache_248.2.dr, chromecache_445.2.dr	false	URL Reputation: safe	unknown
https://www.xn--invitacionesdecumpleaos-dic.org/contacto/	chromecache_421.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
18.66.122.6	publickeyservice.msmt-1.aws.privacysandboxservices.com	United States	3	MIT-GATEWAYSUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
51.89.9.252	onetag-sys.com	France	16276	OVHFR	false
66.102.1.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.32.137	privacyportal-eu.onetrust.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.185.66	unknown	United States	15169	GOOGLEUS	false
142.250.186.34	adservice.google.com	United States	15169	GOOGLEUS	false
104.18.87.42	unknown	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
185.184.8.90	creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
23.109.14.96	sync.gonet-ads.com	Netherlands	7979	SERVERS-COMUS	false
172.217.16.194	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
142.250.184.238	www3.l.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
74.125.133.156	unknown	United States	15169	GOOGLEUS	false
104.19.159.224	webcompanion.com	United States	13335	CLOUDFLARENETUS	false
64.233.167.157	bid.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.18.14	gcdn.2mdn.net	United States	15169	GOOGLEUS	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.74.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
216.58.212.130	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.96.105.8	tr.blismedia.com	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
209.85.165.168	r3.sn-q4flrne7.c.2mdn.net	United States	15169	GOOGLEUS	false
216.58.206.65	unknown	United States	15169	GOOGLEUS	false
18.245.60.28	d3fxn7cse5tdjr.cloudfront.net	United States	16509	AMAZON-02US	false
45.63.66.114	free.webcompanion.com	United States	20473	AS-CHOOPAUS	false
50.6.174.176	xn--invitacionesdecumpleaos-dic.org	United States	46606	UNIFIEDLAYER-AS-1US	false
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
142.250.185.97	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541615
Start date and time:	2024-10-25 00:46:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.xn--invitacionesdecumpleaos-dic.org/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@29/398@130/40
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.185.238, 64.233.184.84, 34.104.35.123, 172.217.18.3, 172.67.142.245, 104.21.27.152, 142.250.186.40, 216.58.206.66, 142.250.186.138, 142.250.185.234, 142.250.74.202, 172.217.23.106, 216.58.206.42, 172.217.16.138, 142.250.185.202, 142.250.185.138, 142.250.185.106, 142.250.184.202, 142.250.186.74, 216.58.212.138, 142.250.185.74, 142.250.186.42, 142.250.185.170, 142.250.181.234, 172.217.18.98, 142.250.185.200, 142.250.186.142, 142.250.186.46, 142.250.184.193, 172.217.18.2, 199.232.214.172, 142.250.186.66, 192.229.221.95, 142.250.186.129, 172.217.18.10, 142.250.185.163, 13.85.23.206, 142.250.185.162, 142.250.185.130, 142.250.186.99, 142.250.194.227, 172.217.16.195, 142.250.186.170, 37.157.3.26, 37.157.2.230, 37.157.3.20, 37.157.2.229, 37.157.2.233, 37.157.2.228, 193.0.160.131, 95.101.149.160, 95.101.148.38, 172.217.16.131, 142.250.185.232, 20.48.202.165, 40.69.42.241, 52.152.143.207, 142.250.185.104, 142.250.186.130, 13.74.129.1, 13.107.21.237, 204
Excluded domains from analysis (whitelisted): www.googleadservices.com, secure.flashtalking.com.edgekey.net, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, e4751.b.akamaiedge.net, clarity-ingest-eus-sc.eastus.cloudapp.azure.com, clientservices.googleapis.com, use.fontawesome.com.cdn.cloudflare.net, track.adformnet.akadns.net, e1486.b.akamaiedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, a.rfihub.com.akadns.net, update.googleapis.com, azurefd-t-prod.trafficmanager.net, www.gstatic.com, wu-b-net.trafficmanager.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, c-bing-com.dual-a-0034.a-msedge.net, imasdk.googleapis.com, cdn.flashtalking.com.edgekey.net, www-alv.google-analytics.com, ctldl.windowsupdate.com, a-emea.rfihub.com.akadns.net, pag
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.xn--invitacionesdecumpleaos-dic.org/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:47:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.976406113080499
Encrypted:	false
SSDEEP:	48:8uodnT/3aHpidAKZdA19ehwiZUklqehly+3:8db0qy
MD5:	039B5BD6BF926E50750EF9CEAB85430B
SHA1:	0EDE4FE974C1011151B5CFE45B24DD7666BAD113
SHA-256:	B6E65FA989E12A01FA729DD702DA98B3D789EB7E16199CC75E2242083192A5EF
SHA-512:	35DF321E01C16B300FF7B182F155099692550786D13D2B79D7550A8189F8ACC7A9CC9C416287B17C6A81C9BC65702726590B9B607D2C7B9330327D746F0AC432
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....2>Z.f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zA$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:47:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.989903901517685
Encrypted:	false
SSDEEP:	48:8XdUdnT/3aHpidAKZdA1weh/iZUkAQkqehay+2:8NYbG9Qny
MD5:	FD12192D4254B6F69F5A5D487B457D47
SHA1:	CF2D87A029D668148FEB375E937625C2EC94F560
SHA-256:	1EA066FE3A69EBBBBECAE55BACED81B65ECD9E0BB47FA1435A4AAFE07CA37E2F
SHA-512:	5C6BC8EE52234AF90BD25C9768B7AE354DA02C35A756C363ED578B6B73B8D45E79F6D310B8FFA44881F8159CF689EEB6DF3A47368B9E4CD87B0BDA1C71194CB0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....VH.f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zA$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006672054603448
Encrypted:	false
SSDEEP:	48:8xIdnT/3sHpidAKZdA14tseh7sFiZUkmgqeh7sMy+BX:8xsbQnmy
MD5:	1B43D266DB58D03D4811671B38DE8E56
SHA1:	6ADAC105854D79BFE836489DCF83B4AAE5CAA561
SHA-256:	E304F11924009AD40371FAFFAEFFA45019DC6856D9563E9F10694BC63632FB26
SHA-512:	EBE1EDD846D89108A47EA133A7074440D647AC80A81FCE08F4924F5FE5739E1BFABE0B825DA311461E5E64917F9048AC53BDD015D1AF68C2C00FF24E72C58949
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zA$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:47:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.992008661000013
Encrypted:	false
SSDEEP:	48:8ndnT/3aHpidAKZdA1vehDiZUkwqehey+R:8ZbNky
MD5:	F91949685EC948D08CB9D40438A9B0BD
SHA1:	1C9E31E700986B8885CE8442A9B7EF7288AC3F33
SHA-256:	F7D5C0C72FFBD182E4801EFB4E8C8D21700D93487B82F352C824DA45D046DC2B
SHA-512:	38FF331EA09D79B93A4C1F38F26BBF92C214D41F05FE621CD22B70CAE2FFE4EFA8663A85265CDDB48FFD2C2B7DFAC7BDCDF50B1EB408A6F7CCEE64E4AE18202D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......>.f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zA$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:47:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9804125239335213
Encrypted:	false
SSDEEP:	48:8ednT/3aHpidAKZdA1hehBiZUk1W1qehoy+C:8qbN9Iy
MD5:	E79322F9E5AFA9275EFE138BE47B7028
SHA1:	3CA6D69A6BB049D71C5335DF5C750796CE35B399
SHA-256:	C048670F80C3ABEB0021DDE595434DD1D951F8E237663D1CEE80D6D9F281307F
SHA-512:	3F8DA5317C216930A63FD95D96809C10C3D18EB61C74BBB93AB8F9925E826EDB169277C88D195FA5A0955E165BEA64733EFC4F04DEB7FEEF211A6F423F02BC95
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Q.f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zA$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:47:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9888633326115346
Encrypted:	false
SSDEEP:	48:8mdnT/3aHpidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8ybRT/TbxWOvTbmy7T
MD5:	E0DF040B048069CAAF8260936CA78710
SHA1:	9EDA55B35E27EECE1EF8BD7A7382C2506C4F2994
SHA-256:	D68DADD7C2FF30B3E6E90AFF22CA482235FD2C3F3EA1DB513936C0B42B9886AF
SHA-512:	95B919987F2BE92952AD6215ED60CBC5291C3F0C35D28AF532E0B5ABB264677DA9AF038AFEA681F1F394905E7DFCEFD29A80378EBACEAEB038C71EE1BD4381F0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....T..f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........zA$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Downloads\89e82402-bbbd-4dca-9f2d-8ac190538981.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3616
Entropy (8bit):	5.14251458206452
Encrypted:	false
SSDEEP:	48:K/gTCCme9XHDrWRNUyZMa7h27J+qrkOJryeIFMJLBW:y+D9TrW0Klo9rdGiG
MD5:	B47C33908C77774CAB98275C52D14BD4
SHA1:	0478D8EE8FDF9A3AE2E3101FC3E362CF4BAB88A3
SHA-256:	8503EF43E31DBBC08E580005282FCD0A10832DDE368CE211170436C71865EB44
SHA-512:	96511A7B0FD94F1EA3445E913333A619BF4EB2D7C7DE87DA89DBEA569C61FAE5E2ECF56007B1DF9B1D9820E9F50924F20AD71A224C2E1067D9655C7C67232FD9
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........W..s...s...s..c}...s..Yy...s..w,...s...r./.s..w....s..Yx...s.......s.......s.Zyu...s.Rich..s.................PE..L.....M........../..................H............@..................................\|..........................................d....p...q...............2...........................................................................................text............................... ..`.rdata...D.......F..................@..@.data...hZ.......2..................@....sxdata......`......................@....rsrc....q...p...r..................@..@........................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\Unconfirmed 634769.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	579968
Entropy (8bit):	7.6846641513624085
Encrypted:	false
SSDEEP:	12288:dG5knZfFKerY6pW21Cg/f35Q5911xbBBKTYGXYm4FYoZHYtIv0:dG50ZfFKUzw21XX3EN3K3J4DgIv0
MD5:	90E0E38E6F6533282FC315065D7DB897
SHA1:	E3B25A4019CD9E1AC6665FCA12EE8D85D7C1A595
SHA-256:	D575C1412CFAFA25D92E4193582B30B39E42A2A65047EDC4EC007914F369B4D0
SHA-512:	9E9DB94D0F0CD919F27C8CCBCF9746F2E3E2C8152D8A8D7CE523F26952B6C9E50EED0D238CA22AA44E4778EDBC5BFD5F63C7969B7F1B05C11C4328C6A18511E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 21%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........W..s...s...s..c}...s..Yy...s..w,...s...r./.s..w....s..Yx...s.......s.......s.Zyu...s.Rich..s.................PE..L.....M........../..................H............@..................................\|..........................................d....p...q...............2...........................................................................................text............................... ..`.rdata...D.......F..................@..@.data...hZ.......2..................@....sxdata......`......................@....rsrc....q...p...r..................@..@........................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	462402
Entropy (8bit):	5.358849106002725
Encrypted:	false
SSDEEP:	6144:OqRYlADxBldE7qZ8NdrcQNG6JMHVc/cHf4N5O7PqsCSls:3SADxBldE7qZW/c7bqSO
MD5:	A64729A4F0DD7DB3CDF3DC855DF2C77A
SHA1:	4C40360660AC023ED61BD5D0C2C55502E45FFCF1
SHA-256:	BB60550070F9A5CE5D91B9CB0D34EE6777A3DCB25DE950CB185D1C2B624B2590
SHA-512:	7C428D737817813F291E499966753FFF6DF46168D4A851A24959D54D65A7E45E862E888CED3240708BFF5A5154FA64F6C40AEA9CF394ECC86B6ED0B03553A1CF
Malicious:	false
Reputation:	low
Preview:	/** . * onetrust-banner-sdk. * v202407.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:27:01], baseline, precision 8, 150x109, components 3
Category:	downloaded
Size (bytes):	6141
Entropy (8bit):	5.640364359158166
Encrypted:	false
SSDEEP:	96:BWh/KT5McXlm/NZh4J+jZubmJfPIcJe4iMh:Z1Vm/34+jZSmPTh
MD5:	5C96358A3435F44D6C277BB06E736600
SHA1:	F4842930E300C66339F328F2B52BAC0EA378A942
SHA-256:	9A15DE8D1513D91D71D853CD741A73105C157234D2EBB664B3B1307868509576
SHA-512:	C9B1A36286E328CB91FA11E15F3E5EDA1FD3D7FE32C08B1D8BC418D8053919B0BEA0668189293BC5F694632CAAC8575B4E824343929F4BD5C47F4ABEABC7DF79
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/images/main-wc-3-sm.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:27:01....................................m.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:27:01+03:00" xmp:MetadataDate="2022-09-16T19:27:01+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:27:01+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3518)
Category:	dropped
Size (bytes):	211858
Entropy (8bit):	5.43477116754567
Encrypted:	false
SSDEEP:	3072:sB+DSmU5OQocOIyGrzrEriruS4EcCYmnzLr6jD4xkRPMU8tGKKbD:sB+DSmNoPyi6jhCY0L4D4xkRH8tGKKf
MD5:	6AF94BBDA7ECB8B8CAA407C9D6F15B76
SHA1:	0D8E5EC9ED1F72269127125822AC2F967457A17F
SHA-256:	24DCCD731E4B42B3C3E43CB9AC9205879143EBB4DE7658AB9222DD3B0458B086
SHA-512:	68A5D0157FBAFB8F1F272E358A9C82611F38A0EABE205C179F14DC5248016B56958827FEEC5C7BCFCE04939902C9A953DFE109081C091710F9B47E8246F48E6B
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},p=ca(this),.u=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.rg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.rg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)t

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.351409765557392
Encrypted:	false
SSDEEP:	3:Hd1aKthYM/n:Td/n
MD5:	282D5D259F93F779E66DBEF034ACAF5E
SHA1:	E4545F5274FB88C73CC1B0FE9A71F7E0E77EA585
SHA-256:	F8BCD9E592F05C9CBE76E4264B019613B296257E7C8F9502F76E9DEC8B79DDEE
SHA-512:	618B434C00D532020BD73DF06203C83D27398DF495FC8542FCC85F41312363678FED2A17A52011FD55A4858AD22F60438BBB11ED29826856411BDDE6DF19D058
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmr3wy3ZZQ2xhIFDRM0Cs4SEAmK9XxWfdN8JxIFDRM0Cs4=?alt=proto
Preview:	CgkKBw0TNArOGgAKCQoHDRM0Cs4aAA==

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:26:24], baseline, precision 8, 798x578, components 3
Category:	downloaded
Size (bytes):	30548
Entropy (8bit):	6.9654496957716745
Encrypted:	false
SSDEEP:	384:V1m5ZMtBacVCRHV4p76sX7Ov8R49r7zXowEZoGV8AWYYYYiHdu4:VAZ6scka6sXCW2r7TAoGVDM4
MD5:	6D21AE44405ABFADDA37B6C367481C49
SHA1:	AB9A0D515FFD1BCA4D0E9C7BD16A709526723271
SHA-256:	9B50668E3A58EFB36BF03A273CBBE7362FB47F65F82823A5292A55082C9DFCF3
SHA-512:	B16941528F853C497F559117D9DA24044B64E0E1536EBD5DCCC4746A6AB35848574E8C6291AF420544FB875D7DAF54B32708197382851EB1D9CF4AC4AA8B43E9
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/images/main-wc-3.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:26:24....................................B.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:26:24+03:00" xmp:MetadataDate="2022-09-16T19:26:24+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:26:24+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	54588
Entropy (8bit):	5.4687100796833334
Encrypted:	false
SSDEEP:	768:OSHyWdn4/VPLD+CtIP7pbcmE7CNwlSoCMc3mscJSlHtR+pRuF3JaTrb2OtKCB:OEjd4/9Clpbc3CpJM4msSSlHtRWcI7B
MD5:	08E3CF78E0877392B3C81F84D9651E11
SHA1:	82657C35961140CE7D66CAA9D4A1F96663C1C2A4
SHA-256:	0F27805E87C581F900BFCBE1449B5FD092064E8D4CE2273BEEB425DFFF11E82C
SHA-512:	4892028B188C7721B51A75983A071C0036AED059987E757970853C791C6CCE9C1A063F104D87DA2C1CDB2485EB84EA3B225F2D24BBA92C1A9B35A886F013DB3D
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccloseButtonType":"Icon","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Opt out of sale of personal data and targeted advertising","MainInfoText":"When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2016)
Category:	downloaded
Size (bytes):	39612
Entropy (8bit):	5.519644959714568
Encrypted:	false
SSDEEP:	768:qzYb3uSHMeNfX5m6cx/qbk/BssqE2ZSgxIs9bWHGJ4CricXgTpg/4G0yl6qQHm5L:RDlO/qY/Bo2c8OACsvEF
MD5:	68DFADD452657CDDCBCBA03C1A09279A
SHA1:	44DDB9F6D21B4C59F7FF9A870CA8BA49B7DD9FBF
SHA-256:	10BCB657B69FE38080CC57D9AA2E4F190C8660E64C2917F93564E7890DF58B2B
SHA-512:	4D0C74DAC9C21D6AEB69B0BE35BF20AD234A08259BD13683398E96D80E86FBC0F8DCC12BA1C6D484FE61341795B2699E1F58BA3AFC24F8BD32FB27995F421A09
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241023/r20110914/client/one_click_handler_one_afma_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b};const ba=(new Date("2024-01-01T00:00:00Z")).getTime(); .function ca(a){a=a.s;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));typeof a.wow64!=="undefined"&&(c+="&uaw="+Number(a.wow64));return c} .function da(a,b){return a.g?a.m.slice(0,a.g.index)+b+a.m.slice(a.g.index):a.m+b}function ea(a,b=0){let c="&act=1";b===0?c+="&ri=1":b===1?c+="&ri=24":b===2&&(c+="&ri=25");a.l&&a.s&

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	115460
Entropy (8bit):	6.082075967777497
Encrypted:	false
SSDEEP:	3072:n2OHLzN9ZEvoBcv+BkYevfvsvfdv2voMXKXl504:2OrzN9BzBd0Kz04
MD5:	DF239ADB66167E3144306FA70D5305A0
SHA1:	212E3B74334723278B6255BD99086F1B103F955B
SHA-256:	D6B561BCB23D4FD271DB62FAC9EFBF6F8A20F2F497DDC623E26505132A841E5F
SHA-512:	8A2FF96A11BC29FB440A898C80E544073005294762886D264EEDA9D1F0E6353EBD8347A5E58564594A196F3C59B2276104B7B62445491DE03FAD43805B0BD172
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7820871901371481&output=html&h=280&adk=1179991962&adf=2182241064&pi=t.aa~a.634035291~rp.1&w=896&abgtt=9&fwrn=4&fwrnh=100&lmt=1729801919&rafmt=1&to=qs&pwprc=8818301303&format=896x280&url=https%3A%2F%2Fwww.xn--invitacionesdecumpleaos-dic.org%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1729810083216&bpp=2&bdt=2314&idt=2532&shv=r20241022&mjsv=m202410230101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=2&correlator=3622206489969&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=184&ady=478&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C31088195%2C31088261%2C95344190%2C95345271%2C31088398%2C95344978%2C95345788&oid=2&pvsid=3613037213600863&tmod=839573377&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=2540
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20241023';</script><script>var google_casm=[];</script><style>a { color: #000000 }.img_ad:hover {-webkit-filter: brightness(120%)}</style><script></script><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20241023" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrm(&2057?61<&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var t=this\|\|self;function v(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=t,f=0;f<c.length;f++)if(d=d[c[f]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b};function aa(a){t.setTimeout(()=>{throw a;},0)};var ba=v(610401301,!1),ca=v(653718497,v(1,!0));var w;const da=t.navigator;w=da?da.userAgentData\|\|null:null;function x(a){return ba?w?w.brands.some(({brand:b})=>b&&b.ind

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10092
Entropy (8bit):	5.341516367702533
Encrypted:	false
SSDEEP:	192:jm2KPYICKMyWH08DRXzBIHi3uxLi/DFtwfJpYtOJYw/c3ODM4xRw+QOQEip54f14:jm2nOVc7K1aaWOIfQB0
MD5:	499F72D5D4DB2C5E81243299F85D2353
SHA1:	1D627E21098FB6381F764E99E4A175C6E6430A4C
SHA-256:	D236A61032284F8D89F7CD1EF2A148D09C6548B21FB7BDA89E0F84B546E92629
SHA-512:	E6322287EC18918CB0373C1FA1B84AC3C8C698676A3F4F0EDA78E56E43BC4E832B6AD953250E8E3F58A5AABB2DC5DE9EB02DA7BDED337B4FB842B3432A007BC4
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFloatingRoundedCorner",. "html": "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

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32003)
Category:	downloaded
Size (bytes):	36868
Entropy (8bit):	5.176279342143451
Encrypted:	false
SSDEEP:	768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ
MD5:	C5B5B2FA19BD66FF23211D9F844E0131
SHA1:	791AA054A026BDDC0DE92BAD6CF7A1C6E73713D5
SHA-256:	2979F9A6E32FC42C3E7406339EE9FE76B31D1B52059776A02B4A7FA6A4FD280A
SHA-512:	D9EF2AAB411371F5912381C9073422037528C8593AB5B3721BEA926880592F25BD5DFDEC5991CDFE5C5EF5F4E1D54E390E93DFD3BCA3F782AC5071D67B8624D4
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.6/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.6 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>2)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 3")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2474)
Category:	downloaded
Size (bytes):	41150
Entropy (8bit):	5.32836800322513
Encrypted:	false
SSDEEP:	768:jh1KbpBz/i38NOlPM6V3tqUFIru9FITGH4ARR3iLjZJj1wjOfbXhbNvRfuKLBzd2:jh1KbP3B03t7GZG3iLjZJj1wjOfbXhbk
MD5:	03DD89B74FB02695DAFAD8B06F080B69
SHA1:	9405160A8CEAC347E575DBD0C508321AB5AB37CB
SHA-256:	5B9CFA0283D9A9F6A909DF2B61C9933C11130343F08AEC96CDD8F49C29972526
SHA-512:	F865528394AD972A618ECBD6CDC3555B81F65DDE612EEEFE27EE18761CA1A11B2CA3A52FF090CE0D9B200FB73734AD2CD3D8996CB0D284D2D2C017282461A108
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Preview:	;(function(omidGlobal) {. var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function r(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},t='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this);func

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	downloaded
Size (bytes):	579968
Entropy (8bit):	7.6846641513624085
Encrypted:	false
SSDEEP:	12288:dG5knZfFKerY6pW21Cg/f35Q5911xbBBKTYGXYm4FYoZHYtIv0:dG50ZfFKUzw21XX3EN3K3J4DgIv0
MD5:	90E0E38E6F6533282FC315065D7DB897
SHA1:	E3B25A4019CD9E1AC6665FCA12EE8D85D7C1A595
SHA-256:	D575C1412CFAFA25D92E4193582B30B39E42A2A65047EDC4EC007914F369B4D0
SHA-512:	9E9DB94D0F0CD919F27C8CCBCF9746F2E3E2C8152D8A8D7CE523F26952B6C9E50EED0D238CA22AA44E4778EDBC5BFD5F63C7969B7F1B05C11C4328C6A18511E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 21%
Reputation:	low
URL:	https://webcompanion.com/nano_download.php?savename=Setup.exe&partner=IN220101&nonadmin&direct&tych&campaign=20762542537
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........W..s...s...s..c}...s..Yy...s..w,...s...r./.s..w....s..Yx...s.......s.......s.Zyu...s.Rich..s.................PE..L.....M........../..................H............@..................................\|..........................................d....p...q...............2...........................................................................................text............................... ..`.rdata...D.......F..................@..@.data...hZ.......2..................@....sxdata......`......................@....rsrc....q...p...r..................@..@........................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204928
Entropy (8bit):	5.481442811454624
Encrypted:	false
SSDEEP:	6144:s0w/y9jpBqm+iusvV++Z6GOzJS73tSZHIG1OxHUSQXSU+Juyt75PpMjNek/ZPANh:V
MD5:	15FB9087B3D452F0FF92367D6687FA11
SHA1:	91005CF69CC32EBFB714CCE519219D5D39435717
SHA-256:	F0A21710C81683E1371FF2FEF14855664D3F4DBEBE6944D140E6E16F7F9727E7
SHA-512:	5BC1A9D0BE27BB82390EE035C5558A67571A879F398B07207E1AB0D37223B258C49111972B51E82BA5345806F2604D9ECEC0833CEAF75E886D3514AF68806A56
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10846925175?random=1729810130076&cv=11&fst=1729810130076&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3DtrackOptanonEvent%3BoptanonCategory%3DOneTrust%20Cookie%20Consent%3BoptanonAction%3DPreferences%20Save%20Settings
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s2095006060.1729810107","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s2095006060.1729810107\u0026ig_key=1sNHMyMDk1MDA2MDYwLjE3Mjk4MTAxMDc!2sZ0Jb1A!3sAAptDV7XmzIW\u0026tag_eid=44807585","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sBgGvfQ!2sZ0Jb1A!3sAAptDV7XmzIW"],"userBiddingSignals":[["7105939267","7151318280","8227542080"],null,1729810132279838],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfet

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	downloaded
Size (bytes):	24012
Entropy (8bit):	5.499987691448148
Encrypted:	false
SSDEEP:	384:Pk7E758N1SahurmdjZNUxHSB6iQBO4EqNHBcBBN+/bm4QmkVGtZ9uy4YD8Wy/hLx:PkC5I1SavdjZNoyB6iQw4tTEg/bm4Qma
MD5:	EDA8EC7E94403382C1C30E8898BF5D0D
SHA1:	ECBA3661C56B89A4833A1B2EA26F5184A01A4C06
SHA-256:	FDADEBA727A1FC1CA6763F597CE67219913281B9941DD02B49E235EAED22D602
SHA-512:	A41F6094D1CC0F568563D1DEF9A9D89BD6472F23C4B4C914673653CBFA5A745D015288537934AC2ED2A1ADF31BA9B88161397142661835AE9D2DDB653E9EA56B
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241022/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function u(){return ba?!!q&&q.brands.length>0:!1}function ja(){return u()?ia("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(u()?0:t("Edge"))\|\|t("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!t("Android")\|\|ja();ja();t("Safari")&&(ja()\|\|(u()?0:t("Coast"))\|\|(u()?0:t("Opera"))\|\|(u()?0:t("Edge"))\|\|(u()?ia("Microsoft Edge"):t("Edg/"))\|\|u()&&ia("Opera"));let m

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7281
Entropy (8bit):	6.101644808143277
Encrypted:	false
SSDEEP:	96:R087fPgL0OSZ+NwbMvs5S/kypVpny2aiHiZmTSEU3eVH3U:m+gtSPbVwkcJSEUok
MD5:	EA9218504EEC09A337676178D9020356
SHA1:	6C293603553F543EAACFC3E2D7CE42077C621DE5
SHA-256:	DDFA452F752C05D749643B4221E6E18C92C0E8B6085B5FFA0FFE357935DBF60B
SHA-512:	E9F2DD3E0B6B3B4E155F0BAD1E27ACB030AA988E071B6E4A54B100D3DB4DCF6B2433DD2C28D26A2649B04B735CA1C62D1C260ECC09DE86A1B16BDCAE1399E26B
Malicious:	false
Reputation:	low
URL:	https://secure.flashtalking.com/oba/icon/consumer-privacy-logo-16.png
Preview:	.PNG........IHDR................a....zTXtRaw profile type exif..x.WY.%)....}.$..qX...s.v..[....l2. Y.pw......4..]H..I1.h...\.Hv.......{.....0...n.)E........~.t....k..qk....N..w?y5..n......N\|\..n....\|t.P...9......o....+x{\|...[}e.1xy.j..\|...h.......7....>..w_XF..._.P..ww.~..]..s`N+?...9{.s.....hTE=`.1.....gY.#....y2.d.m...f+.F...LC.:..4.w...=..'..@..K.(s.K`h=4Y\v.%..x...k..z...~..v.L0FX......y.mAD6].../e......,.BSy....Q..~.T=.-...Xl.&j.........!2... ......6............<g....;.d.\d#.x.5B.\..yu#7....p.].Y...G\|..Jp...b.$..C....b..W.+..K.("I...O!.$)..J...C.Yr.9..`..[...zWW}.5V...Z...\|.-6i..V:w.&z..S..2..b..F.2..Lhm..g.q.L3.rYSV.<..5R..aj...z..1A+.....cO`\...4/.l".y1.8......dX.N.1P..q.t.{1.G.....7._.E...9..~............u.>.)..>...y.Z.}.....(c..`.m....+".C1O7.-...=V..k.Fx.&....=........f....L.{u.........r.H....L^...9..G.}...u...h...y\|....g..L....B..?.n..Z.n.g.S.L.~...f.>c.!./+.>=.../.#.....C.{........c.....I@....K......u.....u....@....'`...s.8....

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204928
Entropy (8bit):	5.481805960032161
Encrypted:	false
SSDEEP:	6144:w2fjZTi0Y5UNQtiD693MuOpf5S73tSZHIG1OxHUSQrFj4/ufUvyGXZpLuzdZPANA:/
MD5:	61E8DD835FB057118BB60A48AF17C541
SHA1:	C5602BB5B3BACCF54E22D2594C3618A5C49DB061
SHA-256:	5EFEF99FCEBADA8BE0C5387961687AE395ED8A4A8BB211D42D64520D77F4E66E
SHA-512:	B4003EAB91D93E982189576CB4B9734DA2D82500D3968740B7C46EA88EE4358D96C21AF0AFFB9A47A0649B5DF6DD78F34CBCCDD72395D72AD6A5F7C000EE63D4
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10846925175?random=1729810145303&cv=11&fst=1729810145303&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200zb811825413&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2Fthank-you.php&ref=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s2095006060.1729810107","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s2095006060.1729810107\u0026ig_key=1sNHMyMDk1MDA2MDYwLjE3Mjk4MTAxMDc!2sZ0Jb4w!3sAAptDV7FW_on\u0026tag_eid=44807585","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sBgGvfQ!2sZ0Jb4w!3sAAptDV7FW_on"],"userBiddingSignals":[["7105939267","7151318280","8227542080"],null,1729810147392532],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfet

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22445), with no line terminators
Category:	dropped
Size (bytes):	22445
Entropy (8bit):	5.307959537127814
Encrypted:	false
SSDEEP:	384:V82ipcutdutMABwXCQ+Ur+heTJ8eMAB6LxbnmcN2Jo4pS:VSpcdCABwXG1heTJHexzoS
MD5:	707464C48DA4C3B2B62288F1F3312964
SHA1:	7FC11F4C5645FE6ABA1BBCCF4AE97A9FDD7064C2
SHA-256:	F8F845C5D5ED4BEDAFC9CB04F6B00D4BAAAA9D25FE08C86C789620908201C6E4
SHA-512:	8C6D78C6A5B36A1852594D9D989AF5F9861BB1727A88B1589FA3F7CDF9F0449572C9EFFE223A4939A1DC0F63007E476B0E480C754442A3986C1CDB4A9C0451E8
Malicious:	false
Reputation:	low
Preview:	var OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}},s=((g=y=y\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=e=e\|\|{}).Name="O

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1111314
Entropy (8bit):	4.2526942823331835
Encrypted:	false
SSDEEP:	6144:2eomOuConnjs2HDVFH7Lc4YV2Dnio/NULootRtKey/jyGELeW+SJ1GSnbJf8wDK7:WuConA4YptRwbyGEWAG
MD5:	45A02262C18140278D006128F84B6176
SHA1:	8D7A7EE040ED6682B70B889711B880663075FA4F
SHA-256:	C7D7DACA4AC7F2F0D428CCA11D3F628BF588BC0E3028B8088D9A4EEFC85EDCB5
SHA-512:	BAF79A8C87D74402E1CB2D469D58AD9B80B6A1E0B3AF2A1589D4459FD4EF7382A02E57BDF8709DD1A601A9FD3FE35B0D1AE224B68EEFD8631C0F9F1FCD984EA7
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var c={},l={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(l=document)}catch(c){}var h=(c.navigator\|\|{}).userAgent,z=void 0===h?"":h,v=c,m=l,s=(v.document,!!m.documentElement&&!!m.head&&"function"==typeof m.addEventListener&&m.createElement,~z.indexOf("MSIE")\|\|z.indexOf("Trident/"),"___FONT_AWESOME___"),e=function(){try{return!0}catch(c){return!1}}();var a=v\|\|{};a[s]\|\|(a[s]={}),a[s].styles\|\|(a[s].styles={}),a[s].hooks\|\|(a[s].hooks={}),a[s].shims\|\|(a[s].shims=[]);var t=a[s];function M(c,z){var l=(2<arguments.length&&void 0!==arguments[2]?arguments[2]:{}).skipHooks,h=void 0!==l&&l,v=Object.keys(z).reduce(function(c,l){var h=z[l];return!!h.icon?c[h.iconName]=h.icon:c[l]=h,c},{});"function"!=typeof t.hooks.addPack\|\|h?t.styles[c]=function(v){for(var c=1;c<arguments.length;c++){var m=null!=arguments[c]?arguments[c]:{},l=Object.keys(m);"function"==typeof Object.getOwnPropertySymbols&&(l=l.concat(Object.getOwnPropertySymbols(m).filter(funct

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	downloaded
Size (bytes):	23678
Entropy (8bit):	5.499582071929141
Encrypted:	false
SSDEEP:	384:PqTcq08AdYSAIdImk7eDivZSPoa5LjcOuq37BroWaIOXXhwpuy4yDCWyj/1gVfj5:Pqr0VdYSAr7ecMPoaNQOHdUWaIOX277t
MD5:	4002AFA3CEF491481AB135657FE8712E
SHA1:	0C27BD429BB943377978552E0FB608BA3EBB2052
SHA-256:	187849C92554869BACCF286F9A45661D5217DE42ECE9328BE7B8FD1A19C5340C
SHA-512:	477B9B69608CB15A5D90AE48BC3C261F79CE670B88C5547A8786A0CA7C2C3151B3BA0A8C6B25D1B2A761A92EA9FBDA44E8D11854A9FC295C7C922E43AB688C1E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241023/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function u(){return ba?!!q&&q.brands.length>0:!1}function ja(){return u()?ia("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(u()?0:t("Edge"))\|\|t("Silk")};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!t("Android")\|\|ja();ja();t("Safari")&&(ja()\|\|(u()?0:t("Coast"))\|\|(u()?0:t("Opera"))\|\|(u()?0:t("Edge"))\|\|(u()?ia("Microsoft Edge"):t("Edg/"))\|\|u()&&ia("Opera"));let la;function ma(){const a=Error();a.__closure__error__context__98438

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	279449
Entropy (8bit):	5.588070754710871
Encrypted:	false
SSDEEP:	6144:r3HRo3k4a5fQBvif2s3qXk9nv+HWBBNy2U3p:zH2kr5oBK9W5
MD5:	1518E65FC8163A8872C0F5355DA2269E
SHA1:	17390FB8C5623074D5E8D9C9D9D5C3497E0AC547
SHA-256:	30E56FFB0148BEECCC9BBB1B1824625FE78A5180F59879ACA1D00741B6222636
SHA-512:	CBF8425002E011F56409E7F868C17AC69CD3D115810917AC2339DA5E7080C87E2C526071FCABB1167DE2C6E317049E12569A8A1132BA5925F345D9C8B963EFE1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-VH2PP7KNZJ&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","xn\\-\\-invitacionesdecumpleaos\\-dic\\.org"],"tag_id":12},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"",

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmQhelBJ1wSH0Emqb3WkFuG43WvNf_vcumYqWmVERJGxoaWuO0fjnuO8-WXIMbvVCgf3w1e903sl5dxzWdm72uQ3Ek0Y12jtKpc
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	261947
Entropy (8bit):	5.563324106364772
Encrypted:	false
SSDEEP:	3072:WvQRhbIGc3kWhej1Zc0RSJcEjCPfrgixeOYH2hnHas3rOXk9nZGeJ:1Ro3k4e5ivvioXjs3qXk9nZGc
MD5:	4864E1DCE84EDC5669C50D6E07D43322
SHA1:	7F5B1C15D1069E3855C678F81CCD774C8D6CA6A3
SHA-256:	440F1753BFA381E372AFA10F88C87B437B13144EFE799D5F613005D0EDFB1646
SHA-512:	56A478515D78A58A3AEC7598FA447FD79AE7F9F12E5C5DFFC0EE76C909D9FE9D5D717C21F0146E2C309C4582725180451618252A3EB6C47139F63E2F59E72D46
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-10846925175&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-10846925175","tag_id":14},{"function":"__ogt_dma","priority":4,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameVa

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6970
Entropy (8bit):	4.833884196458045
Encrypted:	false
SSDEEP:	96:npyIm40wunJwlbQaZ6p7GHGa6AymAbvNZFb3tYYVgj9vjjjJjFZZ2Pq8A:FZunJubfZ6pC6vzbvFb3tYYC9L3JpKA
MD5:	63439D9FA7F313DD1BFDBD685A0E6159
SHA1:	6A079C27D58A5F418BAA70D0D338B7C22A90ED94
SHA-256:	CB6547E4D9BF876B6F84E23003EA54E913F110CAC4358FF591C2F1DE375E957C
SHA-512:	466B8886F8870A7D2415C7AC5CFAD4385C229465DB1585FB295373E68676E58C8D48DC4818D2F21847B14F310806F9D81D320FF4D3365153955A62F371F0F15B
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202407.2.0","OptanonDataJSON":"58290800-cf5c-4f05-9ec6-18c67ae77b2a","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"019121d1-b64a-7a84-a779-732017e7ddd7","Name":"CDPA&UCPA","Countries":[],"States":{"us":["va","tx","or","mt","ut","fl"]},"LanguageSwitcherPlaceholder":{"default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"CDPA","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Web Companion CDPA","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"019121d1-b64a-75ea-8795-8c0cd0754ee0","Name":"CPA&CTDPA","Countries":[],"State

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19762)
Category:	dropped
Size (bytes):	709646
Entropy (8bit):	5.425583201664215
Encrypted:	false
SSDEEP:	6144:RnuAyTIm95wjS4dkakp4dBsB9dFSk8PbXiE87RU0q9STmjGl54/GMFzMw3cVpU2W:RnuAyR/pKF87RgHzMw3cVpU2ZeF2XMl
MD5:	CAD2315A8BE3FDD6487725807217F98E
SHA1:	50CD61D4BE19A61AF75814B0C851010E4829441F
SHA-256:	259918EB8A34598D07C1FDD7820727BBCDADE98B5B0CCF3C02BC5D13A1DAB4FF
SHA-512:	2CD8B0F5A124A77C36F4C76D437A90BF9583703E582D7BADC207D2ED474D0FF100A2A8E5D6F3A60AC99E50BA7B4400693E36B8D5FD984D345D80341009FAAB4D
Malicious:	false
Reputation:	low
Preview:	/.@Author: Alexander Kyriakakis...Necessary jQuery Collection./../*. Table of Contents:. . jQuery Cookie Plugin v1.4.1. * jquery.easing.1.3.js for piechart smoothness and other. * jquery.scrollTo. * jquery.localScroll. * SmoothScroll for websites. * jQuery appear plugin. * modernizr. * scrollToFixed. * Menuzord - Responsive Megamenu. * jQuery Isotope. * jquery parallax. * animateNumbers. * jflickrfeed. * fitvids. * Retina.js. * ajaxchimp. * tweetie. * menufullpage. * WOW animation. * Typed Animation. * Owl carousel. * FlexSlider. * Magnific Popup. * Nivo Lightbox. * PrettyPhoto Lightbox. * equalHeights. * Maximage Slider. * BxSlider. * moment.js. * Clock1 - The Final Countdown. * Clock2 - flipclock. * instafeed.js. * jQuery Validation. * jQuery Form. * code highlight. * YTPlayer. * Infinite Scroll. * jQuery Pagination Plugin. * Vide jQuery plugin for video backgrounds. .Datepicker for Bootstrap. jquery-timepicker. * bootstrap-datetime

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3856
Entropy (8bit):	7.947085476083858
Encrypted:	false
SSDEEP:	96:zY12+1kYg5uzX5xMtv39ay850bC+hPzWGz8Alq:U12+1FgAzXrMTi0bC+h7Wwlq
MD5:	17FF762ED9BE663BE581CC5B6445156B
SHA1:	229805F8CE6B87191ABF7130152AF89E6BDD116B
SHA-256:	7DC96DB121F4C1BB62735D4B47AE2E524DFB2DBE8DC9EA6F4412F204A7FE5F71
SHA-512:	F2A74C46B5EF8DC1B1F070AF7DA11FDBD4324B7D40A815890672590C1A7E32221C56BA455F2AAB5C2AB04B243AE56427B1F5C78667E832217B78823E05395CE5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....IDATx..].P......fsW%.JmR.l....I.Btf.UQWqw.qf@.....X.o...F.].6.."...(".....f^.3.3=..n...................x"A.........c..8... .1..{6.l..h5.._......g.5f..\|..E...?..J]K.o....V.8:.it@Ki#.[V..0/.j........w"....q........^..w.WN...?........P...7.g..U.E.t...UD.....PBE-7.j..c..E.U..#.......E..=.b."....&.P.r.u...V.........X'.b:.[E.WL..-.......Q.u.m.$U..w2%...................bh..E[i{.h5....Mg.j.........DXX...ETSe..eIp\..U.....cj..Wwe.J..6WZ...9.'4...W.}.`l\|n......P)[\|i...n\...l2 .._2.lM.Cn.C^.."O.?#...#.W. ...jO)V.\|.h.W...{.I&..O..B........Z\.....8R;_...U.......\|ii).z....BN\<M^......\|AZ..Ys.1uzZ...S.S..o:.Lv.<$..T..zI...Gz..A>....;...lI.-^{3......5.<..e.3We...C...z.M...kH....q..U2x..R.s3w..l>.V)..O..B..+.e...?h.Q...{...q..%.9..G...gkR..H.>f.6./S..e.4.P....tV<\|...;Z..{._...B?Xc.....i..L.4!C;:...`.7.N...X.....E..=.^..P.X.1..EI...t.^..8&*.ff...\.>}.l.\...qx...u...W.a..I..S.2r.......{..~...z$...a.A....E....Eed?.!!.;r}.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36848, version 1.0
Category:	downloaded
Size (bytes):	36848
Entropy (8bit):	7.995112872818791
Encrypted:	true
SSDEEP:	768:57Wc/aUQVBlB85eA5/ULxb14Nv3zyMfD9zriUE2knMVQu:57WYWVBlBj2/UVRchr62kMVQu
MD5:	3CCD9AB2050B2F26898B77AF9148B8E2
SHA1:	7F9F46B2FB3F121F3C0600E1182D725B1BE6C176
SHA-256:	258F9F1B553BB57419619F41D3B1445226C7BC63D2A3409EFEF4A68426709E94
SHA-512:	6F9F764D77A563A132E952BD49790F22AA80A88F885BB9AA82F1C25BBC9FBA1451F3E4FADD1EABDF86DC77F7FCDC13C5B183AEE617077F3061E04D54E7246AFE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2
Preview:	wOF2..................~.................................J?HVAR.".`?STAT.\'2.../l.....,.A....0..4.6.$..8. .....8..[..Q#.....m..A......N.2Y......6.....e..iIe.m.KZ......=...,.....-+..6"..s.j..23.+.Y.vY....YX'.w^N..@...-mu....!...9.i....DS.=....>.a.t.Q,\t..G.2!.....[../S........D..A&.8...!.A.7K+2Q.c....D..._..i......J(f=7...C.[..n6.B....B.t.z4C.T+...b...!.B..x..r>D....q.C......9.Z....?....{./.......D#..N..O]+..5.5.......{".l.XD...,."a.l0bD..FcD].W..^.qzQ.^.uMA...>h.0.K=.4..h.....T..mG.+.........n+_DG..I.GT..B..igd.X.!u.n&U.;.C.~S.........d....h..{.... .. ..KL...!N.$..5.a.SN......6.=}j.HJ:J.pG.n.~b.AOS..'.T....G.........E.]..O\...\|.p/...l..-.i4?....J0..y.........N.O....3.4&ql...t.T.......I..q..$..........i.n..m..O...v....P.m!...........K...M....r.6Q......:E..$.D>.it...h..>B...R..~.NmF.....x{1`.c..[brR..T....%..\.wz.^..V...?..YG^...eok....b.uu.V.ZqP`.04,.^..L.K.l....i......%Vj..'.0...o..g.....w7z..i`8R.Cj........V.HV.;..w.Qg......pY...b.3$

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	330903
Entropy (8bit):	5.616362587303996
Encrypted:	false
SSDEEP:	6144:Z4xURo3k4a5ZdBvi8ECFqXk9nc+mFBBNy2UzC:SxU2kr5HBKXWO
MD5:	AB870F25893C337881A612E220D41B86
SHA1:	1823256BC398C6BC9891EB5F536BFDA960B0E9BF
SHA-256:	B046052BC960CB8AC8802A6A5721935B7C888F13DC3F29266995A623CF01F814
SHA-512:	A8B49AC5EA955534A48CAF06C41EE9ED8FB969084C153E1E14FAC2886DD60A9177805A1D80A20E1D3CFF0A4E5F2020917E640BF5ADC9865441C48D92A6E7B641
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-156KYDXFJK&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":15,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7779)
Category:	dropped
Size (bytes):	255902
Entropy (8bit):	5.558955097495879
Encrypted:	false
SSDEEP:	3072:FORhbIGc36Wh112F0nPS3cEjCPfrgi04as3rOXk9nOBwDn:FORo364j85vi2s3qXk9nOBwT
MD5:	0CB14A357639E0DE9E35DA54539DCCFC
SHA1:	C3AC882B83D731373488767E718F76BF9E55F5BA
SHA-256:	2F9EC794282FDE82B6BC0DDEF88FAD8EC19FA3CF78366ECD577766018E56D16C
SHA-512:	D6D7762C04FC4CD1068CB031244C981BEF8F137488120A2A98DCFD8548F3F3F20539C9E06926BEE76CBA6BF54CC5C09128A6BAD6E6AD42A4FC25D71E1F5F7E85
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"46",. . "macros":[{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_com

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	dropped
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7437), with no line terminators
Category:	dropped
Size (bytes):	7437
Entropy (8bit):	6.122129765060415
Encrypted:	false
SSDEEP:	192:1DY0hf1bT47OIqWb1na4WpG8ClP8NvVRVUV1VEP0PoPGtP/PjPsP8PumO:as1T47OIV4j28vVRVUV1VEMw+t370kG1
MD5:	0DBE50968AFB29E4B4E450386965B66F
SHA1:	55C72CA360A9B80F009C0E300BF4B252C8BC7730
SHA-256:	B720B0DDEEA92752EDC4DAC8D4F9FC018900569507B71171E78ABE0B0C7E1990
SHA-512:	E0AB871203297F485418588510E3704F2D687A02698332C15A3D04AF0BDAE1888516395E1992EB9CA65ED57F4A4FF25D57687B04C7F6E390E9A95D8524C93C02
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2775)
Category:	dropped
Size (bytes):	93343
Entropy (8bit):	5.585057041015292
Encrypted:	false
SSDEEP:	1536:XgzkJNpmPCqi43CJwFbjgFeQGUg5jg5fd0WLz3FZN6b92CrI6NsxPb3vk29qncIk:XkwpmPCq53CIqHGUg1g5mT4CrIcsxTvj
MD5:	D4C71A7DF86CDE9B30396A2C8C0C6DC9
SHA1:	37C3E406F82D230B5DBB09ED95F0B416FDE92FA5
SHA-256:	EFC93D07162FE0F4D79777D7CE18CCE46C282F7D23157C744056CD7FDF9BF3A6
SHA-512:	2183B1BBF93495DE611AC113A4C085FE69B753DCF4B668BDD055AB4E6627E0510D8309D891D4D31F2228F8058029BB2A31C36EB91C3025223D9B22B4EF151C46
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ea=da(this),fa=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ha={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ha?f=ha:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ca(ha,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=fa?ea.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2093)
Category:	dropped
Size (bytes):	445152
Entropy (8bit):	5.5762134330567665
Encrypted:	false
SSDEEP:	12288:lrLbjvudFZTeHPOv7meLFeCt6lg7Db2oUGsAfTAqsoedKUF3+rWP0sCeUgMujrsY:lrLbjvudFZTeHPOv7meLFeU6lg7Db2o8
MD5:	D610BEFBA2468F5AF0B5FC9E876E7564
SHA1:	6AADA29A50E5D9638E367165CF0E7EB3A5DA9914
SHA-256:	41237965C1A879DFAB9D378F573A0EA1BC6B1316FA0B3BB0739352194643C2AF
SHA-512:	10FFD73543C5C229D4AA6CA0FC8FD87F828BA0E87EBECBB39F35A15AEFE3184402059B0082B38AD513671D2B83985163FC779675B0CD1C63BD9BEFAEE6D27840
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var q,aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ia(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2176)
Category:	downloaded
Size (bytes):	23437
Entropy (8bit):	5.37089157390888
Encrypted:	false
SSDEEP:	384:keqeqcVQ7yLT2+77ZhJLPwwoT7Ktxu27uYpU92eCPyvD+:kcSeH2+77Z8w4CUbXy
MD5:	27364A42609046FD1693F7D76E88CE21
SHA1:	E140A4F52E436C55413DCC31815A7D0B73240788
SHA-256:	1F4644988CFB9648D5236C12056F9CA31317C75544EF8776F4FEC148322BB954
SHA-512:	C9F0238FA52A3B4BCE55CCF3EBD6AAADED862A8D66729D05FED261E8ECD562C2758A5A900EFA145334A6AC00316E1722298B35CC371B372AE110B3CB136819C0
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/H0ZEmIz7.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},l;if("function"==typeof Object.setPrototypeOf)l=Object.setPrototypeOf;else{var m;a:{var ca={la:!0},da={};try{da.__proto__=ca;m=da.la;break a}catch(a){}m=!1}l=m?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}.var ea=l,fa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){a!=Array.prototype&&a!=Object.prototype&&(a[b]=c.value)},ha="undefined"!=typeof window&&window===this?this:"undefined"!=typeof global&&null!=global?global:this,ia=function(a){if(a){for(var b=ha,c=["Number","isFinite"],d=0;d<c.length-1;d++){var e=c[d];e in b\|\|(b[e]={});b=b[e]}c=c[c.length-1];d=b[c];a=a(d);a!=d&&null!=a&&fa(b,c,{configurable:!0,writable:!0,value:a})}};.ia(f

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	330909
Entropy (8bit):	5.616387157645103
Encrypted:	false
SSDEEP:	6144:Z4xURo3k4aNmdBvi8ECFqXk9nc+mFBBNy2UzC:SxU2krNABKXWO
MD5:	3A590F89F98F65E4EF5BC1C4CFF07ED8
SHA1:	184A992DEBB8252CEFEA0811E3782B778B569363
SHA-256:	CF15CC47C451AFD4674B1D51E50B11D4B92A53342B031B00188E87CAB8867B35
SHA-512:	46EFD15CE680D1C8D8FCACC963DD01EF61FAB88908AADAF8359E09DE9DB0818F14D88869DB5727121D36E86E65B941A7C04E141297EB5D88DFAEB7137ACE18D1
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":15,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65609
Entropy (8bit):	5.437155156040918
Encrypted:	false
SSDEEP:	768:N56AeiWAJmhGhsxpCBPcq3CsJLPOpe5Qqi:NKpoqC13jJipeSZ
MD5:	8CB73B89D1EA9D71E9E7D1C6B0503D6E
SHA1:	728A78D166A8C0A9DB477F720E137CF62CFB95B8
SHA-256:	46B0DC3066786D9507F347B076D34ABC4C6F92F32BA5FF9D61D109C6B2B9B2D2
SHA-512:	8EE09267F2A8F0D35D5C88F55A54293F2F31B7A05B5B7D8CD58BF405EDE001AA8B1EC10D79739E3DFE58493BF193DE6EA890061E378A6C2A8216256F17B19925
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202407.2.0/assets/v2/otPcTab.json
Preview:	. {. "name": "otPcTab",. "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY1RhYiBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iZGlhbG9nIiBhcmlhLW1vZGFsPSJ0cnVlIj48IS0tIHBjIGhlYWRlciAtLT48ZGl2IGNsYXNzPSJvdC1wYy1oZWFkZXIiIHJvbGU9InByZXNlbnRhdGlvbiI+PCEtLSBIZWFkZXIgbG9nbyAtLT48ZGl2IGNsYXNzPSJvdC1wYy1sb2dvIiByb2xlPSJpbWciIGFyaWEtbGFiZWw9IkNvbXBhbnkgTG9nbyI+PC9kaXY+PGRpdiBjbGFzcz0ib3QtdGl0bGUtY250ciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+UHJpdmFjeTwvaDI+PGRpdiBjbGFzcz0ib3QtY2xvc2UtY250ciI+PGJ1dHRvbiBpZD0iY2xvc2UtcGMtYnRuLWhhbmRsZXIiIGNsYXNzPSJvdC1jbG9zZS1pY29uIiBhcmlhLWxhYmVsPSJDbG9zZSI+PC9idXR0b24+PC9kaXY+PC9kaXY+PC9kaXY+PCEtLSBjb250ZW50IC0tPjwhLS0gR3JvdXBzIC8gU3ViIGdyb3VwcyB3aXRoIGNvb2tpZXMgLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciBvdC1zZGstcm93Ij48ZGl2IGNsYXNzPSJvdC1zZGstY29udGFpbmVyIG90LWdycHMtY250ciBvdC1zZGstY29sdW1uIj48ZGl2IGNsYXNzPSJvdC1zZGstZm91ciBvdC1zZGstY29sdW1ucyBvdC10YWItbGlzdCIgYXJpYS1sYWJlbD0iQ29va2llIENhdGVnb3JpZXMiPjx1bCBjbGFzc

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (638)
Category:	dropped
Size (bytes):	20948
Entropy (8bit):	5.394317494538009
Encrypted:	false
SSDEEP:	384:fJ1a/sw6YKPCWdaNhe5h6OL1+oDGvvWBlNRX2sZZg7K5mO:CwjaNhe5h6OR+oDkubNR7ZiY
MD5:	E672814146B9DD9F36C91591C97378C2
SHA1:	FE5EC0E7C8D3C1FDE6312C2F68DF990C42AD990E
SHA-256:	EA14B302D2386504B249B182FAC6BDEFF4B77B71921945C4CF70E73550AB503D
SHA-512:	4902F95198055AED4797FDD3948393A752F8EBBD9BF8FDCD21BBA80284DAF68EA8B83DC8162C82092FC989D5A1A668A4E3DC4B0531AC0E07BCBF677FD87C2C14
Malicious:	false
Reputation:	low
Preview:	(function(w){function x(){var a=this;this.implementThePolyfill=function(){var b=Element.prototype.setAttribute;Element.prototype.setAttribute=function(c,d){if("style"!==c.toLowerCase()&&b.apply(this,[c,d]),"style"!==c.toLowerCase()\|\|d\|\|this.removeAttribute("style"),"style"===c.toLowerCase()&&d){this.removeAttribute("style");var f;c=a.strToObj(d);for(f in c)this.style[f]=c[f]}}}}function A(a,b,c){function d(l){return l?(";"!==(l=l.trim()).charAt(l.length-1)&&(l+=";"),l.trim()):null}void 0===c&&(c=.!1);var f=d(a.getAttribute("style")),g=d(b);b="";b=c&&f?function(){for(var l=f.split(";").concat(g.split(";")).filter(function(B){return 0!==B.length}),m="",n="",r=l.length-1;0<=r;r--){var y=l[r].substring(0,l[r].indexOf(":")+1).trim();0>m.indexOf(y)&&(m+=y,n+=l[r]+";")}return n}():g;a.setAttribute("style",b)}function k(){var a=this;this.iabType=null;this.iabTypeAdded=!0;this.crossOrigin=null;this.isAmp=!1;this.domainId="";this.isPreview=this.isReset=!1;this.nonce=this.geoFromUrl="";this.setAt

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.261301029168016
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HVjROE9HSxmQqyRHfHyI:x2pHDKcElSDPyI
MD5:	806699ED4BB65178112F5BAD2242C52D
SHA1:	F44771599DB97A9EA255845DC886AE69EC293024
SHA-256:	6595E4AA67EA4D50268F53193CBE84B2201B3130DC15F690165007BDB829E068
SHA-512:	01FD5927CB4F6A6C1EA7B91F9ADD3F39AB3CC936FC06D806BF0A7A656E008F4281A96B7F8A850D8D470E8DF832B95A539836D734DC19D33B9946C31C948839FA
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"TX","stateName":"Texas","continent":"NA"});

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2873)
Category:	downloaded
Size (bytes):	9031
Entropy (8bit):	5.527216820529872
Encrypted:	false
SSDEEP:	192:B1/6bZSDg3eksiGBpuMo5gXKl7LOjbke3CT2itXedSlFI:B1/6bZSDqeYGBbnal7LCbkkCT2oXedS8
MD5:	0A69A7A3530DE318072DE6182E31A0C6
SHA1:	9BF1165A0064FB85DD8F29DDC6C45AD5B9574EE9
SHA-256:	BF1E2557855835794A8A1D9C1403AC53373CCEA3006325357E5CB384E93D7514
SHA-512:	9B24B0255A19285BF345BB199BAFF4DCCACBB55521FA0581E2AB196D5C28EC936749C6F9A21233261CBDE37033DA5C91D7F03A3A1FE4B25D8F325A7717760740
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20241022/r20190131/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var l=this\|\|self;var m,n;a:{for(var aa=["CLOSURE_FLAGS"],v=l,z=0;z<aa.length;z++)if(v=v[aa[z]],v==null){n=null;break a}n=v}var ba=n&&n[610401301];m=ba!=null?ba:!1;function ca(){var a=l.navigator;return a&&(a=a.userAgent)?a:""}var A;const da=l.navigator;A=da?da.userAgentData\|\|null:null;function B(a){return m?A?A.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function C(a){return ca().indexOf(a)!=-1};function E(){return m?!!A&&A.brands.length>0:!1}function F(){return E()?B("Chromium"):(C("Chrome")\|\|C("CriOS"))&&!(E()?0:C("Edge"))\|\|C("Silk")};function ea(a,b){Array.prototype.forEach.call(a,b,void 0)};function G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	453
Entropy (8bit):	7.36062591090814
Encrypted:	false
SSDEEP:	12:6v/7ec2MLqMWvXc9gLHirJsmqSNp9BCYo2+8lcUIginS:nna9gL2/fN/0Yo2BOS
MD5:	939BDA96A28170229C6ACC3F0FA65805
SHA1:	659BEEE7BC2669240383B337AB0787D1F7286498
SHA-256:	E519CC4B7B8FDC64A7AAAFC1B808CDE266A234205AAC0D6C55589C12446D565E
SHA-512:	990D5CA61869385A6F104A6B70148AEA994C378CB433835DAC2D3829EEDEA21C384DA178795F5321393D1A6FEAC22C4686D8B2913229596C01D16D47B8156428
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/formats/wta/help_outline_white_24dp_with_3px_trbl_padding.png?wp=ca-pub-7820871901371481
Preview:	.PNG........IHDR.............;0......IDATx....hoa...k...5{.f.f{q6.f..\..[n.....4[o..........).B..V...M0..4....o.z.3L.i1..W..%.J..p0.od.../.....,..!.^.."C`.3Y.]j/-5..*.....ZR.3.`s.o`..}.K.@..._..`~.^.g.;.{.ob...A...kP\|....gq-.B.....w....7....,....z..;...1?x..+..\|J.O.fo.......,^....z.`.}.G.?..r..5j-.)..G..Y...K.._R..?.w.\|y.....^..$. aG.0..E].........u1R..Y....I$^......-..;2<.......>.P...I.P.nB...n;..)..]@A.k]......IEND.B`.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2575)
Category:	downloaded
Size (bytes):	381789
Entropy (8bit):	5.528754527789545
Encrypted:	false
SSDEEP:	3072:uadLKov0ZF0WWyaRgvcePwZ9zLHpObXRp+X3alNjK7REp9WV2v/76737ISir0:tLX0ZFggvzClsp63gNF3G3ES1
MD5:	6D36D9F7F819D0F514CC84964FF8984D
SHA1:	F1DBC14246BE0BA9514A8CF6C2CFDEFC8FF9A198
SHA-256:	B79D633A8DD459914510D5250F93FD8577C82BD5F2C9FFD9B5AEBE9196671B22
SHA-512:	9A9A95D8FAFDA84A6616D725551F9EA54F01F37D62B305D5617B54E98695D2BF110579E87B21338FC11AF46F04BA32F35032FE1F42A91F5FAE17442DD04C1A3B
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/formats/outstream/versioned/prod2/outstream_web_client_20241002_RC00/outstream.min.js
Preview:	(function(){var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this);function r(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,h){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:h})}if(a)ret

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 970 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8442
Entropy (8bit):	7.850455608941069
Encrypted:	false
SSDEEP:	192:7avnV5ifR+Hl1DqTwHuZr56VsefTsQvsEeiwxAmW2HIji0U:7afV59lU7aPfwQvjeiwx5Z
MD5:	7047D94AD9C476AFE2C3A9F899AF41B0
SHA1:	2C6DE95D24304D8ABCD828A4D0483B777DDF28B1
SHA-256:	7A31202FFBAE379AB3EF51CF1B705ACAA75242615C41A7043CB145D43E66F1FF
SHA-512:	9983480D1908F6C0E3C3BF5C2B94FC90B61D4EE8B5BDDC82D16B4BC6D7458327F95FE1DD06367CB12A1F687BDA27149982629DD3E2874E707D5A927BB3B13CCA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............N#N6....PLTEM..K...........L..L...........K.....???...J..K..L.....___...................p................~.}.R...MMM)))...........999..............?...yyy.p...............C===.........OOO...J.................XXX......iii...SSSqqq............333sss........vvv---...HHHkkk...000....aaaP...........AAA...mmm...JJJ...!!!.........&&&........l.;L...........FFF......ZZZ...UUU;;;...a.,..........a.........gggdddDDD........y.........]]].....O....gN..W........................555...............$$$f.4..QQQ}}}....u...r.Cz.N...].'.........T.....\|\|\|..Z..~.....o..........@.._...v.I.......o......V..... '. ..y..L...................7......._...................Q.....U.......x...j...........`..C(.!....(.....G..\|.z.........?...I......................H..........:.....IDATx...\|.W...4y2...JYY...1.m.@.1.....j.....{..7t.. ..BKBBBI#..M...f.w.owoo...n....{3.y3..d.b.... .)o...}.T.A..=@..%.@.......P......P...............@e..T..@e..T.....2..*...2.P.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=n08H3X-PwKP0NrNRb-fL27VqjJYJVoKi36K2UOcJI7g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU&tc=1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 66624, version 4.262
Category:	downloaded
Size (bytes):	66624
Entropy (8bit):	7.996443365254666
Encrypted:	true
SSDEEP:	1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ
MD5:	DB812D8A70A4E88E888744C1C9A27E89
SHA1:	638C652D623280A58144F93E7B552C66D1667A11
SHA-256:	FF82AEED6B9BB6701696C84D1B223D2E682EB78C89117A438CE6CFEA8C498995
SHA-512:	17222F02957B3335849E3FE277B17C21C4AAF0C76CD3DA01A4CA39C035629695D29645913865B78E097066492F9CEE5618AF5159560363D2723BED7C3B9CF2A8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
Preview:	wOF2.......@...................................?FFTM.. .`..r........5.6.$........ ..... ?webf.[.....@...nC....t.TL...f...t....q...5....?=i.l..\.vl ..T...b.... .1.f..7.T.Q....D.;:...1.l.jv..e....n..E....k5>.d.7Q.l..Ba....u.x].......W.C....$.8.v#..y`..F..1aM.8.....w.=\|'..0..T\|..2/..M.%.b.. .tY$!.....5cb.....(.&.-A/mY......./y..o\........Z=.....5c.k._.n3...(W.........Nag+.....O.R.'...5...=?....m...L......:..._V...........z+zc.1`..Q#j.../.Z0...-..F..i.b.F"2.<EE...;.."u?..........R.Z.HR..D...x.Y,.5.Tt.vb...e..YN..sFND+........1.......`.....D.(.&6baP6(.....X.6gNW.6k..9]..v......$Cf.v.v..x@..-J.`G...w..w[..A.......4.msI>....i.......p..F(2b....~H.]J.]..j....F.f-~.@......gg.B.-..Tx.%..pU.u..me....'........;...@7..t.=pN....../_.U8.....r....s...X=g....H........j..c....d._1l:1i..I..T.r..>.....v{Gb...T1*...f.-.x.-i..{..1..h...>..(..3.3..!.$.:.....j.~....:ugv.......%.....?...d..5+......fU.z...X.X.<.c%@fBHO.8.....i..G...{...[..M#.FZk."_.'.n{.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.382819855152342
Encrypted:	false
SSDEEP:	24:4Hksqq5/Jz2pRNrBZJuvu8goqc0ioNhc+wV4+mI:2Rz2bNrVENtmN+++j
MD5:	25E237E087949C828D85AAD22F11778D
SHA1:	08B4335E4E390248551379FB8BB1DB33627C4460
SHA-256:	9B71E29BF45EE5091DD35FC3DAF87FA7C344034B3FF7A270C37C44B61D84331D
SHA-512:	E49FB8482875D154D3B181FB67B4BD4176F4D7D90F0FC912930EDADE635AA08ABF937EE43E0407D7F1C7322C629896D20D97A3CA68243918B2950F1FA19C0EA6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="OOjO_knnZBEtDMateUvyCw">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1729810091960');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10846925175/?random=1729810130050&cv=11&fst=1729810130050&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3DtrackOptanonEvent%3BoptanonCategory%3DOneTrust%20Cookie%20Consent%3BoptanonAction%3DPreference%20Center%20Opened%20From%20Banner&rfmt=3&fmt=4
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8892), with no line terminators
Category:	downloaded
Size (bytes):	8892
Entropy (8bit):	5.0731984341491
Encrypted:	false
SSDEEP:	192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY
MD5:	FB15A10A641A318F91E7E912E4F9C184
SHA1:	BD41F67233FACB96976ED7B8E7207D52C03D340E
SHA-256:	F40767552E5E94B2D5F9A65D7F640CFA7D225298023DBD682095E040809A3D1A
SHA-512:	49570D36E5B1AE3C3A4965F7D054258FF676326BEE0D9399AA990926E9A762F699DE1D09078DEBADC43B363AE51D740BA33F2E8C64BB223A73D3C62872EBB3D2
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js
Preview:	!function(n,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(n="undefined"!=typeof globalThis?globalThis:n\|\|self).LazyLoad=t()}(this,(function(){"use strict";function n(){return n=Object.assign\|\|function(n){for(var t=1;t<arguments.length;t++){var e=arguments[t];for(var i in e)Object.prototype.hasOwnProperty.call(e,i)&&(n[i]=e[i])}return n},n.apply(this,arguments)}var t="undefined"!=typeof window,e=t&&!("onscroll"in window)\|\|"undefined"!=typeof navigator&&/(gle\|ing\|ro)bot\|crawl\|spider/i.test(navigator.userAgent),i=t&&"IntersectionObserver"in window,o=t&&"classList"in document.createElement("p"),a=t&&window.devicePixelRatio>1,r={elements_selector:".lazy",container:e\|\|t?document:null,threshold:300,thresholds:null,data_src:"src",data_srcset:"srcset",data_sizes:"sizes",data_bg:"bg",data_bg_hidpi:"bg-hidpi",data_bg_multi:"bg-multi",data_bg_multi_hidpi:"bg-multi-hidpi",data_bg_set:"bg-set",data_poster:"poster",class_ap

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	dropped
Size (bytes):	2690
Entropy (8bit):	5.39866636776827
Encrypted:	false
SSDEEP:	48:Otg7xBqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:fN7Qabhiwdicju8WhRHMnTx
MD5:	76A4D84DE75340D59CA06503A14184D4
SHA1:	2FE3C4A95AF88BE57D1912BB09DC463F69924402
SHA-256:	66E9BF446316F6EEC5EAEFA7098592BBD2144A60EB38C481DB233A6CA8B8D94A
SHA-512:	2ABE6C816B265B72A8023E8F832B9BED0FFD2C931BA07C5DA1AE0CB5D60178CBD1CEA9CE6AE0BB88F77614954C20836342AD6BAFE25EB1CA4D2AEB495E4E2BD2
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7433), with no line terminators
Category:	dropped
Size (bytes):	7433
Entropy (8bit):	5.4070028218058095
Encrypted:	false
SSDEEP:	192:QRGmDkynb5ZUMH5Og/rVEhdZEh+1VKfV5N6/YO8:QRGmDkynbbAeVEhoMKfVD6/YO8
MD5:	A2786990BCC9B8F45F42590F773D1725
SHA1:	0AA6EE83F42985777222259FC2A0162CEE444ABE
SHA-256:	86E5BBC9697BB4D7CFEE51A4E3A5C4F92A749C2A2D8F362876154A97068D79CA
SHA-512:	1DAA0361CDCF19DBA0B8158E493A0D734016187062D98E37D92B29DF03487653B3AEE9C2B41DAAABA16B86D3DBA3E3E56EF45BCA2F3A76BE55431EB57A0FDD69
Malicious:	false
Reputation:	low
Preview:	!function(){var s,i,c,a,o={frameRate:150,animationTime:400,stepSize:100,pulseAlgorithm:!0,pulseScale:4,pulseNormalize:1,accelerationDelta:50,accelerationMax:3,keyboardSupport:!0,arrowScroll:50,fixedBackground:!0,excluded:""},p=o,u=!1,d=!1,n={x:0,y:0},f=!1,m=document.documentElement,l=[],h=/^Mac/.test(navigator.platform),w={left:37,up:38,right:39,down:40,spacebar:32,pageup:33,pagedown:34,end:35,home:36},v={37:1,38:1,39:1,40:1};function y(){if(!f&&document.body){f=!0;var e=document.body,t=document.documentElement,o=window.innerHeight,n=e.scrollHeight;if(m=0<=document.compatMode.indexOf("CSS")?t:e,s=e,p.keyboardSupport&&Y("keydown",x),top!=self)d=!0;else if(Q&&o<n&&(e.offsetHeight<=o\|\|t.offsetHeight<=o)){var r,a=document.createElement("div");a.style.cssText="position:absolute; z-index:-10000; top:0; left:0; right:0; height:"+m.scrollHeight+"px",document.body.appendChild(a),c=function(){r=r\|\|setTimeout(function(){u\|\|(a.style.height="0",a.style.height=m.scrollHeight+"px",r=null)},500)},setT

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	201573
Entropy (8bit):	5.073549682932497
Encrypted:	false
SSDEEP:	1536:Jjm47M9ZGROwfCS0L12UDItJC1Con+cOcoJyhfyVVtuR5R9RFRtB1BSiIfrfji9I:WR5R9RFR0frfjia
MD5:	AB5CF831C9C2AA332A87B7040C271B2A
SHA1:	2FE206479205DA20241230581C686E235FDDD95F
SHA-256:	26F14DC27C44C921D4AFB66FE1FDB322EDE32B4D0A649B94D3271D0EDA684B60
SHA-512:	23CDA1D1101A7E33C801676AE55451657C049FCB9E328256975A47FD4F3642291585B625672C14AA51CA2E24A5390F355F5AE0E06E64B606F456920D0FD5914E
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/css/animate.css
Preview:	@charset "UTF-8";.../!... animate.css -http://daneden.me/animate... * Licensed under the MIT license - http://opensource.org/licenses/MIT... ... Copyright (c) 2016 Daniel Eden... */.......animation-delay1 {... -webkit-animation-delay: 0.3s;... -moz-animation-delay: 0.3s;... animation-delay: 0.3s; ...}... ....animation-delay2 {... -webkit-animation-delay: .6s;... -moz-animation-delay: .6s; ... animation-delay: .6s; ...}... ....animation-delay3 { ... -webkit-animation-delay: .9s;... -moz-animation-delay: .9s; ... animation-delay: .9s;...}.......animation-delay4 { ... -webkit-animation-delay: 1.2s;... -moz-animation-delay: 1.2s; ... animation-delay: 1.2s;...}... ....animation-delay5 { ... -webkit-animation-delay: 1.6s;... -moz-animation-delay: 1.6s; ... animation-delay: 1.6s; ...}.......animation-delay6 {... -webkit-animation-delay: 2s;... -moz-animation-delay: 2s; ... animation-delay: 2s; ...} .......animation-del

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	98257
Entropy (8bit):	4.073289635764857
Encrypted:	false
SSDEEP:	1536:CiCn1tugf6LCtMAOcaOc5F1OOO1ICyOWCDdF4X4P:CP18gf6LhOWy1
MD5:	50BB0AD9C60FBC42F5A14C2C02B9CA69
SHA1:	DB879E008FD9A1A4993B8B01419DFA5DC742E7F4
SHA-256:	5677DE69D70152DB144913C5159C78736749F78DCE221AA62C825ACAAED4CE58
SHA-512:	4ADC396A26C2789C68DFB5913CCE49F4727E922A6A02FC1B50E37A5705E3B5D70335822D5081B093ED9EDF3EF384BC2C4C9153EF28CC9FD6E7F25E6D416DF2CB
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/js/custom.js
Preview:	var THEMEMASCOT = {};..(function($) {. "use strict";.. /* ---------------------------------------------------------------------- /. / -------------------------- Declare Variables ------------------------- /. / ---------------------------------------------------------------------- */. var $document = $(document);. var $document_body = $(document.body);. var $window = $(window);. var $html = $('html');. var $body = $('body');. var $wrapper = $('#wrapper');. var $header = $('#header');. var $footer = $('#footer');. var $sections = $('section');. var $portfolio_gallery = $(".gallery-isotope");. var portfolio_filter = ".portfolio-filter a";. var $portfolio_filter_first_child = $(".portfolio-filter a:eq(0)");. var $portfolio_flex_slider = $(".portfolio-slider");... THEMEMASCOT.isMobile = {. Android: function() {. return navigator.userAgent.match(/Android/i);. },. BlackBerry: function() {. ret

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 970 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8442
Entropy (8bit):	7.850455608941069
Encrypted:	false
SSDEEP:	192:7avnV5ifR+Hl1DqTwHuZr56VsefTsQvsEeiwxAmW2HIji0U:7afV59lU7aPfwQvjeiwx5Z
MD5:	7047D94AD9C476AFE2C3A9F899AF41B0
SHA1:	2C6DE95D24304D8ABCD828A4D0483B777DDF28B1
SHA-256:	7A31202FFBAE379AB3EF51CF1B705ACAA75242615C41A7043CB145D43E66F1FF
SHA-512:	9983480D1908F6C0E3C3BF5C2B94FC90B61D4EE8B5BDDC82D16B4BC6D7458327F95FE1DD06367CB12A1F687BDA27149982629DD3E2874E707D5A927BB3B13CCA
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/4470288715097200840?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&rs=AOga4qmAygN0NQiqNFtZddKK7sTGmSU1CA
Preview:	.PNG........IHDR.............N#N6....PLTEM..K...........L..L...........K.....???...J..K..L.....___...................p................~.}.R...MMM)))...........999..............?...yyy.p...............C===.........OOO...J.................XXX......iii...SSSqqq............333sss........vvv---...HHHkkk...000....aaaP...........AAA...mmm...JJJ...!!!.........&&&........l.;L...........FFF......ZZZ...UUU;;;...a.,..........a.........gggdddDDD........y.........]]].....O....gN..W........................555...............$$$f.4..QQQ}}}....u...r.Cz.N...].'.........T.....\|\|\|..Z..~.....o..........@.._...v.I.......o......V..... '. ..y..L...................7......._...................Q.....U.......x...j...........`..C(.!....(.....G..\|.z.........?...I......................H..........:.....IDATx...\|.W...4y2...JYY...1.m.@.1.....j.....{..7t.. ..BKBBBI#..M...f.w.owoo...n....{3.y3..d.b.... .)o...}.T.A..=@..%.@.......P......P...............@e..T..@e..T.....2..*...2.P.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	261931
Entropy (8bit):	5.563440583301529
Encrypted:	false
SSDEEP:	3072:WvQRhbIGc3kWheY1Zc0bSJcEjCPfrgixeOYH2hnHas3rOXk9nYGev:1Ro3k4eMYvvioXjs3qXk9nYGu
MD5:	E7A01F036A94B5E7B1C1DF6E83FFFB60
SHA1:	7B7DEC1F8D71B45A225F294A1C05539FAB60C18C
SHA-256:	3EC0219D8488179CEA3C4AC2EC60F352768475266B5A058F87483C92AA453A15
SHA-512:	EA7AD441C313FCFD2B407126E5445293168F9C42B8793B6937ECD4CA590E4B36EA2C29E449AE32BB6AC14B774B9B088CB7C045423E053B1C74467FD0C4FE0CCD
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-10846925175","tag_id":14},{"function":"__ogt_dma","priority":4,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameVa

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17046
Entropy (8bit):	6.016651552210453
Encrypted:	false
SSDEEP:	384:3OrOOAL6SCNcrpVWelrrhotxbiNkWyoqO0+30afU/8+oPtUWJS:3OrX+6SOcrpcgrra0WDvirPqCS
MD5:	0671372DB0F8B8F0EE64216666B9B248
SHA1:	37D187CED44C8D0CFAE9307BE87EE5455D2C265D
SHA-256:	C96823494927A4759A7ACB3D0FC587CD124DE2B5FD28502E93CB2507C81FECE8
SHA-512:	E213165ECC76117BFE68B0DDA4A98A0E1C311D0D86BE90D73E554FB27A2E1C23932178AB6CF2A04D13FB0F39DA8C696D3FFA9FAFFB64A50AD642230D1843FAFA
Malicious:	false
Reputation:	low
URL:	https://ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gda&tv=r20241022&st=env
Preview:	{"sodar_query_id":"qM4aZ5nRDtacjuwP3MPg2Q4","injector_basename":"sodar2","bg_hash_basename":"wCYeIP4bXV0rjJGplLlLbfmjIulLKyJtaQ3zZMWDNU0","bg_binary":"HlVSitoAdfw5+BjINOmaKPhsHyx2xlFuE5x75l1FfJl3opybNZIEFQHhaPIvuF4O77BffAV9Pu+Fs2acqJqRYyzvwUbRXlhX1Ylyg8IeGUrnoEw48+febg/Sak9FT1l+T2RxGbq9/hTpyRmSvKvzQP+vplKiiT+U/Zd7+ZPc1usAP4rNF3cHcHCR9TAkrbENBgo8rXE+WARjuVjfjvpHXv05eym+V9ukbgA4vADuQ5nx4mw4uvUOwvGTnf1mfD+JJqw1wAOCZ78p8kISD4GXiaX6mUU2bpoMARs/nKy6dr/tv50v5o9rk9YgVtGfsngu+p/XLHC9wWgEBb0A/TfV9+m66Lut2UXP79Q2bB/tRgnipZoZX2aqOndlFYmCN5haJLjtnxvSoMy7Ni7EIYnQtOVzA0Fpyqt1iqR+yTY44vKqV7iJIyFyez8R04hf+Ev+hdDI8YUMKNi5lm7QYVecrDkXfpcDXdxZgRSmVe7DnuFwPZ0zIlFNvc5xEJZ/vD59cGX/yw9Vrfz2zSWrpJEPgZI7p4MshgIZ4AfOI5bT2P0ykYjebyg0yzSjwV/vqGTD/GN/jvLyjrBngvNtrFXXfV2va50X3gm/9i9dHtFFkXuzpwAYlfN60VitTAUBta1/OG3L7ukNNZrRegVfCB28YPLGnNM/ZN1wtwlz1BOpYRL4IXG9558jSQQlUNirwXXdfzzfRXV62qR33B6V7wcgWi+02vjfh7KI+uKdPf+obKl2iMGJZ6Kp8JElV0v0q+1r63b5x3ur7zAf4jt8pKChycN27IooWLLSJ6OTbwCOiHC27f0yVoNQNi0ZXf+0z8Ry1Sz2fHpI1dTZ/YC9I

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2474)
Category:	dropped
Size (bytes):	41150
Entropy (8bit):	5.32836800322513
Encrypted:	false
SSDEEP:	768:jh1KbpBz/i38NOlPM6V3tqUFIru9FITGH4ARR3iLjZJj1wjOfbXhbNvRfuKLBzd2:jh1KbP3B03t7GZG3iLjZJj1wjOfbXhbk
MD5:	03DD89B74FB02695DAFAD8B06F080B69
SHA1:	9405160A8CEAC347E575DBD0C508321AB5AB37CB
SHA-256:	5B9CFA0283D9A9F6A909DF2B61C9933C11130343F08AEC96CDD8F49C29972526
SHA-512:	F865528394AD972A618ECBD6CDC3555B81F65DDE612EEEFE27EE18761CA1A11B2CA3A52FF090CE0D9B200FB73734AD2CD3D8996CB0D284D2D2C017282461A108
Malicious:	false
Reputation:	low
Preview:	;(function(omidGlobal) {. var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function r(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},t='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this);func

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2575)
Category:	dropped
Size (bytes):	381789
Entropy (8bit):	5.528754527789545
Encrypted:	false
SSDEEP:	3072:uadLKov0ZF0WWyaRgvcePwZ9zLHpObXRp+X3alNjK7REp9WV2v/76737ISir0:tLX0ZFggvzClsp63gNF3G3ES1
MD5:	6D36D9F7F819D0F514CC84964FF8984D
SHA1:	F1DBC14246BE0BA9514A8CF6C2CFDEFC8FF9A198
SHA-256:	B79D633A8DD459914510D5250F93FD8577C82BD5F2C9FFD9B5AEBE9196671B22
SHA-512:	9A9A95D8FAFDA84A6616D725551F9EA54F01F37D62B305D5617B54E98695D2BF110579E87B21338FC11AF46F04BA32F35032FE1F42A91F5FAE17442DD04C1A3B
Malicious:	false
Reputation:	low
Preview:	(function(){var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this);function r(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,h){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:h})}if(a)ret

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2015)
Category:	dropped
Size (bytes):	23696
Entropy (8bit):	5.515150632408812
Encrypted:	false
SSDEEP:	384:New8QJ1nMHy/58vrKEOAmHitfX/DfLSqyuBzjZRUVhwiRA5dob91tJ42hr7Vj2uX:New8QJ1nMS/Y4Akit/7fLbxzjchwiRAM
MD5:	D64BD6AB65DDB794E3A53D17664F547D
SHA1:	587DAF312494C0938078859F8CF6A540BB37A874
SHA-256:	E217AA633D1A7501713AB4F913DB0941E41B70CE5C8717C2E6F41303B62416C2
SHA-512:	DD2D01BF229E68954DD84084D703DAF80C0C2886D97DE86DFA835B8B5F3DB4F98F78BA048090BA1B095FD616BAD55E5889B8AA43AA43DEADD817A516105581C7
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function ea(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)};function ha(a){n.setTimeout(()=>{t

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:27:01], baseline, precision 8, 150x109, components 3
Category:	dropped
Size (bytes):	6141
Entropy (8bit):	5.640364359158166
Encrypted:	false
SSDEEP:	96:BWh/KT5McXlm/NZh4J+jZubmJfPIcJe4iMh:Z1Vm/34+jZSmPTh
MD5:	5C96358A3435F44D6C277BB06E736600
SHA1:	F4842930E300C66339F328F2B52BAC0EA378A942
SHA-256:	9A15DE8D1513D91D71D853CD741A73105C157234D2EBB664B3B1307868509576
SHA-512:	C9B1A36286E328CB91FA11E15F3E5EDA1FD3D7FE32C08B1D8BC418D8053919B0BEA0668189293BC5F694632CAAC8575B4E824343929F4BD5C47F4ABEABC7DF79
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:27:01....................................m.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:27:01+03:00" xmp:MetadataDate="2022-09-16T19:27:01+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:27:01+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	dropped
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10846925175/?random=1729810130076&cv=11&fst=1729810130076&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3DtrackOptanonEvent%3BoptanonCategory%3DOneTrust%20Cookie%20Consent%3BoptanonAction%3DPreferences%20Save%20Settings&rfmt=3&fmt=4
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3687
Entropy (8bit):	5.326811513667319
Encrypted:	false
SSDEEP:	96:cWOEaPOEayJc+uyOEaDNDWOxMaA3OxMaAfJc+uyOxMaAONDWOwhaAAOwhaAyJc+2:chYaktPHYur9Wx4NF
MD5:	EC9B1AB1E8E6A1A9DC6C1D1249440B0A
SHA1:	AFCFC650DD697A345A310D8235E7DABF65E29CAB
SHA-256:	20D78A843996B91449D604981357464B6B07673F7E1D3E0592C11BBF1110A3FD
SHA-512:	7C4F65760EA7F59776E21D570B530B33ED00367E213F0DFB3547F182A3BE02E2B4BF57367DD662C0381FE3948EE42EDC7C45DA185CC9FF0DAB6945FC0D81E82B
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Barlow:400,600,800&display=swap"
Preview:	/* vietnamese /.@font-face {. font-family: 'Barlow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_A8s52Hs.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Barlow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_Ass52Hs.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Barlow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6521), with no line terminators
Category:	dropped
Size (bytes):	6521
Entropy (8bit):	5.209566654264973
Encrypted:	false
SSDEEP:	192:3p3WPe3/7KCAwFAB9z/0C57jf7CukO0JOt4Z7X7JceCHI:5dv+xwFABJ/0CpjzCrHYWZHmnHI
MD5:	07F8D71108A2F78B7AF0A112F01B121B
SHA1:	A8E7F5378BFDF5B2970199E27A36671BB704DBDF
SHA-256:	173FA1912C449106EA0008845AF8327DD6F746C50C2E58015BAB7D0AF0CBEAAE
SHA-512:	3126DFBF6630A3C54150C4C02A712F1ECCC9CFA6C3E315554EC01641B46C1C7C7E3DCE1A04578748A41A5037B5C8087C0454162BFA07507740376A5A9102DA5E
Malicious:	false
Reputation:	low
Preview:	var SocialOrbital=function(){function e(e){return document.querySelectorAll(e)}function t(e){return e.className.match(u)}function n(e,t,n){var a,c=i(e,t,n),s=o(e,t,n,c),u=void 0!==c.title?c.title:function(e){var t;"twitter"==e&&(t=r("twitter:title"));return t\|\|document.title}(t),d=void 0!==c.text?c.text:function(e){var t;"twitter"==e&&(t=r("twitter:description"));return t\|\|r("description")}(t),l=c.image?c.image:r("og:image"),p=void 0!==c.via?c.via:r("twitter:site"),h={shareUrl:s,title:u,text:d,image:l,via:p,options:e,shareUrlEncoded:function(){return encodeURIComponent(this.shareUrl)}};switch(t){case"facebook":a="https://www.facebook.com/share.php?u="+h.shareUrlEncoded();break;case"twitter":a="https://twitter.com/intent/tweet?url="+h.shareUrlEncoded()+"&text="+encodeURIComponent(u+(d&&u?" - ":"")+d),p&&(a+="&via="+p.replace("@",""));break;case"google":a="https://plus.google.com/share?url="+h.shareUrlEncoded();break;case"pinterest":a="https://pinterest.com/pin/create/button/?url="+h.sha

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6521), with no line terminators
Category:	downloaded
Size (bytes):	6521
Entropy (8bit):	5.209566654264973
Encrypted:	false
SSDEEP:	192:3p3WPe3/7KCAwFAB9z/0C57jf7CukO0JOt4Z7X7JceCHI:5dv+xwFABJ/0CpjzCrHYWZHmnHI
MD5:	07F8D71108A2F78B7AF0A112F01B121B
SHA1:	A8E7F5378BFDF5B2970199E27A36671BB704DBDF
SHA-256:	173FA1912C449106EA0008845AF8327DD6F746C50C2E58015BAB7D0AF0CBEAAE
SHA-512:	3126DFBF6630A3C54150C4C02A712F1ECCC9CFA6C3E315554EC01641B46C1C7C7E3DCE1A04578748A41A5037B5C8087C0454162BFA07507740376A5A9102DA5E
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/themes/orbital/assets/js/social.min.js?ver=20190101
Preview:	var SocialOrbital=function(){function e(e){return document.querySelectorAll(e)}function t(e){return e.className.match(u)}function n(e,t,n){var a,c=i(e,t,n),s=o(e,t,n,c),u=void 0!==c.title?c.title:function(e){var t;"twitter"==e&&(t=r("twitter:title"));return t\|\|document.title}(t),d=void 0!==c.text?c.text:function(e){var t;"twitter"==e&&(t=r("twitter:description"));return t\|\|r("description")}(t),l=c.image?c.image:r("og:image"),p=void 0!==c.via?c.via:r("twitter:site"),h={shareUrl:s,title:u,text:d,image:l,via:p,options:e,shareUrlEncoded:function(){return encodeURIComponent(this.shareUrl)}};switch(t){case"facebook":a="https://www.facebook.com/share.php?u="+h.shareUrlEncoded();break;case"twitter":a="https://twitter.com/intent/tweet?url="+h.shareUrlEncoded()+"&text="+encodeURIComponent(u+(d&&u?" - ":"")+d),p&&(a+="&via="+p.replace("@",""));break;case"google":a="https://plus.google.com/share?url="+h.shareUrlEncoded();break;case"pinterest":a="https://pinterest.com/pin/create/button/?url="+h.sha

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4158)
Category:	downloaded
Size (bytes):	182435
Entropy (8bit):	5.501604041962403
Encrypted:	false
SSDEEP:	3072:jbtEWyenHYGwdwCrDTdS4bp41p2nF58Ni1YtFrD1XgQqnbZfBhtFJz1m2MDIV0M+:jbtEWyenHYGwdwCrDTdS4bu1pWFONi1A
MD5:	D3C0FD454A91C2B6B8018D57FDADA220
SHA1:	55E1304B36F7EC3296BBBACB732BD76103EB8AE0
SHA-256:	B6714C518A769839DC1863FCB619F303F6135C2E1497F762219B443BCECC8F3F
SHA-512:	847FE3BADBF5DFF01BF135E3908B6C9958DA945A72358B6036F724C6C7884C383E58B7C2730D90FBFFE23AE854E6713A754AB5ABBFCD948505E39AF0321AF193
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202410230101/reactive_library_fy2021.js?bust=31088398
Preview:	(function(sttc){'use strict';var r,aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=pulsepoint_inc_&google_push=AXcoOmS4tHHGCtIOgdS7IzRliJTgSqBb63NKj_93oDpNUY8vgaXYWL3yTtZoE8sF7BzRsh8n7sV2Hy3D1w0D5akleQLR7iSfI0GbIXuw&google_hm=UkV6VmxpZVIwa0tI
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (1157)
Category:	downloaded
Size (bytes):	47117
Entropy (8bit):	5.255763406792631
Encrypted:	false
SSDEEP:	768:b6H1PB/kaLBOSN+y8f4F8nFeL+JKrRUZUKAYY+K/:beZ/Zd3+Ff4GFeL+JwCZUKAn+g
MD5:	1A73CE42F6CB675CF92C452FBCFC69CA
SHA1:	70DA2FCE011C80197A6780D89E5A4E3F9BA53E4B
SHA-256:	6D0C80DC22BF0634A3155D85B6E9061DDE8DE43884142D862CC2A0836102A79C
SHA-512:	9AAC1762975C6AF78CAA64F1630DAAB1D9E3D41C0E54D3CF786DD0F4536972211EA2BE08112505946A65EA2B6C3D98256A699D33540CD848FEFCCA1DB55BEA39
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/css/style.css?v=3.7
Preview:	/..@Author: Alexander Kyriakakis ./../* TURN ON FOR COOL SCROLLBAR..html { --scrollbarBG:black; --thumbBG:#ce00fa;}html, body {overflow: ;} body {color:#000; font-size:15px; background:#18123a; scrollbar-width:thin; scrollbar-color: var(--thumbBG) var(--scrollbarBG);}body::-webkit-scrollbar {width:31px;}body::-webkit-scrollbar-track {background:var(--scrollbarBG);}body::-webkit-scrollbar-thumb { background-color: var(--thumbBG) ; border-radius: 6px; border: 3px solid var(--scrollbarBG);}.*/..body{color:#333;font-size:15px;background:#f7f7f7;display:flex;flex-direction:column;min-height:100vh}.a{color:#ff9137;}.a:hover, a:focus {color:#ff632c;}.a.underline {border-bottom: 2px solid;}.a.underline:hover {border-bottom: ;}..white-links a {color:white;}..black-links a {color:black;}.#wrapper{position:relative;min-height:100vh}.#footer{background:#19213d;color:white}..footer.float-bottom{background:none!important;color:black;position:absolute;bottom:10px;text-align:center;width:100%}

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53745)
Category:	downloaded
Size (bytes):	55038
Entropy (8bit):	5.716457869428952
Encrypted:	false
SSDEEP:	1536:jRNi/VOk89/CpRhQAFyRwclJbfmKGMCKwBRzxH:LidOopRJodGGO1H
MD5:	0D007A22229AE1C6599D3DDA06610B9A
SHA1:	5B2FB4BFC3BC736137406D73BD604C29CE98816E
SHA-256:	C0261E20FE1B5D5D2B8C91A994B94B6DF9A322E94B2B226D690DF364C583354D
SHA-512:	238578B32CE241B059ED5A0D1C2ACB92B40FBCEBF739129D00661A63577A02826534FB9CD4F7780E5DFC06651BD35A21967B2E3EBFC09695569C3CB3407346B0
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/wCYeIP4bXV0rjJGplLlLbfmjIulLKyJtaQ3zZMWDNU0.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function w(A){return A}var h=this\|\|self,p=function(A){return w.call(this,A)},u=function(A,P,g,Z,e,E,c,J,Q,N,V,t){for(V=(t=16,50);;)try{if(t==98)break;else if(t==16)Q=c,J=h.trustedTypes,t=56;else if(t==g)V=Z,Q=J.createPolicy(E,{createHTML:p,createScript:p,createScriptURL:p}),t=86;else{if(t==86)return V=50,Q;if(t==56)t=J&&J.createPolicy?g:A;else{if(t==A)return Q;t==46?(h.console[e](N.message),t=86):t==P?(V=50,t=19):t==19&&(t=h.console?46:86)}}}catch(B){if(V==50)throw B;V==Z&&(N=B,t=P)}};(0,eval)(function(A,P){return(P=u(68,90,36,28,"error","bg",null))&&A.eval(P.createScript("1"))===1?function(g){return P.createScript(g)}:function(g){return""+g}}(h)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;char

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3857)
Category:	dropped
Size (bytes):	156195
Entropy (8bit):	5.429152772919038
Encrypted:	false
SSDEEP:	3072:Z2yAmN0mKx1UQNQ+LbE5dmvS2GxkaiWtqZhJX3tGFD58Gso:Z2yAmGzC+LbE5dmaPxViWtqZhJX3tG3N
MD5:	B2025EDF66E95059DC597D764E681228
SHA1:	9AB80BE4C5B4B4BC80D6A06935E9A8F76B3D0062
SHA-256:	812C21F2C381AA20A3E354755F5D510F7491E776CFD7F87713994FD6277DAF0D
SHA-512:	3CF25955335AFC78A96A0991A29E5FF5FD64E6B0978A5817D28B6FBFB49ACA1CE7EEB3E6FE16C6245A9C53849B47C6EBD7AFC2E4DA7DDE3455F2F7EBEDF6E4EE
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),u=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(g,f){this.Me=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.Me};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(g){if(this instanceof e

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.8073549220576046
Encrypted:	false
SSDEEP:	3:IfaoLaY:IfaoLaY
MD5:	8917391940D7BFAA2B71CC4EF34FD0CC
SHA1:	66754BDDDBB9D4E4BF7022121B4C9CF26FE7EFFD
SHA-256:	3C30570F0AC77EB67EC51F2C49D932C40F9A827D8A65875CB9E73400A47E1E1D
SHA-512:	57C9CFB1C6A82C583512C3601E7E929BCF0F80C2D183AB3CA7FDFAFCDC8FC76F6DC01370B8BDE309090F4D30D3A864F023FE7FB28F6E8BC749AEE8436069607F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkqL-MiDS4_rBIFDaWTNiQSBQ2lkzYk?alt=proto
Preview:	ChIKBw2lkzYkGgAKBw2lkzYkGgA=

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	617
Entropy (8bit):	5.4433477553540754
Encrypted:	false
SSDEEP:	12:TMHdteIMu5E4BAat6d/KY4HxgA4q6B7GYFOp0AddVVhj:2dtexKt6dLIxdy7P0h
MD5:	984DDC512252994C28578D7D64EB05BD
SHA1:	5CC013BA4DAD6E044AA2F5C577474D77B2410A47
SHA-256:	0B8F76FF92ED2ECB0A562C6B6539903BB1DF1EA524375646ECCBB4A731B5C952
SHA-512:	1EEA933BBC9E1D24F57EFAAD7507439DC06CA76C0DB54B2E29009D206BB050B9F8C6CE5FE5A5713D3AD47720A30DB11DC760E6B5EF45B3DDBA1057D75F6F002B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 1000 1000" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;"><g><path d="M500,51.333l0,903.334m0,-903.334l338.75,338.75m-338.75,-338.75l-338.75,338.75" style="fill:none;fill-rule:nonzero;stroke:#000;stroke-width:84.69px;"/></g></svg>

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7188
Entropy (8bit):	4.322318895602171
Encrypted:	false
SSDEEP:	96:98wKrvr7VLDZAx/iCs0Rzp5ibrHOG3dmBXqHYt0RzpM34KmU7bppCY13P1MByMEY:98fvZAx//h+bpdmuha3VmUP2I/1KygrV
MD5:	12CB7D674D4A96CB76F0C8467D21EF78
SHA1:	4BB1463FE0D0B9A38F547D0D12D05B935D5E32A9
SHA-256:	4AC33526DEB2EAADCE2799FA71193A529CF147281433B6E0A3ED79BB8176F6F2
SHA-512:	98F0392F95703DBD5CB1A4FDEA4FE321D5A4141AE0180526719D926EB8B3C5714D16330D93B067B91FD49F6890DBC51837EDE84DEDC38560A1E4E841FB4BA763
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 235 38" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;"><path d="M59.379,9.498l2.757,-0l3.819,10.931l3.392,-10.931l2.3,-0l3.383,10.931l3.827,-10.931l2.757,-0l-5.301,15.183l-2.541,0l-3.195,-10.402l-0.171,0l-3.191,10.402l-2.545,0l-5.291,-15.183Zm24.673,13.741c-1.161,-1.138 -1.782,-2.719 -1.707,-4.343c-0.078,-1.629 0.559,-3.213 1.742,-4.335c1.103,-1.049 2.573,-1.625 4.094,-1.606c1.465,-0.037 2.893,0.47 4.007,1.421c1.118,0.987 1.726,2.433 1.65,3.922l-0,1.675l-9.056,0c0.045,0.819 0.471,1.572 1.151,2.031c0.707,0.511 1.561,0.781 2.433,0.769c1.252,0.084 2.474,-0.423 3.298,-1.369l1.389,1.521c-1.278,1.298 -3.046,1.998

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7779)
Category:	downloaded
Size (bytes):	255908
Entropy (8bit):	5.558817540668278
Encrypted:	false
SSDEEP:	3072:FORhbIGc36WhC12F0nPS3cEjCPfrgi04as3rOXk9nOBwDn:FORo364285vi2s3qXk9nOBwT
MD5:	E9FF222A310C7B62FE9156E9EE1B94A7
SHA1:	7101E5F1D0BB4EE8855B7BB4C1B1938F0D11DFAF
SHA-256:	EBF0F65EB64CC187BF276D98BE513D4C2A08CA77C8CDA00C0209B92443CBA453
SHA-512:	8CED14A6A5DB8FCD8471AAC64DD0EF76C740CB70EB29F8A15C7E3BA79155AF0AF3CC35255F62B6C9F94A616AABA99852832E831D2F71113A5CA028BE8D2161AC
Malicious:	false
Reputation:	low
URL:	https://cloud.webcompanion.com/main-handler.js?id=GTM-P7WCTNP
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"46",. . "macros":[{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_com

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41649)
Category:	dropped
Size (bytes):	248594
Entropy (8bit):	5.413193857187328
Encrypted:	false
SSDEEP:	6144:O65E+gzA25EkrsbA6uP+X6ZLpjL7zTOSaD+LYGg4P6:NItw8S+XC
MD5:	FD9AC43C9450D5426ED8D28604AD49C3
SHA1:	A74B43A87A4E595E6AA724818BF8DAA643689763
SHA-256:	204A0811F79447B1A2A899B09485D06A8E63326096C2F349E7E2E8D98A61041C
SHA-512:	2585C09DBECF52F86F1925F9D24390EDD9301019ACA39A31367C757FE4D544504827928523BC749F71209FD7CB5F306B1ECE088A2B5FD310712DAAFC0EC4AC4C
Malicious:	false
Reputation:	low
Preview:	(function(window,document){var n;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this);function p(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}}p("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ca(this,"description",{configurable:!0,writable:!0,value

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	downloaded
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2.js
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22445), with no line terminators
Category:	downloaded
Size (bytes):	22445
Entropy (8bit):	5.307959537127814
Encrypted:	false
SSDEEP:	384:V82ipcutdutMABwXCQ+Ur+heTJ8eMAB6LxbnmcN2Jo4pS:VSpcdCABwXG1heTJHexzoS
MD5:	707464C48DA4C3B2B62288F1F3312964
SHA1:	7FC11F4C5645FE6ABA1BBCCF4AE97A9FDD7064C2
SHA-256:	F8F845C5D5ED4BEDAFC9CB04F6B00D4BAAAA9D25FE08C86C789620908201C6E4
SHA-512:	8C6D78C6A5B36A1852594D9D989AF5F9861BB1727A88B1589FA3F7CDF9F0449572C9EFFE223A4939A1DC0F63007E476B0E480C754442A3986C1CDB4A9C0451E8
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js?did=58290800-cf5c-4f05-9ec6-18c67ae77b2a&data-document-language=true
Preview:	var OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}},s=((g=y=y\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=e=e\|\|{}).Name="O

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	downloaded
Size (bytes):	65959
Entropy (8bit):	5.353413306184177
Encrypted:	false
SSDEEP:	768:ZSDqeR7solr3roUzaOGjIj7KkIe0McOYkyJ+nM1Em87o6dHhMHKvOW4QES3OII:cDBFsolr3r7N5yJ+nwENFnESeII
MD5:	E4B2C9B152E972CACB77265A161CD311
SHA1:	EDD9F41FFFB57C51B7C2B50D4732A61039FF308E
SHA-256:	09FA04E84D7038CC32F19BEDCBA454B9E637A35F4DE496E8EC9148C47550F0FC
SHA-512:	4263D9EFE7D369A364F785E11BFFBFEA139A1B5CBD129A84E745AAB8F8A1D254EC204963E09CA18365AD851F7491C1F7A61EE28CEB24E7CFF87E4358B8F15069
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.49/clarity.js
Preview:	/* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return Ar},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return jr}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8580)
Category:	dropped
Size (bytes):	297659
Entropy (8bit):	5.587348489631712
Encrypted:	false
SSDEEP:	6144:0fdRo3k4a2Ldxvif2s3qXk9nW+KWBBNy2U3h:od2kr2RxK7WR
MD5:	FB86DAF5064181D54DE541AAF60D0F9E
SHA1:	698470840D909E2A3D03970EA146306D84B5DD1E
SHA-256:	CC7493046DCB575DD6CF4DDE733B05BF4B56EE31EB00C8797DF890D890DD4802
SHA-512:	9016E8717541882DBA39E251FEF67A807BD36BA58FD594151084420163E4C026F763A68303747B82DFFC6744A3ADC54A9948562B56CC31753A88A2517B4C1CA0
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"google.ca"},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":23,"vtp_rules":["list","webcompanion.com","adaware.com"],"tag_id":16},{"function":"__ogt_ga_send","priority":13,"vtp_value":true,"tag_id":12},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","webcompanion\\.com"],"tag_id":14},{"function":"__ogt_session_timeout","priority":13,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (24150)
Category:	downloaded
Size (bytes):	35711
Entropy (8bit):	6.121035181615186
Encrypted:	false
SSDEEP:	384:8unc8XflBhlT7ZZIyS3UPqTY+yvuO05NfE79JbCcQ8SesVzGYVqeDgfTH2hQK5ky:S8XfnbI3UCTsI5Nf89JfpQ4SBsTT5Ppo
MD5:	C882489F4B0EE1A9C31E598937A5B9C4
SHA1:	73F5E7BDF4CBD8A2DD25201E1D5D8AEFA38D27A4
SHA-256:	0F6D4B637E6AA2929C066B31D61D0F5852171BC16C2A28FE8F4F9D5D28E72F69
SHA-512:	81C3077FCDFF8BD895620150DEB1466ED7CAD386BAE0F2B413531C50D554EB4F1AD1562E8BDCBB29DEE450A114FD39092843BCBE3069FB1F86A4CCC503384722
Malicious:	false
Reputation:	low
URL:	https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-A9yQt3YvwzzLIIOKlYK_waZ1eHQbtEsAnayYZcd6bokL5gPGFd-WnJ_FM-GfBJG0dBRWW5VncoQcjxzITNoASrz-Mt3g&cry=1&dbm_d=AKAmf-CfBe8WD2J5dCpSTCu1P-zyHgRZSCSMFe2MHmCwqwCHTa9BsjaHmLGx_HnC5e-UxJQ0ApM7TNBKeXvMLTZVxd3_Fo8hy31NOTsGUt92vDc8VjqcsW132P6RTtaZX5u1QqXTixIcbiqiv6crAd5JOF-4A5DpH17u5QV1hCE_8nBuXd-3Ig0iWV3KRGKLrXa2bsViG8g7uiFMq4CODCmCeGAzNDpghKftXP3jTL9svbcRva4EjYt_KEVA2mQxeYvOoqdlOQ_SZ7PzI9aaM0dFbeIdQRdKooRpZLXMD_Lilq9Ejw7XOl-B0KypLvW9B2T7nqo93-fX4mr6yVvZsZTMK3oO5GPawNXL28KMzDx-bhTzwxE3mBIqhpy-9CH46I3KbQkh6p-P8sI5WfOd5PdqSiyah82JPHh0wb_s7gEZ95Ks0pDERE-vybOhN9h2n4Dvc6XhxlInGR9-xtlgJ4tFpGk1NaYXqLQujUmbmk7rF3nmhYEQ1NOE-pDkuWSlV_SA20cW0BgDt4koA4uUaerUQQtJy1QTwaxtDpluXmcd67inuA52nRNo5OHLrs9NjLm7cswCdu0GVfKmtKzcvQCDY1YOIQGbr8ZuQeG6I3v-sfBJkhPnULuFXKwpV2I6bH24pttotxvEu9qMtAZP6LYVpqukgUNK5NpEWM9PlnERWTxI485Y92PchO9tXcKQEchOgBRJJJDf_ugHdbesO1aErvI0tEsOEmzAjZtqQzU63vGcO9b4VcLOupCoeTCXka98bMcIzsbQ2jVLL6aTxnz24HfQjWCSFIvDXNtbjk995w7Ib8dmzEbnx5ZeJ3PPKQaKLaH0GQtfDtwNJSqz2zwhWMqev666WNTCPP3TYFHprbkf3QzHfFGpkKGroA6QS93a0KpQfJG2Wolxk880shBuUNKdcmwjzCN1wrOzD49OzZn-o5XW412oFjXl0B1UyvnF2lKzMh8QQOiiCU6Z53cJq_LvFsTCPEcBOQZ7YQq2S_xRr0rRs3VXLwy6v_U1WEUyenxyEDYvC1T9Q5ZRzXZBdYW-_6Z4i_VMWrMf4RR8vSAszJf-8Dt_QN5teBZoIN6rKZnD6oidpzXpYLLKnYXnV6bAcPkmDUgQ7MA27N52EsUiZbwof7cmu7M4GuSOdUJnDVghePIlK5PoetS6VwZz-r770VxzPpKF6oANmVIk1HOmNsZ5BOacyFkFzjITYQFOgI7KtusHCyB0gYw0SOiVoTd9O7qNUZE3ulda2_93AfNARJ-2EBs17bzTid-k-NFuehqhXIfcQ3LdeII0ziXSrSt3N-d_FyQE7wuDM2L68tYbiteO7kbUIFSKCJ8CvN0W9U6rm0Go2z6IK2wTUF2ZJZzzAUn7JxdWQoQR2W0sPhnOTNdSI1XlEHXTI0GyNM5q9nBFtqj8o0HheADV2VYhihrXSHkDBfBTQrnRAQVXAEWQ4TRqBFWliXAU-ZpAfdHN_-4YQ-PCfShfYkT0mOCzZINnkBUtzT187q6__NBFOe5sxvk-Hl2H_IeUEvAEbLabO7TnBbw0ZjcZfqmKx9LJX8_Hr-idgz68TX3QZgNbhWU2o_r-oX1l26Z0Hk2PzEhztXkPf4A5Til6t3u8axrCL3BCbIYlO4nTUo6gKa8p80oY7xModZ1EToQ1LPLxSD_D6dUVadZ2HoAHkWEWLX2yW-c23vp701TsrSnbTFL5f7SlBuZ9Ki5u7A7fEzidLVfpoBtmmkss-WSA60KllciN3o78GEBFkWEZjxmZJbsnKtz2WqBKftg_0HiZRqWMEfgpZ-IBHZINQ04s93i6WV_YmvpMrU2l_J50tOs7ovlbTzsncDjMzRueI2UOVeQrgqRTLTd9HASn9PEpWWKo0UbHR-Q7KhJU3AGESkina2RBY_KXCNJW15sLvPmsfZ42kN3E_gKSVusPvpRm1wa7RPrGYRZ5hVxAWcyh_-Of4fVlGXD6w5ihpTyWf8rOVV0in05bOsGLszvqbMwP2MPLC4OuR7MpkpCS_6QD08BXPmeCUY9vF_cMECKBQaNlCw4nNnax_PvKxkaJ97qFsc5L1v_vYAOjGritAXBI90KCbgqQZ6PTS6dSlKndH8o19x4Dxk_jgJLuZDZqwj9yg051WPlgLEykpKjqzw_DjqT-t8a49hOsS_TUuR7hQmtXIjtKX16gEV9Lq7-tHq7Hj4oESv3FCn_VTWArt6e_mL9ZgpcqoBC6ftPJPuUeGc0fEadvhc6pEXp4B-iUzjPn-_3YQBKr67mea0FvGVdEEe5soO3CaTJOKS_4tO-UAkU93vPDHDLQu5QxJQkz5jDKfIdpkC5Q1Ba50V7KNLZdzbb4xVoePpkLD_XFAkR5gS2VWYxudHAFYDkhgz_p_br7c-VERF3urvqF3ll5jhvSMw4dln4swCFBUTHo31JyA_wKRUcREZpEIf-SZ0ywmVdysJOeCAc81Jp00kKBk8R_zi_DKv2QC2no3d6pp2nzWRzNSZCJky7ja4hpB6AXnTAEhAZ8fN9ZNsEALHqpq3nLG2P_EUOa07bDrNTRejaVuQCfrliCElw6bB41xYAaHT0NoLOdZRIrqvxFZTyv6Rbn_6lno9Ny3UsRfjrrlkn8IMFF6SNRvCorGYYKOlEzTniC4eQ7wLtHTvLIlB96f1ddLlYW8Gwh-ZzwOuTCT2s3pnqQZqxJwZ0IoUa_awoVoCtKXcw9vtOawi6hUu0nJvTt2g4PpXYbn6XpQ-sFkjc5hDL3dKWh9ks5xnIn0LfKsqTBAWcFfpEKTdd4vBa7teBtXYY20O7oqM2p9x7QcXm0u2w4sAjSzwJf8FMh734X-Ymoa6u9PXPNq7pATxHFjwnCmK85Pb13QlI6IFn698HAdh1387varlEzYf71gdJJT2EdmMKeeT0RWbwJPvvNFijkWD5WPg8Yn2NWQv3x1_Lmxb22Fv1cYke-7LuMAHSbJNF9JjDIDhhD3T1jaaHN9kLD3foNayq_Lat1p_SZsAqhqpG7TCQoOIiubVS_PYoN8roIKdSwxFeA8_TRh_ZVNaI6nGPzQyF1QOEIR1N-5P9yt3omVb5KIvQMA1YT8IcdYAZ29tG3IfMvaH-IdwGnAPpxr7qxmNJuNcMPnHk6Yf9DHax2zWjdwVW0x0djkeFZL7FY3taXfKLSNkBgXluD2AS87PXT2Z1scnWONmzyApMI0HsQZpFrTGIMhraNRkOeLkWhb_cTkS5ZoxiBy9DwUhZDCOtVs0nFq1GXhA2YwdKvtoausYIl0MN7kL3s9rW39TD5cG74JiZS_enYb17yYdowHMd8eSiFTbNw7GN51cPel-2YbM6zJRGkOYH0FgaT2oOVJU4XvnAjhU05NmcxPwCkzMtivlWt72-_ZlEFK_5oPn2qvz-hspdtuGDkOiPATZgODo_SMDvhR0SgYCW6dhbPdkDBjRIUFwSKPA33O7CvUTSN63IVoBufbBepLJb4hd8bOtMVY7mFkPW5k-yg5YICO4Cn7UyCOi9uxJgpif1UA6xD7VcdkhJ8IgrgwRWbV0SVRfR7Mpsl0AHv8PPqcNLB2vqiJYKYsuNapUnpHpegP2F8IEN36PljTFG9-B-mdRjKIrKSvYbrZcoFNnoUAvLx24fRACgfuAD4X5oMeeYfubywshO85OAxMkpUDkBx6kOsVv-qt6KQ7Fmnmmp3uUWuSaxNDnBTsrr2RYXbTTxWLvta_912EM9awWRi34DoMX85WgJFMTU4oHN1C3q69EvO3dScarWCKowoU_GVmJAuTOgXrFD1ONgAiWte3wUhBNJnm2uV6-LoWcfmNlSr6QwfgB1GPDjnDDMepn1Wr9MLRjEveoiEbWgVbnBP_OYJ5XCAYVs2juYGXXkLhW2QirB7yqydLr0K6yHoai3Hnayi8ukC4c_EhAa5c6dWuIxw4F799HzTiR6ZLz7C3WjBsLGZRMhELbpZ-n-8tji9XX15LzU_lPng7E64Tzvhx5v9L_24yYr6pJXzfoMFiY8ymw&cid=CAQSTwCa7L7dzdl7VMXTeoHrfRbfzN6jx1KzaZySAVLzxwKGTKJzAqyHFlkMND6oWpyDmRtcFgi4ESKic0grMTBtIlz2AlN_H-x2pZ7H8kWk_JYYAQ&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1&nel=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0">. <Ad id="598943820">. <Wrapper>. <AdSystem>DBM</AdSystem>. <VASTAdTagURI><![CDATA[https://servedby.flashtalking.com/imp/8/246460;8827295;208;xml;DV360;DV360FY24CCPSPInMarketAffinityPS15sUSDSKVID1920x1080/?gdpr=&gdpr_consent=&us_privacy=${US_PRIVACY}&ft_partnerimpid=ABAjH0glZfknP72LcqJ6DXmKwdxb&ft_custom=ABAjH0glZfknP72LcqJ6DXmKwdxb&bundle_id=&site_url=https://www.xn--invitacionesdecumpleaos-dic.org/&pub_id=1&sup_platform=1&pbMethods=[PLAYBACKMETHODS]\|[CONTINUOUSPLAY]\|[TIMESINCEINTERACTION]&cachebuster=[CACHEBUSTER] </VASTAdTagURI>. <Error><![CDATA[https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=adx&creative_id=605386022&creative_type=121&usl_id=916958803424&errorcode=[ERRORCODE]&asseturi=[ASSETURI]&ord=[CACHEBUSTING]&offset=[CONTENTPLAYHEAD]&d=APEucNVN8mrf9hC-lq1f3O2b94zkvbObTuypjP6qPd1oXbyK7-bT77HOYA

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22432, version 1.0
Category:	downloaded
Size (bytes):	22432
Entropy (8bit):	7.991482679845359
Encrypted:	true
SSDEEP:	384:ERqpkbtScWzQOSlJRZk2LHxvl3IAtEuF6GRuM0Xpet9QAFU9pMGm:IjbtxW3SLRZVxBIAtEuFizX8t9GpMD
MD5:	CFD6D958F6802C9F4F64C05575B70801
SHA1:	7F0644E43C42902B466B66723AAD8A95BA094B0C
SHA-256:	3E44FB721D3BE9376C6E5E946109067A04DA84AE10B3F27A03ADA7A3731E515C
SHA-512:	D84705E5EE401C2B341EC259C765A10DC1FC99D8B8AE6DCE40D059CB26BA93BC60A9B8DD6DB2DDE81C6C88A29FA2906AFAFA549F2FDE1AF8CB95320B73AA4B87
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2
Preview:	wOF2......W...........W6..........................b..X..P.`?STATH..4..............r..,..6.$..T. ..~.. ......7pnS.U\w"M1.....8.v.P...hD.I.p....Br2F.4...?(."YF.Te...9.(...H.7v"w=y....k..L..IC\.e....;..eG....n:.3..O..SS...6.i+..O&%..$../..'.z.+...}.P.E.n.Xp..G'..G}..?.+(r..@....%.".6.E.h.....%."....l....<..N./.Bv2.,.UDP...r.X..sz....GH.I..C.. .@B(jmQm.iMF.&.8..PV.&.*..:oWQ.....o..>Ge..be.FQ3..........M.u.D..8D.8.C...C4A,F.BT.>.v.u.igi..'S.MD.G9..A..H...b.w.....uP..+......$....j.......H.......r.q.q..RY.r.K]...\|d.(R.H.~ .. P.4.>M..P..\|n.u...TWv.......Y.c.rl.D.0b......Z..N......;...?....$'L.d. ...(...4....p.${u..98}.L.65...i\|.TiC.{.....F.].d..5O...'M+o...._m..Q..R....~.....X..{B..Rt\G....].j..B......p...R.N<......We5.L..l..,..@J..!C.R. 4...:.=._...,)G.u.{?.....y.......?Y~;EXz...f..&...K2./dC....~...U..~w.&.r.G..Hs..~.:....'......."..... c#T.89PM%3+...!..0...r....K.d4.4........c<!.&.1n.e./.Y.$...3.&...?......6.[P.B:!@H.....n.o....x.... tt..........8A...

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	225344
Entropy (8bit):	5.546950302241738
Encrypted:	false
SSDEEP:	3072:n8RhbIGc3kWh01ZF0pSJcEjCPfrgiGdfm9s3rOXk9nmUNME:8Ro3k4wtvvi48s3qXk9nmOD
MD5:	A686D6DDDC94812758CA2A6944692894
SHA1:	D3F46199A826A82830C61905BA6F792BF9186B23
SHA-256:	078FAE23104FE7EC0821F966964FD6193CDA79ABDA6AA6F6D3FA0D9D18443222
SHA-512:	DD130A812D4FB5DB027F1E078D0E78729DEE53800BA33F5B5F4BF3762DADA52F2D45FDDEE1BC348F66F44716B3ABDA349561967CFBC079F2BDE3D4F3B897535D
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204928
Entropy (8bit):	5.4818091195124
Encrypted:	false
SSDEEP:	6144:62fjZTi0Y5UNQtiD693MuOpf5S73tSZHIG1OxHUSQrFj4/ufUvyGXZpLuzdZPANA:x
MD5:	CD2D31FF236BA3DF9666AE6A8586AEFD
SHA1:	346D4DA94FEC843A75FFD0D5FBDA6464D1FCD8BA
SHA-256:	6BBC47664A445BBA84A118A1E31B13824DF8C5EBB10FFC50793CC56A145EF8C5
SHA-512:	D4A066CA46A23712724F4F8BA7C529A1DF4623D18FD8407157C0F4659827F72862484BD6F2D611716CA08056A3858DF59D47970BD15E09FA36BFA6F20798B15E
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10846925175?random=1729810130056&cv=11&fst=1729810130056&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3DtrackOptanonEvent%3BoptanonCategory%3DOneTrust%20Cookie%20Consent%3BoptanonAction%3DPreference%20Center%20Opened%20From%20Banner
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s2095006060.1729810107","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s2095006060.1729810107\u0026ig_key=1sNHMyMDk1MDA2MDYwLjE3Mjk4MTAxMDc!2sZ0Jb1A!3sAAptDV7XmzIW\u0026tag_eid=44807585","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sBgGvfQ!2sZ0Jb1A!3sAAptDV7XmzIW"],"userBiddingSignals":[["8227542080","7151318280","7105939267"],null,1729810132273215],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfet

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48081
Entropy (8bit):	7.979126462467856
Encrypted:	false
SSDEEP:	768:Y1/BmXy5QvsEXES5PAdh4IfWgtJdJVXNYVJQdEiscPEQ/fUkf7fCflkmJvC:a/B4VUEXES5P27WYL/q8d6cP4u6fS
MD5:	A9FDEAE3C4ACECD38B3499AFC80ACFB8
SHA1:	A3EC4B2508AF4E2AB3F2F42208AB9DAF74C18F38
SHA-256:	AC13AAD1E13F6F270BB07D29975E1D5745F08A10260F5DEEF1BE42F29A9141C7
SHA-512:	6CD804041BE7A4B4123766534B1B6EFAE47F8A8FB85E850DBB15B88D9B0F9F68ACCB4F867D48E961206BBC34A7BD45631486C9BA6CAEC69D0A3EBB2388637766
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/images/ico-adblock.png
Preview:	.PNG........IHDR..............x......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". tiff:ImageLength="512". tiff:ImageWidth="512". tiff:ResolutionUnit="2". tiff:XResolution="96.0". tiff:YResolution="96.0". exif:PixelXDimension="512". exif:PixelYDimension="512". exif:ColorSpace="1". photoshop:ColorMode="3". photoshop:ICCProfile="sRGB IEC61966-2.1". xmp:ModifyDate="2022-01-28T02:38:11-05:00". xmp:MetadataDate="2022-01-28T02:38:11-05:00">. <xmpMM:History>. <rdf:

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3672)
Category:	dropped
Size (bytes):	158545
Entropy (8bit):	5.598041155090049
Encrypted:	false
SSDEEP:	3072:FRaw99JXVyhJlkGWVnjNgIFfWiP863+EVtS+rZZJt7lq9sgLFEzFv/4RLK4O:FRaw9XVyhJlkGWVnjNgIVHP863+QtSMF
MD5:	E40ADE369B2137583427D3B87EF9DBC4
SHA1:	F412B502FE1BD068C3147BCC7A17A709198F1F48
SHA-256:	209729B651A9A55F70BBA1DB9B1E7F2AB5BEDA5A022C6C3EB7A4A3BE1314E898
SHA-512:	FBB928A2893D2B5399BF832BD4682F1137057B43368C0F4DFBC3BD6EFA5566B515B3F5EA6C65536E7707F1FBBA1B2EF49E56C61D359969FA641692547FB96256
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	dropped
Size (bytes):	65959
Entropy (8bit):	5.353413306184177
Encrypted:	false
SSDEEP:	768:ZSDqeR7solr3roUzaOGjIj7KkIe0McOYkyJ+nM1Em87o6dHhMHKvOW4QES3OII:cDBFsolr3r7N5yJ+nwENFnESeII
MD5:	E4B2C9B152E972CACB77265A161CD311
SHA1:	EDD9F41FFFB57C51B7C2B50D4732A61039FF308E
SHA-256:	09FA04E84D7038CC32F19BEDCBA454B9E637A35F4DE496E8EC9148C47550F0FC
SHA-512:	4263D9EFE7D369A364F785E11BFFBFEA139A1B5CBD129A84E745AAB8F8A1D254EC204963E09CA18365AD851F7491C1F7A61EE28CEB24E7CFF87E4358B8F15069
Malicious:	false
Reputation:	low
Preview:	/* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return Ar},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return jr}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7188
Entropy (8bit):	4.322318895602171
Encrypted:	false
SSDEEP:	96:98wKrvr7VLDZAx/iCs0Rzp5ibrHOG3dmBXqHYt0RzpM34KmU7bppCY13P1MByMEY:98fvZAx//h+bpdmuha3VmUP2I/1KygrV
MD5:	12CB7D674D4A96CB76F0C8467D21EF78
SHA1:	4BB1463FE0D0B9A38F547D0D12D05B935D5E32A9
SHA-256:	4AC33526DEB2EAADCE2799FA71193A529CF147281433B6E0A3ED79BB8176F6F2
SHA-512:	98F0392F95703DBD5CB1A4FDEA4FE321D5A4141AE0180526719D926EB8B3C5714D16330D93B067B91FD49F6890DBC51837EDE84DEDC38560A1E4E841FB4BA763
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/images/wc-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 235 38" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;"><path d="M59.379,9.498l2.757,-0l3.819,10.931l3.392,-10.931l2.3,-0l3.383,10.931l3.827,-10.931l2.757,-0l-5.301,15.183l-2.541,0l-3.195,-10.402l-0.171,0l-3.191,10.402l-2.545,0l-5.291,-15.183Zm24.673,13.741c-1.161,-1.138 -1.782,-2.719 -1.707,-4.343c-0.078,-1.629 0.559,-3.213 1.742,-4.335c1.103,-1.049 2.573,-1.625 4.094,-1.606c1.465,-0.037 2.893,0.47 4.007,1.421c1.118,0.987 1.726,2.433 1.65,3.922l-0,1.675l-9.056,0c0.045,0.819 0.471,1.572 1.151,2.031c0.707,0.511 1.561,0.781 2.433,0.769c1.252,0.084 2.474,-0.423 3.298,-1.369l1.389,1.521c-1.278,1.298 -3.046,1.998

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3857)
Category:	dropped
Size (bytes):	155817
Entropy (8bit):	5.427714146678943
Encrypted:	false
SSDEEP:	3072:a2NAmN0mKx1UdNDPLbG5dmvS2GxkaLWtqZhJ93u4jvP6tys:a2NAmGzoPLbG5dmaPxVLWtqZhJ93uQGn
MD5:	809299D51218141A002E237F26199193
SHA1:	B76A20F5ED8A35C39B6746497E062238036012AF
SHA-256:	4EB220DA7DB158F50AD051A94022B882A6E23447AC09E68738F499037059D8DA
SHA-512:	5CDB2504A73475F0A33E018AF4E17C1AB3D78AE8EDE172DE5B86835D9F40C678EE9B563DD3F87A0A81608D7A7B0EBB98C2690BB9A63E3D54D9017095A13BE56E
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),u=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(g,f){this.Me=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.Me};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(g){if(this instanceof e

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3557)
Category:	dropped
Size (bytes):	16761
Entropy (8bit):	5.496761658915657
Encrypted:	false
SSDEEP:	384:LQZaeg6fjkyUQJqqz1pBjL5xz9yAFxUC8rJUrWUK2FZcSX1FsS:LQZa/6rDUQJTN35xhyAsflDUKgySlFsS
MD5:	0D833FD65D7A9C8C17FED9705F579B49
SHA1:	128A64F415163AE29D547D4167E12875E2C9E465
SHA-256:	E239504132EBD13F770F54B558319788EF8D1146473132043B2D9A1130B42A77
SHA-512:	4478BC1B8EAB082AD584C08C14A605FC650DD0D3DC2ECC8B5653ABC30A57A04E9BB790833CCDC3C25938A14C93041FDA4086111F71DED8632ED1D3F9D143D3CC
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function ea(a){m.setTimeout(()=>{throw a;},0)};var p,q;a:{for(var fa=["CLOSURE_FLAGS"],r=m,t=0;t<fa.length;t++)if(r=r[fa[t]],r==null){q=null;break

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:29:07], baseline, precision 8, 150x109, components 3
Category:	dropped
Size (bytes):	6528
Entropy (8bit):	5.8812875899607135
Encrypted:	false
SSDEEP:	48:JqEz9Wce/cZT5XbAH8DzHFLvxt2aFWGb47rHTBrZRXZ8J1Phgwm4gkIDyuAQyThl:5Wh/eT5McXl728W/r1ihECe9pwhRfjr
MD5:	6BC9D3E6F2671504FE3C6E2DC702395E
SHA1:	BCAAE1DBADE8DD7E3C78F0E091C9D9CDD8D4E67A
SHA-256:	7B38D890731B6CD670DDEB1E9991CAD213BA22C8AD8E08FCFBB7D6F4078F10BD
SHA-512:	1C3A8FB35A7103AB292A9B6C620758106A0CF0583C902BABF6838794A4CDEC9E1E044CFC47C479D95A6C995D3EE68BC6203A19AAC073659F01CA9EB85C5F575C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:29:07....................................m.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:29:07+03:00" xmp:MetadataDate="2022-09-16T19:29:07+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:29:07+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1999)
Category:	dropped
Size (bytes):	42045
Entropy (8bit):	5.381741135576383
Encrypted:	false
SSDEEP:	768:55QY1lBeehxthmnbWEf1GkCSh5kcv+v6o:4IlBeehnUWe1GkB9vVo
MD5:	EB3F60BF1AD8CD83B6BAA91E92C4CE09
SHA1:	5BD47A3CD3D13FFF9076A2B2F6F257A9A3977733
SHA-256:	1DDB3277324A871335EF0B7E680DE58C9A79B3C1355B4082CA5425818C8A0306
SHA-512:	1A11807C897B1A042984586D911CE0526D7D88754F6E2282DB4A607262826145778A668C36F2CA714A629BC154660B088B75276B89AF5A1CD065A1F432038F95
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},n=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:aa(a)}},ba=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c},ca="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},da;.if("function"==typeof Object.setPrototypeOf)da=Object.setPrototypeOf;else{var ea;a:{var fa={Ga:!0},ia={};try{ia.__proto__=fa;ea=ia.Ga;break a}catch(a){}ea=!1}da=ea?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}.var ja=da,ka=function(a,b){a.prototype=ca(b.prototype);a.prototype.constructor=a;if(ja)ja(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.na=b.prototype},la="function"==typeof Object.definePropert

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27303)
Category:	downloaded
Size (bytes):	27466
Entropy (8bit):	4.752060795123139
Encrypted:	false
SSDEEP:	384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T
MD5:	4FBD15CB6047AF93373F4F895639C8BF
SHA1:	12D6861075DE8E293265FF6FF03B1F3ADCB44C76
SHA-256:	DDD92F10AD162C7449EFF0ACAF40598C05B1111739587EDB75E5326B6697C5D5
SHA-512:	F8BE32CBA15170319B5C9F663C6F0C4FFDD4083CF047D80F7B214D302B489ECA25FBEE66DDB9366D758A7598EFC9B9A886B02C9F751AE71F207CB9DB1356243A
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.5.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.5.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19762)
Category:	downloaded
Size (bytes):	709646
Entropy (8bit):	5.425583201664215
Encrypted:	false
SSDEEP:	6144:RnuAyTIm95wjS4dkakp4dBsB9dFSk8PbXiE87RU0q9STmjGl54/GMFzMw3cVpU2W:RnuAyR/pKF87RgHzMw3cVpU2ZeF2XMl
MD5:	CAD2315A8BE3FDD6487725807217F98E
SHA1:	50CD61D4BE19A61AF75814B0C851010E4829441F
SHA-256:	259918EB8A34598D07C1FDD7820727BBCDADE98B5B0CCF3C02BC5D13A1DAB4FF
SHA-512:	2CD8B0F5A124A77C36F4C76D437A90BF9583703E582D7BADC207D2ED474D0FF100A2A8E5D6F3A60AC99E50BA7B4400693E36B8D5FD984D345D80341009FAAB4D
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/js/jquery-plugin-collection.js
Preview:	/.@Author: Alexander Kyriakakis...Necessary jQuery Collection./../*. Table of Contents:. . jQuery Cookie Plugin v1.4.1. * jquery.easing.1.3.js for piechart smoothness and other. * jquery.scrollTo. * jquery.localScroll. * SmoothScroll for websites. * jQuery appear plugin. * modernizr. * scrollToFixed. * Menuzord - Responsive Megamenu. * jQuery Isotope. * jquery parallax. * animateNumbers. * jflickrfeed. * fitvids. * Retina.js. * ajaxchimp. * tweetie. * menufullpage. * WOW animation. * Typed Animation. * Owl carousel. * FlexSlider. * Magnific Popup. * Nivo Lightbox. * PrettyPhoto Lightbox. * equalHeights. * Maximage Slider. * BxSlider. * moment.js. * Clock1 - The Final Countdown. * Clock2 - flipclock. * instafeed.js. * jQuery Validation. * jQuery Form. * code highlight. * YTPlayer. * Infinite Scroll. * jQuery Pagination Plugin. * Vide jQuery plugin for video backgrounds. .Datepicker for Bootstrap. jquery-timepicker. * bootstrap-datetime

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1111314
Entropy (8bit):	4.2526942823331835
Encrypted:	false
SSDEEP:	6144:2eomOuConnjs2HDVFH7Lc4YV2Dnio/NULootRtKey/jyGELeW+SJ1GSnbJf8wDK7:WuConA4YptRwbyGEWAG
MD5:	45A02262C18140278D006128F84B6176
SHA1:	8D7A7EE040ED6682B70B889711B880663075FA4F
SHA-256:	C7D7DACA4AC7F2F0D428CCA11D3F628BF588BC0E3028B8088D9A4EEFC85EDCB5
SHA-512:	BAF79A8C87D74402E1CB2D469D58AD9B80B6A1E0B3AF2A1589D4459FD4EF7382A02E57BDF8709DD1A601A9FD3FE35B0D1AE224B68EEFD8631C0F9F1FCD984EA7
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/cache/min/1/releases/v5.7.2/js/all.js?ver=1721138301
Preview:	!function(){"use strict";var c={},l={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(l=document)}catch(c){}var h=(c.navigator\|\|{}).userAgent,z=void 0===h?"":h,v=c,m=l,s=(v.document,!!m.documentElement&&!!m.head&&"function"==typeof m.addEventListener&&m.createElement,~z.indexOf("MSIE")\|\|z.indexOf("Trident/"),"___FONT_AWESOME___"),e=function(){try{return!0}catch(c){return!1}}();var a=v\|\|{};a[s]\|\|(a[s]={}),a[s].styles\|\|(a[s].styles={}),a[s].hooks\|\|(a[s].hooks={}),a[s].shims\|\|(a[s].shims=[]);var t=a[s];function M(c,z){var l=(2<arguments.length&&void 0!==arguments[2]?arguments[2]:{}).skipHooks,h=void 0!==l&&l,v=Object.keys(z).reduce(function(c,l){var h=z[l];return!!h.icon?c[h.iconName]=h.icon:c[l]=h,c},{});"function"!=typeof t.hooks.addPack\|\|h?t.styles[c]=function(v){for(var c=1;c<arguments.length;c++){var m=null!=arguments[c]?arguments[c]:{},l=Object.keys(m);"function"==typeof Object.getOwnPropertySymbols&&(l=l.concat(Object.getOwnPropertySymbols(m).filter(funct

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32003)
Category:	dropped
Size (bytes):	36868
Entropy (8bit):	5.176279342143451
Encrypted:	false
SSDEEP:	768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ
MD5:	C5B5B2FA19BD66FF23211D9F844E0131
SHA1:	791AA054A026BDDC0DE92BAD6CF7A1C6E73713D5
SHA-256:	2979F9A6E32FC42C3E7406339EE9FE76B31D1B52059776A02B4A7FA6A4FD280A
SHA-512:	D9EF2AAB411371F5912381C9073422037528C8593AB5B3721BEA926880592F25BD5DFDEC5991CDFE5C5EF5F4E1D54E390E93DFD3BCA3F782AC5071D67B8624D4
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v3.3.6 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>2)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 3")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4158)
Category:	dropped
Size (bytes):	182435
Entropy (8bit):	5.501604041962403
Encrypted:	false
SSDEEP:	3072:jbtEWyenHYGwdwCrDTdS4bp41p2nF58Ni1YtFrD1XgQqnbZfBhtFJz1m2MDIV0M+:jbtEWyenHYGwdwCrDTdS4bu1pWFONi1A
MD5:	D3C0FD454A91C2B6B8018D57FDADA220
SHA1:	55E1304B36F7EC3296BBBACB732BD76103EB8AE0
SHA-256:	B6714C518A769839DC1863FCB619F303F6135C2E1497F762219B443BCECC8F3F
SHA-512:	847FE3BADBF5DFF01BF135E3908B6C9958DA945A72358B6036F724C6C7884C383E58B7C2730D90FBFFE23AE854E6713A754AB5ABBFCD948505E39AF0321AF193
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var r,aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	32305
Entropy (8bit):	7.945026815833093
Encrypted:	false
SSDEEP:	768:+3nYUjhUuLrNDQ1hmAqG+KbIRJg4B0Q7pD0AZECgq7NFcpwjXN8ZdQScYohO:+ScpDQ1hWGnw2cAAZzgyYi6fYE
MD5:	1B8F814D78FCF3DE534BCB63222C5FDC
SHA1:	CC8DDF7C5EE277366E379A3054C5CA4988C5E206
SHA-256:	ED6E1268602BB9E67CC1966460B8FEF931FAE1848636F9B25C5847BB598F7DE4
SHA-512:	CE3ACCD01D76DD7E7329EF15311AD14BF74E02B353D5D4890A9162952DB5FE512556B6F76E42C797398B342415656E2BA18D15C4B19562F16C77DB3C7F717379
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/images/ico-privacy.png
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...w.%Wy..wU...{BON.f.s..$..H.s..d......0..6.....6.1...k.1...A( .e!!..F.hF.{bwO..+......Q.L..{..z......~......@V........../(...V.h7...b......J.q../...3.CQ.)..hz"..j.{?.........QK...U"...u_.n:.......Ov..o+...Y.........+.....P...........}..1........_.o.A(]....Hu.o.o.D.....Ww.t.. ..,.,R..2..3...l..)...t.J....Q...e.h:...v\|.$.1(=X.Xbd..z..:.9..Z.x..L...`.`...{5....Dd1.>$PlX.."rV..@Dvs........@-2....&....(=X..B.5...l'.fSl.f""". ..DDD........Dt\|J.:A.a.`....t.".........K.8].3...:D>..6.o$k...":...]...X...G...Dd.j..4.....58.@D'...c:.....k..M' ".I$<..b.........V..AD..JN3.........4...KD'..b.@.`.`..j~..hf.x..X....R.t...()....(.X...j...()...[N1......a..CE.W..AD.!J^g:.%.........s.Q...t.J>...E. ..l.^.;.h~X..&x...D.8K.=.;.t.J6.....?..P...AD.E.....l,....}.l.DDs ..D...A......(.b.ODs......CPry..dU}......P.`..F..t..Dp....Zl:..@......9(.8.lH........9......{.c.%..z..*g..{C

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	189158
Entropy (8bit):	5.067301277607016
Encrypted:	false
SSDEEP:	1536:H3PnulLH+0O08cwWNuTzj05V7bwmvZVI57cUKIy06xFCji81zzxItd4OL6CVJB0r:/ulb+0O2B0R4VwLwLhob
MD5:	31A110D8ACAF20C4B796C02053DE3735
SHA1:	542DE90E3FEA84A8A16B76BD38CD749D5BCACB63
SHA-256:	A0D15B086A5779ABECD4957CF32D9F04B939A430D71B953E922B0D9E3A56B161
SHA-512:	570817BBD2513AD1A883B90274E72878B9B6BABF6B9B55CF8EB6C9189F4EDD6115F6E892C172FC27734BA671A9A34D38A671C225CE0E5DBCEFECC92D9F341CFD
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/css/style-main.css?v=3
Preview:	@charset "utf-8";../------------------------------------------------------------------..[Master Stylesheet]....Project: Framework Alpha..Version: 1.0..Author: Alexander Kyriakakis..-------------------------------------------------------------------/.. @import "https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css"; ../@import "../css/flaticon.css"; /../@import "https://cdnjs.cloudflare.com/ajax/libs/font-awesome-animation/0.0.8/font-awesome-animation.min.css";/ ../* @import "../css/pe-icon-7-stroke.css";/ ../ @import "../css/elegant-icons.css"; / ../@import "../css/stroke-gap-icons.css"; /../@import "../css/flaticon-set-salon.css"; / ../@import url(https://fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800); / ..@import url(https://fonts.googleapis.com/css?family=Barlow:400,600,800&display=swap); ..@import url(https://fonts.googleapis.com/css?family=DM+Sans:500,700&display=swap); ....../..This file conta

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2015)
Category:	downloaded
Size (bytes):	40512
Entropy (8bit):	5.518199113824284
Encrypted:	false
SSDEEP:	768:8xMuZ0jicWJj1GV2eYcZOYnHKoOFAVUagrLG9JQcgNYTrfgUYyzkoDBRW0sbh3fK:A+xbYcAYb2ZT3ZE3
MD5:	1614EFD8D8B318CA80C151AA5D983224
SHA1:	E27E5A72190F00DDABC4187084B8BD3850388D05
SHA-256:	B682B162DDD14D549C16FDCC70C01AAF1A7C1C5EE9D12F8A45081CAF38499FF4
SHA-512:	32E34011CAD366D6AC1BB0FD694829D233C66BB51813596A8EA6631E2E8516A25308768C988E9866C6B868174E993BCB62443D92AFEAFC9209B0A1C30CECECAB
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/1614efd8d8b318ca80c151aa5d983224.js?tag=addon/mysidia_one_click_handler_one_afma
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;const aa=(new Date("2024-01-01T00:00:00Z")).getTime();.function ba(a){a=a.s;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));typeof a.wow64!=="undefined"&&(c+="&uaw="+Number(a.wow64));return c}.function ca(a,b){return a.g?a.m.slice(0,a.g.index)+b+a.m.slice(a.g.index):a.m+b}function da(a,b=0){let c="&act=1";b===0?c+="&ri=1":b===1?c+="&ri=24":b===2&&(c+="&ri=25");a.l&&a.s&&(c+=ba(a));a.h&&(c+="&suid="+a.o);return ca(a,c)}function ea(a,b){if(a.l&&a.i){if(b==1)return a.i\|\|""}else if(a.h){if(b==1)return ca(a,"&dct=1&suid="+a.o);if(b==3)re

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4699
Entropy (8bit):	5.677077865541019
Encrypted:	false
SSDEEP:	96:jb+9cRBftWErJehL8mS0790bnC43JIEJ5G:QcRBfYE9eh4mJInC43JIEJ5G
MD5:	2A769325E5B1E66C323D09440632E5F8
SHA1:	D854CC916A0DDC0388D770E236CAE31B5873A73B
SHA-256:	5FB7C176325267082E94A7131FED5E157516E6805CEE3AC6F6A93340A947D640
SHA-512:	F03FF893972CB92751A015251849B54033C6EE4EE0D3D940018C7665ED709647B830B4A91AC8F12CB98BD2092BD12AA2F58221F35E077ABA01EB2B505B64415E
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otCookieSettingsButton",. "html": "PGRpdiBpZD0ib3Qtc2RrLWJ0bi1mbG9hdGluZyIgY2xhc3M9Im90LWZsb2F0aW5nLWJ1dHRvbiBvdC1oaWRlIj48ZGl2IGNsYXNzPSJvdC1mbG9hdGluZy1idXR0b25fX2Zyb250Ij48YnV0dG9uIHR5cGU9ImJ1dHRvbiIgY2xhc3M9Im90LWZsb2F0aW5nLWJ1dHRvbl9fb3BlbiI+PC9idXR0b24+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uX19iYWNrIj48YnV0dG9uIHR5cGU9ImJ1dHRvbiIgY2xhc3M9Im90LWZsb2F0aW5nLWJ1dHRvbl9fY2xvc2UiPjwhLS0/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9IlVURi04Ij8tLT4gPHN2ZyByb2xlPSJwcmVzZW50YXRpb24iIHRhYmluZGV4PSItMSIgdmlld0JveD0iMCAwIDI0IDI0IiB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PGcgaWQ9IlBhZ2UtMSIgc3Ryb2tlPSJub25lIiBzdHJva2Utd2lkdGg9IjEiIGZpbGw9Im5vbmUiIGZpbGwtcnVsZT0iZXZlbm9kZCI+PGcgaWQ9IkJhbm5lcl8wMiIgY2xhc3M9Im90LWZsb2F0aW5nLWJ1dHRvbl9fc3ZnLWZpbGwiIHRyYW5zZm9ybT0idHJhbnNsYXRlKC0zMTguMDAwMDAwLCAtNzI1LjAwMDAwMCkiIGZpbGw9IiNmZmZmZmYiIGZpbGwtcnVsZT0ibm9uemVybyI+PGcgaWQ9Ikdyb3VwLTIiIHRyYW5zZm9ybT0idHJhbnNsYXRlKDMwNS4wMDAwMD

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24720), with no line terminators
Category:	dropped
Size (bytes):	24720
Entropy (8bit):	4.791581848112604
Encrypted:	false
SSDEEP:	384:Wd8C4hGojxHjouZmCy7qGAVsq1nwGfg4xqsQMPNE:H9JCJ
MD5:	98B5C29CF94D2FE934D0D126C3E3779F
SHA1:	E0B32752F723123C3F157A36D52E81E5184974E6
SHA-256:	6C496FCBE60FEC78DC1B86A9136644D9A97CAE20DF32BE3E9A4A62CE7BD0E6A6
SHA-512:	7AD505F42CD5574A2BF966BA7533F50C254924DF1EBF45023260445E5260AC1212E908CFDED31E18C8091412A58F9328A4562F8AC8A6A526E30578467C404B54
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:700;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:700}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-footer-lo

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1405)
Category:	dropped
Size (bytes):	3076
Entropy (8bit):	5.184015346574414
Encrypted:	false
SSDEEP:	48:DwiV9wsPMnfYudMdW507g0/IEaECo0xN18l6kYF3agy42UftdmVScc:Eic3WPIHJPxN18l6D3SOtwVSl
MD5:	A045CA6CF0568721987EB5A84BD18784
SHA1:	757E978DB0972F66DF96EAFE660A93DA4E807072
SHA-256:	3740CB95A64967EAB3B477A044C95776F382C35CE4D263ABA561AEB928A73D73
SHA-512:	F10E7A074A41BE854D35E8932296953F865A05573664B5172625539D3D4CBC0CA908E5053BD89BA880B64986CB2187C364A3114C5ABE1E7D68707340222A5B6A
Malicious:	false
Reputation:	low
Preview:	(function(){var pre=document.getElementsByClassName('pre-code'),pl=pre.length;for(var i=0;i<pl;i++){pre[i].innerHTML='<span class="line-number"></span>'+pre[i].innerHTML;var num=pre[i].innerHTML.split(/\n/).length;for(var j=0;j<num;j++){var line_num=pre[i].getElementsByTagName('span')[0];line_num.innerHTML+='<span>'+(j+1)+'</span>'}}})();jQuery(document).ready(function($){moveNavigation();$(window).on('resize',function(){(!window.requestAnimationFrame)?setTimeout(moveNavigation,100):window.requestAnimationFrame(moveNavigation)});$('.menu-item-has-children ul li a, .menu-item-has-children a').on('click',function(event){event.stopPropagation()});$('.menu-item-has-children').on('click',function(event){event.preventDefault();$('.menu-item-has-children').not(this).not($(this).parent().parent()).find('.sub-menu:visible').slideToggle();$(this).find('.sub-menu').first().slideToggle();event.stopPropagation()});$('.site-trigger, .site-overlay').on('click',function(event){event.preventDefault();$

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3518)
Category:	downloaded
Size (bytes):	211858
Entropy (8bit):	5.43477116754567
Encrypted:	false
SSDEEP:	3072:sB+DSmU5OQocOIyGrzrEriruS4EcCYmnzLr6jD4xkRPMU8tGKKbD:sB+DSmNoPyi6jhCY0L4D4xkRH8tGKKf
MD5:	6AF94BBDA7ECB8B8CAA407C9D6F15B76
SHA1:	0D8E5EC9ED1F72269127125822AC2F967457A17F
SHA-256:	24DCCD731E4B42B3C3E43CB9AC9205879143EBB4DE7658AB9222DD3B0458B086
SHA-512:	68A5D0157FBAFB8F1F272E358A9C82611F38A0EABE205C179F14DC5248016B56958827FEEC5C7BCFCE04939902C9A953DFE109081C091710F9B47E8246F48E6B
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},p=ca(this),.u=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.rg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.rg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)t

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	dropped
Size (bytes):	2690
Entropy (8bit):	5.39866636776827
Encrypted:	false
SSDEEP:	48:Otg7xBqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:fN7Qabhiwdicju8WhRHMnTx
MD5:	76A4D84DE75340D59CA06503A14184D4
SHA1:	2FE3C4A95AF88BE57D1912BB09DC463F69924402
SHA-256:	66E9BF446316F6EEC5EAEFA7098592BBD2144A60EB38C481DB233A6CA8B8D94A
SHA-512:	2ABE6C816B265B72A8023E8F832B9BED0FFD2C931BA07C5DA1AE0CB5D60178CBD1CEA9CE6AE0BB88F77614954C20836342AD6BAFE25EB1CA4D2AEB495E4E2BD2
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1405)
Category:	downloaded
Size (bytes):	3076
Entropy (8bit):	5.184015346574414
Encrypted:	false
SSDEEP:	48:DwiV9wsPMnfYudMdW507g0/IEaECo0xN18l6kYF3agy42UftdmVScc:Eic3WPIHJPxN18l6D3SOtwVSl
MD5:	A045CA6CF0568721987EB5A84BD18784
SHA1:	757E978DB0972F66DF96EAFE660A93DA4E807072
SHA-256:	3740CB95A64967EAB3B477A044C95776F382C35CE4D263ABA561AEB928A73D73
SHA-512:	F10E7A074A41BE854D35E8932296953F865A05573664B5172625539D3D4CBC0CA908E5053BD89BA880B64986CB2187C364A3114C5ABE1E7D68707340222A5B6A
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/cache/min/1/wp-content/themes/orbital/assets/js/main.js?ver=1721138301
Preview:	(function(){var pre=document.getElementsByClassName('pre-code'),pl=pre.length;for(var i=0;i<pl;i++){pre[i].innerHTML='<span class="line-number"></span>'+pre[i].innerHTML;var num=pre[i].innerHTML.split(/\n/).length;for(var j=0;j<num;j++){var line_num=pre[i].getElementsByTagName('span')[0];line_num.innerHTML+='<span>'+(j+1)+'</span>'}}})();jQuery(document).ready(function($){moveNavigation();$(window).on('resize',function(){(!window.requestAnimationFrame)?setTimeout(moveNavigation,100):window.requestAnimationFrame(moveNavigation)});$('.menu-item-has-children ul li a, .menu-item-has-children a').on('click',function(event){event.stopPropagation()});$('.menu-item-has-children').on('click',function(event){event.preventDefault();$('.menu-item-has-children').not(this).not($(this).parent().parent()).find('.sub-menu:visible').slideToggle();$(this).find('.sub-menu').first().slideToggle();event.stopPropagation()});$('.site-trigger, .site-overlay').on('click',function(event){event.preventDefault();$

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	dropped
Size (bytes):	22537
Entropy (8bit):	5.532838453720538
Encrypted:	false
SSDEEP:	384:4qopQl6FtO53n+8svyf53Fo5oeHvVFBIuwRatEDTJi/EDdBC6ZcuLI4Xhw/XgsB6:4qopQlwOFn+DCFoeeFqYt2TJisnC6ZcU
MD5:	EC3C9F3C47B1AF207A73CCF2C74B1750
SHA1:	50BB39E227E1B1C6BCF3D99C01B916FE21259127
SHA-256:	38F4583C6BA3F8A4DEFF750B08424F18EA56E87B5013057BF6621A00B0B78144
SHA-512:	966B44A7375D3924E29160B53D804CDEE669E32B1BB9B6CCE4D4F2F5BB179A17C5FE9A180C9A355E065AF131D55CB2587B45A275FF0586BF49218A85F5110EBF
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ea(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ea;return p.apply(null,arguments)}function fa(a,b){function c(){}c.pr

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41614)
Category:	downloaded
Size (bytes):	249236
Entropy (8bit):	5.4118246014616265
Encrypted:	false
SSDEEP:	6144:O6r3za5fWvoBxASsFPmPGzhPzl0xxG9Wgb1X5iB6+D5:aQoEdW4b149
MD5:	27E18063F66D6F20ED701D0E490B6948
SHA1:	500E6ED990410F7ACFDFABEB5C44099C83963089
SHA-256:	816EC7409A19E399ECB8C66DBA4B5EF4366D03D2E20510D2007444564BC6B8F3
SHA-512:	C4C34E0099442D04D652267442583BA24F672B63EA0465C7DF9EF746F267A8EDEE213731D4FDE1CD30C7EE0AB8C362D05F6C8FB4842116F86C5C04E15D2AD5C5
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/lidar.js?fcd=true
Preview:	(function(window,document){var n;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this);function p(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}}p("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ca(this,"description",{configurable:!0,writable:!0,value

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	26966
Entropy (8bit):	7.929004643267639
Encrypted:	false
SSDEEP:	768:Hkm7UndBwYXtHFuC0lIyjkxOTFg2KIruT:EmmdBwiz0lljVjKIruT
MD5:	3EAA5F919E0A939D0FAAE48E33B45A82
SHA1:	B4DE220B771E54A102536D1FD54A965BA04B2C67
SHA-256:	0673E7EBFAFE6F31FD3F20C7BA7DF60DF9782C952FC0C15DD6B5015B17AE9278
SHA-512:	133CA2AE5D595472E94A625AF06A18A2BFEA54AFAB7C345F1F835C5C8F2076F5D6446E7D45EFF9E03F57BFCAA6BC7DDCF7287150A0E2FFCBCE688C4D3DA43493
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/images/ico-malware.png
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<... .IDATx...y..U...O.~...Y!;....%.=...4. 6.(.8.:..........(....W.......5a.K................{...z..}9.R.OnW...Y.c..........I.....?~.X..\|...w.nB..2$........K....{.+=.U7]......-..+ .p..W^}.p.{.....[.W..q2. ..]~.....2....,...k.q.VB..I. ..]~..A..`../]....kK.k%...2. ...b.?.kfi.....H. ..-p.Z!D...@.o;.k..5N..!.-..B..'...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C!.+ ..+.LE....6}..@.^._......8 .d;..9...B..0M..:.!..H.....D`..?cv.g....;...V[......-[v..A`..?[w.g..5..>[.,......pY"....:.....O..5..#..............P#...U.H.B.L`.N?.I...g......../..w.Y..(:..B.wI. .......P.......G...{..V.....t..jWD....@.E.d..f....s.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53745)
Category:	dropped
Size (bytes):	55038
Entropy (8bit):	5.716457869428952
Encrypted:	false
SSDEEP:	1536:jRNi/VOk89/CpRhQAFyRwclJbfmKGMCKwBRzxH:LidOopRJodGGO1H
MD5:	0D007A22229AE1C6599D3DDA06610B9A
SHA1:	5B2FB4BFC3BC736137406D73BD604C29CE98816E
SHA-256:	C0261E20FE1B5D5D2B8C91A994B94B6DF9A322E94B2B226D690DF364C583354D
SHA-512:	238578B32CE241B059ED5A0D1C2ACB92B40FBCEBF739129D00661A63577A02826534FB9CD4F7780E5DFC06651BD35A21967B2E3EBFC09695569C3CB3407346B0
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function w(A){return A}var h=this\|\|self,p=function(A){return w.call(this,A)},u=function(A,P,g,Z,e,E,c,J,Q,N,V,t){for(V=(t=16,50);;)try{if(t==98)break;else if(t==16)Q=c,J=h.trustedTypes,t=56;else if(t==g)V=Z,Q=J.createPolicy(E,{createHTML:p,createScript:p,createScriptURL:p}),t=86;else{if(t==86)return V=50,Q;if(t==56)t=J&&J.createPolicy?g:A;else{if(t==A)return Q;t==46?(h.console[e](N.message),t=86):t==P?(V=50,t=19):t==19&&(t=h.console?46:86)}}}catch(B){if(V==50)throw B;V==Z&&(N=B,t=P)}};(0,eval)(function(A,P){return(P=u(68,90,36,28,"error","bg",null))&&A.eval(P.createScript("1"))===1?function(g){return P.createScript(g)}:function(g){return""+g}}(h)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;char

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Ffree.webcompanion.com
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x90, components 3
Category:	dropped
Size (bytes):	12384
Entropy (8bit):	7.950743911651259
Encrypted:	false
SSDEEP:	384:GQv8LMrUowMuFYl2y9ig9iTe0HAVK0j8rL:jQyUVMY62y9iXBAVK0orL
MD5:	5E5EF7A1046F4298FD46BA73629E37BA
SHA1:	F3570FAD73FD62E6973F1C030DFD2E894A565013
SHA-256:	C0AF299EAFA7A72798B9FE9E65E35D1F96F97D9FF9F6B01A69A8C774A7F9A627
SHA-512:	04C2069C2928C269D0B295B0413AC1432AF447BA122966D24C5D7495D564BFF5B938F769EE1FC062D01CBC5B72A83F21107504DE2C83893CD1A0D4E1064E0105
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................."....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE......Z...."..........4..................................................................q..G.P..L.....`...cN.>..j."...2...{h..ttc.....\|....$vf..9Z..V..z...6....z.D.urCZ...3.=....Y.....1.....).7...zU%4P....U.+M^....'.6.]....f.Z-..E..o...........4.F.....@..1....>..N'.3...z.w.U.....:.n..<9....U...@..9.r..........~..E..vs....=Sf.Nc..6..,.....ig..8...#.4..<...7...\....B...............u}/9...).....R....a.!.4...d.q3..FEVG.[..H_.......Y...6..........E.4...!.d...=..Jy....R>}e....:j.o....Z.c.0..El..gW.....80....4=....{5/.a....I.{.U...}z...Vb.`.......T........i.Cb.5VW... Xk..'.W.@.....+.a...........s.f...].T...3..3j..q.VB.....J1}.Lzd.<:7...X..d:..18..e.B.l.M.z..jA..V.,=.E...mn......}B./..f..}u...y.1k...g.p.`+..5.h.9!.....D).+...hZ^t.....Y..!-.E.._.;...Q%.1.f.Xvs.zV...a....=.[..........h.{..u.A.....

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19933), with no line terminators
Category:	dropped
Size (bytes):	19933
Entropy (8bit):	5.2101931752036315
Encrypted:	false
SSDEEP:	384:s1yZafGZqZ2py8qRwjC17jmhjLPW19CFdX3Wyd7fxS3Q7yZObiRwalyseexzBhJW:7Zaf6qf8k0LPW9Ehd7fxS37RRosLxz3k
MD5:	E98B04BEE25EB658B7FFC08D2153FA99
SHA1:	DD8416B610199C105A91C03E54103943F6C24AA8
SHA-256:	9678E6FEB813CFA0E403F1384211A54A5115C979956DD9446041A1B11B73BB26
SHA-512:	E351B272CEAB8D4A7D2632050D575BF322E13BA2C910873AA067BFDF71BDA19E423AE9A5DDB8244F7CA9A4612129F76E101B8BBD466DABF0823BA046461F46D0
Malicious:	false
Reputation:	low
Preview:	!function(e){if(!e.hasInitialised){var t={escapeRegExp:function(e){return e.replace(/[\-\[\]\/\{\}\\+\?\.\\\^\$\\|]/g,"\\$&")},hasClass:function(e,t){var i=" ";return 1===e.nodeType&&(i+e.className+i).replace(/[\n\t]/g,i).indexOf(i+t+i)>=0},addClass:function(e,t){e.className+=" "+t},removeClass:function(e,t){var i=new RegExp("\\b"+this.escapeRegExp(t)+"\\b");e.className=e.className.replace(i,"")},interpolateString:function(e,t){var i=/{{([a-z][a-z0-9\-_])}}/gi;return e.replace(i,function(e){return t(arguments[1])\|\|""})},getCookie:function(e){var t=("; "+document.cookie).split("; "+e+"=");return 2!=t.length?void 0:t.pop().split(";").shift()},setCookie:function(e,t,i,o,n){var s=new Date;s.setDate(s.getDate()+(i\|\|365));var r=[e+"="+t,"expires="+s.toUTCString(),"path="+(n\|\|"/")];o&&r.push("domain="+o),document.cookie=r.join(";")},deepExtend:function(e,t){for(var i in t)t.hasOwnProperty(i)&&(i in e&&this.isPlainObject(e[i])&&this.isPlainObject(t[i])?this.deepExtend(e[i],t[i]):e[i]=t[i]

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19933), with no line terminators
Category:	downloaded
Size (bytes):	19933
Entropy (8bit):	5.2101931752036315
Encrypted:	false
SSDEEP:	384:s1yZafGZqZ2py8qRwjC17jmhjLPW19CFdX3Wyd7fxS3Q7yZObiRwalyseexzBhJW:7Zaf6qf8k0LPW9Ehd7fxS37RRosLxz3k
MD5:	E98B04BEE25EB658B7FFC08D2153FA99
SHA1:	DD8416B610199C105A91C03E54103943F6C24AA8
SHA-256:	9678E6FEB813CFA0E403F1384211A54A5115C979956DD9446041A1B11B73BB26
SHA-512:	E351B272CEAB8D4A7D2632050D575BF322E13BA2C910873AA067BFDF71BDA19E423AE9A5DDB8244F7CA9A4612129F76E101B8BBD466DABF0823BA046461F46D0
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/themes/orbital/assets/js/cookies.min.js?ver=20190101
Preview:	!function(e){if(!e.hasInitialised){var t={escapeRegExp:function(e){return e.replace(/[\-\[\]\/\{\}\\+\?\.\\\^\$\\|]/g,"\\$&")},hasClass:function(e,t){var i=" ";return 1===e.nodeType&&(i+e.className+i).replace(/[\n\t]/g,i).indexOf(i+t+i)>=0},addClass:function(e,t){e.className+=" "+t},removeClass:function(e,t){var i=new RegExp("\\b"+this.escapeRegExp(t)+"\\b");e.className=e.className.replace(i,"")},interpolateString:function(e,t){var i=/{{([a-z][a-z0-9\-_])}}/gi;return e.replace(i,function(e){return t(arguments[1])\|\|""})},getCookie:function(e){var t=("; "+document.cookie).split("; "+e+"=");return 2!=t.length?void 0:t.pop().split(";").shift()},setCookie:function(e,t,i,o,n){var s=new Date;s.setDate(s.getDate()+(i\|\|365));var r=[e+"="+t,"expires="+s.toUTCString(),"path="+(n\|\|"/")];o&&r.push("domain="+o),document.cookie=r.join(";")},deepExtend:function(e,t){for(var i in t)t.hasOwnProperty(i)&&(i in e&&this.isPlainObject(e[i])&&this.isPlainObject(t[i])?this.deepExtend(e[i],t[i]):e[i]=t[i]

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204928
Entropy (8bit):	5.481801096242468
Encrypted:	false
SSDEEP:	6144:y2fjZTi0Y5UNQtiD693MuOpf5S73tSZHIG1OxHUSQrFj4/ufUvyGXZpLuzdZPANA:J
MD5:	CF698B8AD4EA00FCC8B33198A2D12C01
SHA1:	F51C339C1E818403B6B00C0DBD5A039215CCF679
SHA-256:	1D845493C228A350931F2114F68A84230570F93F9501179237F154904BC3B9F9
SHA-512:	37982E9F58A12BB5D58EA4E235A788E8E61FFCCD2754E840D0436EF1336EFC6AC5E01981196C245F33752DF41198AE9B224BE7490833C600D32B74C1B9DD1353
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10846925175?random=1729810130050&cv=11&fst=1729810130050&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3DtrackOptanonEvent%3BoptanonCategory%3DOneTrust%20Cookie%20Consent%3BoptanonAction%3DPreference%20Center%20Opened%20From%20Banner
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s2095006060.1729810107","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s2095006060.1729810107\u0026ig_key=1sNHMyMDk1MDA2MDYwLjE3Mjk4MTAxMDc!2sZ0Jb1A!3sAAptDV7XmzIW\u0026tag_eid=44807585","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sBgGvfQ!2sZ0Jb1A!3sAAptDV7XmzIW"],"userBiddingSignals":[["7105939267","7151318280","8227542080"],null,1729810132270782],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfet

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204928
Entropy (8bit):	5.4815525795924005
Encrypted:	false
SSDEEP:	6144:fmfjS73tSZHIG1OxHUSQQOpfcFyZTi0Y5UNQtiD693MJ4/ufUvTHUL/R6r/weGOL:z
MD5:	EEC1B9C0A8028E132C6E98766F380898
SHA1:	4EFCDBE31156EF7C290C7FBEE846ADD8E2DC218C
SHA-256:	B5F975F9A2A9C130923A33E1C8FFB91E557F80200833460FE8745433003240AB
SHA-512:	7DD871AF7274387934793546D21C7C0A1E388CAC43773CB3F54051184AD7EF97EB3A8E4A7B39B2920E5BF7BBD71B2A626816E47689E6150E353D5AFAD77D30C4
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10846925175?random=1729810130073&cv=11&fst=1729810130073&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3DtrackOptanonEvent%3BoptanonCategory%3DOneTrust%20Cookie%20Consent%3BoptanonAction%3DPreferences%20Save%20Settings
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s2095006060.1729810107","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s2095006060.1729810107\u0026ig_key=1sNHMyMDk1MDA2MDYwLjE3Mjk4MTAxMDc!2sZ0Jb1A!3sAAptDV7XmzIW\u0026tag_eid=44807585","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sBgGvfQ!2sZ0Jb1A!3sAAptDV7XmzIW"],"userBiddingSignals":[["7105939267","8227542080","7151318280"],null,1729810132276519],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfet

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zeta_interactive&google_push=AXcoOmT0ctLnTozoBHAE1-jS0rDag3zRFVmI9FMtJkWsXyWgiHUsql5PZVwUPMg1jDvUJ2jyUVsQBfCRq2FWZYtUnvK3I80qb-D3lfg&google_hm=MjU2NTAzNDIyMzU1Nzc4NzYzMg==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	dropped
Size (bytes):	22537
Entropy (8bit):	5.532838453720538
Encrypted:	false
SSDEEP:	384:4qopQl6FtO53n+8svyf53Fo5oeHvVFBIuwRatEDTJi/EDdBC6ZcuLI4Xhw/XgsB6:4qopQlwOFn+DCFoeeFqYt2TJisnC6ZcU
MD5:	EC3C9F3C47B1AF207A73CCF2C74B1750
SHA1:	50BB39E227E1B1C6BCF3D99C01B916FE21259127
SHA-256:	38F4583C6BA3F8A4DEFF750B08424F18EA56E87B5013057BF6621A00B0B78144
SHA-512:	966B44A7375D3924E29160B53D804CDEE669E32B1BB9B6CCE4D4F2F5BB179A17C5FE9A180C9A355E065AF131D55CB2587B45A275FF0586BF49218A85F5110EBF
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ea(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ea;return p.apply(null,arguments)}function fa(a,b){function c(){}c.pr

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x346, components 3
Category:	downloaded
Size (bytes):	68669
Entropy (8bit):	7.980985030525088
Encrypted:	false
SSDEEP:	1536:CfgXS3H0hNLQY9WNtt18nDfZvPlj6cGpjpKuAsx:C3UhNLSMzZvPWFA+
MD5:	051EF77A174F3FC324FE5C9B94B8CFBC
SHA1:	AD3E5E031E44C4F5E161124E80ED062D797BC79D
SHA-256:	5248CC6DB4DEF55F98F6E955BEC6B8BF634A5F02498C4CAD48C3CC632189941C
SHA-512:	3E2D6CF1CDAB194EBAA8171E2371075387B81E4EF70B697EB62BA44AB63C7D53DE62C2AC62BD1765E2E3BE9FB2A0C7299346FAC3C247EA9E36A2BAD9E73F65C3
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Invitaciones-para-cumplea%C3%B1os-Banner-1536x346.jpg
Preview:	......JFIF...................................."....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE......Z...."..........5.................................................................................xz..c.....................................<=....+Y=....{$.........................=.E.M+..K'.}S{O=w+^kToi.e...r..=.~..\\|..8E@................................8..?L..9...2..S,_...~.._O.....\|G....<.Fn.v.+F..........h...].}.K.c..?+a......%/...g.$.>......Y.............&..5M.\|.i....p^...i1....J....j.V2{.V].%.....uM...v.........+=R......VW.7...~...o..:k.>,..8....owy..;.O..*...c..~T..wH......).m..5.K.i....g....t.z<....7.U.o'......u.y..e9.#........BS~..h.e+.p.Xi..s{.9.>...s..["j...-7zw."YnV#uqm...{S..5q.a.P............>.\|N.J......8..4../. ..~9.....v..>......MP....r06...'...g`.U..2....4GLo...^+zV.........A7'Q.B..4.g...".K}.W...c.G......>..S.R.7.j...=h.F.{....~.<.U.^....J......z.`;3...u...e9`.]

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	66339
Entropy (8bit):	4.729274616265788
Encrypted:	false
SSDEEP:	768:Fl9b1hVniyJ/59TNndjNfhNlRBVNBhdH8t:Fl9b1n98t
MD5:	67CFC313C9D576C7EA74022FFD8FE47D
SHA1:	0D35131A91AAE4961859D613063E4649726C37B4
SHA-256:	AB007C88B0193AB23A0F93E0B45AABA436266850A327E0AD0F4A6ACC4576D18A
SHA-512:	5AD8E1B8AAAE8933D2B7DDCA081C1B0C640B25B5D9AB8A4A1DB61B1250F9793E8922B3F963010DECA7351B9A36FC699145D5ACFDDD287BC43759C42B2150F8CB
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/css/custom-bootstrap-margin-padding.css
Preview:	/* ... * Custom Bootstrap Margin Padding... * Author - Md Ismail Hossain... * Git - https://github.com/ismailcseku/Custom-Bootstrap-Margin-Padding... * Web - http://ismail-hossain.me/... * Email - ismailcseku@gmail.com... /........./... Table of Contents:... ... 1 -> Basic margin padding... * 1.1 -> Basic Margin... * 1.2 -> Basic Padding... * 1.3 -> Margin top... * 1.4 -> Margin right... * 1.5 -> Margin bottom... * 1.6 -> Margin left... * 1.7 -> Padding top... * 1.8 -> Padding right... * 1.9 -> Padding bottom... * 1.10 -> Padding left... * 2 -> lg: min-width:1200px... * 3 -> md: max-width:1199px... * 4 -> sm: max-width:991px... * 5 -> xs: max-width 767px... * 6 -> xxs: max-width 479px... * ===============================================... /.../ min even, max odd/....../... * 1.1 -> Basic Margin... * -----------------------------------------------...*/....m-0 {margin: 0px !important}....m-5 {margin: 5px !important}....m-10 {margin: 10px !important}....m-15 {margin:

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	225344
Entropy (8bit):	5.547019108537278
Encrypted:	false
SSDEEP:	3072:n8RhbIGc3kWhy1ZF0pSJcEjCPfrgiGdfm9s3rOXk9nmUNME:8Ro3k4Gtvvi48s3qXk9nmOD
MD5:	24D339D25A1144BBD830390D306B74E3
SHA1:	D1A9F1635BD3CCD0548FF2E64BC72CB8ED873CC6
SHA-256:	EEBB1ED22C871C42F8AFE4D9E015BF82CCBB70C7B4541479D4D5ABF805A8DEC6
SHA-512:	E1AF0DA22D6A00754231FEEAB09623425B8655557AFA23DEAC6E0BBE9F1B7495C841D9202AA0DA9509507CCBE33C5B9FEAA18263C555DECAAC300544FF7F645C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-162966223-8
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3557)
Category:	downloaded
Size (bytes):	16761
Entropy (8bit):	5.496761658915657
Encrypted:	false
SSDEEP:	384:LQZaeg6fjkyUQJqqz1pBjL5xz9yAFxUC8rJUrWUK2FZcSX1FsS:LQZa/6rDUQJTN35xhyAsflDUKgySlFsS
MD5:	0D833FD65D7A9C8C17FED9705F579B49
SHA1:	128A64F415163AE29D547D4167E12875E2C9E465
SHA-256:	E239504132EBD13F770F54B558319788EF8D1146473132043B2D9A1130B42A77
SHA-512:	4478BC1B8EAB082AD584C08C14A605FC650DD0D3DC2ECC8B5653ABC30A57A04E9BB790833CCDC3C25938A14C93041FDA4086111F71DED8632ED1D3F9D143D3CC
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241022/r20110914/elements/html/fullscreen_api_adapter_fy2021.js
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function ea(a){m.setTimeout(()=>{throw a;},0)};var p,q;a:{for(var fa=["CLOSURE_FLAGS"],r=m,t=0;t<fa.length;t++)if(r=r[fa[t]],r==null){q=null;break

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Ffree.webcompanion.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:27:56], baseline, precision 8, 798x578, components 3
Category:	downloaded
Size (bytes):	32818
Entropy (8bit):	7.07704819587746
Encrypted:	false
SSDEEP:	384:91m/hPPuSytW/LB+w2IFfn0raCQrz6LrCAb9m0tqGqzozzEzRylEbpWa:9SAFtW/LQwjn0raCnaAbDKzozzEzRyA
MD5:	283911051B000F5672AD2D3644971372
SHA1:	95D915ABA52BC064742D644EF132E1D9BDF182C6
SHA-256:	5A2E66F3503CC73EA6C789BE63344CCD2A8EE492FDEC7CE714F353E4E0BE2B4E
SHA-512:	42432437050806FDCF0F90C13EB162DCD256B0431F9E891E685DF2B7FE7C6F7FCB5020BF22D70E39D05E0C08F62B56FA32FB4F3970EDF5D4E3D4089C038B81CF
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/images/main-wc-2.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:27:56....................................B.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:27:56+03:00" xmp:MetadataDate="2022-09-16T19:27:56+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:27:56+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8960
Entropy (8bit):	5.39546260886393
Encrypted:	false
SSDEEP:	192:pN55N+NRNY3qNkNCXNlNOQNNNiNk3XNPN4qNY4NX7NCNRNS3sNEN4NNiNU1NHNUI:v5fUH2QieLOeD4CdFRPXBYHAaCu4U7t3
MD5:	7C021732CCE7DC954F4E61E343059C3D
SHA1:	261373361718CC753E7796244987B9230883C5E6
SHA-256:	AFCA11DB454EEDAADA10325FFBAE12D670CFA00926F3CF91388DA29A39DC031D
SHA-512:	AE66EC09B0C93F66937046839CB3CA206D2B53D79A68F049BADD59C44BEDDB7C26A282EA43ACCAE38ABDF809C064402FB3F38A6E23CD5B720FDCFC882AFFC0A2
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:700,500,400,300"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:28:55], baseline, precision 8, 798x578, components 3
Category:	dropped
Size (bytes):	38782
Entropy (8bit):	7.291451952746575
Encrypted:	false
SSDEEP:	384:h6qz1jIaCsU4bfKP1S/jA+SfmxHR06sA1DzRySGfn2J1hW222222jYYJBLEzV76H:h6qzcoDFtSfmU+m9VJBaV6eYA+vMMX
MD5:	6D157F6357B6B42E2AF5A56179B54826
SHA1:	9BE703E449537D66568699D82C13489DD8BF005A
SHA-256:	979AF3F4A5E9B4A22E7DD0BD4AE04220D580A98641EA156D3F89CAAF7F3028BB
SHA-512:	34A8EC0634C0C6C35D767F835932460D9630FEAB656C678745BFA00F288FF278B4FE65A2E5152A43D91DF6F718AD50C615A23FF3EFD02C4139B822BC416EB7A5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:28:55....................................B.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:28:55+03:00" xmp:MetadataDate="2022-09-16T19:28:55+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:28:55+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2093)
Category:	downloaded
Size (bytes):	445152
Entropy (8bit):	5.576211507402883
Encrypted:	false
SSDEEP:	12288:lrLbjvudFZTeHPOv7meLFeCt6lg7Db2oUGsAfTAqsoedKUF3+rWP0sCeUgMujrsX:lrLbjvudFZTeHPOv7meLFeU6lg7Db2or
MD5:	E15FEE06E6A6CC8716D05E010D2EE3C7
SHA1:	271018B99BDF473B4F5A1E52FCC37230E682DAB5
SHA-256:	5DE12D9125F7C71FA6C5B8BC87F286FC3799CA44D74D800862D6AC1A6DE99A09
SHA-512:	815162E8014A15D1518B68F9536923479740FCE361124999F7D04E7A29BB59544E2A1F86390AE4570A3EAAEC0C2BB7D0BFFBE6D0D5EBDE4ADECB63BFC9AAE019
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202410230101/show_ads_impl_fy2021.js?bust=31088398
Preview:	(function(sttc){'use strict';var q,aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ia(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	3.9721077567347134
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HVjROE9HSxmQqyRHfHyY:YGKed2pHDKcElSDPyY
MD5:	A20F61BBF661147FA65EC1ABF4093AED
SHA1:	C7306A9A3F8224E2E564FD170242E4B26BBA7047
SHA-256:	EFA3DA3BC784514C792213E4B3C842CF4DA752C0EC3EF14F4592A6A849DBEFCA
SHA-512:	1BD4A45DC90A18265C78720955D80FCAC6A3656C23BBC0C480078D9407ACF205399FBDD22942242642D20EC73759DF5613620BFC27084C71AF448CC2F36D55F6
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"TX","stateName":"Texas","continent":"NA"}

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2146), with no line terminators
Category:	dropped
Size (bytes):	2146
Entropy (8bit):	4.998543637380936
Encrypted:	false
SSDEEP:	48:L782DO+m6dxM1sOeMVIO/xH2J2xq/mKoY8owIUO5KvMjKXw2Y6:L7vO/6dK1tJVBx9q/mZY8osMGgX6
MD5:	EB411E6FD99D5D204ECD3F1149803931
SHA1:	0F9010A1C7E47B57337B26CFA2846AB5349036B2
SHA-256:	CDDBA54F0F8FB228B7BCFC534FB6778D7DA73B01B8AED3B2A0688645F32C0398
SHA-512:	4BB069CC0839C01E2404AA8DD70F49606864F453431A3BD68090EED50AC9EE41300DF6001C3E715C8727B4DBCD834A40C53F03A3A69825A31CEDEF4DBC6BF2A5
Malicious:	false
Reputation:	low
Preview:	(()=>{var c=class{constructor({clientId:t,...n}={}){this.options={activeClass:"nfd-wb-animated-in",root:null,rootMargin:"0px",threshold:0,...n}}observeElements(t,n=null,e=!1){if(!("IntersectionObserver"in window)\|\|!t?.length\|\|document.documentElement.classList.contains("block-editor-block-preview__content-iframe"))return;function a(r,o){this._mutationCallback(r,o,n)}let i=new IntersectionObserver(this._handleIntersection.bind(this),this.options),d=new MutationObserver(a.bind(this)),b=new MutationObserver(this._handleClassMutation.bind(this));t.forEach(r=>{let o=r;r.classList.contains("nfd-wb-reveal-right")&&(o=r.parentElement),i.observe(o),e&&(b.observe(o,{attributes:!0,attributeFilter:["class"]}),d.observe(o,{attributes:!0,attributeFilter:["class"]}))})}_handleIntersection(t,n){t.forEach(e=>{e.isIntersecting&&(e.target.classList.add(this.options.activeClass),e.target.querySelectorAll(".nfd-wb-animate").forEach(a=>{a.classList.add(this.options.activeClass)}),n.unobserve(e.target))})}_h

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	32305
Entropy (8bit):	7.945026815833093
Encrypted:	false
SSDEEP:	768:+3nYUjhUuLrNDQ1hmAqG+KbIRJg4B0Q7pD0AZECgq7NFcpwjXN8ZdQScYohO:+ScpDQ1hWGnw2cAAZzgyYi6fYE
MD5:	1B8F814D78FCF3DE534BCB63222C5FDC
SHA1:	CC8DDF7C5EE277366E379A3054C5CA4988C5E206
SHA-256:	ED6E1268602BB9E67CC1966460B8FEF931FAE1848636F9B25C5847BB598F7DE4
SHA-512:	CE3ACCD01D76DD7E7329EF15311AD14BF74E02B353D5D4890A9162952DB5FE512556B6F76E42C797398B342415656E2BA18D15C4B19562F16C77DB3C7F717379
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...w.%Wy..wU...{BON.f.s..$..H.s..d......0..6.....6.1...k.1...A( .e!!..F.hF.{bwO..+......Q.L..{..z......~......@V........../(...V.h7...b......J.q../...3.CQ.)..hz"..j.{?.........QK...U"...u_.n:.......Ov..o+...Y.........+.....P...........}..1........_.o.A(]....Hu.o.o.D.....Ww.t.. ..,.,R..2..3...l..)...t.J....Q...e.h:...v\|.$.1(=X.Xbd..z..:.9..Z.x..L...`.`...{5....Dd1.>$PlX.."rV..@Dvs........@-2....&....(=X..B.5...l'.fSl.f""". ..DDD........Dt\|J.:A.a.`....t.".........K.8].3...:D>..6.o$k...":...]...X...G...Dd.j..4.....58.@D'...c:.....k..M' ".I$<..b.........V..AD..JN3.........4...KD'..b.@.`.`..j~..hf.x..X....R.t...()....(.X...j...()...[N1......a..CE.W..AD.!J^g:.%.........s.Q...t.J>...E. ..l.^.;.h~X..&x...D.8K.=.;.t.J6.....?..P...AD.E.....l,....}.l.DDs ..D...A......(.b.ODs......CPry..dU}......P.`..F..t..Dp....Zl:..@......9(.8.lH........9......{.c.%..z..*g..{C

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3905
Entropy (8bit):	5.496974252216095
Encrypted:	false
SSDEEP:	96:GYOLVFZvOLc39OLfOLqJc+uxOLQNMYOgzFZvOgl39OgGOg3Jc+uxOgENE:G1Qc3oaC/ty5l3zojUH
MD5:	230D638180A47B2577A926813BD0E9D1
SHA1:	3B27A79B741791E625BD2B96AF504242A191225C
SHA-256:	DAC60844645E45E37D58F33AD35ED33B4816A943B839524589D93707D1C8233C
SHA-512:	7576CD06E48F766D0396168AB0A2E0A68CBF69B5E2231B813078EBB33BA3E642361716035271425BE8E1BAE4FCFC8BD7B541919D5E1D3F4B59951F1DEB1BE8C4
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%20Display%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169,

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:28:10], baseline, precision 8, 150x109, components 3
Category:	dropped
Size (bytes):	6904
Entropy (8bit):	6.012677366505018
Encrypted:	false
SSDEEP:	96:EWh/85LQT5McXl4Mt4zMGdaqOLDqsKvhgKolKDPSaKPZfWQylIlaXagl:a5LO1VFtWax2JHo4zSjFWQylIwHl
MD5:	1AE4BCC6328E870F4915E0121EAC9630
SHA1:	F94EDA73D044F4D209F293DBF5925E95CEA53715
SHA-256:	B11D1EE63722CE7C4F1ED40D805F0AD3A3B1F3B0211AB41A008B75FD3D31DF63
SHA-512:	8D76FC9D04EF4FAB251D552495DD127BE110C7AACB5D788FF0D2024EEC59CA0C8EE2AAF30163359A6C0AA09BC15F3FF9B8A85841AE275082FBAFEC55B4321C22
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:28:10....................................m.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:28:10+03:00" xmp:MetadataDate="2022-09-16T19:28:10+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:28:10+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65609
Entropy (8bit):	5.437155156040918
Encrypted:	false
SSDEEP:	768:N56AeiWAJmhGhsxpCBPcq3CsJLPOpe5Qqi:NKpoqC13jJipeSZ
MD5:	8CB73B89D1EA9D71E9E7D1C6B0503D6E
SHA1:	728A78D166A8C0A9DB477F720E137CF62CFB95B8
SHA-256:	46B0DC3066786D9507F347B076D34ABC4C6F92F32BA5FF9D61D109C6B2B9B2D2
SHA-512:	8EE09267F2A8F0D35D5C88F55A54293F2F31B7A05B5B7D8CD58BF405EDE001AA8B1EC10D79739E3DFE58493BF193DE6EA890061E378A6C2A8216256F17B19925
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcTab",. "html": "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

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (25618)
Category:	dropped
Size (bytes):	48179
Entropy (8bit):	6.14762775054944
Encrypted:	false
SSDEEP:	768:oi3M3aWyNyNXqsUY12U4Sx5htC9PwWQ80ZL3lh:0aWDNXXUYphtCF7uL3D
MD5:	E68FCCE1D1527D70E050AC1B22FAEB18
SHA1:	F09E2E6923311F0B31A63F0FA8AD7B3414EE7B3C
SHA-256:	4697C9494FBB56A265CBDF1F46A91BAAEB87AD00F56263E09A04A51064ECE14D
SHA-512:	F9B50B520F2306522B1D0C8D6C6D390F6BF5CDF9C5C2C598C23E84C01BF67A59F75A2A01C413DCE619CAA44C132EAEBA3A1D56F4440671280E629477E2E08CE8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0">. <Ad id="592660779">. <InLine>. <AdSystem>DBM</AdSystem>. <AdTitle>In-Stream Video</AdTitle>. <Error><![CDATA[https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=adx&creative_id=588864408&creative_type=118&usl_id=916958803424&errorcode=[ERRORCODE]&asseturi=[ASSETURI]&ord=[CACHEBUSTING]&offset=[CONTENTPLAYHEAD]&d=APEucNVGgyGdB1_SFbybnyeci7UFjqi5CbEbt06GXd3c9LMLKtbl3z8hiTxkoQ0Q4TzWkP4cG-uFUCTiTh0MIDbjlmFQkObNOQ </Error>. <Impression><![CDATA[https://googleads.g.doubleclick.net/xbbe/pixel?d=CLzGqAEQlLT_pAMYmLflmAIgATAB&v=APEucNX3Gdyy_04bIs464F3kvujQ1mb1HLsi5hG3HkFUr6ET7-6jqZgiCk0ReIkIvDoiNx0UNqutDpirCagfT73T3OHRoDA3eOFvT3p1Ty7QqAozq8rNuaY </Impression>. <Impression attributiontype="SINGLE_PING"><![CDATA[https://ad.doubleclick.net/pcs/view?xai=AKAOjstZRkTRWD59GSx1csvYGjzN91L0zKWjyKZSzzlHicaPTuv8GInL9niW

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuk3ZqoMZZNiigWVdhCZk4wyO6hkQCHc48aJ5na8nYhY1F6fWzGeIXDTLmUmvB20mZ3_QmdZx89kOygjJzsy-My5zYt0RMY52PGpz8bXmAN51k-WCTBY25zeKntA-8joW7fBNum1kPCL_5xnih28EII0R2PjS7LawGtM1o8&sai=AMfl-YRGmO-0BpZMnCzGePyHXj7ivVoAs3o-A2pH1cneYm-ttfvAG1BWVz2CwwAsk5nEJmHvkc-YQ6bC_tRvZCr_b3aRedgKde2pbmuI41unitBurCP_gb0W0Pd_Ed2TAw2JDAr8wWhFjanzo4IuE3g1_w&sig=Cg0ArKJSzFj0gJG3a96CEAE&cid=CAQSTwCa7L7drHINVm_rqK7aojYxHES4NL3oTYuUUwCM90z0TKGPpoleIbBpPt1S0SMoMk7E6mflUVjHsbbyYvkCzyAsVErRLiOXMHgFuDYaQT0YAQ&id=lidartos&mcvt=7912&p=0,0,231,896&tm=7936.200000000012&tu=24.20000000001164&mtos=7912,7912,7912,7912,7912&tos=7912,0,0,0,0&v=20241023&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=1179991962&rs=2&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=2574289101&rst=1729810085807&rpt=5732&ec=1&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:29:07], baseline, precision 8, 150x109, components 3
Category:	downloaded
Size (bytes):	6528
Entropy (8bit):	5.8812875899607135
Encrypted:	false
SSDEEP:	48:JqEz9Wce/cZT5XbAH8DzHFLvxt2aFWGb47rHTBrZRXZ8J1Phgwm4gkIDyuAQyThl:5Wh/eT5McXl728W/r1ihECe9pwhRfjr
MD5:	6BC9D3E6F2671504FE3C6E2DC702395E
SHA1:	BCAAE1DBADE8DD7E3C78F0E091C9D9CDD8D4E67A
SHA-256:	7B38D890731B6CD670DDEB1E9991CAD213BA22C8AD8E08FCFBB7D6F4078F10BD
SHA-512:	1C3A8FB35A7103AB292A9B6C620758106A0CF0583C902BABF6838794A4CDEC9E1E044CFC47C479D95A6C995D3EE68BC6203A19AAC073659F01CA9EB85C5F575C
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/images/main-wc-1-sm.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:29:07....................................m.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:29:07+03:00" xmp:MetadataDate="2022-09-16T19:29:07+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:29:07+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22052, version 1.0
Category:	downloaded
Size (bytes):	22052
Entropy (8bit):	7.987432509390385
Encrypted:	false
SSDEEP:	384:bAYhZddnXBcssnEmw0in+WMNcP/fHRJ8vIui00Yl8U8RRAYmBX550eD+X3:b5hVBcWet+vDEj0S78Bm/VD+n
MD5:	F27ACC0D33D769A3DA576516CA236C41
SHA1:	A678C0F6905303906A2537C1FF983258286A9263
SHA-256:	1F132510BC7B665BBE5FB9227B0D2DAAFA5513296A72F88F88D38179EDED9277
SHA-512:	AFD664CB6623A292DCAF3275CF7F1F653EBDC8DA7A627AFDF5EF218F70FF4204C255D0E5D39CD9A7FD8DD0CF9FFBF90ADD35BCB66E72AE477AE7699900D08D1B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3q-0s51os.woff2
Preview:	wOF2......V$.........U..............................F..P.`..r.. ........x..b.....6.$..4. ..J..M..V...5l.v......>.9..l...7M......D._......P.;$...n..De.T.:1.j..jje....`c....h...0...H/.....3..u8.......j......,A.?.x...o..._.i..Pd=0........C.".Z.DFwT.'.=...\|.,2.......6.'9yy>~.\|g....T...&.m.."..~....h1.T.D..Q5.6..3..E..U.........v....2.9...N..>.....9Q..............Q.u.R...yE.V...og...D.T...}...9.\|q...qH......?m.......O.a.n..P.C..J.=..].SUO{....3.&.bLw......&a(]..uf..........}__`"Y..&.2..v...+..g..9.43.V...7.v......M...B...L.#.........jM3..u&Q.J.=#m......\....7;...x(...fZ.....CFC%A.:..q;.i.)DF.d..q.G......}Rs..$;y......!..?U.......%..(S.t.X.....:..i....6..s.7.......!.1wmF....F...H...6.iej..\|.-.)..%.......~.....$......3.'\|... ...l....;...6i?.-.\|. p...g3+.......@.. 2-..g._...W..U..4..x..$....5.]....#....C4. /...e@.w...0I...... N6<..~.W..w...2Q_.$E.BWG...;%z....2....p..2Q....Hy....z.{..\R\...4...v..h...%[...D...[..!....@..@....2...9[......c..a

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3856
Entropy (8bit):	7.947085476083858
Encrypted:	false
SSDEEP:	96:zY12+1kYg5uzX5xMtv39ay850bC+hPzWGz8Alq:U12+1FgAzXrMTi0bC+h7Wwlq
MD5:	17FF762ED9BE663BE581CC5B6445156B
SHA1:	229805F8CE6B87191ABF7130152AF89E6BDD116B
SHA-256:	7DC96DB121F4C1BB62735D4B47AE2E524DFB2DBE8DC9EA6F4412F204A7FE5F71
SHA-512:	F2A74C46B5EF8DC1B1F070AF7DA11FDBD4324B7D40A815890672590C1A7E32221C56BA455F2AAB5C2AB04B243AE56427B1F5C78667E832217B78823E05395CE5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_persistent_cookie_icon.png
Preview:	.PNG........IHDR...d...d.....p.T....IDATx..].P......fsW%.JmR.l....I.Btf.UQWqw.qf@.....X.o...F.].6.."...(".....f^.3.3=..n...................x"A.........c..8... .1..{6.l..h5.._......g.5f..\|..E...?..J]K.o....V.8:.it@Ki#.[V..0/.j........w"....q........^..w.WN...?........P...7.g..U.E.t...UD.....PBE-7.j..c..E.U..#.......E..=.b."....&.P.r.u...V.........X'.b:.[E.WL..-.......Q.u.m.$U..w2%...................bh..E[i{.h5....Mg.j.........DXX...ETSe..eIp\..U.....cj..Wwe.J..6WZ...9.'4...W.}.`l\|n......P)[\|i...n\...l2 .._2.lM.Cn.C^.."O.?#...#.W. ...jO)V.\|.h.W...{.I&..O..B........Z\.....8R;_...U.......\|ii).z....BN\<M^......\|AZ..Ys.1uzZ...S.S..o:.Lv.<$..T..zI...Gz..A>....;...lI.-^{3......5.<..e.3We...C...z.M...kH....q..U2x..R.s3w..l>.V)..O..B..+.e...?h.Q...{...q..%.9..G...gkR..H.>f.6./S..e.4.P....tV<\|...;Z..{._...B?Xc.....i..L.4!C;:...`.7.N...X.....E..=.^..P.X.1..EI...t.^..8&*.ff...\.>}.l.\...qx...u...W.a..I..S.2r.......{..~...z$...a.A....E....Eed?.!!.;r}.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x90, components 3
Category:	downloaded
Size (bytes):	12384
Entropy (8bit):	7.950743911651259
Encrypted:	false
SSDEEP:	384:GQv8LMrUowMuFYl2y9ig9iTe0HAVK0j8rL:jQyUVMY62y9iXBAVK0orL
MD5:	5E5EF7A1046F4298FD46BA73629E37BA
SHA1:	F3570FAD73FD62E6973F1C030DFD2E894A565013
SHA-256:	C0AF299EAFA7A72798B9FE9E65E35D1F96F97D9FF9F6B01A69A8C774A7F9A627
SHA-512:	04C2069C2928C269D0B295B0413AC1432AF447BA122966D24C5D7495D564BFF5B938F769EE1FC062D01CBC5B72A83F21107504DE2C83893CD1A0D4E1064E0105
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2020/04/Estrellas-1536x90.jpg
Preview:	......JFIF...................................."....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE......Z...."..........4..................................................................q..G.P..L.....`...cN.>..j."...2...{h..ttc.....\|....$vf..9Z..V..z...6....z.D.urCZ...3.=....Y.....1.....).7...zU%4P....U.+M^....'.6.]....f.Z-..E..o...........4.F.....@..1....>..N'.3...z.w.U.....:.n..<9....U...@..9.r..........~..E..vs....=Sf.Nc..6..,.....ig..8...#.4..<...7...\....B...............u}/9...).....R....a.!.4...d.q3..FEVG.[..H_.......Y...6..........E.4...!.d...=..Jy....R>}e....:j.o....Z.c.0..El..gW.....80....4=....{5/.a....I.{.U...}z...Vb.`.......T........i.Cb.5VW... Xk..'.W.@.....+.a...........s.f...].T...3..3j..q.VB.....J1}.Lzd.<:7...X..d:..18..e.B.l.M.z..jA..V.,=.E...mn......}B./..f..}u...y.1k...g.p.`+..5.h.9!.....D).+...hZ^t.....Y..!-.E.._.;...Q%.1.f.Xvs.zV...a....=.[..........h.{..u.A.....

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3673)
Category:	downloaded
Size (bytes):	159329
Entropy (8bit):	5.5962003793805675
Encrypted:	false
SSDEEP:	3072:xOWwI3J8nZcz77QwtxS4ye4lHqM/T+Duu0sMft/pUIWIx7lzd6tpriZn/zHRzH0U:xOWwI2nZcz77QwtxS4ye411/T+Duuts5
MD5:	E7C09C511AC9ACF0F18BF6150E42230B
SHA1:	3AF11481EB3714F79575F8D278DD9EB8DAEF38EA
SHA-256:	651A80969CC5E7EC80F99D75701DB5EB21FCC3DC0DE2569CE8087B6011AC2A01
SHA-512:	C017F4FA564FB786CF99F4609130E9B5BFBD92D3DB84830B3CCAA32A875A6EA6B4EF3D22693922E27FDEB04227BD59F7E191CC05380AF74A2BBAA4D60A497E27
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 106, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4036
Entropy (8bit):	7.806157835029585
Encrypted:	false
SSDEEP:	96:L7zlY+7W31R5kpfT1E0LH6+HN7ro7vAQDApz/ajmlRA1:ZYH31WBpGH7c5a2RC
MD5:	13CFAC93F102CCA813515B432E292220
SHA1:	2515DA7707D11C89185C9021F0000CFFBE0578F9
SHA-256:	A335FC1DA4A5FFC1FCACFA3EAB57506FAA41F026954496BECB59CF5FBCD99D0E
SHA-512:	7C6B0361959E8667CF28E63149A31CC141AF2F9B3FE7DC758BCC19146ABBD2573D333D52F7DF9D7CE10CD2F7F2DF9BECB300BFE839CA76590508D3360ABE7849
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...j.....W..a....PLTE...O._P._P.`S.\T.\T.]T.^T.`U.ZU.]U.`V.]V.^X._X.`S.\S.^T.^T.]U.]U.^P.`P.`P.XP.`X.`P.`X.`U.ZU.`U.ZU.`T.\T.`T.\T.`T.^S.\S.`S.\V.^U.]U.`V.^U.]U.^W.^T.]V.]T.]V.^T.^V.^S.^T._V.]V._S.\S.^U.]U._U.]U._T.\T.^V.]V._T.]U.^V.]V._U.^T.]U.]T.]U.]U.^T.^U.^U.^U.^U.^U.^U.^U.^U.^...W...VtRNS........................ !!0011@@AAOPPQ_```aooppq.....................................Nv....IDATx..o{....m.tk.-f&&RK..kzU....q..Ns....`...(.l.D..;.!...21).......... ..Bv...}.......`y.<X.,/8.<Xby.....`y.<X._...X.....r .~.`...%..~.`.J......+..K,...,].=Xb....+K..X...,]..`..{.t.{..r...`iJ-....z......K,.4..K{Q...-.=Xxa.,\|..V88.Mg.E%...d.ar...B6JB.....-nD.....=..wR).FA...........M.......v.{...PMY...]@..o..,.....Y..=H.]....\|....d..g}q.....v~Ahg....Iq..K....)...N{t..^J..d+.I.'=...7..]0..L.n.,.O.r......j2...v6.f..Gg.c.".o...+e...'....r...+.X.6[.+.0U..p..i.....V.V 1.+\|..h...Q.....Z....f.`.B..p2gZ...c....>X...'....-.`M..;.k..4..!XK.'oCM.^.8..7a....s.V8/;....W.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.743406995939735
Encrypted:	false
SSDEEP:	3:YRM9WREaDMWp6JoXxQAfB4xC2xiAen:YsWiAKmH6u3
MD5:	01BFC7CC9059FF718B5360A0C35FA600
SHA1:	FBC851138F6C69AF37623AD90942DFF79328547E
SHA-256:	0831648960E9115AA8B7B055C41F948A22C57AD3ADE2F9920DA0F01AED0602D8
SHA-512:	6CC5C46FE6EE05EDCDC6716A18396CFBE8ADEFE7150955E1819102301E7AE119AC385F4B7785187FD0D060F336B0235F0B8DD9F97B70DF307DF87A2536C9A18C
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1729810134126,"message":"Request method 'GET' is not supported"}

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	5.079318363208902
Encrypted:	false
SSDEEP:	3:PIy9JL/ZSGKHjJMzVJu+1vK3VYrSLIzECAXhxMAFjWAEtv0Gb:TJL/sGeMRJVSOGLIoDXhxVFjWAEd0Gb
MD5:	E4E31B474D3E0B577B3C8856E91F8659
SHA1:	A81311F7FCFA9B6B23A24D4E5C976D5F75B1B9B7
SHA-256:	18088C10E79C926292732AF98A0CE470E90F3FBCBA4BB4896AB3310C2D94E421
SHA-512:	A07961EB39C4CD4E39EE19E2C675E64E5BA5367DAA18E2F76A23772ABD62F46B002E6BE8FB0F35A70616941178FACC8DF579C4A68E5811B74313C12806AAFAE3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Preview:	<!DOCTYPE HTML PUBLIC>.<html>. <head>. <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" />. </head>.</html>

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 380x380, segment length 16, progressive, precision 8, 750x187, components 3
Category:	dropped
Size (bytes):	28418
Entropy (8bit):	7.9733104348204575
Encrypted:	false
SSDEEP:	768:HNjJiqRNRd5i1LhCvdkJqfVZU+n/hoyVulToC+9aaU3e0mPOyYq3:aqTdkgEC/hoyqT9+9aDuBD
MD5:	295C5F938984C21BE26DD8A6B15DC8CD
SHA1:	7A4D7CF12CB05951140F92CEB5584E09AAC2A08A
SHA-256:	791FBCBF5E2B9BF7271BECACB3006F77EC1A768600471F0A8ACA527A0A15048A
SHA-512:	1A925F2D3668CE4FAB89B5888936E1A347AAF5A4454986D3FF46B120E27B0AAFB39AC216827BC16515E453F82298A9CD23501821AC309F277764EC917C1617F8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....\|.\|..................................................................................................................................................."..........7....................................................................M.u.U5...0y..............................?:.m...6 L..L...e.z/...nU.......gO.q.........Z>...._....[...u.Z.8.....:.Cy.:......lB.L...`3.S....).[.n.../.sS..69h..o2.o.y....Q.0"..7d...667.v_....~...?.....p.....6.%4G.o...U2!..j.....~..9.V&UQ..8....cu}g...]s\|...&%.1.....R.......U.`6.w..V.../K.......e...[...T...~%...rU{...z1...;...~.Bvx...3.s.....^.k..\|.F1...\|.w..=_O......S....j.f...V.o:6.9....l.:.o.V.....^.....A/.......e...^...<...Z.....~.@...'{...yKI...b.......yQzM..^........qn..g6.....s'j....+5<..#..7.....2p=..#..kn..r....[....#..v.3......_.....O..Q=F.V...F.....;..#G4_....9....']1.y......;..>..}...~u..y..s..7[j.nbX=(.~.~.....\|{/./.......k..fO.1.a.`..}~E.eqy,n.....s..e.d...=k....e.....cn.........lt.'-.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 39, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2775
Entropy (8bit):	7.32190541862231
Encrypted:	false
SSDEEP:	48:s8isv9WivuuXwFlSnH1c9wLw55bu+RGVNc7U8B/6WmuyqM3MLhRV7xw3/s2ZII:xFWuuuXwFlSnH19LwTb58VNKNSWmB9Mq
MD5:	151130AE4B948093084F4910321E4447
SHA1:	581F5056F64F40E377FF0F7301CDC56ECAC6726B
SHA-256:	60C38E847580B1D42351B52E25AE2B0C9F3A3C1CAD18F9085C0E3E750AF6AB08
SHA-512:	946DBBA33918F37F3E51685990CF3BE811BC220B462C160BA6FE6AE7DEE4CE42ECE6AB6FD38A0DDF2F9798F75A7455264AD99EF9DCE985CDE4B70091E3FDC741
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/us_es/images/favicon.png
Preview:	.PNG........IHDR...6...'......,.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". exif:PixelXDimension="54". exif:PixelYDimension="39". exif:ColorSpace="1". tiff:ImageWidth="54". tiff:ImageLength="39". tiff:ResolutionUnit="2". tiff:XResolution="72.0". tiff:YResolution="72.0". photoshop:ColorMode="3". photoshop:ICCProfile="sRGB IEC61966-2.1". xmp:ModifyDate="2022-02-01T17:22:51-05:00". xmp:MetadataDate="2022-02-01T17:22:51-05:00">. <xmpMM:History>. <rdf:Seq>

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17086
Entropy (8bit):	6.016301878531473
Encrypted:	false
SSDEEP:	384:A2lST2SiCt8apgHfICnZFbzu9b2qhr94HJN2dgv:A2lSB8aCLbS9b2qh54pkm
MD5:	D5D1B3C10F18C8C345BC4A1208F769CB
SHA1:	4AACC7C4ADA44D46EB06BFF6EBCC78E378C06DE4
SHA-256:	2B0188762F0ADF8B97016A3CB6C19D2004BEC240D6BD7C596312CA282A89E2A7
SHA-512:	3B94E179FB7AAB3EB5A1394E8B1010847033B1EF54CB2F76236AE7A589FEAD76D5E65C0EA04464FF0E1ED6EBDDCB0107D4815B046A8AD2FCDEAF706C64B9284A
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"qc4aZ-WYLoOQjuwPlduEgAQ","injector_basename":"sodar2","bg_hash_basename":"wCYeIP4bXV0rjJGplLlLbfmjIulLKyJtaQ3zZMWDNU0","bg_binary":"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

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7433), with no line terminators
Category:	downloaded
Size (bytes):	7433
Entropy (8bit):	5.4070028218058095
Encrypted:	false
SSDEEP:	192:QRGmDkynb5ZUMH5Og/rVEhdZEh+1VKfV5N6/YO8:QRGmDkynbbAeVEhoMKfVD6/YO8
MD5:	A2786990BCC9B8F45F42590F773D1725
SHA1:	0AA6EE83F42985777222259FC2A0162CEE444ABE
SHA-256:	86E5BBC9697BB4D7CFEE51A4E3A5C4F92A749C2A2D8F362876154A97068D79CA
SHA-512:	1DAA0361CDCF19DBA0B8158E493A0D734016187062D98E37D92B29DF03487653B3AEE9C2B41DAAABA16B86D3DBA3E3E56EF45BCA2F3A76BE55431EB57A0FDD69
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/smoothscroll/1.4.10/SmoothScroll.min.js
Preview:	!function(){var s,i,c,a,o={frameRate:150,animationTime:400,stepSize:100,pulseAlgorithm:!0,pulseScale:4,pulseNormalize:1,accelerationDelta:50,accelerationMax:3,keyboardSupport:!0,arrowScroll:50,fixedBackground:!0,excluded:""},p=o,u=!1,d=!1,n={x:0,y:0},f=!1,m=document.documentElement,l=[],h=/^Mac/.test(navigator.platform),w={left:37,up:38,right:39,down:40,spacebar:32,pageup:33,pagedown:34,end:35,home:36},v={37:1,38:1,39:1,40:1};function y(){if(!f&&document.body){f=!0;var e=document.body,t=document.documentElement,o=window.innerHeight,n=e.scrollHeight;if(m=0<=document.compatMode.indexOf("CSS")?t:e,s=e,p.keyboardSupport&&Y("keydown",x),top!=self)d=!0;else if(Q&&o<n&&(e.offsetHeight<=o\|\|t.offsetHeight<=o)){var r,a=document.createElement("div");a.style.cssText="position:absolute; z-index:-10000; top:0; left:0; right:0; height:"+m.scrollHeight+"px",document.body.appendChild(a),c=function(){r=r\|\|setTimeout(function(){u\|\|(a.style.height="0",a.style.height=m.scrollHeight+"px",r=null)},500)},setT

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	261946
Entropy (8bit):	5.563310149860084
Encrypted:	false
SSDEEP:	3072:WvQRhbIGc3kWh5W1Zc0RSJcEjCPfrgixeOYH2hnHas3rOXk9nZGey:1Ro3k45SivvioXjs3qXk9nZGP
MD5:	D934F905320139DF0185F74CAA7B4B72
SHA1:	727B1B020E15972385CC3AE0F08B767CEB903995
SHA-256:	947A1087ADDD0E54AC9DA16F893CE183F61BA849DC4F024FA0903AA5E19AB01A
SHA-512:	344B6F4498930A70B16B2FD575F38D1854562F635F2FCB09E0FF0575BD081435886A0070208C0111CCA42B601FD3BA10940F916FEE780A0823E6EC74D82A776A
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-10846925175","tag_id":14},{"function":"__ogt_dma","priority":4,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameVa

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:28:10], baseline, precision 8, 150x109, components 3
Category:	downloaded
Size (bytes):	6904
Entropy (8bit):	6.012677366505018
Encrypted:	false
SSDEEP:	96:EWh/85LQT5McXl4Mt4zMGdaqOLDqsKvhgKolKDPSaKPZfWQylIlaXagl:a5LO1VFtWax2JHo4zSjFWQylIwHl
MD5:	1AE4BCC6328E870F4915E0121EAC9630
SHA1:	F94EDA73D044F4D209F293DBF5925E95CEA53715
SHA-256:	B11D1EE63722CE7C4F1ED40D805F0AD3A3B1F3B0211AB41A008B75FD3D31DF63
SHA-512:	8D76FC9D04EF4FAB251D552495DD127BE110C7AACB5D788FF0D2024EEC59CA0C8EE2AAF30163359A6C0AA09BC15F3FF9B8A85841AE275082FBAFEC55B4321C22
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/images/main-wc-2-sm.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:28:10....................................m.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:28:10+03:00" xmp:MetadataDate="2022-09-16T19:28:10+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:28:10+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7541), with no line terminators
Category:	downloaded
Size (bytes):	7541
Entropy (8bit):	6.135407549779759
Encrypted:	false
SSDEEP:	192:1DY0hf1bT47OIqWb1na4WMG8ClPZKvHvZv1v/ulPoPGtP/PjPsP8PTY:as1T47OIV4j1wvHvZv1v/cw+t370kU
MD5:	94D5A97F98D30FF5CC23FE5625331E12
SHA1:	396C4312BA9D16532A1EFFC90D1FA9022237889E
SHA-256:	7A33319C76FAC347ADA191B7E32835D3025524BCE5BD94FDD80D7E6C21C6EFED
SHA-512:	4EF1DF7CF9171D93E45D5E20BF6A97FE890CE55CBA4002916EAE41EB87C0ED2C4DE259037684956EF10CD55B38B8E61C4D3A7DAF5A50158C627E02B90EF5CDD7
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/10846925175/?random=1729810145322&cv=11&fst=1729810145322&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200zb811825413&gcs=G111&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2Fthank-you.php&ref=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&label=3lcLCLvRwZUDEPfim7Qo&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&gtm_ee=1&npa=0&gclgs=5&gclst=47322&gcllp=146492643&gclaw=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuk3ZqoMZZNiigWVdhCZk4wyO6hkQCHc48aJ5na8nYhY1F6fWzGeIXDTLmUmvB20mZ3_QmdZx89kOygjJzsy-My5zYt0RMY52PGpz8bXmAN51k-WCTBY25zeKntA-8joW7fBNum1kPCL_5xnih28EII0R2PjS7LawGtM1o8&sai=AMfl-YRGmO-0BpZMnCzGePyHXj7ivVoAs3o-A2pH1cneYm-ttfvAG1BWVz2CwwAsk5nEJmHvkc-YQ6bC_tRvZCr_b3aRedgKde2pbmuI41unitBurCP_gb0W0Pd_Ed2TAw2JDAr8wWhFjanzo4IuE3g1_w&sig=Cg0ArKJSzFj0gJG3a96CEAE&cid=CAQSTwCa7L7drHINVm_rqK7aojYxHES4NL3oTYuUUwCM90z0TKGPpoleIbBpPt1S0SMoMk7E6mflUVjHsbbyYvkCzyAsVErRLiOXMHgFuDYaQT0YAQ&id=lidar2&mcvt=1012&p=0,0,231,896&tm=1035.7999999999884&tu=24.20000000001164&mtos=1012,1012,1012,1012,1012&tos=1012,0,0,0,0&v=20241023&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=1179991962&rs=2&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=2574289100&rst=1729810085807&rpt=5732&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241022/r20110914/client/load_preloaded_resource_fy2021.js
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_close.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4699
Entropy (8bit):	5.677077865541019
Encrypted:	false
SSDEEP:	96:jb+9cRBftWErJehL8mS0790bnC43JIEJ5G:QcRBfYE9eh4mJInC43JIEJ5G
MD5:	2A769325E5B1E66C323D09440632E5F8
SHA1:	D854CC916A0DDC0388D770E236CAE31B5873A73B
SHA-256:	5FB7C176325267082E94A7131FED5E157516E6805CEE3AC6F6A93340A947D640
SHA-512:	F03FF893972CB92751A015251849B54033C6EE4EE0D3D940018C7665ED709647B830B4A91AC8F12CB98BD2092BD12AA2F58221F35E077ABA01EB2B505B64415E
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202407.2.0/assets/otCookieSettingsButton.json
Preview:	. {. "name": "otCookieSettingsButton",. "html": "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

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 106, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	7.806157835029585
Encrypted:	false
SSDEEP:	96:L7zlY+7W31R5kpfT1E0LH6+HN7ro7vAQDApz/ajmlRA1:ZYH31WBpGH7c5a2RC
MD5:	13CFAC93F102CCA813515B432E292220
SHA1:	2515DA7707D11C89185C9021F0000CFFBE0578F9
SHA-256:	A335FC1DA4A5FFC1FCACFA3EAB57506FAA41F026954496BECB59CF5FBCD99D0E
SHA-512:	7C6B0361959E8667CF28E63149A31CC141AF2F9B3FE7DC758BCC19146ABBD2573D333D52F7DF9D7CE10CD2F7F2DF9BECB300BFE839CA76590508D3360ABE7849
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_company_logo.png
Preview:	.PNG........IHDR...X...j.....W..a....PLTE...O._P._P.`S.\T.\T.]T.^T.`U.ZU.]U.`V.]V.^X._X.`S.\S.^T.^T.]U.]U.^P.`P.`P.XP.`X.`P.`X.`U.ZU.`U.ZU.`T.\T.`T.\T.`T.^S.\S.`S.\V.^U.]U.`V.^U.]U.^W.^T.]V.]T.]V.^T.^V.^S.^T._V.]V._S.\S.^U.]U._U.]U._T.\T.^V.]V._T.]U.^V.]V._U.^T.]U.]T.]U.]U.^T.^U.^U.^U.^U.^U.^U.^U.^U.^...W...VtRNS........................ !!0011@@AAOPPQ_```aooppq.....................................Nv....IDATx..o{....m.tk.-f&&RK..kzU....q..Ns....`...(.l.D..;.!...21).......... ..Bv...}.......`y.<X.,/8.<Xby.....`y.<X._...X.....r .~.`...%..~.`.J......+..K,...,].=Xb....+K..X...,]..`..{.t.{..r...`iJ-....z......K,.4..K{Q...-.=Xxa.,\|..V88.Mg.E%...d.ar...B6JB.....-nD.....=..wR).FA...........M.......v.{...PMY...]@..o..,.....Y..=H.]....\|....d..g}q.....v~Ahg....Iq..K....)...N{t..^J..d+.I.'=...7..]0..L.n.,.O.r......j2...v6.f..Gg.c.".o...+e...'....r...+.X.6[.+.0U..p..i.....V.V 1.+\|..h...Q.....Z....f.`.B..p2gZ...c....>X...'....-.`M..;.k..4..!XK.'oCM.^.8..7a....s.V8/;....W.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15432), with no line terminators
Category:	downloaded
Size (bytes):	15432
Entropy (8bit):	4.919945468630498
Encrypted:	false
SSDEEP:	192:fawHi1nr2nImnbYVtVMSUzt+b+1GB3BVDoiLI+zgZSOyi3tUfC8FoASslPIYlD7s:fdC3AcB3BxZIWDC3t
MD5:	CAE03CC9BF57FB9BD8199D37D5DAE0DB
SHA1:	9001DCB3A3406B2BADD0E2E6BD31CCD81972910B
SHA-256:	29C99771C81466150D55D307A9B0E12CFDAB8240A9C65A80B764C1D58965406F
SHA-512:	98B7863DB308690F2DDD6F21A180193F62FE50E0FB077329D758BC5D3E4E397AF98EAD927CBEA727CFE592F0C59F262AD074748263DF1FB8A5300880206FFEC0
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/formats/outstream/versioned/prod2/outstream_web_client_20241002_RC00/outstream.min.css
Preview:	div{-webkit-tap-highlight-color:rgba(0,0,0,0);-webkit-user-select:none;user-select:none}lima-video{display:flex;height:100%;width:100%}span,svg,video{vertical-align:middle}video{object-fit:cover}video,.video-player{display:flex;flex:1;height:100%;width:100%}.branding-row1,.branding-row2{align-items:center;text-align:center}.thumb-overlay{flex-direction:column}.creative,.video-container{display:flex}.controls-overlay,.end-card-overlay,.thumb-overlay,.image-blurrer,.video-blurrer{align-items:center;display:flex;height:100%;justify-content:center;left:0;position:absolute;top:0;width:100%}.creative{background-color:#fff;box-sizing:border-box;font-family:'Roboto',sans-serif;height:100%;overflow:hidden}.creative:not(.interstitial){border:1px solid #ccc}.end-card .controls-overlay{z-index:-1}.end-card .end-card-overlay{z-index:3}.end-card .image-blurrer,.end-card .video-blurrer{z-index:1}.end-card .thumb-overlay{z-index:2}.end-card .thumb-overlay>.start-icon{visibility:hidden}.end-card .rewar

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10846925175/?random=1729810106830&cv=11&fst=1729810106830&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-30HWN1Z1WV&gacid=654661085.1729810111&gtm=45he4al0v9126530201za200zb811825413&dma=1&dma_cps=syphamo&gcs=G111&gcd=13r3rPr2r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533421~101686685~101823848&z=854704624
Preview:	<html></html>

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2015)
Category:	dropped
Size (bytes):	40512
Entropy (8bit):	5.518199113824284
Encrypted:	false
SSDEEP:	768:8xMuZ0jicWJj1GV2eYcZOYnHKoOFAVUagrLG9JQcgNYTrfgUYyzkoDBRW0sbh3fK:A+xbYcAYb2ZT3ZE3
MD5:	1614EFD8D8B318CA80C151AA5D983224
SHA1:	E27E5A72190F00DDABC4187084B8BD3850388D05
SHA-256:	B682B162DDD14D549C16FDCC70C01AAF1A7C1C5EE9D12F8A45081CAF38499FF4
SHA-512:	32E34011CAD366D6AC1BB0FD694829D233C66BB51813596A8EA6631E2E8516A25308768C988E9866C6B868174E993BCB62443D92AFEAFC9209B0A1C30CECECAB
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;const aa=(new Date("2024-01-01T00:00:00Z")).getTime();.function ba(a){a=a.s;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));typeof a.wow64!=="undefined"&&(c+="&uaw="+Number(a.wow64));return c}.function ca(a,b){return a.g?a.m.slice(0,a.g.index)+b+a.m.slice(a.g.index):a.m+b}function da(a,b=0){let c="&act=1";b===0?c+="&ri=1":b===1?c+="&ri=24":b===2&&(c+="&ri=25");a.l&&a.s&&(c+=ba(a));a.h&&(c+="&suid="+a.o);return ca(a,c)}function ea(a,b){if(a.l&&a.i){if(b==1)return a.i\|\|""}else if(a.h){if(b==1)return ca(a,"&dct=1&suid="+a.o);if(b==3)re

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	30252
Entropy (8bit):	4.411017856466682
Encrypted:	false
SSDEEP:	384:9VlmpD5Bdy0yQWB5Kx15zJ1w+qxblke/UVb5zBn3fwDCPDAoKH4/yTorRz:9Vu5ITkNcxJ/U51rAopaM
MD5:	5217B285FAB879B2B01C9A248AE29293
SHA1:	AFEC809C287433F836B65769A0953C04DDD60BC0
SHA-256:	24DA0327467DE5742B29C9AD785DB806BC8327B3CCE000DD3A62BD37D74B4021
SHA-512:	96387C0902117DCF86FF2C450191EEB08215D8700DACE1336DA9A01A95877DDFC64D87B7999CCA4723EE14EC4AA1B07756E63ED0D64D138FC4910F2CB77E8730
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/images/ty/card-top-right-mag.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 600 300" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:1.5;"><g><rect x="-19" y="-41.312" width="638" height="382.624" style="fill:#d8f7ff;"/></g><g><path d="M523.996,627.248l-669.936,0c-19.333,0 -35.004,-15.671 -35.004,-35.004l0,-517.239c0,-19.331 15.671,-35.005 35.004,-35.005l669.936,0c19.332,0 35.004,15.672 35.004,35.005l0,517.239c0,19.333 -15.672,35.004 -35.004,35.004Z" style="fill:#b6b9bb;fill-rule:nonzero;"/><path d="M13.855,90.988l-147.903,0c-1.984,0 -3.478,-1.804 -3.113,-3.753l4.326,-23.058c1.481,-7.901 7.394,-13.523 14.223,-13.523l117.032,0c6.828,0 12.741,5.622 14.223,13.523l4.325

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1999)
Category:	downloaded
Size (bytes):	42045
Entropy (8bit):	5.381741135576383
Encrypted:	false
SSDEEP:	768:55QY1lBeehxthmnbWEf1GkCSh5kcv+v6o:4IlBeehnUWe1GkB9vVo
MD5:	EB3F60BF1AD8CD83B6BAA91E92C4CE09
SHA1:	5BD47A3CD3D13FFF9076A2B2F6F257A9A3977733
SHA-256:	1DDB3277324A871335EF0B7E680DE58C9A79B3C1355B4082CA5425818C8A0306
SHA-512:	1A11807C897B1A042984586D911CE0526D7D88754F6E2282DB4A607262826145778A668C36F2CA714A629BC154660B088B75276B89AF5A1CD065A1F432038F95
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/HdsydzJK.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},n=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:aa(a)}},ba=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c},ca="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},da;.if("function"==typeof Object.setPrototypeOf)da=Object.setPrototypeOf;else{var ea;a:{var fa={Ga:!0},ia={};try{ia.__proto__=fa;ea=ia.Ga;break a}catch(a){}ea=!1}da=ea?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}.var ja=da,ka=function(a,b){a.prototype=ca(b.prototype);a.prototype.constructor=a;if(ja)ja(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.na=b.prototype},la="function"==typeof Object.definePropert

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10846925175/?random=1729810145303&cv=11&fst=1729810145303&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200zb811825413&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2Fthank-you.php&ref=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:26:24], baseline, precision 8, 798x578, components 3
Category:	dropped
Size (bytes):	30548
Entropy (8bit):	6.9654496957716745
Encrypted:	false
SSDEEP:	384:V1m5ZMtBacVCRHV4p76sX7Ov8R49r7zXowEZoGV8AWYYYYiHdu4:VAZ6scka6sXCW2r7TAoGVDM4
MD5:	6D21AE44405ABFADDA37B6C367481C49
SHA1:	AB9A0D515FFD1BCA4D0E9C7BD16A709526723271
SHA-256:	9B50668E3A58EFB36BF03A273CBBE7362FB47F65F82823A5292A55082C9DFCF3
SHA-512:	B16941528F853C497F559117D9DA24044B64E0E1536EBD5DCCC4746A6AB35848574E8C6291AF420544FB875D7DAF54B32708197382851EB1D9CF4AC4AA8B43E9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:26:24....................................B.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:26:24+03:00" xmp:MetadataDate="2022-09-16T19:26:24+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:26:24+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	261921
Entropy (8bit):	5.563261170626687
Encrypted:	false
SSDEEP:	3072:WvQRhbIGc3kWheW1Zc0bSJcEjCPfrgixeOYH2hnHas3rOXk9nYGen:1Ro3k4eSYvvioXjs3qXk9nYGu
MD5:	F423A7CCD14157236821A34CDFD80426
SHA1:	C60E721AAF1E860FE975B4E39C8420890472F58A
SHA-256:	C36221BB33F2C2AD72BC3E0BC99D1DB3BF5E370505C7979245CD6D18BFA0CB0B
SHA-512:	DD919D5ACE8E5D51E431683FA163C9536BD4FD913B6C9CDA9925A9A189611CF38B5CC28C9EBE1B589341F0721E325432F9671546AADD5B13EC9FE5C00145D410
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-10846925175
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-10846925175","tag_id":14},{"function":"__ogt_dma","priority":4,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameVa

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	121260
Entropy (8bit):	5.0979844613521985
Encrypted:	false
SSDEEP:	768:ly3Gxw/jc/QWlJxtQ8IuiHlqLmzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:Xw/o1BIuiHlqLmN8lDbNmPbh
MD5:	2F624089C65F12185E79925BC5A7FC42
SHA1:	8EB176C70B9CFA6871B76D6DC98FB526E7E9B3DE
SHA-256:	EECE6E0C65B7007AB0EB1B4998D36DAFE381449525824349128EFC3F86F4C91C
SHA-512:	9CDA3EC821C4CA7D2C98CC52B309DFFCE9D7EBF2B026E65394D6418DAB8A8532B473ECD3FAAE49382C7450585743AAC947D8E0E84B3C80FB83DAE65C6032EA4B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.6/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.6 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2016)
Category:	dropped
Size (bytes):	39612
Entropy (8bit):	5.519644959714568
Encrypted:	false
SSDEEP:	768:qzYb3uSHMeNfX5m6cx/qbk/BssqE2ZSgxIs9bWHGJ4CricXgTpg/4G0yl6qQHm5L:RDlO/qY/Bo2c8OACsvEF
MD5:	68DFADD452657CDDCBCBA03C1A09279A
SHA1:	44DDB9F6D21B4C59F7FF9A870CA8BA49B7DD9FBF
SHA-256:	10BCB657B69FE38080CC57D9AA2E4F190C8660E64C2917F93564E7890DF58B2B
SHA-512:	4D0C74DAC9C21D6AEB69B0BE35BF20AD234A08259BD13683398E96D80E86FBC0F8DCC12BA1C6D484FE61341795B2699E1F58BA3AFC24F8BD32FB27995F421A09
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b};const ba=(new Date("2024-01-01T00:00:00Z")).getTime(); .function ca(a){a=a.s;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));typeof a.wow64!=="undefined"&&(c+="&uaw="+Number(a.wow64));return c} .function da(a,b){return a.g?a.m.slice(0,a.g.index)+b+a.m.slice(a.g.index):a.m+b}function ea(a,b=0){let c="&act=1";b===0?c+="&ri=1":b===1?c+="&ri=24":b===2&&(c+="&ri=25");a.l&&a.s&

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	10092
Entropy (8bit):	5.341516367702533
Encrypted:	false
SSDEEP:	192:jm2KPYICKMyWH08DRXzBIHi3uxLi/DFtwfJpYtOJYw/c3ODM4xRw+QOQEip54f14:jm2nOVc7K1aaWOIfQB0
MD5:	499F72D5D4DB2C5E81243299F85D2353
SHA1:	1D627E21098FB6381F764E99E4A175C6E6430A4C
SHA-256:	D236A61032284F8D89F7CD1EF2A148D09C6548B21FB7BDA89E0F84B546E92629
SHA-512:	E6322287EC18918CB0373C1FA1B84AC3C8C698676A3F4F0EDA78E56E43BC4E832B6AD953250E8E3F58A5AABB2DC5DE9EB02DA7BDED337B4FB842B3432A007BC4
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202407.2.0/assets/otFloatingRoundedCorner.json
Preview:	. {. "name": "otFloatingRoundedCorner",. "html": "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

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16744, version 1.0
Category:	downloaded
Size (bytes):	16744
Entropy (8bit):	7.987561844085299
Encrypted:	false
SSDEEP:	384:rXI9iFe2GA6Z0RCg6vwHUV6j4mTyOJEBh+8vR4M4V08Od4:rIsFe2GAAG8vwR4VOJEn4M4V089
MD5:	29C01F2D6E62D3941F40ACE4A7E35776
SHA1:	0906C68D1E1430E8D8D6F009A8D379FFABB1F090
SHA-256:	AC18987CEF2DFBD1EA55976AC083EF9337F34A08F63F7F41BE13CE60B45CA9E6
SHA-512:	2BFDD7A7B55A07F76A498E89ACE3125DD79A9EC51607D1B24A7BF80CC62A23185215851D10B3D94BD81F37A113B131F70253A934C4E5B5642E37A2B6DB6D48BB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/yantramanav/v13/flUhRqu5zY00QEpyWJYWN58AfvNeKBM.woff2
Preview:	wOF2......Ah.......8..A.........................."..$...`....f........d..L..0..6.$..\. .... ....H.u.H.....U.`.....uD.......c....$.^.#A....v..0...#..6.n.:.Z.:...4.2..t.:..:...$.V......%..E"......^......-GC..=.t...6/.8........>.-yQXN..Y...3.m.Or..T.=....C..%.D1...D...!....4...TmD......h..$..T.l.F..H.Q0._QlD0.......H..s$;...F\|A..8l.....I......n..P.(..s.$....%\..&a.?.V.SY,-@Z....7x.O..J1.N.v.t...S..\|....S/[~.....\{....w._w...I..,..,._.Z.T..,.j.\..TK..$.1.%.z..n...~X..1......o.:].=..4.'0..#Mo..........x"..I._6.V$.p{;o....@X}.._{..o..C$..M5........ku...f....IN'z.C[....$..&..x....G")..4.L-..[./....).\|.... . ..n.b.......`q,.8...A.=.\|....;/.'.lF..gM.{."Y....J.J..M...R..<Q.....T......A.Q@k..P.S{\|....PU.5.`..w..F8...0..!!c....{.......m.Eh.F.....".5&".FW:(r....^....H&(.......=.._N.....:y..s.):....`.j..%.%..6n..a ....?..F0...+..Q....N4..6=......wr.ukAR..x..P.\|1...o.,........9.g..&............1D\V.%........j......;+.......N Q==Y.s....=.^T.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	downloaded
Size (bytes):	22537
Entropy (8bit):	5.532838453720538
Encrypted:	false
SSDEEP:	384:4qopQl6FtO53n+8svyf53Fo5oeHvVFBIuwRatEDTJi/EDdBC6ZcuLI4Xhw/XgsB6:4qopQlwOFn+DCFoeeFqYt2TJisnC6ZcU
MD5:	EC3C9F3C47B1AF207A73CCF2C74B1750
SHA1:	50BB39E227E1B1C6BCF3D99C01B916FE21259127
SHA-256:	38F4583C6BA3F8A4DEFF750B08424F18EA56E87B5013057BF6621A00B0B78144
SHA-512:	966B44A7375D3924E29160B53D804CDEE669E32B1BB9B6CCE4D4F2F5BB179A17C5FE9A180C9A355E065AF131D55CB2587B45A275FF0586BF49218A85F5110EBF
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241022/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ea(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ea;return p.apply(null,arguments)}function fa(a,b){function c(){}c.pr

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 380x380, segment length 16, progressive, precision 8, 750x187, components 3
Category:	downloaded
Size (bytes):	28418
Entropy (8bit):	7.9733104348204575
Encrypted:	false
SSDEEP:	768:HNjJiqRNRd5i1LhCvdkJqfVZU+n/hoyVulToC+9aaU3e0mPOyYq3:aqTdkgEC/hoyqT9+9aDuBD
MD5:	295C5F938984C21BE26DD8A6B15DC8CD
SHA1:	7A4D7CF12CB05951140F92CEB5584E09AAC2A08A
SHA-256:	791FBCBF5E2B9BF7271BECACB3006F77EC1A768600471F0A8ACA527A0A15048A
SHA-512:	1A925F2D3668CE4FAB89B5888936E1A347AAF5A4454986D3FF46B120E27B0AAFB39AC216827BC16515E453F82298A9CD23501821AC309F277764EC917C1617F8
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/uploads/2024/07/Invitaciones-de-cumpleanos-pagina-R.jpg
Preview:	......JFIF.....\|.\|..................................................................................................................................................."..........7....................................................................M.u.U5...0y..............................?:.m...6 L..L...e.z/...nU.......gO.q.........Z>...._....[...u.Z.8.....:.Cy.:......lB.L...`3.S....).[.n.../.sS..69h..o2.o.y....Q.0"..7d...667.v_....~...?.....p.....6.%4G.o...U2!..j.....~..9.V&UQ..8....cu}g...]s\|...&%.1.....R.......U.`6.w..V.../K.......e...[...T...~%...rU{...z1...;...~.Bvx...3.s.....^.k..\|.F1...\|.w..=_O......S....j.f...V.o:6.9....l.:.o.V.....^.....A/.......e...^...<...Z.....~.@...'{...yKI...b.......yQzM..^........qn..g6.....s'j....+5<..#..7.....2p=..#..kn..r....[....#..v.3......_.....O..Q=F.V...F.....;..#G4_....9....']1.y......;..>..}...~u..y..s..7[j.nbX=(.~.~.....\|{/./.......k..fO.1.a.`..}~E.eqy,n.....s..e.d...=k....e.....cn.........lt.'-.

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (25574)
Category:	downloaded
Size (bytes):	48135
Entropy (8bit):	6.1460161330544265
Encrypted:	false
SSDEEP:	768:4WdwMGZqvPj6+xatRv0AleqyfjjJ5LwsJS2blQi:4/ove+xatX4fjdplv
MD5:	969C2532A0CECA8AB55F1A0C938CB32F
SHA1:	C826AE2F187210193F0FF0F5838FF4B46BEEE8C2
SHA-256:	DBB65126BB219F6F1BF516308135A078A900679A93E6E457988A06D4F053285F
SHA-512:	28ECEA86978ECE5C6C1038BAD1581DECD6E4311EAD623DEA9F8B0EC9EBC25738F8ECA30DF30E7E40D02AAE0A4918188C1159A373617BE5A0999F62C3D73F7A07
Malicious:	false
Reputation:	low
URL:	https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-AfC0uDWPf4lJVl5yNcYt99LMNojNAyB28W9FQzTutldpMeqVRcg4KTF8x8AbAjLR0g9E-6qUgoCT92YCX7Vqta6FyoEQ&cry=1&dbm_d=AKAmf-BXnmIyXEaue3V3L75d7SIhkmkkkxjQyOsm1io_muQf68TpQzVdlB9T3MMzsgmEuqRbOscvCI-uUCvg3pjmrXB_Wez2RiTtFT7FpoMMPTE43AthCck28QrXoCqYANmjr9IwJzOhpoTeXUMYTjoNgrtomYx4UztXguptTaK6m9pgDOq4G7NZctZRy4EZjCuazJg0Saan0bcySrNX8LGoJ0AFDQX_3z8sPkXl61y2PQ-VCWDNPVdybu_6WfIavZKrJVHP7DdiUM8S1c1nXkhX8ewj50P_6ymfD57SQRe2FTuaG1Ixusc6PQCdTuSK0L0tC5zTW5W0_rI15NtVAZL_ifoAwoFcD578IqNlafztGZHSkTX9Esh7MjiaXZf8UtCs8p7RVAlVnrwXciVfbBLLpO49BmFqIBRweJjbf5oSCWru7ny70_GJfeZRtCpa51NyocipkjEeXzadbH4_Jcx4j4cU7ykB2BRieXhIKusQkC2Rx8Zomyto2gM9rboshd-PA3kb_G70Z8LnR48zGDyWWmsHMEd_AsfTGhh651icBgTDbIBGtrjkCcEUMvF4Uc-iZfLnS6oeAoGKoRauS1op3PRTsEM0xsgDu2TB0pb5q2dqxp1NNaUZKVC_sDRn-Vt29SfKjlsmSpk2WsKqUydnCHEWd9g8E4GEkBraMT5kZyEO2mD4bglJN6VzgWRX4WrHfIhCDfgt5ScvUakGzZV_EStE_9M_uFhMHLCDuoq0xOdyRAt296dwUseh1ztyyp8-VK4wRInQqN3ZeV3r1Ct_VDUH1DQ_Tet-eZpSI84kaYNWx8UQciyDxy8MM-7lABjGhEPq0dB_mYf-DjTaF_b_SB3iDraQJrCHK4PTRNSTnRFGQRVdKhsGGYYaxqFNxx216CtJryvp_TN020Lnsyput9LbAlBdaN6oNyoe4mNnZzcSGGkJj16Qp92qfmhlFIm6rszFAJP46B7VK_T1xAtxyNrCocbr5c4iin5b4YFiPzLaxL11XIHctBWIgoPNpH1f2m4VcLtUtYFfP-ZHkT4c0Viqvfq_Jehotus-9sAICfh4B14mNclUoccReyZxs8cjGdBNEqTS_Q-UPLzzEi--dgJpgzyWFZ-JnRq-BLARHPaQqa_mI3iP8O-XsS_um3JplHR96tElTcQnaWhc41C-DDB_vN2TEZQnjsxBk8GUDPjTqrPYFmHu5HRCPYuATBAxwz5MOVk4GG6ofJTBY5BTmovTdx3USzIfCxHoQBr_FeMLBw-LW_WJ7b6vd4fZHQUT3X1XqydKMm76geN1vrHoOG4weNe8JXUFmSEzzrHH08BPLOHu6S_Dr7t3_WKanP6Xbwfk88s7hO-9ZM3qBEXM5oll2QIOjclB3LDJFt2WeKaxo0ZnhQQb0Y0wXv0Dz34IxKVPK-4dmGSyLHtmZWgF5O6NiZXG7kVybXO8T7-8iWCDAjx6jHm0n2Hytx9j9ndvjpY4XqUtMw-GACJJXq2ZiwzaFU3hVfjO3M5g0QfU2UQEySu41TrFCyX3IyJUtn9IXPtKvkJRtDwu6bXRekGn0KqSuhlso62Pq3loeBIsxmXDe0aZKvmmkmxiSpyZxeZdCKIdIfByQ2-c7ggwLVf-BBEEcyBKShs3yG2jQ8dySVddNKFSWy6enLDuTnDQ_W_onOtQbTkoa5kdTrjss0EYAmjrsMaDH20i57lUw_cdrkbpyBfNZ7ocEyRlqXOzWIAhXvsBQNrcFpO5fRD7330ap8bwbji29presmYYTHFbUqJi-M7fxAcxw6xFe8P1JDmkWYJl_vD-S1bxlk9xzDVKJON5taRasRWVi2FC8AMJ5f_cNCf7yf8rNpWiijkv2PnZ9wmUt8TSZj-ePFIdu6qnEzB706_SIw4JMwpXd4TrmUqo6tdgGUa33gS9N7BxGbxv-pfcmOM6BqFug9nuC_6aPC4J_pngsCVVoDThYReV20pyady6YlBUfKaKB8ASl5X9gHn-kojS5Oz-7HS0G_leAddC5cw8sO8pSN0USqq8SC9wgjcRclA_wicbUzNGIS-86vjBJj3CnT_zQSyT5_4BXz5siFNlPQRs8OVNQU_OvBrj_P91cxOHUzIfdu2zPWc5o6WLMYKElNoD24j7ANnseL1mKUHj2IIH-fCszqFWOcjfBkeAjSkh09dZLPk0EVUx_n0T5iJWPfHT2Vhg7UI_k-NrKNnFcYewFMsq2Izwfyc_9or4sRgmsUdcFgtX7Wgt5UY6ckiqdbkP70xs471VD3-Q1mgY7Bh3BbtSlbyiB0tWNc9oSDWkTEAm-k7joz5NPenSSiVS_bPETw8knHvY59ImQLrmcjE4Oj1GeS5ytDYLPFAOx_uVJ6obXcgmQpY1neqllr1SvRXhADOjBz4eBsK-n-Tsx92XBaPbTVtHGvW0QXPBY4Kf2mMzTMWBjlrYW_Vyb2ZBbqkW_xQ7-QmozxL6fgUv_hWUWdbYrVlUNheSlnc496nqbm-P4_T985bGhCBE4jAciC-9cub8S89ApqAgJiWiFelCNWI1v6DdQDYPuNc4xMcUsC5erWr94hsoIEI2WCAotMYRLr_gxBI9DoM_cKPAMUwsGRC53v-fwQorctCBndMqsf4pfSqH4PEsxEU8xYar4GpW2Fm7ppRNjkQL3yRKaG8zrd8QyIgwx4rtC90a2qmThA_BAGHGrsqrEl3lUwLjZfPelGy2lPXJLNJq5pvs5BEUiMp5n88XBCQmzG2O1P_Cavcab_8-rMPK0aE1vwpQyEqG0D5ov5EXxi5aHkLJpX0CieDNj8GGvkaGYBAR2jYLYZUeGjbl8gD4dp8R89h7TyN4PF7SjYWug62ZiQvVQvGgJmvQ1SyoMfnEqf0ix5Uui0Qe53mXrwVKU_n7wl5aa1TJq_jEnTGXmw8Mpfe1m-n_lpCkGZti0ncNPp4HRbRDXioBR2zw3Z--qzKigLbKTIwQCZ-MSHDEUaZvGZ4MvSyjoh3lB3yf4rtjpMHAapB7l3omNUNsOFMtFOUDsx_O5VH3q8cmjLnFJR_Rsrdep8oc30HiVxF3NwkEXmXIkcO4QuqrUSkZVnrecxJ8M5kYLORBOCOeVI6ZH-xlqgMNf-ws_JYXQZWeT43qjxQ43mksN2-KD7Xf9L-LvctLlMI_5SKw5VwW9cSIasq0LEWwR6ugouOd2H74OYZMiNyifSU6zzFG-UTeFwrYYVHQBUz_AxY7Qtob313weANyALA-_7zziv7ObgknsoRr-lQVZ_acFuwQ-b-ADwF9ZCci24kBYxsJ14TyzMt84Rc4cZ9eLRHi9BN4oAW5DatkDj-Y2jhPT-0Fs8EL8Fgc5poUdKWZstzpKelMF3gR2NxtRK0nLN4QUJj1b0GdnadhpRzZGl6IGsiZGkJZGZ7jv1zy180mud0MQJ86KjzYmGddbB1aoVhgj5HoztD9g47OYbBrkV1oe6XckIV1Ms6utUgtTf9rW7xWMAxyLQEszdpWBQlwN4qmNeLhMehAbi8AXyUfxYCoRMRW5zyCAZD-HsmEKwlJCx5W1iuI2myz0xzeku9xeN60qGP1X8-IlL0jX65ejJvSHXiCx2Q_UX98PLTHVoOvcROto4-BduokQS_FqnSjeqPvjWEwt6DqwjwX8L_lK9s5SvE-bVKgZ23KE95mCTJZxKIYYIs5QvKS0b29GJD3CJwLMvxSMN42DOMqa2lcoI4Tn0giB45B-6sKXBqJWgHMTASyTOiXc_o3l8VmyyUSGrUbUxxjg3Wk7ilSxXWLp0H0PlQw8eZDX5-1SOP95DEpU8hMAuAJhrPKtDhGRwgEqMyKRd8vDvjl7YMY_O_AyHuCOBvcRxB5TU3GBvs5rF-wwfQiHlb0CF1v9alcb51UnTKS5PS-zyyhMSeK8HVZsNz6Q8vhHK7H-jDcncSZpwln-3FptdjbjMws68_RM3htDRz1jeEd_2GwkHGX4aInpMYuCMmX2Mrz2djmNPhaPlNbLiQWnbvpI3P4DOH9YPm2-dEDjv8e9Ec7Pb2GJx2c7cMYxwj0o6aPjXsZzJtpyk6WZMcNKziM1JLC1HpcXvLeNsYFnPD3Y8w5uA87xMLkbgI&cid=CAQSPACa7L7dWCoT-wxqX42F9xlM6gN4xenxBgIybEGuhrkR4A1NYCGVhPpTvRVfAWg_gvdHSuPHcuCqa4DuBxgB&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1&nel=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0">. <Ad id="592660779">. <InLine>. <AdSystem>DBM</AdSystem>. <AdTitle>In-Stream Video</AdTitle>. <Error><![CDATA[https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=adx&creative_id=588864408&creative_type=118&usl_id=916958803424&errorcode=[ERRORCODE]&asseturi=[ASSETURI]&ord=[CACHEBUSTING]&offset=[CONTENTPLAYHEAD]&d=APEucNXmMdVdgLlT2nIe06PKGmm9VLHGFT2WjoRpWIl3lYyEZDubosQ1_vrFLX92YytwPXvA6YMTeTkHEyAtEwtYTfs9EbQZ_A </Error>. <Impression><![CDATA[https://googleads.g.doubleclick.net/xbbe/pixel?d=CLzGqAEQlLT_pAMYmLflmAIgATAB&v=APEucNW2cTguwhJdo9_7LbwtLif6ra7pspkvCRMcBudw6OP5MAScEG7-jgTkvh8t7gqsulBdhWxCb02XK-8fX_kK31L3fV9NudX0trYTtZZIlG_6aqzxv1A </Impression>. <Impression attributiontype="SINGLE_PING"><![CDATA[https://ad.doubleclick.net/pcs/view?xai=AKAOjstSU9AZe_h4MY6b3Unb_FMjtX8AoE6LMwK_TzfL1UfHdlig054onFJV

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (39390)
Category:	downloaded
Size (bytes):	268527
Entropy (8bit):	5.307513109958897
Encrypted:	false
SSDEEP:	3072:pIfu3E5xMlBJ8NmH4VyWlKVDe0rHS3tcs6+Nw:piHaJ8NmH4V5T0aw
MD5:	FFC736B2966EAE2B7C795E84293A86CF
SHA1:	2A267A03CFD8C1A5D4824049FCAFE629238CA7AD
SHA-256:	D781532B4FB7153C0A15B74C527A26EACC428E565958B04386646C0DA9C3E367
SHA-512:	25C6E8C8047DE1E46A1A2C186297028921541B35D43050656C54FA0CF89E7DE7EFB105F629B4D49F54D882A59735772668F08714AC942FB11BB570D70CB453E4
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/
Preview:	<!DOCTYPE html>.<html lang="es">.<head><meta charset="UTF-8"><script>if(navigator.userAgent.match(/MSIE\|Internet Explorer/i)\|\|navigator.userAgent.match(/Trident\/7\..*?rv:11/i)){var href=document.location.href;if(!href.match(/[?&]nowprocket/)){if(href.indexOf("?")==-1){if(href.indexOf("#")==-1){document.location.href=href+"?nowprocket=1"}else{document.location.href=href.replace("#","?nowprocket=1#")}}else{if(href.indexOf("#")==-1){document.location.href=href+"&nowprocket=1"}else{document.location.href=href.replace("#","&nowprocket=1#")}}}}</script><script>(()=>{class RocketLazyLoadScripts{constructor(){this.v="1.2.6",this.triggerEvents=["keydown","mousedown","mousemove","touchmove","touchstart","touchend","wheel"],this.userEventHandler=this.t.bind(this),this.touchStartHandler=this.i.bind(this),this.touchMoveHandler=this.o.bind(this),this.touchEndHandler=this.h.bind(this),this.clickHandler=this.u.bind(this),this.interceptedClicks=[],this.interceptedClickListeners=[],this.l(this),window.

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53745)
Category:	downloaded
Size (bytes):	55038
Entropy (8bit):	5.716457869428952
Encrypted:	false
SSDEEP:	1536:jRNi/VOk89/CpRhQAFyRwclJbfmKGMCKwBRzxH:LidOopRJodGGO1H
MD5:	0D007A22229AE1C6599D3DDA06610B9A
SHA1:	5B2FB4BFC3BC736137406D73BD604C29CE98816E
SHA-256:	C0261E20FE1B5D5D2B8C91A994B94B6DF9A322E94B2B226D690DF364C583354D
SHA-512:	238578B32CE241B059ED5A0D1C2ACB92B40FBCEBF739129D00661A63577A02826534FB9CD4F7780E5DFC06651BD35A21967B2E3EBFC09695569C3CB3407346B0
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/wCYeIP4bXV0rjJGplLlLbfmjIulLKyJtaQ3zZMWDNU0.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function w(A){return A}var h=this\|\|self,p=function(A){return w.call(this,A)},u=function(A,P,g,Z,e,E,c,J,Q,N,V,t){for(V=(t=16,50);;)try{if(t==98)break;else if(t==16)Q=c,J=h.trustedTypes,t=56;else if(t==g)V=Z,Q=J.createPolicy(E,{createHTML:p,createScript:p,createScriptURL:p}),t=86;else{if(t==86)return V=50,Q;if(t==56)t=J&&J.createPolicy?g:A;else{if(t==A)return Q;t==46?(h.console[e](N.message),t=86):t==P?(V=50,t=19):t==19&&(t=h.console?46:86)}}}catch(B){if(V==50)throw B;V==Z&&(N=B,t=P)}};(0,eval)(function(A,P){return(P=u(68,90,36,28,"error","bg",null))&&A.eval(P.createScript("1"))===1?function(g){return P.createScript(g)}:function(g){return""+g}}(h)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;char

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	dropped
Size (bytes):	23678
Entropy (8bit):	5.499582071929141
Encrypted:	false
SSDEEP:	384:PqTcq08AdYSAIdImk7eDivZSPoa5LjcOuq37BroWaIOXXhwpuy4yDCWyj/1gVfj5:Pqr0VdYSAr7ecMPoaNQOHdUWaIOX277t
MD5:	4002AFA3CEF491481AB135657FE8712E
SHA1:	0C27BD429BB943377978552E0FB608BA3EBB2052
SHA-256:	187849C92554869BACCF286F9A45661D5217DE42ECE9328BE7B8FD1A19C5340C
SHA-512:	477B9B69608CB15A5D90AE48BC3C261F79CE670B88C5547A8786A0CA7C2C3151B3BA0A8C6B25D1B2A761A92EA9FBDA44E8D11854A9FC295C7C922E43AB688C1E
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function u(){return ba?!!q&&q.brands.length>0:!1}function ja(){return u()?ia("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(u()?0:t("Edge"))\|\|t("Silk")};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!t("Android")\|\|ja();ja();t("Safari")&&(ja()\|\|(u()?0:t("Coast"))\|\|(u()?0:t("Opera"))\|\|(u()?0:t("Edge"))\|\|(u()?ia("Microsoft Edge"):t("Edg/"))\|\|u()&&ia("Opera"));let la;function ma(){const a=Error();a.__closure__error__context__98438

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x346, components 3
Category:	dropped
Size (bytes):	68669
Entropy (8bit):	7.980985030525088
Encrypted:	false
SSDEEP:	1536:CfgXS3H0hNLQY9WNtt18nDfZvPlj6cGpjpKuAsx:C3UhNLSMzZvPWFA+
MD5:	051EF77A174F3FC324FE5C9B94B8CFBC
SHA1:	AD3E5E031E44C4F5E161124E80ED062D797BC79D
SHA-256:	5248CC6DB4DEF55F98F6E955BEC6B8BF634A5F02498C4CAD48C3CC632189941C
SHA-512:	3E2D6CF1CDAB194EBAA8171E2371075387B81E4EF70B697EB62BA44AB63C7D53DE62C2AC62BD1765E2E3BE9FB2A0C7299346FAC3C247EA9E36A2BAD9E73F65C3
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................."....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE......Z...."..........5.................................................................................xz..c.....................................<=....+Y=....{$.........................=.E.M+..K'.}S{O=w+^kToi.e...r..=.~..\\|..8E@................................8..?L..9...2..S,_...~.._O.....\|G....<.Fn.v.+F..........h...].}.K.c..?+a......%/...g.$.>......Y.............&..5M.\|.i....p^...i1....J....j.V2{.V].%.....uM...v.........+=R......VW.7...~...o..:k.>,..8....owy..;.O..*...c..~T..wH......).m..5.K.i....g....t.z<....7.U.o'......u.y..e9.#........BS~..h.e+.p.Xi..s{.9.>...s..["j...-7zw."YnV#uqm...{S..5q.a.P............>.\|N.J......8..4../. ..~9.....v..>......MP....r06...'...g`.U..2....4GLo...^+zV.........A7'Q.B..4.g...".K}.W...c.G......>..S.R.7.j...=h.F.{....~.<.U.^....J......z.`;3...u...e9`.]

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1742
Entropy (8bit):	5.365599589542615
Encrypted:	false
SSDEEP:	48:jOXadcJc+ufOXad5N0xXOpadcJc+ufOpad5N0xD:jOXadcJc+ufOXad5NkOpadcJc+ufOpaO
MD5:	F151A88321317499DAFE66EBCDAB9BDF
SHA1:	94E024437D46E8BD4B677D7FEBBACC655830C75D
SHA-256:	A96FC6ED851A32456B5C46E77FF494F02C96CB2ED37126B5E2168056310361E0
SHA-512:	332495CA3FAA98114B891A9AFD53A677AC730F9E8ACD750EFCDCD3C399122B7CB3AD356FAD4FD679263805694818E4D26C8F7F3FCF409FF0A219ECD426D8A76C
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=DM+Sans:500,700&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'DM Sans';. font-style: normal;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu6-K6h9Q.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'DM Sans';. font-style: normal;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'DM Sans';. font-style: normal;. font-weight: 700;. font-display: swap;. src: url

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:28:55], baseline, precision 8, 798x578, components 3
Category:	downloaded
Size (bytes):	38782
Entropy (8bit):	7.291451952746575
Encrypted:	false
SSDEEP:	384:h6qz1jIaCsU4bfKP1S/jA+SfmxHR06sA1DzRySGfn2J1hW222222jYYJBLEzV76H:h6qzcoDFtSfmU+m9VJBaV6eYA+vMMX
MD5:	6D157F6357B6B42E2AF5A56179B54826
SHA1:	9BE703E449537D66568699D82C13489DD8BF005A
SHA-256:	979AF3F4A5E9B4A22E7DD0BD4AE04220D580A98641EA156D3F89CAAF7F3028BB
SHA-512:	34A8EC0634C0C6C35D767F835932460D9630FEAB656C678745BFA00F288FF278B4FE65A2E5152A43D91DF6F718AD50C615A23FF3EFD02C4139B822BC416EB7A5
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/minime/images/main-wc-1.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:28:55....................................B.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:28:55+03:00" xmp:MetadataDate="2022-09-16T19:28:55+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:28:55+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21796, version 1.0
Category:	downloaded
Size (bytes):	21796
Entropy (8bit):	7.988419687240999
Encrypted:	false
SSDEEP:	384:LjnuqNDx7psI0H8OXaqJE5sEctLpFezBXoQkbnAvWbWA4QE6sMEQ6ojRMsp:LjnZxtsHDEKESV8N4QunABQK2eU
MD5:	8074C760FBDD366FC1C33CE702911ABF
SHA1:	B68CDEBFB413C4AD60FA131DC29E36DA4B3CE45C
SHA-256:	2B14E8397D552F351A4396DEC25EC5DA1348865683100E94C4AB0FAEA4A9A254
SHA-512:	3AB42A18AF9E84CF5235E3B62E742EC42EDB5BEE37CF02EC9264B68F455821099F892B5C61A59C84832B3CB94FDB9729459AADFDE4906CCE785BAF92DB1C3DCA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2
Preview:	wOF2......U$.........T..............................f..P.`..r.. ........p..6.....6.$..4. ..D..M..V......v...]%...i(m6....OU..gGX.8..^v....J:dhB]...uu.,wwA.....DT...W._.#/....g.......L5.=v:tG..s....B..,LC..L....b.D......5H/.t...8...X..D.6M...Cr.N...F.;.'5....$...)=...]U.S!..1...&.#w.]w.ck.3.m.Or..<.c...9.4.U.eLB'QE..t.H..=...3ow....k.$...(......U.C.i..@X........./A#ND7........~R..^{uK.N.'.......O..>.N)E.C!...`........@..0.......ud....[_Q..ZU...1...Nm.....,...@..2.}....GC5..4..j.5z.................T...'.tP`..Z;...E. Y.........U%.MDV....!.<I4...G....s,..C.$$.@.59k.....}...........E.QJ...1...xZnD.......?.<8...u)...........7..`y..6..J...%?..Xj/#..?........$\|.......[....wm...k:...].Sak...<{../;r.J...u8.....ZW.U..../.r_..`.G....6<_c..s.lQK.I...@(....h...\.._....;\.V.{.........;.w.r6.....`I`q...gh...8..e..W.y.q6zk`.O'K.:CY..A.>.>tY......?.._.....I..#.0~.{.-.O~.}.-K.(D.@v..d..I....p.NS.....N....X[}..4..%1.$.C(..........E..}..wo..4v.Tz....P.<D.B..E..

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2015)
Category:	downloaded
Size (bytes):	23696
Entropy (8bit):	5.515150632408812
Encrypted:	false
SSDEEP:	384:New8QJ1nMHy/58vrKEOAmHitfX/DfLSqyuBzjZRUVhwiRA5dob91tJ42hr7Vj2uX:New8QJ1nMS/Y4Akit/7fLbxzjchwiRAM
MD5:	D64BD6AB65DDB794E3A53D17664F547D
SHA1:	587DAF312494C0938078859F8CF6A540BB37A874
SHA-256:	E217AA633D1A7501713AB4F913DB0941E41B70CE5C8717C2E6F41303B62416C2
SHA-512:	DD2D01BF229E68954DD84084D703DAF80C0C2886D97DE86DFA835B8B5F3DB4F98F78BA048090BA1B095FD616BAD55E5889B8AA43AA43DEADD817A516105581C7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241022/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function ea(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)};function ha(a){n.setTimeout(()=>{t

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	downloaded
Size (bytes):	2690
Entropy (8bit):	5.39866636776827
Encrypted:	false
SSDEEP:	48:Otg7xBqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:fN7Qabhiwdicju8WhRHMnTx
MD5:	76A4D84DE75340D59CA06503A14184D4
SHA1:	2FE3C4A95AF88BE57D1912BB09DC463F69924402
SHA-256:	66E9BF446316F6EEC5EAEFA7098592BBD2144A60EB38C481DB233A6CA8B8D94A
SHA-512:	2ABE6C816B265B72A8023E8F832B9BED0FFD2C931BA07C5DA1AE0CB5D60178CBD1CEA9CE6AE0BB88F77614954C20836342AD6BAFE25EB1CA4D2AEB495E4E2BD2
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241022/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (24186)
Category:	dropped
Size (bytes):	35747
Entropy (8bit):	6.127933293711402
Encrypted:	false
SSDEEP:	768:b/nmgv+jCG41mbHy+cRINHkTHe/09Yk8+yMHJ/QvOikazS:b+S+YINHyF/5
MD5:	CDD52278849488C001582AC4DB2208F4
SHA1:	4C4074C6659DC4434F49302ADED03F73AEE7E0AD
SHA-256:	0B454F45C59D8202D8778E951E341C15D5C63362D055FA30B8473770CF5B2E18
SHA-512:	21D23CA13BF2A6AD68D867EB3D2AEBA09BAADD3B2A8875A305D4742693E2D7DAA623E3A7CEB228BA2A86F6E59D6780DCC7ECF052277A779C08130B53230EF69A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0">. <Ad id="598943820">. <Wrapper>. <AdSystem>DBM</AdSystem>. <VASTAdTagURI><![CDATA[https://servedby.flashtalking.com/imp/8/246460;8827295;208;xml;DV360;DV360FY24CCPSPInMarketAffinityPS15sUSDSKVID1920x1080/?gdpr=&gdpr_consent=&us_privacy=${US_PRIVACY}&ft_partnerimpid=ABAjH0glZfknP72LcqJ6DXmKwdxb&ft_custom=ABAjH0glZfknP72LcqJ6DXmKwdxb&bundle_id=&site_url=https://www.xn--invitacionesdecumpleaos-dic.org/&pub_id=1&sup_platform=1&pbMethods=[PLAYBACKMETHODS]\|[CONTINUOUSPLAY]\|[TIMESINCEINTERACTION]&cachebuster=[CACHEBUSTER] </VASTAdTagURI>. <Error><![CDATA[https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=adx&creative_id=605386022&creative_type=121&usl_id=916958803424&errorcode=[ERRORCODE]&asseturi=[ASSETURI]&ord=[CACHEBUSTING]&offset=[CONTENTPLAYHEAD]&d=APEucNWYHlNYqntKbmd3n2_pC2L4-ZG-MuOIla7mEp2HJ22EmTCxHzAQRG

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24720), with no line terminators
Category:	downloaded
Size (bytes):	24720
Entropy (8bit):	4.791581848112604
Encrypted:	false
SSDEEP:	384:Wd8C4hGojxHjouZmCy7qGAVsq1nwGfg4xqsQMPNE:H9JCJ
MD5:	98B5C29CF94D2FE934D0D126C3E3779F
SHA1:	E0B32752F723123C3F157A36D52E81E5184974E6
SHA-256:	6C496FCBE60FEC78DC1B86A9136644D9A97CAE20DF32BE3E9A4A62CE7BD0E6A6
SHA-512:	7AD505F42CD5574A2BF966BA7533F50C254924DF1EBF45023260445E5260AC1212E908CFDED31E18C8091412A58F9328A4562F8AC8A6A526E30578467C404B54
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202407.2.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:700;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:700}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-footer-lo

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	617
Entropy (8bit):	5.4433477553540754
Encrypted:	false
SSDEEP:	12:TMHdteIMu5E4BAat6d/KY4HxgA4q6B7GYFOp0AddVVhj:2dtexKt6dLIxdy7P0h
MD5:	984DDC512252994C28578D7D64EB05BD
SHA1:	5CC013BA4DAD6E044AA2F5C577474D77B2410A47
SHA-256:	0B8F76FF92ED2ECB0A562C6B6539903BB1DF1EA524375646ECCBB4A731B5C952
SHA-512:	1EEA933BBC9E1D24F57EFAAD7507439DC06CA76C0DB54B2E29009D206BB050B9F8C6CE5FE5A5713D3AD47720A30DB11DC760E6B5EF45B3DDBA1057D75F6F002B
Malicious:	false
Reputation:	low
URL:	https://free.webcompanion.com/images/icon-arrow-up-2.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 1000 1000" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;"><g><path d="M500,51.333l0,903.334m0,-903.334l338.75,338.75m-338.75,-338.75l-338.75,338.75" style="fill:none;fill-rule:nonzero;stroke:#000;stroke-width:84.69px;"/></g></svg>

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10846925175/?random=1729810130073&cv=11&fst=1729810130073&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3DtrackOptanonEvent%3BoptanonCategory%3DOneTrust%20Cookie%20Consent%3BoptanonAction%3DPreferences%20Save%20Settings&rfmt=3&fmt=4
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	895279
Entropy (8bit):	7.993273673630293
Encrypted:	true
SSDEEP:	24576:Tw6Qv2Uo1t/K7F7rNXDYkHEUUlWHOZ52ljUGTpqPQ:T9Q9o1ti7F7hzBH+lQ9U+pX
MD5:	80633969B22D274F9600564DCB30D9A0
SHA1:	741523E8DD3C6D63D0D15A62F3211832A1419753
SHA-256:	66C178A6D0CEC0AA36CA389F835C001BEA72A1A071D8CDD2EFDBAA625A494BFD
SHA-512:	8295254B45291B2F01350913384F7A46C2DE4BD239EB241F7D356440505B1A04094235201BA88399C83A4C1883A93C76CF0517B937D1C7067E9EC3D40A0CA766
Malicious:	false
Reputation:	low
URL:	"https://r3---sn-q4flrne7.c.2mdn.net/videoplayback/id/346941773297da68/itag/347/source/web_video_ads/xpc/EgVovf3BOg%3D%3D/ctier/L/acao/yes/ip/0.0.0.0/ipbits/0/expire/1761346096/sparams/acao,ctier,expire,id,ip,ipbits,itag,met,mh,mip,mm,mn,ms,mv,mvi,pl,rms,source,xpc/signature/48C3F8B294E93BCE46020542EC1F00E0F157B6BA.698B24BA89FEC14079D6A3F27867742E34277915/key/cms1/cms_redirect/yes/met/1729810097,/mh/R-/mip/173.254.250.71/mm/42/mn/sn-q4flrne7/ms/onc/mt/1729809583/mv/u/mvi/3/pl/23/rms/onc,onc/file/file.mp4:2f83d715023dff:0"
Preview:	....ftypmp42....isommp42..).moov...lmvhd..................uU................................................@...................................trak...\tkhd......................uN................................................@........@.....Nmdia... mdhd..............]....PU......Ghdlr........vide............ISO Media file produced by Google Inc......minf...$dinf....dref............url ........stbl....stsd............avc1...........................@.H...H...............................................1avcC.M@.....gM@...@...j........]....$...h. ....stts...................(stsc.......................B............stco.......B..)/..........=C...(...`...........t...]..$3..}........r...N..........12.$...&...)#..*.,.,....y..05..1...30..5C9.7..:0..<.v.>...@...BC..D.?.F...H...JE..K...M.>.P&..R...T>%.U...V.<.YQ..[...]X..^..`...a..b.'.c...e...e...i.$.lkY.p...s.B.uh..w...yD..{O..}} ..Z........Tstsz..............o......."O..........!....... ...................!w.. a...\|......!!.. ... p......

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=MTY4MjgyOTQzNDA2NjE5NDcyMQ&google_push=AXcoOmQI8g3JD5ydIRX6xAgC6hAbNnXg-ytDyy7hPbgZCgOSMMYDo0JlCTLDfBjXeLLyFvBqWHjKQCf9LeKutZyDfqsL2xE64CdHTw
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65523), with no line terminators
Category:	downloaded
Size (bytes):	114303
Entropy (8bit):	6.209589384432008
Encrypted:	false
SSDEEP:	1536:XV5Lxafy/uPiGc+jiOWbPPofeMPJRBUw2IMk3Qk+EmB+OXBjgQpSIzumrzmH7usd:R/W2OyH0P1duqUyEsXF
MD5:	2B93BD5A17EE996E402908ECA926A795
SHA1:	AE37542F09D8D8D23199C606C84523F5C2EC8FBD
SHA-256:	8C49EB19326A0EFC1B9D95F1BFC1E68365384DB19D5585C069FDDBDD6D4AE55C
SHA-512:	F02F9593E60500E20EA845AC4BB4E012E8D5B91E6D78D85356A15FAAF96393AA3E21C9CFBD0976EA640F07EE9A75294CE4AE22D82F4E24F99A4EF21F5DA430AE
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-7820871901371481&output=html&h=280&adk=3582395684&adf=2509108315&w=896&abgtt=9&fwrn=4&fwrnh=100&lmt=1729801919&num_ads=1&rafmt=1&armr=3&sem=mc&pwprc=8818301303&ad_type=text_image&format=896x280&url=https%3A%2F%2Fwww.xn--invitacionesdecumpleaos-dic.org%2F&fwr=0&pra=3&rh=200&rw=896&rpe=1&resp_fmts=3&wgl=1&fa=27&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1729810091455&bpp=4&bdt=10554&idt=-M&shv=r20241022&mjsv=m202410230101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D9c8e9dc381ef87db%3AT%3D1729810088%3ART%3D1729810088%3AS%3DALNI_MafEw4WJWf8kkQD6xcmkeX56n1q0A&gpic=UID%3D00000f139d688605%3AT%3D1729810088%3ART%3D1729810088%3AS%3DALNI_MZL9PFTTb2cJq9QxMRiRuWQK8-Rfw&eo_id_str=ID%3D3950198f5ef6bb51%3AT%3D1729810088%3ART%3D1729810088%3AS%3DAA-AfjYt8kFyfdke_yCsTaI-lIEC&prev_fmts=0x0%2C896x280&nras=3&correlator=3622206489969&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=184&ady=1383&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C31088195%2C31088261%2C95344190%2C95345271%2C31088398%2C95344978%2C95345788&oid=2&psts=AOrYGskqHMe9oMK64V746JFIYOanvQ8-al-JXPXdLuKyS-af5jDet3Cs9EIz5iZusrzMAlLXscm2Nac4FjuxBeILK8bSHjZJ&pvsid=3613037213600863&tmod=839573377&uas=1&nvt=1&fc=1408&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&btvi=1&fsb=1&dtd=206
Preview:	<!DOCTYPE html><html><head><script>var jscVersion = 'r20241022';</script><script>var google_casm=[];</script><style type="text/css">html{height:100%;width:100%;}body{height:100%;margin:0;overflow:hidden;padding:0;width:100%;}</style></head><body><div class="GoogleActiveViewInnerContainer"style="left:0px;top:0px;width:100%;height:100%;position:fixed;pointer-events:none;z-index:-9999;"></div><style>div{margin:0;padding:0;}.abgc{display:block;height:15px;position:absolute;right:17px;top:1px;text-rendering:geometricPrecision;z-index:2147483646;}.abgb{display:inline-block;height:15px;}.abgc,.jar .abgc,.jar .cbb{opacity:1;}.abgc{cursor:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.cbb:hover{cursor:pointer;}.cbb:hover{background-color:#58585a;}.cbb:hover svg{stroke:#ffffff;}.abgb{position:absolute;right:0px;top:0px;}.cbb{p

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204940
Entropy (8bit):	5.478300280511503
Encrypted:	false
SSDEEP:	6144:GXlVtJ5IUNQtiD693MoZpLuzmsYZPANTxVcx+vJ7n+BtmhKy9jpBqm+izPWMYLum:9
MD5:	F56F7B2B3AE2A3BF3ABD8E327B972366
SHA1:	A37DDDCF3253CEEDC55F612B97FEF1B3AAD137B4
SHA-256:	D8FBF4E87C10C6D087847089E57F89800FF01F4F3A82E0C213F1432AD76D8A80
SHA-512:	60A6F70DF0E364FADEEA9DC930D0928645C2ACACC45C823B4C3D5DD4384573B07BAC1DBEFE0DCC9C6FF59E077451F85F3EBBE13A8A26993FC2E47EB3F7F4B6E0
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10846925175?random=1729810145322&cv=11&fst=1729810145322&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200zb811825413&gcs=G111&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2Fthank-you.php&ref=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&label=3lcLCLvRwZUDEPfim7Qo&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&gtm_ee=1&npa=0&gclgs=5&gclst=47322&gcllp=146492643&gclaw=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s2095006060.1729810107","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s2095006060.1729810107\u0026ig_key=1sNHMyMDk1MDA2MDYwLjE3Mjk4MTAxMDc!2saAgc4w!3sAAptDV6PEOfD\u0026tag_eid=44807585","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sBgGvfQ!2saAgc4w!3sAAptDV6PEOfD"],"userBiddingSignals":[["7107779790","7105939267","7151318280","8227542080"],null,1729810147438230],"ads":[{"renderUrl":"https://tdsf.doubleclic

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (638)
Category:	downloaded
Size (bytes):	20948
Entropy (8bit):	5.394317494538009
Encrypted:	false
SSDEEP:	384:fJ1a/sw6YKPCWdaNhe5h6OL1+oDGvvWBlNRX2sZZg7K5mO:CwjaNhe5h6OR+oDkubNR7ZiY
MD5:	E672814146B9DD9F36C91591C97378C2
SHA1:	FE5EC0E7C8D3C1FDE6312C2F68DF990C42AD990E
SHA-256:	EA14B302D2386504B249B182FAC6BDEFF4B77B71921945C4CF70E73550AB503D
SHA-512:	4902F95198055AED4797FDD3948393A752F8EBBD9BF8FDCD21BBA80284DAF68EA8B83DC8162C82092FC989D5A1A668A4E3DC4B0531AC0E07BCBF677FD87C2C14
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/58290800-cf5c-4f05-9ec6-18c67ae77b2a/otSDKStub.js
Preview:	(function(w){function x(){var a=this;this.implementThePolyfill=function(){var b=Element.prototype.setAttribute;Element.prototype.setAttribute=function(c,d){if("style"!==c.toLowerCase()&&b.apply(this,[c,d]),"style"!==c.toLowerCase()\|\|d\|\|this.removeAttribute("style"),"style"===c.toLowerCase()&&d){this.removeAttribute("style");var f;c=a.strToObj(d);for(f in c)this.style[f]=c[f]}}}}function A(a,b,c){function d(l){return l?(";"!==(l=l.trim()).charAt(l.length-1)&&(l+=";"),l.trim()):null}void 0===c&&(c=.!1);var f=d(a.getAttribute("style")),g=d(b);b="";b=c&&f?function(){for(var l=f.split(";").concat(g.split(";")).filter(function(B){return 0!==B.length}),m="",n="",r=l.length-1;0<=r;r--){var y=l[r].substring(0,l[r].indexOf(":")+1).trim();0>m.indexOf(y)&&(m+=y,n+=l[r]+";")}return n}():g;a.setAttribute("style",b)}function k(){var a=this;this.iabType=null;this.iabTypeAdded=!0;this.crossOrigin=null;this.isAmp=!1;this.domainId="";this.isPreview=this.isReset=!1;this.nonce=this.geoFromUrl="";this.setAt

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAl1sqg-QfzaDRIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53493)
Category:	dropped
Size (bytes):	54798
Entropy (8bit):	5.706853302721694
Encrypted:	false
SSDEEP:	768:jbn7iRX/84lLztuypQnpr3MMhT7tUQL5jq7hETnMg2b2YKbK271Y6xM0W74scaes:jbnl4lvtapD9t5L5pnzYKHxyx/Ol/W
MD5:	8A4BEE23CF08904AB2A0CA49F29C04ED
SHA1:	2639946ECA2B433E8FCF0CC8ECBDBAF3DFA32B51
SHA-256:	36FC4574A17A9E031E609FE70EE8FCA204EA8A0095D88AD9A9357367E06ABFE0
SHA-512:	7E24E4E7FAD0322E4F9AECA95D105ECC177AFE844B8FA56B74E2AA8A55179451D212DB0C9E2659732AC3CBA591988D775929B7C0A6AC0C77142C96F13B0FF109
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function u(f){return f}var l=function(f,a,L,U,R,c,W,B,I,k,D,e){for(D=(k=10,61);;)try{if(k==87)break;else{if(k==49)return B;if(k==a)b.console[R](e.message),k=67;else if(k==L)D=72,B=I.createPolicy(c,{createHTML:C,createScript:C,createScriptURL:C}),k=67;else if(k==10)B=W,I=b.trustedTypes,k=73;else if(k==U)k=b.console?a:67;else if(k==f)D=61,k=U;else{if(k==67)return D=61,B;k==73&&(k=I&&I.createPolicy?L:49)}}}catch(w){if(D==61)throw w;D==72&&(e=w,k=f)}},C=function(f){return u.call(this,f)},b=this\|\|self;(0,eval)(function(f,a){return(a=l(46,44,55,31,"error","bg",null))&&f.eval(a.createScript("1"))===1?function(L){return a.createScript(L)}:function(L){return""+L}}(b)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:applicati

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21144, version 1.0
Category:	downloaded
Size (bytes):	21144
Entropy (8bit):	7.989446116419254
Encrypted:	false
SSDEEP:	384:FGsBF/l0XPCCdAj5mRQmkj5uAbKgz1SKYo8a8eo0tcwJsCPT5qJl/z1X:FVF/l0/CCI5mRw4hgz1SDhe7tcwJHAJj
MD5:	2BC7630144496092DC786CE63109E560
SHA1:	723DF3658078CFED03C85E47F15FC439EB4331BE
SHA-256:	7C9C80A6C32C0619D61C28F28723E68C5F8F75163E77EE5CF64C39E640E0D71E
SHA-512:	754A5961176362BFF5265B0ADCB5265635080CA863AA48361B74ACEEE98DB55814FDAF56ED56AB146B896F4454A5F6882D227557B88E06A1B24424A3B1F25DB5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
Preview:	wOF2......R...........R2.............................f..P.`..r.. ........L........6.$..4. ..J..M..V....6.....8..}.#.....g...7..W......Br2.0.1M{..H. ]....Q........&M...t....Ho..F.....A.,..+....d.oT-..4.%t....Od8...4v.(u.C5...Ts)..M\|.q'.]....S.+.V....g......T.:n....u...?.=...<......e.!..K.....I.$M.4.X.Vh...bP(-..E..M...:...Q.....`s.....u.z.....}X.....e....{.h..J2...U...e.#J...(......H.Z.C.U....DE.(..B1...T.v...D........O.$...t....e{..;._K..m,\|?...,$m.q..L..`1..]..v8g.nvZ.I....1.K).pA..m....T......+...q..SZ...4"..".D..O...]og....s{0...a.`.dK.7..m.Cn.>...W.....(.]._.7.=.5..&..".p..k.7..!...:...?~N.....vD....}.....)`..L.......v.t.2..~P:.]...c.d}..m+..[f...0..2...#..R-...')B..%&r.......r<.....n6..n.n.F.F.@.I.`Kc..L.7...H....F..f..H.eP..'.N).R..\|r.p....N'...9.d...g\|...w.v..[..fb_.(....M}w...6"....[...9....i-..0.....)....1../D$....9...W.Xi$........>..]....Yj..;@..A.6..:...QJ .@B....W......\..p.z.@L.=4.9...&..M.%...0AYX.l.P.A....*.P.z...A.2.j...\|...

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48081
Entropy (8bit):	7.979126462467856
Encrypted:	false
SSDEEP:	768:Y1/BmXy5QvsEXES5PAdh4IfWgtJdJVXNYVJQdEiscPEQ/fUkf7fCflkmJvC:a/B4VUEXES5P27WYL/q8d6cP4u6fS
MD5:	A9FDEAE3C4ACECD38B3499AFC80ACFB8
SHA1:	A3EC4B2508AF4E2AB3F2F42208AB9DAF74C18F38
SHA-256:	AC13AAD1E13F6F270BB07D29975E1D5745F08A10260F5DEEF1BE42F29A9141C7
SHA-512:	6CD804041BE7A4B4123766534B1B6EFAE47F8A8FB85E850DBB15B88D9B0F9F68ACCB4F867D48E961206BBC34A7BD45631486C9BA6CAEC69D0A3EBB2388637766
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". tiff:ImageLength="512". tiff:ImageWidth="512". tiff:ResolutionUnit="2". tiff:XResolution="96.0". tiff:YResolution="96.0". exif:PixelXDimension="512". exif:PixelYDimension="512". exif:ColorSpace="1". photoshop:ColorMode="3". photoshop:ICCProfile="sRGB IEC61966-2.1". xmp:ModifyDate="2022-01-28T02:38:11-05:00". xmp:MetadataDate="2022-01-28T02:38:11-05:00">. <xmpMM:History>. <rdf:

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2146), with no line terminators
Category:	downloaded
Size (bytes):	2146
Entropy (8bit):	4.998543637380936
Encrypted:	false
SSDEEP:	48:L782DO+m6dxM1sOeMVIO/xH2J2xq/mKoY8owIUO5KvMjKXw2Y6:L7vO/6dK1tJVBx9q/mZY8osMGgX6
MD5:	EB411E6FD99D5D204ECD3F1149803931
SHA1:	0F9010A1C7E47B57337B26CFA2846AB5349036B2
SHA-256:	CDDBA54F0F8FB228B7BCFC534FB6778D7DA73B01B8AED3B2A0688645F32C0398
SHA-512:	4BB069CC0839C01E2404AA8DD70F49606864F453431A3BD68090EED50AC9EE41300DF6001C3E715C8727B4DBCD834A40C53F03A3A69825A31CEDEF4DBC6BF2A5
Malicious:	false
Reputation:	low
URL:	https://www.xn--invitacionesdecumpleaos-dic.org/wp-content/cache/min/1/wp-content/plugins/wp-plugin-hostgator/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=1721138300
Preview:	(()=>{var c=class{constructor({clientId:t,...n}={}){this.options={activeClass:"nfd-wb-animated-in",root:null,rootMargin:"0px",threshold:0,...n}}observeElements(t,n=null,e=!1){if(!("IntersectionObserver"in window)\|\|!t?.length\|\|document.documentElement.classList.contains("block-editor-block-preview__content-iframe"))return;function a(r,o){this._mutationCallback(r,o,n)}let i=new IntersectionObserver(this._handleIntersection.bind(this),this.options),d=new MutationObserver(a.bind(this)),b=new MutationObserver(this._handleClassMutation.bind(this));t.forEach(r=>{let o=r;r.classList.contains("nfd-wb-reveal-right")&&(o=r.parentElement),i.observe(o),e&&(b.observe(o,{attributes:!0,attributeFilter:["class"]}),d.observe(o,{attributes:!0,attributeFilter:["class"]}))})}_handleIntersection(t,n){t.forEach(e=>{e.isIntersecting&&(e.target.classList.add(this.options.activeClass),e.target.querySelectorAll(".nfd-wb-animate").forEach(a=>{a.classList.add(this.options.activeClass)}),n.unobserve(e.target))})}_h

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7281
Entropy (8bit):	6.101644808143277
Encrypted:	false
SSDEEP:	96:R087fPgL0OSZ+NwbMvs5S/kypVpny2aiHiZmTSEU3eVH3U:m+gtSPbVwkcJSEUok
MD5:	EA9218504EEC09A337676178D9020356
SHA1:	6C293603553F543EAACFC3E2D7CE42077C621DE5
SHA-256:	DDFA452F752C05D749643B4221E6E18C92C0E8B6085B5FFA0FFE357935DBF60B
SHA-512:	E9F2DD3E0B6B3B4E155F0BAD1E27ACB030AA988E071B6E4A54B100D3DB4DCF6B2433DD2C28D26A2649B04B735CA1C62D1C260ECC09DE86A1B16BDCAE1399E26B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....zTXtRaw profile type exif..x.WY.%)....}.$..qX...s.v..[....l2. Y.pw......4..]H..I1.h...\.Hv.......{.....0...n.)E........~.t....k..qk....N..w?y5..n......N\|\..n....\|t.P...9......o....+x{\|...[}e.1xy.j..\|...h.......7....>..w_XF..._.P..ww.~..]..s`N+?...9{.s.....hTE=`.1.....gY.#....y2.d.m...f+.F...LC.:..4.w...=..'..@..K.(s.K`h=4Y\v.%..x...k..z...~..v.L0FX......y.mAD6].../e......,.BSy....Q..~.T=.-...Xl.&j.........!2... ......6............<g....;.d.\d#.x.5B.\..yu#7....p.].Y...G\|..Jp...b.$..C....b..W.+..K.("I...O!.$)..J...C.Yr.9..`..[...zWW}.5V...Z...\|.-6i..V:w.&z..S..2..b..F.2..Lhm..g.q.L3.rYSV.<..5R..aj...z..1A+.....cO`\...4/.l".y1.8......dX.N.1P..q.t.{1.G.....7._.E...9..~............u.>.)..>...y.Z.}.....(c..`.m....+".C1O7.-...=V..k.Fx.&....=........f....L.{u.........r.H....L^...9..G.}...u...h...y\|....g..L....B..?.n..Z.n.g.S.L.~...f.>c.!./+.>=.../.#.....C.{........c.....I@....K......u.....u....@....'`...s.8....

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204928
Entropy (8bit):	5.481859960261904
Encrypted:	false
SSDEEP:	6144:H2fjZTi0Y5UNQtiD693MuOpf5S73tSZHIG1OxHUSQrFj4/ufUvyGXZpLuzdZPANA:2
MD5:	181E9557362E74E555901C9743691507
SHA1:	B2478F1DA9606F48D73A35818451C3C29BAD515E
SHA-256:	9BDAFA0690C54D1BB2FFDC6772F02F790554B2B5930999FE13934E19826651A2
SHA-512:	C0B321DAF355258B143C706DCAD42DDE33CA65F3B84366509DF6C65EEA85BEF1ABF76CBF319E5E65A357CED3FB405D0F94571D1F2434CE36FF93DFA67252DFD1
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10846925175?random=1729810106830&cv=11&fst=1729810106830&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s2095006060.1729810107","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s2095006060.1729810107\u0026ig_key=1sNHMyMDk1MDA2MDYwLjE3Mjk4MTAxMDc!2sZ0JbvQ!3sAAptDV6RoBC7\u0026tag_eid=44807585","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sBgGvfQ!2sZ0JbvQ!3sAAptDV6RoBC7"],"userBiddingSignals":[["7105939267","7151318280","8227542080"],null,1729810109014369],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfet

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	98257
Entropy (8bit):	4.073289635764857
Encrypted:	false
SSDEEP:	1536:CiCn1tugf6LCtMAOcaOc5F1OOO1ICyOWCDdF4X4P:CP18gf6LhOWy1
MD5:	50BB0AD9C60FBC42F5A14C2C02B9CA69
SHA1:	DB879E008FD9A1A4993B8B01419DFA5DC742E7F4
SHA-256:	5677DE69D70152DB144913C5159C78736749F78DCE221AA62C825ACAAED4CE58
SHA-512:	4ADC396A26C2789C68DFB5913CCE49F4727E922A6A02FC1B50E37A5705E3B5D70335822D5081B093ED9EDF3EF384BC2C4C9153EF28CC9FD6E7F25E6D416DF2CB
Malicious:	false
Reputation:	low
Preview:	var THEMEMASCOT = {};..(function($) {. "use strict";.. /* ---------------------------------------------------------------------- /. / -------------------------- Declare Variables ------------------------- /. / ---------------------------------------------------------------------- */. var $document = $(document);. var $document_body = $(document.body);. var $window = $(window);. var $html = $('html');. var $body = $('body');. var $wrapper = $('#wrapper');. var $header = $('#header');. var $footer = $('#footer');. var $sections = $('section');. var $portfolio_gallery = $(".gallery-isotope");. var portfolio_filter = ".portfolio-filter a";. var $portfolio_filter_first_child = $(".portfolio-filter a:eq(0)");. var $portfolio_flex_slider = $(".portfolio-slider");... THEMEMASCOT.isMobile = {. Android: function() {. return navigator.userAgent.match(/Android/i);. },. BlackBerry: function() {. ret

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	279449
Entropy (8bit):	5.588026154952563
Encrypted:	false
SSDEEP:	6144:r3HRo3k4a5+QBvif2s3qXk9nv+HWBBNy2U3p:zH2kr5RBK9W5
MD5:	F36F39201434EF34641975C79AF5AE5A
SHA1:	88F5756987B905E3FAA61928754535387FC143E7
SHA-256:	2700B4EE0732639C2FA90BD29F4CA3E76D212861C3CFE72495DD18EF54EC5772
SHA-512:	E29ADEA983C222C64A4D6AF930ED5B0F7BDC0CC86909EC35C58A95567C97198685E9BC0BFF26756900D5D12737096E87DE45831E86C89A337F3856FC939F3C39
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","xn\\-\\-invitacionesdecumpleaos\\-dic\\.org"],"tag_id":12},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"",

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	downloaded
Size (bytes):	2690
Entropy (8bit):	5.39866636776827
Encrypted:	false
SSDEEP:	48:Otg7xBqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:fN7Qabhiwdicju8WhRHMnTx
MD5:	76A4D84DE75340D59CA06503A14184D4
SHA1:	2FE3C4A95AF88BE57D1912BB09DC463F69924402
SHA-256:	66E9BF446316F6EEC5EAEFA7098592BBD2144A60EB38C481DB233A6CA8B8D94A
SHA-512:	2ABE6C816B265B72A8023E8F832B9BED0FFD2C931BA07C5DA1AE0CB5D60178CBD1CEA9CE6AE0BB88F77614954C20836342AD6BAFE25EB1CA4D2AEB495E4E2BD2
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241023/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8892), with no line terminators
Category:	dropped
Size (bytes):	8892
Entropy (8bit):	5.0731984341491
Encrypted:	false
SSDEEP:	192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY
MD5:	FB15A10A641A318F91E7E912E4F9C184
SHA1:	BD41F67233FACB96976ED7B8E7207D52C03D340E
SHA-256:	F40767552E5E94B2D5F9A65D7F640CFA7D225298023DBD682095E040809A3D1A
SHA-512:	49570D36E5B1AE3C3A4965F7D054258FF676326BEE0D9399AA990926E9A762F699DE1D09078DEBADC43B363AE51D740BA33F2E8C64BB223A73D3C62872EBB3D2
Malicious:	false
Reputation:	low
Preview:	!function(n,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(n="undefined"!=typeof globalThis?globalThis:n\|\|self).LazyLoad=t()}(this,(function(){"use strict";function n(){return n=Object.assign\|\|function(n){for(var t=1;t<arguments.length;t++){var e=arguments[t];for(var i in e)Object.prototype.hasOwnProperty.call(e,i)&&(n[i]=e[i])}return n},n.apply(this,arguments)}var t="undefined"!=typeof window,e=t&&!("onscroll"in window)\|\|"undefined"!=typeof navigator&&/(gle\|ing\|ro)bot\|crawl\|spider/i.test(navigator.userAgent),i=t&&"IntersectionObserver"in window,o=t&&"classList"in document.createElement("p"),a=t&&window.devicePixelRatio>1,r={elements_selector:".lazy",container:e\|\|t?document:null,threshold:300,thresholds:null,data_src:"src",data_srcset:"srcset",data_sizes:"sizes",data_bg:"bg",data_bg_hidpi:"bg-hidpi",data_bg_multi:"bg-multi",data_bg_multi_hidpi:"bg-multi-hidpi",data_bg_set:"bg-set",data_poster:"poster",class_ap

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	54588
Entropy (8bit):	5.4687100796833334
Encrypted:	false
SSDEEP:	768:OSHyWdn4/VPLD+CtIP7pbcmE7CNwlSoCMc3mscJSlHtR+pRuF3JaTrb2OtKCB:OEjd4/9Clpbc3CpJM4msSSlHtRWcI7B
MD5:	08E3CF78E0877392B3C81F84D9651E11
SHA1:	82657C35961140CE7D66CAA9D4A1F96663C1C2A4
SHA-256:	0F27805E87C581F900BFCBE1449B5FD092064E8D4CE2273BEEB425DFFF11E82C
SHA-512:	4892028B188C7721B51A75983A071C0036AED059987E757970853C791C6CCE9C1A063F104D87DA2C1CDB2485EB84EA3B225F2D24BBA92C1A9B35A886F013DB3D
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/58290800-cf5c-4f05-9ec6-18c67ae77b2a/019121d1-b64a-7a84-a779-732017e7ddd7/en.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccloseButtonType":"Icon","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Opt out of sale of personal data and targeted advertising","MainInfoText":"When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:09:16 19:27:56], baseline, precision 8, 798x578, components 3
Category:	dropped
Size (bytes):	32818
Entropy (8bit):	7.07704819587746
Encrypted:	false
SSDEEP:	384:91m/hPPuSytW/LB+w2IFfn0raCQrz6LrCAb9m0tqGqzozzEzRylEbpWa:9SAFtW/LQwjn0raCnaAbDKzozzEzRyA
MD5:	283911051B000F5672AD2D3644971372
SHA1:	95D915ABA52BC064742D644EF132E1D9BDF182C6
SHA-256:	5A2E66F3503CC73EA6C789BE63344CCD2A8EE492FDEC7CE714F353E4E0BE2B4E
SHA-512:	42432437050806FDCF0F90C13EB162DCD256B0431F9E891E685DF2B7FE7C6F7FCB5020BF22D70E39D05E0C08F62B56FA32FB4F3970EDF5D4E3D4089C038B81CF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.................J...........R.(...........2.........Z.i.........n.......H.......H....2022:09:16 19:27:56....................................B.........Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmp:ModifyDate="2022-09-16T19:27:56+03:00" xmp:MetadataDate="2022-09-16T19:27:56+03:00"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="produced" stEvt:softwareAgent="Affinity Photo 1.10.5" stEvt:when="2022-09-16T19:27:56+03:00"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	26966
Entropy (8bit):	7.929004643267639
Encrypted:	false
SSDEEP:	768:Hkm7UndBwYXtHFuC0lIyjkxOTFg2KIruT:EmmdBwiz0lljVjKIruT
MD5:	3EAA5F919E0A939D0FAAE48E33B45A82
SHA1:	B4DE220B771E54A102536D1FD54A965BA04B2C67
SHA-256:	0673E7EBFAFE6F31FD3F20C7BA7DF60DF9782C952FC0C15DD6B5015B17AE9278
SHA-512:	133CA2AE5D595472E94A625AF06A18A2BFEA54AFAB7C345F1F835C5C8F2076F5D6446E7D45EFF9E03F57BFCAA6BC7DDCF7287150A0E2FFCBCE688C4D3DA43493
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<... .IDATx...y..U...O.~...Y!;....%.=...4. 6.(.8.:..........(....W.......5a.K................{...z..}9.R.OnW...Y.c..........I.....?~.X..\|...w.nB..2$........K....{.+=.U7]......-..+ .p..W^}.p.{.....[.W..q2. ..]~.....2....,...k.q.VB..I. ..]~..A..`../]....kK.k%...2. ...b.?.kfi.....H. ..-p.Z!D...@.o;.k..5N..!.-..B..'...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C...!..>$...B..C!.+ ..+.LE....6}..@.^._......8 .d;..9...B..0M..:.!..H.....D`..?cv.g....;...V[......-[v..A`..?[w.g..5..>[.,......pY"....:.....O..5..#..............P#...U.H.B.L`.N?.I...g......../..w.Y..(:..B.wI. .......P.......G...{..V.....t..jWD....@.E.d..f....s.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	278528
Entropy (8bit):	2.315570573051778
Encrypted:	false
SSDEEP:	1536:H5gkny116pspKF6G48c+6a8KCazlyUUf9kRF3R6ehBG+:H9nE6apu6NrfxKHwyRF3A+
MD5:	E3B7FF41C6536A6412FFEB32E3A23A36
SHA1:	0AA4840BA1EEE9DE46CF50C6972E14D44ADB1525
SHA-256:	1EA448277BB0571A4F3B5F4F0F47861807C63C3E4DA01E2D7CB2B5E2F865D3F3
SHA-512:	F54E0B71FA7E75887EA3A33983ECE53F26D048FE09FCFF6FCBA81432A6073FDB87F4C2ECAB19B91CEC5DD398A40EA6BAE6000BE37762045FDFF91E3C9FA7ACA5
Malicious:	false
Reputation:	low
URL:	https://cdn.flashtalking.com/155970/FY24Q3_CC_Photography_Photoshop_US_EN_Psjuly2024release-Circularneonportal-2_VID_1920x1080_NA_NA_1920_1080_15100_2398.mp4?cb=1729721580000:2f83d714f3b720:0
Preview:	... ftypisom....isomiso2avc1mp41..#.moov...lmvhd..................:.................................................@...................................trak...\tkhd......................:.................................................@........8.....$edts....elst..........:............;mdia... mdhd..............J...e........Ahdlr........vide.............Mainconcept Video Media Handler.....minf....vmhd...............$dinf....dref............url ........stbl....stsd............avc1...........................8.H...H.........Lavc60.3.100 h264_nvenc...............=avcC.M@(...&gM@(...."~\...........v..........hm.\....h. ....colrnclx...........pasp............btrt.....Y....h.....stts...........h... ....stss....................stsc........................stsz...........h..3~..3x..3x..3y..3x..3x..3x..3y..3x..3x..3x..3y..3x..3x..3x..3y..3x..3x..3x..3y..3x..3x..3x..3y..3x..3x..3y..3x..3x..3x..3y..3x..3x..3x..3y..3x..3x..3x..3y..3x..3x..3x..3y..3x..3x..3x..3y..3x..3x..3x..3y..3x..3x..3y..3x..3x.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 39, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2775
Entropy (8bit):	7.32190541862231
Encrypted:	false
SSDEEP:	48:s8isv9WivuuXwFlSnH1c9wLw55bu+RGVNc7U8B/6WmuyqM3MLhRV7xw3/s2ZII:xFWuuuXwFlSnH19LwTb58VNKNSWmB9Mq
MD5:	151130AE4B948093084F4910321E4447
SHA1:	581F5056F64F40E377FF0F7301CDC56ECAC6726B
SHA-256:	60C38E847580B1D42351B52E25AE2B0C9F3A3C1CAD18F9085C0E3E750AF6AB08
SHA-512:	946DBBA33918F37F3E51685990CF3BE811BC220B462C160BA6FE6AE7DEE4CE42ECE6AB6FD38A0DDF2F9798F75A7455264AD99EF9DCE985CDE4B70091E3FDC741
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...'......,.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.5.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". exif:PixelXDimension="54". exif:PixelYDimension="39". exif:ColorSpace="1". tiff:ImageWidth="54". tiff:ImageLength="39". tiff:ResolutionUnit="2". tiff:XResolution="72.0". tiff:YResolution="72.0". photoshop:ColorMode="3". photoshop:ICCProfile="sRGB IEC61966-2.1". xmp:ModifyDate="2022-02-01T17:22:51-05:00". xmp:MetadataDate="2022-02-01T17:22:51-05:00">. <xmpMM:History>. <rdf:Seq>

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6970
Entropy (8bit):	4.833884196458045
Encrypted:	false
SSDEEP:	96:npyIm40wunJwlbQaZ6p7GHGa6AymAbvNZFb3tYYVgj9vjjjJjFZZ2Pq8A:FZunJubfZ6pC6vzbvFb3tYYC9L3JpKA
MD5:	63439D9FA7F313DD1BFDBD685A0E6159
SHA1:	6A079C27D58A5F418BAA70D0D338B7C22A90ED94
SHA-256:	CB6547E4D9BF876B6F84E23003EA54E913F110CAC4358FF591C2F1DE375E957C
SHA-512:	466B8886F8870A7D2415C7AC5CFAD4385C229465DB1585FB295373E68676E58C8D48DC4818D2F21847B14F310806F9D81D320FF4D3365153955A62F371F0F15B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/58290800-cf5c-4f05-9ec6-18c67ae77b2a/58290800-cf5c-4f05-9ec6-18c67ae77b2a.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202407.2.0","OptanonDataJSON":"58290800-cf5c-4f05-9ec6-18c67ae77b2a","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"019121d1-b64a-7a84-a779-732017e7ddd7","Name":"CDPA&UCPA","Countries":[],"States":{"us":["va","tx","or","mt","ut","fl"]},"LanguageSwitcherPlaceholder":{"default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"CDPA","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Web Companion CDPA","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"019121d1-b64a-75ea-8795-8c0cd0754ee0","Name":"CPA&CTDPA","Countries":[],"State

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	dropped
Size (bytes):	24012
Entropy (8bit):	5.499987691448148
Encrypted:	false
SSDEEP:	384:Pk7E758N1SahurmdjZNUxHSB6iQBO4EqNHBcBBN+/bm4QmkVGtZ9uy4YD8Wy/hLx:PkC5I1SavdjZNoyB6iQw4tTEg/bm4Qma
MD5:	EDA8EC7E94403382C1C30E8898BF5D0D
SHA1:	ECBA3661C56B89A4833A1B2EA26F5184A01A4C06
SHA-256:	FDADEBA727A1FC1CA6763F597CE67219913281B9941DD02B49E235EAED22D602
SHA-512:	A41F6094D1CC0F568563D1DEF9A9D89BD6472F23C4B4C914673653CBFA5A745D015288537934AC2ED2A1ADF31BA9B88161397142661835AE9D2DDB653E9EA56B
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function u(){return ba?!!q&&q.brands.length>0:!1}function ja(){return u()?ia("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(u()?0:t("Edge"))\|\|t("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!t("Android")\|\|ja();ja();t("Safari")&&(ja()\|\|(u()?0:t("Coast"))\|\|(u()?0:t("Opera"))\|\|(u()?0:t("Edge"))\|\|(u()?ia("Microsoft Edge"):t("Edg/"))\|\|u()&&ia("Opera"));let m

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	downloaded
Size (bytes):	22537
Entropy (8bit):	5.532838453720538
Encrypted:	false
SSDEEP:	384:4qopQl6FtO53n+8svyf53Fo5oeHvVFBIuwRatEDTJi/EDdBC6ZcuLI4Xhw/XgsB6:4qopQlwOFn+DCFoeeFqYt2TJisnC6ZcU
MD5:	EC3C9F3C47B1AF207A73CCF2C74B1750
SHA1:	50BB39E227E1B1C6BCF3D99C01B916FE21259127
SHA-256:	38F4583C6BA3F8A4DEFF750B08424F18EA56E87B5013057BF6621A00B0B78144
SHA-512:	966B44A7375D3924E29160B53D804CDEE669E32B1BB9B6CCE4D4F2F5BB179A17C5FE9A180C9A355E065AF131D55CB2587B45A275FF0586BF49218A85F5110EBF
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241023/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ea(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ea;return p.apply(null,arguments)}function fa(a,b){function c(){}c.pr

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2775)
Category:	downloaded
Size (bytes):	93343
Entropy (8bit):	5.585046444102705
Encrypted:	false
SSDEEP:	1536:XgzkJNpmPCqi43CJwFbjgFeQGUg5jg5fd0WLz3FZN6b92CrI6NsxPb3vk29qncIz:XkwpmPCq53CIqHGUg1g5mT4CrIcsxTvU
MD5:	0A3046186DADE0F70BAAC300964161C7
SHA1:	689C7EC71CB6EFF639FA7B8137F984D20D1A130C
SHA-256:	0DED989C288166A0C9E84A004326D609E57365AD9DE3FCEAD7D9B87C4C9CD32F
SHA-512:	194F42F5DB91CA6516D8AC3F46265A1C4859BD5B2715E819D3184AE4243DF004712DA20AD5D5760360D08640C725D3CCB3E6AAA2B8C9634DB3516E141CBDECA1
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202410230101/slotcar_library_fy2021.js?bust=31088398
Preview:	(function(sttc){'use strict';var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ea=da(this),fa=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ha={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ha?f=ha:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ca(ha,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=fa?ea.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53493)
Category:	downloaded
Size (bytes):	54798
Entropy (8bit):	5.706853302721694
Encrypted:	false
SSDEEP:	768:jbn7iRX/84lLztuypQnpr3MMhT7tUQL5jq7hETnMg2b2YKbK271Y6xM0W74scaes:jbnl4lvtapD9t5L5pnzYKHxyx/Ol/W
MD5:	8A4BEE23CF08904AB2A0CA49F29C04ED
SHA1:	2639946ECA2B433E8FCF0CC8ECBDBAF3DFA32B51
SHA-256:	36FC4574A17A9E031E609FE70EE8FCA204EA8A0095D88AD9A9357367E06ABFE0
SHA-512:	7E24E4E7FAD0322E4F9AECA95D105ECC177AFE844B8FA56B74E2AA8A55179451D212DB0C9E2659732AC3CBA591988D775929B7C0A6AC0C77142C96F13B0FF109
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/NvxFdKF6ngMeYJ_nDuj8ogTqigCV2IrZqTVzZ-Bqv-A.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function u(f){return f}var l=function(f,a,L,U,R,c,W,B,I,k,D,e){for(D=(k=10,61);;)try{if(k==87)break;else{if(k==49)return B;if(k==a)b.console[R](e.message),k=67;else if(k==L)D=72,B=I.createPolicy(c,{createHTML:C,createScript:C,createScriptURL:C}),k=67;else if(k==10)B=W,I=b.trustedTypes,k=73;else if(k==U)k=b.console?a:67;else if(k==f)D=61,k=U;else{if(k==67)return D=61,B;k==73&&(k=I&&I.createPolicy?L:49)}}}catch(w){if(D==61)throw w;D==72&&(e=w,k=f)}},C=function(f){return u.call(this,f)},b=this\|\|self;(0,eval)(function(f,a){return(a=l(46,44,55,31,"error","bg",null))&&f.eval(a.createScript("1"))===1?function(L){return a.createScript(L)}:function(L){return""+L}}(b)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:applicati

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	453
Entropy (8bit):	7.36062591090814
Encrypted:	false
SSDEEP:	12:6v/7ec2MLqMWvXc9gLHirJsmqSNp9BCYo2+8lcUIginS:nna9gL2/fN/0Yo2BOS
MD5:	939BDA96A28170229C6ACC3F0FA65805
SHA1:	659BEEE7BC2669240383B337AB0787D1F7286498
SHA-256:	E519CC4B7B8FDC64A7AAAFC1B808CDE266A234205AAC0D6C55589C12446D565E
SHA-512:	990D5CA61869385A6F104A6B70148AEA994C378CB433835DAC2D3829EEDEA21C384DA178795F5321393D1A6FEAC22C4686D8B2913229596C01D16D47B8156428
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......IDATx....hoa...k...5{.f.f{q6.f..\..[n.....4[o..........).B..V...M0..4....o.z.3L.i1..W..%.J..p0.od.../.....,..!.^.."C`.3Y.]j/-5..*.....ZR.3.`s.o`..}.K.@..._..`~.^.g.;.{.ob...A...kP\|....gq-.B.....w....7....,....z..;...1?x..+..\|J.O.fo.......,^....z.`.}.G.?..r..5j-.)..G..Y...K.._R..?.w.\|y.....^..$. aG.0..E].........u1R..Y....I$^......-..;2<.......>.P...I.P.nB...n;..)..]@A.k]......IEND.B`.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10846925175/?random=1729810130056&cv=11&fst=1729810130056&bg=ffffff&guid=ON&async=1&gtm=45be4al0v893262754za200&gcd=13r3r3r2r5l1&dma=0&tag_exp=101533422~101686685~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Ffree.webcompanion.com%2Fminime%2Fus_es%2F%3Fcampaign%3D20762542537%26gad_source%3D5%26gclid%3DEAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&hn=www.googleadservices.com&frm=0&tiba=Mantente%20seguro%20en%20l%C3%ADnea%20con%20un%20software%20antivirus%20avanzado&did=dYWJhMj&gdid=dYWJhMj&npa=0&pscdl=noapi&auid=2095006060.1729810107&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3DtrackOptanonEvent%3BoptanonCategory%3DOneTrust%20Cookie%20Consent%3BoptanonAction%3DPreference%20Center%20Opened%20From%20Banner&rfmt=3&fmt=4
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.301508290129998
Encrypted:	false
SSDEEP:	3:m8ZJ570T4X7:m+5X7
MD5:	AD8B6F08655797587CDEC719A94EFE59
SHA1:	182ADF5A140796F81E930649D05654DBF22FD5B7
SHA-256:	77D5FE96DEFD6C8C1E3B0466B4827CF83DC7E5C727A10177E115D25132FA86F6
SHA-512:	519A8EA7CE2ED8661CC72D58BC0C02E721EF8E64608F4D2E26A56A970D43EBBF21BDF579C543EE1DFD667DA8F87467C60111A3E6D246D435A5C2D066AB88EFA3
Malicious:	false
Reputation:	low
Preview:	window['google_noFurtherRedirects'] = true;

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	dropped
Size (bytes):	8548204
Entropy (8bit):	7.99970864003701
Encrypted:	true
SSDEEP:	196608:KzBHZuPQRZBkZzTLKma+LOaC5amRpOguyV7daRMO6:KNrgBX312QWOguyV7kB6
MD5:	EBD107575E5FADA23056342727F6F0F6
SHA1:	0AD1F3CCE8838B44CCE247CA40E226678DE5C83F
SHA-256:	D6686ED46452C4276B7708119AC74344461F646F32E649E908F5EF06A911994D
SHA-512:	007CDE6320938CCCAE55D7C8AD82F8361C2DCC58C872466FAABBB12F454D24F6A3BF66E3CD58A2F041882A786FEE072040298C1EF4EAC966D25B2A541F6B6D4C
Malicious:	false
Reputation:	low
Preview:	....ftypmp42....isommp42..).moov...lmvhd..................uU................................................@...................................trak...\tkhd......................uN................................................@........@.....Nmdia... mdhd..............]....PU......Ghdlr........vide............ISO Media file produced by Google Inc......minf...$dinf....dref............url ........stbl....stsd............avc1...........................@.H...H...............................................1avcC.M@.....gM@...@...j........]....$...h. ....stts...................(stsc.......................B............stco.......B..)/..........=C...(...`...........t...]..$3..}........r...N..........12.$...&...)#..*.,.,....y..05..1...30..5C9.7..:0..<.v.>...@...BC..D.?.F...H...JE..K...M.>.P&..R...T>%.U...V.<.YQ..[...]X..^..`...a..b.'.c...e...e...i.$.lkY.p...s.B.uh..w...yD..{O..}} ..Z........Tstsz..............o......."O..........!....... ...................!w.. a...\|......!!.. ... p......

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8580)
Category:	downloaded
Size (bytes):	297659
Entropy (8bit):	5.587421496995303
Encrypted:	false
SSDEEP:	6144:0fdRo3k4a2Lhxvif2s3qXk9nW+KWBBNy2U3h:od2kr2dxK7WR
MD5:	4C621B1A81C4AC67B867C075B65C5D5E
SHA1:	9B179587F1D2A5FE474FBD255EAB44AD2B720DBB
SHA-256:	AE8FC4BFE17372D0E34921D4406BE3032E055E029E4206E7439CE54C17E461F0
SHA-512:	7B1F4B7FC99FF195A679D0EE9F3A725544ACEA05B36D3FEB73D7D921A80B9B1050510FA5B8B3D0A0FA024B47C4F3D009BA70AE142F9ECB23503693484D3ED8EE
Malicious:	false
Reputation:	low
URL:	https://cloud.webcompanion.com/gtag/js?id=G-30HWN1Z1WV&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"google.ca"},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":23,"vtp_rules":["list","webcompanion.com","adaware.com"],"tag_id":16},{"function":"__ogt_ga_send","priority":13,"vtp_value":true,"tag_id":12},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","webcompanion\\.com"],"tag_id":14},{"function":"__ogt_session_timeout","priority":13,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	462316
Entropy (8bit):	5.358426065596723
Encrypted:	false
SSDEEP:	6144:aqRYlADxBldE7qZ8NdrcQNG6JMHVc/cHf4N5O7PqsCSlC:TSADxBldE7qZW/c7bqSs
MD5:	2AAA97EA193602EDBB415172F5850C59
SHA1:	F5A3000DDFD45DBEA3403D0F0BFB0C9DBB74CE84
SHA-256:	6D1E538A73FF3FCF426D9B31DCED15DDCB5B9364E5112F504755B8CB0E1DBED6
SHA-512:	809DC2B4C068EDF610719003F0BDF3F48792FB6DA58AA340178E8D18C7921FAC4666657B64B2CE2D6EF975C403DCC91D2D9BC5116D2AECA34BAEA2712CD9C278
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202407.2.0/otBannerSdk.js
Preview:	!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(function(e){e(t)})).then(n,r)}i((l=l.apply(e,s\|\|[])).next())})}function F(n,r){var i,s,a

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	30252
Entropy (8bit):	4.411017856466682
Encrypted:	false
SSDEEP:	384:9VlmpD5Bdy0yQWB5Kx15zJ1w+qxblke/UVb5zBn3fwDCPDAoKH4/yTorRz:9Vu5ITkNcxJ/U51rAopaM
MD5:	5217B285FAB879B2B01C9A248AE29293
SHA1:	AFEC809C287433F836B65769A0953C04DDD60BC0
SHA-256:	24DA0327467DE5742B29C9AD785DB806BC8327B3CCE000DD3A62BD37D74B4021
SHA-512:	96387C0902117DCF86FF2C450191EEB08215D8700DACE1336DA9A01A95877DDFC64D87B7999CCA4723EE14EC4AA1B07756E63ED0D64D138FC4910F2CB77E8730
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 600 300" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:1.5;"><g><rect x="-19" y="-41.312" width="638" height="382.624" style="fill:#d8f7ff;"/></g><g><path d="M523.996,627.248l-669.936,0c-19.333,0 -35.004,-15.671 -35.004,-35.004l0,-517.239c0,-19.331 15.671,-35.005 35.004,-35.005l669.936,0c19.332,0 35.004,15.672 35.004,35.005l0,517.239c0,19.333 -15.672,35.004 -35.004,35.004Z" style="fill:#b6b9bb;fill-rule:nonzero;"/><path d="M13.855,90.988l-147.903,0c-1.984,0 -3.478,-1.804 -3.113,-3.753l4.326,-23.058c1.481,-7.901 7.394,-13.523 14.223,-13.523l117.032,0c6.828,0 12.741,5.622 14.223,13.523l4.325

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 00:47:49.377043009 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:47:49.377047062 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:47:49.470803976 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:47:58.977018118 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:47:58.977026939 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:47:59.073319912 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:47:59.620619059 CEST	49709	80	192.168.2.5	50.6.174.176
Oct 25, 2024 00:47:59.621042013 CEST	49710	80	192.168.2.5	50.6.174.176
Oct 25, 2024 00:47:59.627624035 CEST	80	49709	50.6.174.176	192.168.2.5
Oct 25, 2024 00:47:59.627713919 CEST	49709	80	192.168.2.5	50.6.174.176
Oct 25, 2024 00:47:59.627871990 CEST	49709	80	192.168.2.5	50.6.174.176
Oct 25, 2024 00:47:59.628118992 CEST	80	49710	50.6.174.176	192.168.2.5
Oct 25, 2024 00:47:59.628181934 CEST	49710	80	192.168.2.5	50.6.174.176
Oct 25, 2024 00:47:59.634840012 CEST	80	49709	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:00.629111052 CEST	80	49709	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:00.681458950 CEST	49709	80	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:00.833452940 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 25, 2024 00:48:00.833620071 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:48:01.154820919 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.154879093 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.154946089 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.155206919 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.155225992 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.793103933 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.793452024 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.793484926 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.795680046 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.795770884 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.795780897 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.795823097 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.797116995 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.797195911 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.797373056 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.797382116 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.838737011 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.945785999 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.945828915 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.945848942 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.945930004 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:01.945950985 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:01.991961956 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.009202957 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:02.009305000 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:02.009391069 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:02.009577990 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:02.009613037 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:02.044857025 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.044871092 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.044939995 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.044960022 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.063344955 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.063354969 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.063426018 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.063441038 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.064785957 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.064795017 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.064847946 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.064856052 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.117995024 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.161871910 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.161889076 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.161902905 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.161931038 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.161950111 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.161957026 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.162861109 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.162870884 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.162892103 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.162925959 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.162933111 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.162976980 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.162982941 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.163016081 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.179682970 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.179709911 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.179760933 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.179776907 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.179781914 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.180887938 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.180980921 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.180989027 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.181668997 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.181759119 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.181766987 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.183378935 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.183437109 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.183444977 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.184271097 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.184339046 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.184346914 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.224292994 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.224309921 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.237648010 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.237674952 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.237736940 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.237952948 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.237968922 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.239989042 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.240034103 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.240114927 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.240328074 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.240345955 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.265250921 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.279289961 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.279339075 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.279355049 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.279357910 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.279391050 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.279408932 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.279419899 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.279633045 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.279654026 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.279694080 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.279702902 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.279721022 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.280818939 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.280864954 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.280919075 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.280926943 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.280956984 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.296722889 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.296840906 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.296865940 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.297395945 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.297429085 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.297466993 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.297482014 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.298214912 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.298255920 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.298278093 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.298289061 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.299137115 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.299169064 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.299204111 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.299222946 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.299247026 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.299279928 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.299338102 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.299350023 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.300268888 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.300343037 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.300364971 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.301259995 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.301321983 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.301335096 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.302175045 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.302242994 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.302253962 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.303085089 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.303139925 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.303152084 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.349579096 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.349601030 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.395972967 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.395988941 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396023989 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396039009 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.396066904 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396081924 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.396081924 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.396177053 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396188021 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396198034 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396219015 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.396224976 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396245003 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.396590948 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396600962 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396617889 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396650076 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.396668911 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.396693945 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.397144079 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.397154093 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.397212029 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.397236109 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.397556067 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.397564888 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.397604942 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.397617102 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.397645950 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.397906065 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.397968054 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.397999048 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.398010015 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.398035049 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.398555994 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.398686886 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.398698092 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.413538933 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.413683891 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.413697004 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.413757086 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.413822889 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.413842916 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.413853884 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.413933039 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.414273024 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.414406061 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.414407969 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.414505005 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.452230930 CEST	49713	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.452264071 CEST	443	49713	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.501179934 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.501224041 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.501318932 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.501538038 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.501569033 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.501610994 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.501770973 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.501802921 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.501935959 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.501948118 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.502356052 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.502374887 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.502511024 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.502762079 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.502788067 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.502928019 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.502981901 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.502991915 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.503137112 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.503149986 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.890841007 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.891809940 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.892343998 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.892412901 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.892448902 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.892477989 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.892851114 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.892858028 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.893564939 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.893655062 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.894104004 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.894193888 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.894314051 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.894359112 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:02.902461052 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:02.902946949 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:02.902973890 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:02.904067039 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:02.904135942 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:02.905436993 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:02.905555010 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:02.935331106 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.935339928 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:02.950469017 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:02.950512886 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:02.993856907 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:03.017680883 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:03.017719984 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:03.017786980 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:03.020845890 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:03.020860910 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:03.037127972 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.037159920 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.037240028 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.037307978 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.040518999 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.040543079 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.040687084 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.040712118 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.062130928 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.062211990 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.062216043 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.062283039 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.082722902 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.090809107 CEST	49719	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.090878010 CEST	443	49719	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.091169119 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.091188908 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.091252089 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.092197895 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.092209101 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.138469934 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.138914108 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.138935089 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.138957977 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.138974905 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.139101982 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.139113903 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.139238119 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.139260054 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.140058041 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.140119076 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.140126944 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.140166044 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.140199900 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.140250921 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.140259981 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.140296936 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.140297890 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.140345097 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.140364885 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.140458107 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.143254995 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.143362999 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.143735886 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.143832922 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.144265890 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.144342899 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.144464016 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.144488096 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.144563913 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.144578934 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.144663095 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.144675970 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.151803017 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.151822090 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.151890993 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.151952982 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.153192043 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.153260946 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.154232025 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.154303074 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.161056995 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.161281109 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.161308050 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.162403107 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.162466049 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.162476063 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.162514925 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.162868977 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.162945986 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.163028002 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.163043976 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.197305918 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.197446108 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.197482109 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.204205036 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.204293013 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.212835073 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.267455101 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.267551899 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.268593073 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.268668890 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.269520044 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.269584894 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.270417929 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.270489931 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.270498037 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.270548105 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.271409988 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.271430016 CEST	443	49718	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.271439075 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.271476030 CEST	49718	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.272001028 CEST	49729	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.272039890 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.272108078 CEST	49729	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.273813009 CEST	49729	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.273828030 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.286324978 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.286348104 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.286406040 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.286487103 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.286487103 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.287456036 CEST	49722	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.287467957 CEST	443	49722	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.287692070 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.287753105 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.287787914 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.287805080 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.287811995 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.287837029 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.287837982 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.287862062 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.288053989 CEST	49730	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.288093090 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.288149118 CEST	49730	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.288958073 CEST	49730	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.288986921 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.289048910 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.289072037 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.289079905 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.289099932 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.289125919 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.289139986 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.289171934 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.311507940 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.311578989 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.311599016 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.311633110 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.311661959 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.311677933 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.336348057 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.336457014 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.367383003 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.403846979 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.403861046 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.403899908 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.403904915 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.403944016 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.403990030 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.404318094 CEST	49723	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.404337883 CEST	443	49723	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.404779911 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.404817104 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.404891968 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.405390978 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.405400038 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.405431986 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.405446053 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.405513048 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.405688047 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.405700922 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.406601906 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.406618118 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.406698942 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.408008099 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.408015966 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.408088923 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.422630072 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.422645092 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.422684908 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.422687054 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.422724962 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.430418968 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.430428028 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.430479050 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.431420088 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.431427956 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.431484938 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.433367968 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.433376074 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.433434963 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.453947067 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.453963995 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.454058886 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.522723913 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.522738934 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.522825003 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.523587942 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.523668051 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.525125980 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.525221109 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.526760101 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.526875973 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.527661085 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.527734041 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.529226065 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.529313087 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.529360056 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.529360056 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.542244911 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.542275906 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.542326927 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.542366028 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.549232960 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.549308062 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.550528049 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.550617933 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.551498890 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.551573038 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.552427053 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.552489042 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.554227114 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.554312944 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.555129051 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.555185080 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.557923079 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.559333086 CEST	49724	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.559357882 CEST	443	49724	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.559550047 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.559597969 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.559664965 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.560328960 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.560345888 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.606563091 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.606615067 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.606681108 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.606719971 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.606753111 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.606785059 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.606996059 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.607016087 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.607137918 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.607203007 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.607259035 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.607347965 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.607759953 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.607778072 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.608565092 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.608587027 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.609935045 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.609951019 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.610194921 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.610205889 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.615052938 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.615143061 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.615232944 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.615387917 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.615411997 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.633626938 CEST	49738	443	192.168.2.5	142.250.74.194
Oct 25, 2024 00:48:03.633646965 CEST	443	49738	142.250.74.194	192.168.2.5
Oct 25, 2024 00:48:03.633728027 CEST	49738	443	192.168.2.5	142.250.74.194
Oct 25, 2024 00:48:03.634744883 CEST	49738	443	192.168.2.5	142.250.74.194
Oct 25, 2024 00:48:03.634761095 CEST	443	49738	142.250.74.194	192.168.2.5
Oct 25, 2024 00:48:03.677997112 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678062916 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678067923 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678090096 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678121090 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678138971 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678138971 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678155899 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678180933 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678205967 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678229094 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678278923 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678297043 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678344965 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678363085 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678404093 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678412914 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678457975 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678560019 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678606987 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678631067 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678678036 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678682089 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678694010 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.678723097 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.678736925 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.687047005 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.687102079 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.691817045 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.691885948 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.691890955 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.691905022 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.691940069 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.691961050 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.692018032 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.744708061 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.744904995 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.744925022 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.745348930 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.745676994 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.745747089 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.745902061 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.780097961 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.780172110 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.780745983 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.780800104 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.781467915 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.781527996 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.782123089 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.782182932 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.782222986 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.782279968 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.783073902 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.783134937 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.787827015 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.787914038 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.788609982 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.788718939 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.789328098 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.789417982 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.789426088 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.789457083 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.789484978 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.789495945 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.790678024 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.790767908 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.790869951 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.790925980 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.791326046 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.791765928 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.791824102 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.792673111 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.792731047 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.792764902 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.792845011 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.793607950 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.793677092 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.794375896 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.794440985 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.795447111 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.795511007 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.795542002 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.795598030 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.796385050 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.796453953 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.797348976 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.797409058 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.797456026 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.797513008 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.797564030 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.797620058 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.798265934 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.798342943 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.798413038 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.798475981 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.799130917 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.799190044 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.799331903 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.799380064 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.799423933 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.799479008 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.800148964 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.800210953 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.862509966 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:03.862587929 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:03.870632887 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:03.870654106 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:03.871058941 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:03.896096945 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.896126032 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.896190882 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.896199942 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.899585009 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.899676085 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.899707079 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.899772882 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.899810076 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.899854898 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.899888039 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.899894953 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.899907112 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.899991035 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.900089025 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.900154114 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.900279045 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.900336027 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.900346041 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.900360107 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.900407076 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.900499105 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.900558949 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.900789022 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.900840044 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.900861979 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.900868893 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.900882006 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.900916100 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.901006937 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.901072025 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.907212019 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.907285929 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.907295942 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.907306910 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.907330990 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.907341003 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.907351017 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.907356977 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.907382965 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.907412052 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.907419920 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.907514095 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.907577991 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.907634974 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.908094883 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.908159971 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.908164978 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.908174992 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.908215046 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.908246040 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.908305883 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.908488989 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.908550024 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.908613920 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.908668041 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.908720970 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.908783913 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.908792019 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.908843040 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.909096956 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.909164906 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.909187078 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.909241915 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.909385920 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.909446955 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.909552097 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.909610987 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.909732103 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.909787893 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.909887075 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.909949064 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.910104036 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.910165071 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.910377979 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.910435915 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.910443068 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.910450935 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.910487890 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.910594940 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.910654068 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.910729885 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.910784960 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.910892010 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.910953999 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.911042929 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.911098957 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.911421061 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.911479950 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.911483049 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.911489964 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.911528111 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.911529064 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.911540031 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.911576033 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.911586046 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.911832094 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.911886930 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.911958933 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.912009001 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.912038088 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.912100077 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.912344933 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.912389994 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.912642956 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.912692070 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.912698984 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.912704945 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.912734985 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.912745953 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.912755013 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.912806988 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.913192034 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.913244963 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.913245916 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.913254023 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.913295031 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.913353920 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.913405895 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.913408041 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.913417101 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.913454056 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.913759947 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.913810968 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.913942099 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.913990021 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.914004087 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.914010048 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.914036989 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.914047956 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.914381027 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.914441109 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.914506912 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.914558887 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.914947987 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.915020943 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.915079117 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.915138006 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.915926933 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.918163061 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:03.932466984 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.932692051 CEST	49730	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.932703972 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.933074951 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.933451891 CEST	49730	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.933542013 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.933609009 CEST	49730	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.942733049 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.943018913 CEST	49729	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.943038940 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.943417072 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.943742037 CEST	49729	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.943804979 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.943865061 CEST	49729	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.949848890 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.950918913 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:03.956707954 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.956804037 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.975331068 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.980650902 CEST	49730	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:03.987339973 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:03.995326996 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:04.013993979 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.014010906 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.014103889 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.014628887 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.014683008 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.014692068 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.014723063 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.014749050 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.014780045 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.015496969 CEST	49728	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.015511990 CEST	443	49728	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.018593073 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.018677950 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.018794060 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.018853903 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.018857002 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.018866062 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.018907070 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.018925905 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.018982887 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019076109 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019134998 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019139051 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019145966 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019188881 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019378901 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019438982 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019453049 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019500017 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019521952 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019572020 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019599915 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019606113 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019617081 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019644022 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019732952 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019789934 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019798040 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019804001 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019838095 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.019917965 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.019972086 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.020018101 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.020072937 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.020126104 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.020128012 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.020137072 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.020175934 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.020606041 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.020678997 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.020709991 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.020757914 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.020766973 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.020816088 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.020817995 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.020826101 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.020862103 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.020927906 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.020978928 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.021074057 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.021121979 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.021125078 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.021131992 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.021183014 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.025748014 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.025863886 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.025973082 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.026194096 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.026218891 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.027013063 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.027084112 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.027157068 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.027209044 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.027210951 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.027221918 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.027256966 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.027272940 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.027359009 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.027369976 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.027370930 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.027410030 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.028671026 CEST	49725	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.028687954 CEST	443	49725	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.045984983 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.046251059 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.046271086 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.047333002 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.047386885 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.047404051 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.047492981 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.047807932 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.047873020 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.048047066 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.048059940 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.081017017 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.081089973 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.081151009 CEST	49730	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.083192110 CEST	49730	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.083203077 CEST	443	49730	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.097584963 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.097615004 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.097675085 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.097708941 CEST	49729	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.097784042 CEST	49729	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.099796057 CEST	49729	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.099807024 CEST	443	49729	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.103049994 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.188663960 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.189018011 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.189033985 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.190068007 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.190131903 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.190140009 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.190185070 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.190511942 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.190579891 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.190668106 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.190681934 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.193125963 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:04.193202019 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:04.193312883 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:04.193365097 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:04.193386078 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:04.193397045 CEST	49727	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:04.193403959 CEST	443	49727	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:04.193470001 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.193486929 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.193530083 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.193542004 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.193595886 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.195249081 CEST	49731	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.195270061 CEST	443	49731	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.238866091 CEST	49744	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:04.238913059 CEST	443	49744	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:04.239166975 CEST	49744	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:04.241612911 CEST	49744	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:04.241648912 CEST	443	49744	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:04.243427992 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.245676994 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.248152971 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.248169899 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.249274015 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.249366999 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.249375105 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.249443054 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.250035048 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.250087976 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.250166893 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.250477076 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.250488043 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.250773907 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.250792980 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.253323078 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.253426075 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.253443956 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.253510952 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.253839970 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.253931046 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.254254103 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.254282951 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.254628897 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.263025999 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.270231009 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.270258904 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.270349026 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.270361900 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.271423101 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.271451950 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.271490097 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.271507978 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.271538019 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.271544933 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.271567106 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.271591902 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.272020102 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.272104025 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.272373915 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.272440910 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.272634983 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.272665024 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.272674084 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.272685051 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.284975052 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.285784960 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.285809040 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.289328098 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.289419889 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.289427996 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.289520025 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.290812016 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.291498899 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.291572094 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.291590929 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.306215048 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.315371990 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.322197914 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.335093975 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.335122108 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.335129976 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.335156918 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.335177898 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.335197926 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.335212946 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.335233927 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.335247040 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.335268021 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.335293055 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.335334063 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.336972952 CEST	49732	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.336990118 CEST	443	49732	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.343350887 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.343364000 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.343700886 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.343759060 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.343832970 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.344290972 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.344312906 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.389004946 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.395293951 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.395328045 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.395335913 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.395535946 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.395550013 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.396008968 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.396066904 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.396081924 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.396272898 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.396656990 CEST	49735	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.396672010 CEST	443	49735	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.397021055 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.397073984 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.397145033 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.397659063 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.397692919 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.399025917 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.399097919 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.399118900 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.399138927 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.399163961 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.399178028 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.399190903 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.416311979 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.416340113 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.416347027 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.416388035 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.416403055 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.416424036 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.416443110 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.416460991 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.416481972 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.416551113 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.416580915 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.416601896 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.417864084 CEST	49737	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.417875051 CEST	443	49737	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.418214083 CEST	49748	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.418273926 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.418340921 CEST	49748	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.418798923 CEST	49748	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.418812990 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.430896044 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.430963993 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.430964947 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.431010008 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.431262016 CEST	49734	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.431273937 CEST	443	49734	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.431694031 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.431727886 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.431821108 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.432292938 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.432307005 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.440181017 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.440242052 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.440263987 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.440282106 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.440295935 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.440319061 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.440345049 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.450583935 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.481462002 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.497313023 CEST	443	49738	142.250.74.194	192.168.2.5
Oct 25, 2024 00:48:04.497703075 CEST	49738	443	192.168.2.5	142.250.74.194
Oct 25, 2024 00:48:04.497769117 CEST	443	49738	142.250.74.194	192.168.2.5
Oct 25, 2024 00:48:04.498891115 CEST	443	49738	142.250.74.194	192.168.2.5
Oct 25, 2024 00:48:04.498965979 CEST	49738	443	192.168.2.5	142.250.74.194
Oct 25, 2024 00:48:04.503930092 CEST	49738	443	192.168.2.5	142.250.74.194
Oct 25, 2024 00:48:04.504057884 CEST	443	49738	142.250.74.194	192.168.2.5
Oct 25, 2024 00:48:04.509841919 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.509880066 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.510036945 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.510054111 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.510150909 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.517041922 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.517055035 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.517133951 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.518588066 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.518596888 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.518662930 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.553786993 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.553802967 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.553828001 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.553889990 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.553956985 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.558104038 CEST	49738	443	192.168.2.5	142.250.74.194
Oct 25, 2024 00:48:04.558139086 CEST	443	49738	142.250.74.194	192.168.2.5
Oct 25, 2024 00:48:04.563045025 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.563054085 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.563083887 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.563133955 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.563159943 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.564876080 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.564884901 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.565032005 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.567514896 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.567522049 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.567600965 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.567600965 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.604640961 CEST	49738	443	192.168.2.5	142.250.74.194
Oct 25, 2024 00:48:04.627069950 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.627087116 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.627157927 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.627208948 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.627263069 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.627273083 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.627330065 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.633565903 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.633578062 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.633682966 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.634793043 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.634841919 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.634852886 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.634865046 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.634895086 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.634912014 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.634917021 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.634938955 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.635003090 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.639729023 CEST	49736	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.639800072 CEST	443	49736	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.640214920 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.640264988 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.640335083 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.640892982 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.640913963 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.665035963 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.665395975 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.665477037 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.666569948 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.666647911 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.666668892 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.666774988 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.667068958 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.667148113 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.667290926 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.667335033 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.676812887 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.676852942 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.676906109 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.676964998 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.685847044 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.685964108 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.687499046 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.687669039 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.689273119 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.689486027 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.690253973 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.690414906 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.692066908 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.692150116 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.692198038 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.692281961 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.692550898 CEST	49733	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.692573071 CEST	443	49733	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.692967892 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.693016052 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.693070889 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.694339037 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.694364071 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.712734938 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.813400030 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.813425064 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.813431978 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.813520908 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.813546896 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.854137897 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.930160999 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.930175066 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.930243015 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.930509090 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.930567980 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.930578947 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.930596113 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.930629015 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.931226015 CEST	49739	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:04.931241035 CEST	443	49739	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:04.991110086 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.014674902 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.014683008 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.015197992 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.027331114 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.056814909 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.063393116 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.071546078 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.073314905 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.073477030 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.075740099 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.075752020 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.075982094 CEST	49748	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.076006889 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.076189995 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.076327085 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.076415062 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.077043056 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.077107906 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.077486992 CEST	49748	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.077553034 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.077662945 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.077704906 CEST	49748	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.084763050 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.097907066 CEST	443	49744	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:05.097990990 CEST	49744	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:05.119334936 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.119338989 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.119349957 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.131094933 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.131119967 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.132282972 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.132369995 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.132376909 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.132484913 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.137715101 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.137775898 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.147820950 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.147835016 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.194730043 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.218280077 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.218310118 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.218348026 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.218379974 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.218394995 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.218416929 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.220638990 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.220716000 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.220777035 CEST	49748	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.220832109 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.220859051 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.220866919 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.220875978 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.220901966 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.220922947 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.220949888 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.224912882 CEST	49744	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:05.224927902 CEST	443	49744	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:05.225265026 CEST	443	49744	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:05.226808071 CEST	49744	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:05.271169901 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.271179914 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.271346092 CEST	443	49744	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:05.272006035 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.291070938 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.291089058 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.291104078 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.291158915 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.291218042 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.291269064 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.319112062 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.332609892 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.332622051 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.332700014 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.333759069 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.333766937 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.333827019 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.333911896 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.335625887 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.335633993 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.335692883 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.337193966 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.337229013 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.337249041 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.337270021 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.339123964 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.339133978 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.339163065 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.339188099 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.339210987 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.339915991 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.339922905 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.339932919 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.339977980 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.339989901 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.341300964 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.341308117 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.341345072 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.341351032 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.341373920 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.341408968 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.377816916 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.409862041 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.409920931 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.411114931 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.411175013 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.411200047 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.411256075 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.415036917 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.415102005 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.415443897 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.415462971 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.415832043 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.428086996 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.428190947 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.428512096 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.428540945 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.428705931 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.443869114 CEST	49748	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.443907976 CEST	443	49748	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.447959900 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.447982073 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.448029041 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.448798895 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.448848009 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.449846983 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.449922085 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.451472998 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.451528072 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.452976942 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.453054905 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.453742981 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.453794956 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.455333948 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.455374002 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.459605932 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.460851908 CEST	49749	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.460880041 CEST	443	49749	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.462893963 CEST	49746	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.462910891 CEST	443	49746	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.474117041 CEST	443	49744	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:05.474185944 CEST	443	49744	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:05.474275112 CEST	49744	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:05.475332022 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.476531982 CEST	49744	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:48:05.476538897 CEST	443	49744	184.28.90.27	192.168.2.5
Oct 25, 2024 00:48:05.479815960 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.511282921 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.511334896 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.511565924 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.511800051 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.511816025 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.555155993 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.555224895 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.576637983 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.576685905 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.576750994 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.576819897 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.576992035 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.576992035 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.577064037 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577131987 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.577210903 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577234983 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577285051 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.577306032 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577328920 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577344894 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.577368021 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.577816963 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577847958 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577860117 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577899933 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577909946 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.577918053 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577954054 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.577959061 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577980995 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.577990055 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.578020096 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.578042984 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.578879118 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.578974009 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.579839945 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.579941988 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.580737114 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.580796957 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.580811024 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.580830097 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.580852985 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.580871105 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.581731081 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.581784964 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.582777023 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.582835913 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.583728075 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.583779097 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.584466934 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.584522963 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.584599018 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.584666967 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.605312109 CEST	49750	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.605333090 CEST	443	49750	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.612308025 CEST	49751	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.612330914 CEST	443	49751	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.647618055 CEST	80	49709	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.648773909 CEST	49709	80	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.670389891 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.670453072 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.670608044 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.670659065 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.670747042 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.670804977 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.678667068 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.678725958 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.679090977 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.679146051 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.679280043 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.679325104 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.679547071 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.679590940 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.679697037 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.679744005 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.680013895 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.680063963 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.680181980 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.680227041 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.680491924 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.680538893 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.680695057 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.680753946 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.680969954 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.681019068 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.681193113 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.681243896 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.681433916 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.681499958 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.681729078 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.681775093 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.681956053 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.682005882 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.682126045 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.682169914 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.682564974 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.682620049 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.682655096 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.682704926 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.682940006 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.682988882 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.683070898 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.683118105 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.683262110 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.683320045 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.683816910 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.683876991 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.683878899 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.683892012 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.683923960 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.683950901 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.684000015 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.687230110 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.687284946 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.687294960 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.687303066 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.687362909 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.687719107 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.691899061 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.691956043 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.693957090 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.786081076 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.786156893 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.786206007 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.786257029 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.786518097 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.786560059 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.786581993 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.786587954 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.786633015 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.786679983 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.786716938 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.786737919 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.786741972 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.786765099 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.786784887 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.794482946 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.794538021 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.794708014 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.794758081 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.794924021 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.794975042 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.795106888 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.795156956 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.795574903 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.795630932 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.798069000 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.798125982 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.798389912 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.798448086 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.798573017 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.798621893 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.798667908 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.798717976 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.798731089 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.798763037 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.798780918 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.798789978 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.798810005 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.798825979 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.799103022 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.799171925 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.799211025 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.799266100 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.799282074 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.799331903 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.799484015 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.799530983 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.799551964 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.799592972 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.799679041 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.799725056 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.799726009 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.799736023 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.799767017 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.799799919 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.799843073 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.799945116 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800008059 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800009966 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800019026 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800071001 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800092936 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800136089 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800149918 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800156116 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800178051 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800195932 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800216913 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800250053 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800265074 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800270081 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800295115 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800311089 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800573111 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800621033 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800622940 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800633907 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800669909 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800694942 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800741911 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800893068 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800926924 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800950050 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800955057 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.800973892 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.800995111 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.801106930 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.801152945 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.801271915 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.801315069 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.801321030 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.801331043 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.801353931 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.801368952 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.801489115 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.801534891 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.801547050 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.801589966 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.801995039 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802046061 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802187920 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802237034 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802254915 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802294970 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802306890 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802346945 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802351952 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802371025 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802391052 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802407980 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802478075 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802522898 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802535057 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802582026 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802598953 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802640915 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802726030 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802773952 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802784920 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802835941 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802840948 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802855015 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802897930 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802917004 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.802948952 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.802975893 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.803004026 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.803044081 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.803205013 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.803244114 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.803251982 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.803257942 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.803299904 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.807935953 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.807988882 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.808079004 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.808104038 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.808136940 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.808136940 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.808670998 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.829395056 CEST	49709	80	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.837851048 CEST	80	49709	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.901689053 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.901731014 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.901751995 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.901767015 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.901797056 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.901837111 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.901892900 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.901940107 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.901952982 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902009964 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.902021885 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902079105 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.902169943 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902223110 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902230978 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.902239084 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902271986 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.902323961 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902365923 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.902371883 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902381897 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.902431965 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902477980 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.902484894 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902513981 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.902556896 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902597904 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902601957 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.902611017 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.902657986 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.909972906 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.910047054 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.910130978 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.910176039 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.910177946 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.910211086 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.910219908 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.910244942 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.910278082 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.910321951 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.910326004 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.910351992 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.910370111 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.910384893 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.910507917 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.910562038 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.910733938 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.910801888 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.911442995 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.911484003 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.911504030 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.911509991 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.911530972 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.911549091 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.911648989 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.911704063 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.911788940 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.911840916 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.911865950 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.911912918 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.911923885 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.911968946 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.911973000 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.911993027 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.912014008 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.912034035 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.912035942 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.912045956 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.912081003 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.912086964 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.912115097 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:05.912287951 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:05.990012884 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.097374916 CEST	49747	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.097435951 CEST	443	49747	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.143222094 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.154301882 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.154325962 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.154788971 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.155134916 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.155205011 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.155407906 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.203330040 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.296428919 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.296457052 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.296525955 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.296545982 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.338709116 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.749142885 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.749155045 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.749207973 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.749228001 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.749268055 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.749281883 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.749296904 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.749305010 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.749316931 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:06.749353886 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:06.749363899 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:07.051340103 CEST	49753	443	192.168.2.5	50.6.174.176
Oct 25, 2024 00:48:07.051347971 CEST	443	49753	50.6.174.176	192.168.2.5
Oct 25, 2024 00:48:07.114825964 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:07.114871025 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:07.114931107 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:07.115537882 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:07.115550995 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:07.484939098 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:07.484994888 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:07.485097885 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:07.498127937 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:07.498166084 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:07.972534895 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:07.972876072 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:07.972909927 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:07.974034071 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:07.974095106 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.115015984 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.115216970 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.115226030 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.159326077 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.236632109 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.236720085 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.251471996 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.251492977 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.251827955 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.270405054 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.288743019 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.288755894 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.315334082 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.374707937 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.374744892 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.374753952 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.374771118 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.374809980 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.374814034 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.374819994 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.374865055 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.374948025 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.383246899 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.383287907 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.383296013 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.471973896 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.472004890 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.472021103 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.472059965 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.472083092 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.472114086 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.472130060 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.491687059 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.491727114 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.491733074 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.491740942 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.491780043 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.491786003 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.524736881 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.524759054 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.524794102 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.524811029 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.524837971 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.524848938 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.589639902 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.589669943 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.589730978 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.589747906 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.589781046 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.589795113 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.614103079 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.614188910 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.615293026 CEST	49760	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.615324020 CEST	443	49760	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.635657072 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:08.635699034 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:08.635762930 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:08.636322975 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:08.636337042 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:08.638998032 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.639039040 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.639192104 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.639384031 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:08.639399052 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:08.641887903 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.641907930 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.641958952 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.641978979 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.642002106 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.642024994 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.643790007 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.643806934 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.643860102 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.643867970 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.643899918 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.643925905 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.645581961 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.645597935 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.645677090 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.645684958 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.645785093 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.707540989 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.707572937 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.707653046 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.707684994 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.707704067 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.707730055 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.758655071 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.758687973 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.758732080 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.758752108 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.758794069 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.759948015 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.759975910 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.760009050 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.760016918 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.760056973 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.761215925 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.761245966 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.761274099 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.761279106 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.761322975 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.761857033 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.761879921 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.761919975 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.761928082 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.761970043 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.762770891 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.762792110 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.762824059 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.762830019 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.762876034 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.763835907 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.763859987 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.763891935 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.763899088 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.763928890 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.763941050 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.786545038 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.824762106 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.824846029 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.824867010 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.824922085 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.826673985 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.826700926 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.953279972 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.953294039 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.953392982 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.956654072 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.956681013 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.956752062 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.958617926 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.958657026 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.958720922 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.959945917 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.959991932 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.960078955 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.961849928 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.961858988 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.962104082 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.962460995 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.962472916 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.962661982 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.962677956 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.962749958 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.962763071 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.962832928 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.962847948 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:08.962969065 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:08.962980986 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.620407104 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.620723009 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:09.621987104 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.621999025 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.622267962 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:09.622292995 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:09.623084068 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.623137951 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.623456955 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:09.623507023 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:09.629942894 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.630033970 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.630970001 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.630978107 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.684813976 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.728065968 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:09.728116989 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:09.728441000 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:09.729882956 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:09.729899883 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:09.750267982 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.750909090 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.750927925 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.751293898 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.751300097 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.753103018 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.753575087 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.753592014 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.753952980 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.753957033 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.754229069 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.754576921 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.754595041 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.754905939 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.754947901 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.754955053 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.755012035 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.755225897 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.755239964 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.755362034 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.755376101 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.755645990 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.755652905 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.755847931 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.755856037 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.879323959 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.879581928 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.879661083 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.879751921 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.879767895 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.879782915 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.879789114 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.882814884 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.882843971 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.882896900 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.882908106 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.882919073 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.882965088 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.882992029 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.883018017 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.883084059 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.883342028 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.883342028 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.883352995 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.883361101 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.883595943 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.883605957 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885085106 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885104895 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885158062 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.885165930 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885242939 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.885392904 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885436058 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885525942 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.885704041 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885736942 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885799885 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885842085 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.885869980 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.885946035 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.885951996 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.885962963 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.885968924 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.886115074 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.886115074 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.886126041 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.886135101 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.886636972 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.886661053 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.886830091 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.886852026 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.886902094 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.886965990 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.887856960 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.887861967 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.887872934 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.887876034 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.889214039 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.889224052 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.889436960 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.889636993 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.889657021 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.890192032 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.890203953 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.891374111 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.891385078 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.891474962 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.891697884 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.891710043 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.892503023 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.892518997 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.892620087 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.892690897 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:09.892704010 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:09.895531893 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.895601988 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.895652056 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.895697117 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.895704031 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.895840883 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.895874023 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.895875931 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.895888090 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.895917892 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.903858900 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.903928995 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.903934002 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:09.989734888 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:09.989742041 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:10.012435913 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:10.012470961 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:10.012527943 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:10.012535095 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:10.012586117 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:10.019365072 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:10.097060919 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:10.097073078 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:10.144515991 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:10.144594908 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:10.426618099 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.426779032 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.428833008 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.428854942 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.492786884 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:10.492886066 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:10.492965937 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.614726067 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.632410049 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.635495901 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.640901089 CEST	49769	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:10.640921116 CEST	443	49769	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:10.646745920 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.648933887 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.660960913 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:10.660969019 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:10.661051035 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:10.661931992 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:10.661940098 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:10.669302940 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:10.669328928 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:10.669630051 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:10.687628984 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.687684059 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.687721014 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.687781096 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.687797070 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.687803984 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.687815905 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.687856913 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.687932014 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.695305109 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.695332050 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.695549965 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.696002007 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.696089983 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.696099043 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.710658073 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.710658073 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.710658073 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:10.729712009 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.729722977 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.731106997 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.731123924 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.731925964 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.731936932 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.733616114 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.733623028 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.734438896 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.734443903 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.735356092 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.735361099 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.736258030 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.736274004 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.737485886 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.737492085 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.737649918 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.737658978 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.738507986 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.738516092 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.804507017 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.804553032 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.804578066 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.804583073 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.804632902 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.804641008 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.807957888 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.807985067 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.808026075 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.808034897 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.808079004 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.831629992 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.831727982 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.831932068 CEST	443	49768	142.250.185.97	192.168.2.5
Oct 25, 2024 00:48:10.831980944 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.832003117 CEST	49768	443	192.168.2.5	142.250.185.97
Oct 25, 2024 00:48:10.859147072 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.859339952 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.859392881 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.859453917 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.859483957 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.859837055 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.861495018 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.861603022 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.861726999 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.861818075 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.862234116 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.862298965 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.864157915 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.864432096 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.864490986 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.926105022 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:10.926141977 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:10.926225901 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:10.927093029 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:10.927108049 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:10.927716017 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:10.927753925 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:10.927963972 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:10.928280115 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:10.928293943 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:10.929225922 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.929244041 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.929256916 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.929264069 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.932477951 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.932477951 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.932499886 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.932518005 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.935328007 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.935336113 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.935353994 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.935357094 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:10.937381029 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:10.937405109 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.007599115 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.007623911 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.145488977 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.145509958 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.145528078 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.145560980 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.145586014 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.145627975 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.146821976 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.146841049 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.146940947 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.147407055 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.147414923 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.147553921 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.147574902 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.147584915 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.147989988 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.148001909 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.148308992 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.148313999 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.152616978 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.152637959 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.152797937 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.152946949 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.152961969 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.153389931 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.153398991 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.507980108 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:11.508213997 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:11.508225918 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:11.508677959 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:11.508747101 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:11.509397984 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:11.509449005 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:11.778342009 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:11.778547049 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:11.778561115 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:11.779617071 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:11.779675961 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:11.780364990 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:11.780522108 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:11.780529976 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:11.781698942 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:11.785528898 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:11.786052942 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:11.786061049 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:11.787131071 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:11.787199974 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:11.788392067 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:11.788459063 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:11.788755894 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:11.788762093 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:11.812496901 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:11.859323978 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:11.876602888 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.886264086 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:11.886286974 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:11.890950918 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.891568899 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.892616034 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.905060053 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:11.905267954 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:11.906105042 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:11.906114101 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:11.914896965 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:11.921401978 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.960889101 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.960917950 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.962866068 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.962872982 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.963804960 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.963820934 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.965452909 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.965457916 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.966113091 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.966164112 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.966690063 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.966703892 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:11.987386942 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:11.987396002 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:11.987406015 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.008835077 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.008869886 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.010519028 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.010533094 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.014316082 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.014328957 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.015206099 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.015212059 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.045205116 CEST	49801	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:12.045242071 CEST	443	49801	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:12.045389891 CEST	49801	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:12.045608997 CEST	49801	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:12.045620918 CEST	443	49801	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:12.294008017 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:12.294044018 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.294090033 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.294123888 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.294162989 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.294169903 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.294188023 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.294190884 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.294198036 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:12.294204950 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:12.294217110 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.294224024 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:12.294243097 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.294243097 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.294244051 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:12.294254065 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.294272900 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:12.294280052 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:12.294294119 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:12.294296980 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.294298887 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:12.294301987 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.294306040 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:12.294334888 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:12.294365883 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:12.294372082 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:12.294394016 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:12.294456005 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:12.295597076 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:12.295656919 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:12.295979023 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.296019077 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.296041965 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.296057940 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.296063900 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.296072006 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.296087980 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.296097040 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.296111107 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.296116114 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.296125889 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.296159983 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.296165943 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.296200037 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.299252033 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.299273014 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.299324036 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.299628973 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.299638987 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.300595045 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.300659895 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.300661087 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.300700903 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.304167986 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.304191113 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.304205894 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.304209948 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.304218054 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.304255962 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.307056904 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.307077885 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.307130098 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.307136059 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.311300039 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.311352015 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.311356068 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.319700003 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.319727898 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.319746017 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.319755077 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.319791079 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.328833103 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.328871012 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.337255955 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.346038103 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.346071959 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.346080065 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.346086025 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.346122980 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.346127033 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.354609013 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.354722023 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.354727030 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.380491972 CEST	49793	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:12.380507946 CEST	443	49793	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:12.412612915 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.412894964 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.413106918 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.415230036 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.415385962 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.415432930 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.415693045 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.415767908 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.415927887 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.417851925 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.418015957 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.418164968 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.420965910 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.421010017 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.421017885 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.421025038 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.421072960 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.421075106 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.421083927 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.421123028 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.421344995 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.421420097 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.421458006 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.421463013 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.422341108 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.422647953 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.422725916 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.423871040 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.423978090 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.423984051 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.424077034 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.424130917 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.424137115 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.424263954 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.424340963 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.424345970 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.428073883 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.428128958 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.428136110 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.429445982 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.429498911 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.429505110 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.435516119 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.435566902 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.435570955 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.440625906 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.440701008 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.440706015 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.446008921 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.446089029 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.446094990 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.451359034 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.451412916 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.451417923 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.456602097 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.456707001 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.456762075 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.456768036 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.459821939 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.462182999 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.467165947 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.467281103 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.467287064 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.467330933 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.467374086 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.472784042 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.477859974 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.477938890 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.477943897 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.477967978 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.479242086 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.483134985 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.488528013 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.488581896 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.488586903 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.505844116 CEST	49792	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:12.505851030 CEST	443	49792	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:12.522010088 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.522063017 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.522070885 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.537919998 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.538007975 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.538039923 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.538047075 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.538091898 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.538106918 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.538345098 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.538394928 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.538402081 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.538476944 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.538548946 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.538598061 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.538604021 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.538642883 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.539081097 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.539232016 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.539330006 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.539387941 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.539395094 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.539434910 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.539923906 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.540076971 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.540129900 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.540134907 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.540616989 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.540678024 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.540683031 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.545289040 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.545386076 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.545392036 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.549937010 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.550033092 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.550065994 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.550071955 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.550246000 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.554147005 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.554202080 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.554234982 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.554254055 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.554908991 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.556134939 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.556179047 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.556215048 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.556232929 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.557238102 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.557238102 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.557256937 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.557277918 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.557699919 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.557749033 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.557754993 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.559389114 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.559412956 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.559437037 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.559448957 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.560837030 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.560909986 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.560915947 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.562890053 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.562910080 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.562922001 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.562927961 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.575098991 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.575120926 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.575181007 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.577168941 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.577188015 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.577308893 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.577424049 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.577475071 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.577481031 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.577565908 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.577639103 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.577686071 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.577691078 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.577769041 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.577816963 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.577821970 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.577862024 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.577909946 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.578037024 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.578090906 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.578099012 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.580130100 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.580204964 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.580209970 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.582535028 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.582587004 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.582592010 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.584005117 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.584017038 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.584182978 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.584383965 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.584445000 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.584450006 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.585597038 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.585608959 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.587141991 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.587249041 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.587304115 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.587308884 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.587346077 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.587728977 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.587740898 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.587853909 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.588565111 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.588578939 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.589216948 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.589231014 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.589488029 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.589497089 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.590161085 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.590221882 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.590334892 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.590342045 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.592082024 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.592158079 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.592164993 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.592905045 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.592924118 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.592988968 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.593782902 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:12.593796015 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:12.594811916 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.594870090 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.594876051 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.597613096 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.597697020 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.597704887 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.600112915 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.600188017 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.600195885 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.602682114 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.602754116 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.602761030 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.605557919 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.605602026 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.605609894 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.607975006 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.608031988 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.608038902 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.610445976 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.610490084 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.610497952 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.612936974 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.613112926 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.613120079 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.615613937 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.615691900 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.615700006 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.617893934 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.617955923 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.617964029 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.620385885 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.620469093 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.620476961 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.623167038 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.623229980 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.623236895 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.638864994 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.638900042 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.638928890 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.638936996 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.638974905 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.639286995 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.639337063 CEST	443	49791	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.639422894 CEST	49791	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.663642883 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.663661003 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.663722038 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.664293051 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.664303064 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.721220016 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.721246004 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.721362114 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.721632004 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:12.721647978 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:12.891784906 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:12.891850948 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:12.891901016 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:12.936734915 CEST	49714	443	192.168.2.5	142.250.185.164
Oct 25, 2024 00:48:12.936789036 CEST	443	49714	142.250.185.164	192.168.2.5
Oct 25, 2024 00:48:12.967765093 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:12.967792034 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:12.967901945 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:12.968274117 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:12.968286991 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:13.144861937 CEST	443	49801	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:13.145107031 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.145173073 CEST	49801	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:13.145200014 CEST	443	49801	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:13.145323992 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.145364046 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.146285057 CEST	443	49801	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:13.146585941 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.146655083 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.146826029 CEST	49801	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:13.147002935 CEST	443	49801	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:13.147222042 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.147305965 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.147460938 CEST	49801	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:13.147532940 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.147547960 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.191332102 CEST	443	49801	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:13.215176105 CEST	49775	443	192.168.2.5	172.202.163.200
Oct 25, 2024 00:48:13.215204000 CEST	443	49775	172.202.163.200	192.168.2.5
Oct 25, 2024 00:48:13.308403015 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.324573040 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.327702999 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.330116987 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.331334114 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.333241940 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.333261013 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.334943056 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.334949017 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.335432053 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.335445881 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.335865021 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.335870028 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.343136072 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.344449997 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.344465017 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.345048904 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.345053911 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.348362923 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.348373890 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.348679066 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.348683119 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.349348068 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.349361897 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.349385977 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.349390030 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.400501966 CEST	443	49801	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:13.403490067 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.403536081 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.403569937 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.403579950 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.403589964 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.403660059 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.403666019 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.404602051 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.404645920 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.404653072 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.410521984 CEST	49801	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:13.410605907 CEST	443	49801	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:13.410797119 CEST	49801	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:13.411878109 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.411933899 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.411940098 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.462600946 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.462938070 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.463140011 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.463191986 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.463466883 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.463618040 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.469454050 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.469454050 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.469475985 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.469486952 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.469680071 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.469680071 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.469686985 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.469695091 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.474246979 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.474257946 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.474318981 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.474781036 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.474922895 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.475012064 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.475567102 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.475598097 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.475600004 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.475661993 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.475806952 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.475825071 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.475929022 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.475946903 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.475946903 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.475954056 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.475963116 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.476069927 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.476069927 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.476078033 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.476110935 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.476115942 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.476253986 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.476263046 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.476300955 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.476368904 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.485542059 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.485552073 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.511739016 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.511746883 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.517402887 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.518742085 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.518780947 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.518840075 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.518848896 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.518892050 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.522685051 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.522933960 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.524796963 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.524804115 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.528309107 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.528335094 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.528526068 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.528533936 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.528568983 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.528903961 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.528961897 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.529325008 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.529339075 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.529387951 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.529515982 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.529522896 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.529612064 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.529656887 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.530002117 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.530019045 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.530070066 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.530127048 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.530133963 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.530256033 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.530270100 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:13.530277967 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:13.530313969 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.530396938 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.530441046 CEST	443	49803	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:13.530486107 CEST	49803	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:13.531485081 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.531491041 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.590884924 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.601260900 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.601422071 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.601437092 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.601807117 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.601943016 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.602525949 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.602674007 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.602874994 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.602936029 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.603598118 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.603610039 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.713452101 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.789371967 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.831983089 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:13.832403898 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:13.832418919 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:13.832788944 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:13.832858086 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:13.833509922 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:13.833735943 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:13.833883047 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:13.833883047 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:13.833897114 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:13.833945990 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:13.874536037 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.874594927 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.874721050 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.874730110 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.874900103 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.875015974 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.875082016 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.883407116 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.883460999 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.892477036 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.892514944 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.892570019 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.892579079 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.892635107 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.909775019 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.909842014 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.910640955 CEST	49814	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:13.910649061 CEST	443	49814	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:13.994424105 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:13.994431973 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:13.995883942 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:14.021694899 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:14.021774054 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:14.021904945 CEST	49822	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:14.021914005 CEST	443	49822	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:14.030774117 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.030802011 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.031424046 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.031632900 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.031642914 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.114020109 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.114063025 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.114084959 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.114232063 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.114299059 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.114305973 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.114485025 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.114527941 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.114537954 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.122657061 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.122797012 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.122803926 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.131288052 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.131341934 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.131411076 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.131417990 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.131501913 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.198568106 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.233788967 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.233841896 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.233858109 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.233876944 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.233894110 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.233932018 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.233939886 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.234009027 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.234275103 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.234349966 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.234364033 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.234376907 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.234442949 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.238778114 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.238828897 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.247488022 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.247525930 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.247539997 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.247549057 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.247586966 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.256982088 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.257060051 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.265110970 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.265415907 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.273792982 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.273828030 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.273828030 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.273840904 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.273876905 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.273884058 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.275355101 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.283490896 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.283557892 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.283565044 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.296920061 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.352968931 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.353002071 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.353041887 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.353055000 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.353071928 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.353104115 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.353105068 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.353228092 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.353235006 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.353548050 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.353585005 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.353591919 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.354238033 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.354279041 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.354309082 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.354317904 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.354330063 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.354362011 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.354419947 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.354680061 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.354685068 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.357635975 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.357667923 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.357734919 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.357742071 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.357868910 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.357877016 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.363338947 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.363450050 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.363462925 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.368680000 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.368819952 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.368822098 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.368832111 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.368876934 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.374088049 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.379302025 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.379416943 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.382834911 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.382846117 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.385344028 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.386898041 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.386907101 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.389245033 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.390186071 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.390203953 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.395632029 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.395659924 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.396342993 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.396353960 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.396465063 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.401117086 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.403341055 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.404627085 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.405261993 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.405441046 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.406364918 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.406435013 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.406469107 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.406486034 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.406537056 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.411674023 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.417475939 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.417551041 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.417562962 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.452189922 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.453593969 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.453605890 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472069979 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472105980 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472145081 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472182035 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.472197056 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472320080 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.472373009 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472400904 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472425938 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472444057 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472460032 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.472467899 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.472511053 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.472511053 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.473138094 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.473231077 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.473264933 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.473299026 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.473325014 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.473335028 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.473381042 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.473948956 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.474020958 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.474026918 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.474076986 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.474116087 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.474150896 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.474159002 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.474231005 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.474901915 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.478703976 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.478734016 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.478765965 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.478775024 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.480724096 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.483403921 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.486609936 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.486641884 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.486670971 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.486680984 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.486727953 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.489969969 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.492583990 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.492614031 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.492676973 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.492686987 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.493304014 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.495522976 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.498786926 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.498822927 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.498871088 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.498879910 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.499633074 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.501687050 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.504424095 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.504472971 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.504561901 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.504571915 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.504771948 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.507322073 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.510067940 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.510113001 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.510143042 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.510150909 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.510214090 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.512929916 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.519244909 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.519334078 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.519345999 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.519448042 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.519551992 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.519591093 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.519599915 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.521259069 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.521331072 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.521341085 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.521382093 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.521389008 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.524115086 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.526578903 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.526665926 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.526691914 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.526715994 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.526762009 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.529167891 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.529328108 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.529344082 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.532047987 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.534499884 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.534615993 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.534616947 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.534648895 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.534681082 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.536906004 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.537244081 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.537251949 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.539465904 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.539943933 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.539951086 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.541860104 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.541950941 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.541958094 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.544455051 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.546735048 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.546741009 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.546825886 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.547698975 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.547704935 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.549288988 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.550417900 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.550425053 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.551743031 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.551851988 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.551858902 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.577558041 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.577603102 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.577617884 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.577631950 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.577693939 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.637726068 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.640054941 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.640106916 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.640255928 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.640260935 CEST	443	49838	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:14.640364885 CEST	49838	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:14.747493029 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:14.747523069 CEST	443	49858	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:14.747637987 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:14.748610020 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:14.748622894 CEST	443	49858	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:14.797147036 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.797204018 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.798695087 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.798708916 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.799329042 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.799350023 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.799959898 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.799967051 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.800937891 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.800952911 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.801335096 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.801340103 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.801664114 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.801677942 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.802011967 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:14.802016973 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:14.864517927 CEST	49862	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:14.864557028 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:14.864820957 CEST	49862	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:14.866308928 CEST	49862	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:14.866324902 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:14.894716978 CEST	49863	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:14.894747972 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:14.894823074 CEST	49863	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:14.895649910 CEST	49863	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:14.895658970 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.050682068 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.050705910 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.050806046 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.050863028 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.050885916 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.051011086 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.051757097 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.051765919 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.051976919 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.051987886 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.052793980 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.052985907 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.052992105 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.053961039 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.054058075 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.054676056 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.054721117 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.056253910 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.056365967 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.058263063 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.058268070 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.167870045 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.168107033 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.168169022 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.169476032 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.169600010 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.169636011 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.169676065 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.170182943 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.170308113 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.173202991 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.173316002 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.173470020 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.176115990 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.176130056 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.176140070 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.176145077 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.176323891 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.176343918 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.176357031 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.176363945 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.195770979 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.195780039 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.196033955 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.199785948 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.199798107 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.199822903 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.199827909 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.202455044 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.202472925 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.202550888 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.203663111 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.203675985 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.203771114 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.204780102 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.204853058 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.205075979 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.205085039 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.205105066 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.205686092 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.205693960 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.205847979 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.205874920 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.206520081 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.206542969 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.206794024 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.206938028 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.206948996 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.250694036 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.251673937 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.251744032 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.253487110 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.253501892 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.357211113 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.357361078 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.357461929 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.357511044 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.357511044 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.357542992 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.357934952 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.357991934 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.358006001 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.358028889 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.358418941 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.358431101 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.358695984 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.359529972 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.359541893 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.383110046 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.383486986 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.383562088 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.383858919 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.383903980 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.383927107 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.383940935 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.387065887 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.387094021 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.387254953 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.387506008 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.387527943 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.400713921 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.455833912 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.483068943 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.483269930 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.483371973 CEST	49854	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:15.483409882 CEST	443	49854	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:15.535685062 CEST	49879	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:15.535717010 CEST	443	49879	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:15.536211967 CEST	49879	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:15.536555052 CEST	49879	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:15.536562920 CEST	443	49879	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:15.895159006 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.898962975 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.898979902 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.900033951 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.900083065 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.904875040 CEST	443	49858	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:15.911209106 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:15.911217928 CEST	443	49858	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:15.912332058 CEST	443	49858	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:15.912381887 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:15.915869951 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:15.915935993 CEST	443	49858	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:15.916650057 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.918397903 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.920356989 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.920422077 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.923125982 CEST	49863	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:15.923134089 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.923556089 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.925802946 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.926235914 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.926242113 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.927362919 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.927416086 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.928132057 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:15.928139925 CEST	443	49858	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:15.929246902 CEST	49863	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:15.929321051 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.930455923 CEST	49862	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:15.930480957 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.930915117 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.930923939 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.930938959 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.931374073 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.931447983 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.937593937 CEST	49862	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:15.937704086 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.938633919 CEST	49863	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:15.943572044 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:15.943593025 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:15.946758986 CEST	49862	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:15.962430954 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.964576006 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.964613914 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.966069937 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.966670036 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.966696978 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.967082977 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.967096090 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.967125893 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.967133999 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.968555927 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.969247103 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.969265938 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.969871044 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.969876051 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.976845980 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.979342937 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.985078096 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.985093117 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.986546040 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:15.986551046 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:15.987345934 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:15.993916988 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.008913994 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.008935928 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:16.097187042 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.097485065 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.097546101 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.097601891 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.097601891 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.097634077 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.097659111 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.099073887 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.099292040 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.099526882 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.099556923 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.099570990 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.099581003 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.099586010 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.100656986 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.100709915 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.100847006 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.101051092 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.101074934 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.103378057 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.103389025 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.103447914 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.103570938 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.103581905 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.104279995 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.104665041 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.104760885 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.104788065 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.104788065 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.104799986 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.104809046 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.106920958 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.106942892 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.107173920 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.107296944 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.107302904 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.114661932 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.114912033 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.114963055 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.115020990 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.115026951 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.115047932 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.115051985 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.117721081 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.117741108 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.117798090 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.117994070 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.118006945 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.139473915 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.139878035 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.139895916 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.140381098 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.140386105 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.186224937 CEST	443	49858	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:16.197952986 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.199502945 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.199569941 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.199598074 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.199620008 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.199630976 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.199661016 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.199661970 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.199671030 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.199698925 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.199704885 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.208076954 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.208120108 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.208127022 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.212887049 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.212933064 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.212961912 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.212991953 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.213010073 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.213053942 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.213311911 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.214082003 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.214144945 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.214153051 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.215806961 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.221127033 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.221216917 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.221227884 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.250329018 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:16.250413895 CEST	443	49858	142.250.186.68	192.168.2.5
Oct 25, 2024 00:48:16.250591993 CEST	49858	443	192.168.2.5	142.250.186.68
Oct 25, 2024 00:48:16.284630060 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.285108089 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.285167933 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.291182041 CEST	49862	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.291181087 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.291189909 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.291198969 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.317682028 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.317797899 CEST	49863	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.318212986 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.318315983 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.318324089 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.318485022 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.318581104 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.318589926 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.318702936 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.318923950 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.318931103 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.319144011 CEST	49862	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.319216967 CEST	443	49862	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.319267035 CEST	49862	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.319395065 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.319442987 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.319449902 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.322978973 CEST	49863	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.323008060 CEST	443	49863	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.325956106 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.326045036 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.326051950 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.334270000 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.334319115 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.334326982 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.335063934 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.335098982 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.335165977 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.336237907 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.336307049 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.336323023 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.336457014 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.336508036 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.336513996 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.336647987 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.336703062 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.336708069 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.337349892 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.337399006 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.337408066 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.339081049 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.339135885 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.339144945 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.342978954 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.343151093 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.343162060 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.346451998 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.346473932 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.347654104 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.347733974 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.347747087 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.351346016 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.351553917 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.351563931 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.358855009 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.358932018 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.358942032 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.359694004 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.359745026 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.359751940 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.364188910 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.364248991 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.364262104 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.372656107 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.372761965 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.372827053 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.372838020 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.372878075 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.380434036 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.382622004 CEST	443	49879	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:16.416867971 CEST	49879	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:16.416877985 CEST	443	49879	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:16.417341948 CEST	443	49879	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:16.423288107 CEST	49879	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:16.423382044 CEST	443	49879	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:16.425759077 CEST	49879	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:16.459566116 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.459645987 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.459661007 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.459738970 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.459790945 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.459796906 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.460021973 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.460077047 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.460082054 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.460179090 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.460352898 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.460357904 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.471328974 CEST	443	49879	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:16.473845005 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.473916054 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.475718021 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:16.475752115 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:16.475900888 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:16.476500034 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:16.476515055 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:16.477118015 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:16.477152109 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:16.477355957 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:16.478533030 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:16.478547096 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:16.480878115 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:16.480910063 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:16.481123924 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:16.481512070 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:16.481527090 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:16.486182928 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:16.486191034 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:16.486377954 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:16.486972094 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:16.486991882 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:16.497735977 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.497883081 CEST	443	49868	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.497962952 CEST	49868	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.555859089 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:16.555893898 CEST	443	49902	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:16.556128025 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:16.556787014 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:16.556807041 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:16.556859970 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:16.557528019 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:16.557538033 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:16.558088064 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:16.558100939 CEST	443	49902	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:16.558954954 CEST	49869	443	192.168.2.5	64.233.167.157
Oct 25, 2024 00:48:16.558965921 CEST	443	49869	64.233.167.157	192.168.2.5
Oct 25, 2024 00:48:16.629592896 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:16.629628897 CEST	443	49908	172.217.18.14	192.168.2.5
Oct 25, 2024 00:48:16.629678011 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:16.629904032 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:16.629916906 CEST	443	49908	172.217.18.14	192.168.2.5
Oct 25, 2024 00:48:16.668601036 CEST	443	49879	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:16.698151112 CEST	49879	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:16.698235035 CEST	443	49879	216.58.206.65	192.168.2.5
Oct 25, 2024 00:48:16.698292971 CEST	49879	443	192.168.2.5	216.58.206.65
Oct 25, 2024 00:48:16.851159096 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.861702919 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.866897106 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.867991924 CEST	49910	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.868026972 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.868093967 CEST	49910	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.868751049 CEST	49910	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.868767023 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.869247913 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.869270086 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.869550943 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.869730949 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:16.869746923 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:16.880007982 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:16.901333094 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:16.916779995 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.075324059 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.080890894 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.083511114 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:17.091330051 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.091409922 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.187872887 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:17.187890053 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:17.189783096 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:17.189807892 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:17.189841032 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:17.204839945 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.209434986 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:17.209593058 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:17.210555077 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.210567951 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.210957050 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.211009979 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.211688042 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.211760998 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.225918055 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:17.225939035 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:17.226638079 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.226701021 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.231873035 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.231894970 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.234153986 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.234185934 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.234251022 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.234472990 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.234483957 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.251904964 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.251916885 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.252361059 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.252365112 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.252685070 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.252706051 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.253079891 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.253084898 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.253401995 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.253417015 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.253453016 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.253458977 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.255844116 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.255865097 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.256263971 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.256268978 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.256680012 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.256704092 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.256792068 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.256953955 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.256964922 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.257514000 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.257539034 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.258447886 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.258452892 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.314253092 CEST	49914	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:17.314287901 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:17.314342976 CEST	49914	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:17.314682007 CEST	49914	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:17.314693928 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:17.330164909 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.330796003 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.330806971 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.331839085 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.331980944 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.332874060 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:17.333005905 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.333069086 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.333298922 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:17.333323956 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:17.333365917 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.333373070 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.333522081 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:17.333724022 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:17.333730936 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:17.334584951 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:17.334661961 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:17.334759951 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:17.334809065 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:17.335633993 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:17.335690022 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:17.336076021 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:17.336082935 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:17.336535931 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:17.336599112 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:17.336971998 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:17.336977959 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:17.371637106 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:17.381917000 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.382194996 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.382261992 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.382339001 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.382352114 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.382358074 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.382363081 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.384582043 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.384690046 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:17.384728909 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.384902000 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.384990931 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.385040045 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.385092974 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.386185884 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:17.386254072 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:17.386797905 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.386809111 CEST	49895	443	192.168.2.5	34.96.105.8
Oct 25, 2024 00:48:17.386811018 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.386821032 CEST	443	49895	34.96.105.8	192.168.2.5
Oct 25, 2024 00:48:17.386823893 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.386837006 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.387882948 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.388112068 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.388165951 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.388484001 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.388510942 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.388566017 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.388602018 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.388621092 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.388633966 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.388638973 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.388891935 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.388905048 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.390157938 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.390165091 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.390180111 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.390185118 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.392771959 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.392796993 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.392857075 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.392925024 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.392946005 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.393008947 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.393183947 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.393196106 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.393390894 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.393399954 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.393536091 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.393547058 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.393646002 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.393754005 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:17.393764973 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.414618969 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.415267944 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.423023939 CEST	443	49902	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.423366070 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.423378944 CEST	443	49902	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.424422979 CEST	443	49902	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.424474955 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.425594091 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.425653934 CEST	443	49902	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.426028967 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.426035881 CEST	443	49902	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.485975027 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:17.485997915 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.486001968 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:17.494609118 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.494709969 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.495542049 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.495728970 CEST	443	49894	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.495805025 CEST	49894	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.519542933 CEST	443	49908	172.217.18.14	192.168.2.5
Oct 25, 2024 00:48:17.519821882 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:17.519833088 CEST	443	49908	172.217.18.14	192.168.2.5
Oct 25, 2024 00:48:17.521080017 CEST	443	49908	172.217.18.14	192.168.2.5
Oct 25, 2024 00:48:17.521136999 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:17.522145033 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:17.522219896 CEST	443	49908	172.217.18.14	192.168.2.5
Oct 25, 2024 00:48:17.522648096 CEST	49921	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:17.522722006 CEST	443	49921	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:17.522727966 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:17.522737026 CEST	443	49908	172.217.18.14	192.168.2.5
Oct 25, 2024 00:48:17.522806883 CEST	49921	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:17.523127079 CEST	49921	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:17.523158073 CEST	443	49921	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:17.540015936 CEST	49924	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:17.540049076 CEST	443	49924	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:17.540112972 CEST	49924	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:17.540183067 CEST	49925	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:17.540215015 CEST	443	49925	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:17.540313005 CEST	49925	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:17.540421009 CEST	49924	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:17.540442944 CEST	443	49924	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:17.540631056 CEST	49925	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:17.540641069 CEST	443	49925	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:17.582484961 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:17.582588911 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:17.582639933 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.582715034 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:17.582802057 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.582978010 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.585180998 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:17.585282087 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:17.585324049 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:17.588268042 CEST	49896	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.588291883 CEST	443	49896	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.588951111 CEST	49899	443	192.168.2.5	208.93.169.131
Oct 25, 2024 00:48:17.588956118 CEST	443	49899	208.93.169.131	192.168.2.5
Oct 25, 2024 00:48:17.593146086 CEST	49927	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.593170881 CEST	443	49927	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.593229055 CEST	49927	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.593657017 CEST	49928	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.593682051 CEST	443	49928	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.593730927 CEST	49928	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.593892097 CEST	49927	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:17.593900919 CEST	443	49927	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:17.593998909 CEST	49898	443	192.168.2.5	51.89.9.252
Oct 25, 2024 00:48:17.594007015 CEST	443	49898	51.89.9.252	192.168.2.5
Oct 25, 2024 00:48:17.595060110 CEST	49928	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.595074892 CEST	443	49928	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.595573902 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:17.599670887 CEST	49929	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.599682093 CEST	443	49929	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.599787951 CEST	49929	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.600464106 CEST	49929	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.600478888 CEST	443	49929	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.687766075 CEST	443	49902	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.690517902 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.690607071 CEST	443	49902	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.690673113 CEST	49902	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.693753958 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.693948030 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.693960905 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.695107937 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.695167065 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.696686029 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.696752071 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.696906090 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.696914911 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.720552921 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.720962048 CEST	49910	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.720979929 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.721364021 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.721771002 CEST	49910	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.721837044 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.721904039 CEST	49910	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.731823921 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.732031107 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.732050896 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.732456923 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.732525110 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.733167887 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.733232021 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.733711958 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.733777046 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.734009027 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.734016895 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.763328075 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.787692070 CEST	443	49908	172.217.18.14	192.168.2.5
Oct 25, 2024 00:48:17.787753105 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:17.794557095 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.794653893 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:17.813030958 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:17.813163042 CEST	443	49908	172.217.18.14	192.168.2.5
Oct 25, 2024 00:48:17.813252926 CEST	49908	443	192.168.2.5	172.217.18.14
Oct 25, 2024 00:48:17.846066952 CEST	49934	443	192.168.2.5	18.245.60.28
Oct 25, 2024 00:48:17.846076965 CEST	443	49934	18.245.60.28	192.168.2.5
Oct 25, 2024 00:48:17.846200943 CEST	49934	443	192.168.2.5	18.245.60.28
Oct 25, 2024 00:48:17.847242117 CEST	49934	443	192.168.2.5	18.245.60.28
Oct 25, 2024 00:48:17.847253084 CEST	443	49934	18.245.60.28	192.168.2.5
Oct 25, 2024 00:48:17.856566906 CEST	49935	443	192.168.2.5	209.85.165.168
Oct 25, 2024 00:48:17.856584072 CEST	443	49935	209.85.165.168	192.168.2.5
Oct 25, 2024 00:48:17.856677055 CEST	49935	443	192.168.2.5	209.85.165.168
Oct 25, 2024 00:48:17.857215881 CEST	49935	443	192.168.2.5	209.85.165.168
Oct 25, 2024 00:48:17.857228994 CEST	443	49935	209.85.165.168	192.168.2.5
Oct 25, 2024 00:48:17.874228001 CEST	49936	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.874254942 CEST	443	49936	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.874330997 CEST	49936	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.874501944 CEST	49936	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:17.874514103 CEST	443	49936	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:17.949019909 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.949098110 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.949210882 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.949480057 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.949491024 CEST	443	49903	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.949513912 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.949542046 CEST	49903	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.950830936 CEST	49939	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.950858116 CEST	443	49939	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.950959921 CEST	49939	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.951153994 CEST	49939	443	192.168.2.5	23.109.14.96
Oct 25, 2024 00:48:17.951169014 CEST	443	49939	23.109.14.96	192.168.2.5
Oct 25, 2024 00:48:17.980592966 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:17.991111040 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:17.997852087 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.003067970 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.003082991 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.003554106 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.003559113 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.086380005 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.086406946 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.091133118 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.091245890 CEST	443	49911	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.091320992 CEST	49911	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.096276045 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.097284079 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.097292900 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.097801924 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.100759983 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.100841999 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.100872040 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.100931883 CEST	49910	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.101337910 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.117754936 CEST	49910	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.117773056 CEST	443	49910	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.123531103 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.127356052 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.127376080 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.128077984 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.128083944 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.128521919 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.129549026 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.129579067 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.130244970 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.130359888 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.130409956 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.130508900 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.130515099 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.130758047 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.130770922 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.130783081 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.130788088 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.137701035 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.138360023 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.138381958 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.143343925 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.145175934 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.179292917 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.179301977 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.184854984 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:18.240271091 CEST	49914	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:18.240292072 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:18.241401911 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:18.241415977 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:18.241563082 CEST	49914	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:18.243191957 CEST	49914	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:18.243274927 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:18.243459940 CEST	49914	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:18.243474007 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:18.258860111 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.259026051 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.259207010 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.262144089 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.262355089 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.262619972 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.287512064 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.288285971 CEST	49914	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:18.293391943 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.293400049 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.296781063 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.296787024 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.311136961 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.311157942 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.311172009 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.311181068 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.311832905 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.311867952 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.311882973 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.311891079 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.315161943 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.315201998 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.315340042 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.315603971 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.315613985 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.319262981 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.319284916 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.319472075 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.319964886 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.319974899 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.322683096 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.322715998 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.322777033 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.325758934 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.325773954 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.643843889 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.644028902 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 25, 2024 00:48:18.644087076 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.644134998 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 25, 2024 00:48:18.644139051 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.644176006 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.644234896 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.644243956 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.644279003 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.646586895 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.646697044 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.647475958 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.647475958 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.647490978 CEST	443	49912	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.647571087 CEST	49912	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.652681112 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:18.652908087 CEST	443	49914	172.217.16.194	192.168.2.5
Oct 25, 2024 00:48:18.652976990 CEST	49914	443	192.168.2.5	172.217.16.194
Oct 25, 2024 00:48:18.661355972 CEST	443	49929	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.661475897 CEST	443	49925	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.662309885 CEST	49925	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:18.662338972 CEST	443	49925	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.662914991 CEST	443	49927	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:18.663337946 CEST	49929	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.663343906 CEST	443	49929	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.663769007 CEST	443	49921	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:18.663816929 CEST	443	49925	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.663876057 CEST	49925	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:18.664001942 CEST	443	49929	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.664619923 CEST	49927	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:18.664625883 CEST	443	49927	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:18.665110111 CEST	443	49927	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:18.665327072 CEST	443	49924	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.665739059 CEST	443	49928	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.666552067 CEST	49927	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:18.667525053 CEST	443	49927	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:18.667907000 CEST	49929	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.667989016 CEST	443	49929	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.671431065 CEST	443	49935	209.85.165.168	192.168.2.5
Oct 25, 2024 00:48:18.672194004 CEST	49925	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:18.672275066 CEST	443	49925	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.672538042 CEST	49921	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:18.672560930 CEST	443	49921	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:18.673048973 CEST	443	49921	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:18.673213959 CEST	49928	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.673223019 CEST	443	49928	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.674026966 CEST	49924	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:18.674037933 CEST	443	49924	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.674747944 CEST	49927	443	192.168.2.5	185.184.8.90
Oct 25, 2024 00:48:18.675025940 CEST	443	49924	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.675096989 CEST	49924	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:18.675292015 CEST	443	49928	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.675342083 CEST	49928	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.675721884 CEST	49929	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.676059961 CEST	49925	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:18.676079035 CEST	443	49925	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.678311110 CEST	49928	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.678380966 CEST	443	49928	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.679495096 CEST	49924	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:18.679558039 CEST	443	49924	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.681646109 CEST	49921	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:18.681911945 CEST	443	49921	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:18.681952000 CEST	49935	443	192.168.2.5	209.85.165.168
Oct 25, 2024 00:48:18.681960106 CEST	443	49935	209.85.165.168	192.168.2.5
Oct 25, 2024 00:48:18.683760881 CEST	49928	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.683768034 CEST	443	49928	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.683984995 CEST	49924	443	192.168.2.5	74.125.133.156
Oct 25, 2024 00:48:18.684005022 CEST	443	49924	74.125.133.156	192.168.2.5
Oct 25, 2024 00:48:18.684206963 CEST	443	49935	209.85.165.168	192.168.2.5
Oct 25, 2024 00:48:18.684282064 CEST	49935	443	192.168.2.5	209.85.165.168
Oct 25, 2024 00:48:18.684633017 CEST	49921	443	192.168.2.5	142.250.184.206
Oct 25, 2024 00:48:18.690681934 CEST	49935	443	192.168.2.5	209.85.165.168
Oct 25, 2024 00:48:18.690826893 CEST	443	49935	209.85.165.168	192.168.2.5
Oct 25, 2024 00:48:18.691883087 CEST	49935	443	192.168.2.5	209.85.165.168
Oct 25, 2024 00:48:18.691889048 CEST	443	49935	209.85.165.168	192.168.2.5
Oct 25, 2024 00:48:18.695851088 CEST	49951	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.695882082 CEST	443	49951	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.696501017 CEST	49951	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.697688103 CEST	49951	443	192.168.2.5	142.250.184.238
Oct 25, 2024 00:48:18.697700024 CEST	443	49951	142.250.184.238	192.168.2.5
Oct 25, 2024 00:48:18.706680059 CEST	443	49934	18.245.60.28	192.168.2.5
Oct 25, 2024 00:48:18.709114075 CEST	49934	443	192.168.2.5	18.245.60.28
Oct 25, 2024 00:48:18.709124088 CEST	443	49934	18.245.60.28	192.168.2.5
Oct 25, 2024 00:48:18.710290909 CEST	443	49934	18.245.60.28	192.168.2.5
Oct 25, 2024 00:48:18.711338043 CEST	49934	443	192.168.2.5	18.245.60.28
Oct 25, 2024 00:48:18.712960958 CEST	49934	443	192.168.2.5	18.245.60.28
Oct 25, 2024 00:48:18.713027954 CEST	443	49934	18.245.60.28	192.168.2.5
Oct 25, 2024 00:48:18.713228941 CEST	49934	443	192.168.2.5	18.245.60.28
Oct 25, 2024 00:48:18.713241100 CEST	443	49934	18.245.60.28	192.168.2.5
Oct 25, 2024 00:48:18.715332031 CEST	443	49927	185.184.8.90	192.168.2.5
Oct 25, 2024 00:48:18.723330021 CEST	443	49929	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.727327108 CEST	443	49921	142.250.184.206	192.168.2.5
Oct 25, 2024 00:48:18.734313965 CEST	443	49936	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.743165016 CEST	49936	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.743175030 CEST	443	49936	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.744359970 CEST	443	49936	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.744425058 CEST	49936	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.745023966 CEST	49936	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.745111942 CEST	443	49936	216.58.212.130	192.168.2.5
Oct 25, 2024 00:48:18.745451927 CEST	49936	443	192.168.2.5	216.58.212.130
Oct 25, 2024 00:48:18.745465040 CEST	443	49936	216.58.212.130	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 00:47:59.099354982 CEST	192.168.2.5	1.1.1.1	0xf751	Standard query (0)	www.xn--invitacionesdecumpleaos-dic.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:47:59.099594116 CEST	192.168.2.5	1.1.1.1	0x3483	Standard query (0)	www.xn--invitacionesdecumpleaos-dic.org	65	IN (0x0001)	false
Oct 25, 2024 00:48:00.635040045 CEST	192.168.2.5	1.1.1.1	0x49f8	Standard query (0)	www.xn--invitacionesdecumpleaos-dic.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:00.635519981 CEST	192.168.2.5	1.1.1.1	0x76ba	Standard query (0)	www.xn--invitacionesdecumpleaos-dic.org	65	IN (0x0001)	false
Oct 25, 2024 00:48:01.997442961 CEST	192.168.2.5	1.1.1.1	0xb0be	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:01.999373913 CEST	192.168.2.5	1.1.1.1	0xd0a6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:02.234096050 CEST	192.168.2.5	1.1.1.1	0xc36c	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:02.234282970 CEST	192.168.2.5	1.1.1.1	0x189b	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:03.342398882 CEST	192.168.2.5	1.1.1.1	0xcaca	Standard query (0)	www.xn--invitacionesdecumpleaos-dic.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:03.342792034 CEST	192.168.2.5	1.1.1.1	0x4fb9	Standard query (0)	www.xn--invitacionesdecumpleaos-dic.org	65	IN (0x0001)	false
Oct 25, 2024 00:48:03.622227907 CEST	192.168.2.5	1.1.1.1	0x40a	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:03.622397900 CEST	192.168.2.5	1.1.1.1	0xab7e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:07.042370081 CEST	192.168.2.5	1.1.1.1	0x88ee	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:07.043437958 CEST	192.168.2.5	1.1.1.1	0xbcc	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:07.087662935 CEST	192.168.2.5	1.1.1.1	0x289c	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:07.092648029 CEST	192.168.2.5	1.1.1.1	0x76e4	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Oct 25, 2024 00:48:08.626594067 CEST	192.168.2.5	1.1.1.1	0x3e31	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:08.627171040 CEST	192.168.2.5	1.1.1.1	0xd005	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Oct 25, 2024 00:48:08.630454063 CEST	192.168.2.5	1.1.1.1	0xce98	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:08.630840063 CEST	192.168.2.5	1.1.1.1	0x4399	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Oct 25, 2024 00:48:10.649765015 CEST	192.168.2.5	1.1.1.1	0x6cd7	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:10.650471926 CEST	192.168.2.5	1.1.1.1	0xe2ca	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:10.917277098 CEST	192.168.2.5	1.1.1.1	0xf79e	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:10.917730093 CEST	192.168.2.5	1.1.1.1	0xb3ea	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Oct 25, 2024 00:48:10.918864012 CEST	192.168.2.5	1.1.1.1	0x56e5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:10.919163942 CEST	192.168.2.5	1.1.1.1	0xfb59	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:12.189837933 CEST	192.168.2.5	1.1.1.1	0x2634	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:12.189985037 CEST	192.168.2.5	1.1.1.1	0x13b5	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Oct 25, 2024 00:48:12.959358931 CEST	192.168.2.5	1.1.1.1	0x8f91	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:12.959503889 CEST	192.168.2.5	1.1.1.1	0x888	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:14.818413973 CEST	192.168.2.5	1.1.1.1	0x5155	Standard query (0)	bid.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:14.818804026 CEST	192.168.2.5	1.1.1.1	0xc22	Standard query (0)	bid.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.464876890 CEST	192.168.2.5	1.1.1.1	0x90be	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.465508938 CEST	192.168.2.5	1.1.1.1	0x98dd	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.466705084 CEST	192.168.2.5	1.1.1.1	0x96e	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.467148066 CEST	192.168.2.5	1.1.1.1	0x75cb	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.468777895 CEST	192.168.2.5	1.1.1.1	0xef3b	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.469419003 CEST	192.168.2.5	1.1.1.1	0x1b5d	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.470386028 CEST	192.168.2.5	1.1.1.1	0x75ab	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.471019983 CEST	192.168.2.5	1.1.1.1	0x25a6	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.473757982 CEST	192.168.2.5	1.1.1.1	0x61ba	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.474630117 CEST	192.168.2.5	1.1.1.1	0xd41e	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.490266085 CEST	192.168.2.5	1.1.1.1	0xb3df	Standard query (0)	a.rfihub.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.490515947 CEST	192.168.2.5	1.1.1.1	0xc1a1	Standard query (0)	a.rfihub.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.492130995 CEST	192.168.2.5	1.1.1.1	0xbb40	Standard query (0)	sync.gonet-ads.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.492646933 CEST	192.168.2.5	1.1.1.1	0x1750	Standard query (0)	sync.gonet-ads.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.493397951 CEST	192.168.2.5	1.1.1.1	0x16c9	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.494039059 CEST	192.168.2.5	1.1.1.1	0x690c	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.619956970 CEST	192.168.2.5	1.1.1.1	0x13ec	Standard query (0)	gcdn.2mdn.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.620335102 CEST	192.168.2.5	1.1.1.1	0xca	Standard query (0)	gcdn.2mdn.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:16.626815081 CEST	192.168.2.5	1.1.1.1	0x8808	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.627079964 CEST	192.168.2.5	1.1.1.1	0xcc33	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:17.474921942 CEST	192.168.2.5	1.1.1.1	0x4246	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.475064993 CEST	192.168.2.5	1.1.1.1	0x3282	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:17.529712915 CEST	192.168.2.5	1.1.1.1	0x53af	Standard query (0)	bid.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.529881001 CEST	192.168.2.5	1.1.1.1	0xd5a4	Standard query (0)	bid.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:17.812247038 CEST	192.168.2.5	1.1.1.1	0xee67	Standard query (0)	secure.flashtalking.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.812773943 CEST	192.168.2.5	1.1.1.1	0xe2df	Standard query (0)	secure.flashtalking.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:17.814699888 CEST	192.168.2.5	1.1.1.1	0x3e4c	Standard query (0)	r3---sn-q4flrne7.c.2mdn.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.814857006 CEST	192.168.2.5	1.1.1.1	0x9288	Standard query (0)	r3---sn-q4flrne7.c.2mdn.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:17.834321022 CEST	192.168.2.5	1.1.1.1	0xe6e8	Standard query (0)	cdn.flashtalking.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.834466934 CEST	192.168.2.5	1.1.1.1	0xfe1d	Standard query (0)	cdn.flashtalking.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:17.906260014 CEST	192.168.2.5	1.1.1.1	0x491c	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.906470060 CEST	192.168.2.5	1.1.1.1	0x67b5	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:18.218648911 CEST	192.168.2.5	1.1.1.1	0x8e4c	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:18.218723059 CEST	192.168.2.5	1.1.1.1	0xad49	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:18.831964016 CEST	192.168.2.5	1.1.1.1	0x9ed1	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:18.832681894 CEST	192.168.2.5	1.1.1.1	0xd76	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:18.884021044 CEST	192.168.2.5	1.1.1.1	0x913b	Standard query (0)	free.webcompanion.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:18.884344101 CEST	192.168.2.5	1.1.1.1	0xe92e	Standard query (0)	free.webcompanion.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:18.895360947 CEST	192.168.2.5	1.1.1.1	0x6619	Standard query (0)	r3---sn-q4flrne7.c.2mdn.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:18.895570040 CEST	192.168.2.5	1.1.1.1	0x27b1	Standard query (0)	r3---sn-q4flrne7.c.2mdn.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:20.240439892 CEST	192.168.2.5	1.1.1.1	0x2e5a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:20.240595102 CEST	192.168.2.5	1.1.1.1	0xbf6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:21.046216011 CEST	192.168.2.5	1.1.1.1	0xf790	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:21.046802044 CEST	192.168.2.5	1.1.1.1	0xb7ef	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:21.350019932 CEST	192.168.2.5	1.1.1.1	0x9dfe	Standard query (0)	secure.flashtalking.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:21.350224972 CEST	192.168.2.5	1.1.1.1	0x57fc	Standard query (0)	secure.flashtalking.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:21.361196041 CEST	192.168.2.5	1.1.1.1	0x2e96	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:21.361573935 CEST	192.168.2.5	1.1.1.1	0xf6bb	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:22.759980917 CEST	192.168.2.5	1.1.1.1	0x7ba4	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:22.760267019 CEST	192.168.2.5	1.1.1.1	0xdaa3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:22.883343935 CEST	192.168.2.5	1.1.1.1	0xd0bf	Standard query (0)	free.webcompanion.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:22.883852959 CEST	192.168.2.5	1.1.1.1	0xa554	Standard query (0)	free.webcompanion.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:22.893203974 CEST	192.168.2.5	1.1.1.1	0xa7ce	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:22.893481970 CEST	192.168.2.5	1.1.1.1	0x3632	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 25, 2024 00:48:23.053937912 CEST	192.168.2.5	1.1.1.1	0xf032	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:23.054539919 CEST	192.168.2.5	1.1.1.1	0xdd66	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:23.972695112 CEST	192.168.2.5	1.1.1.1	0xdee	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:23.983658075 CEST	192.168.2.5	1.1.1.1	0x6832	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 25, 2024 00:48:25.055335045 CEST	192.168.2.5	1.1.1.1	0x5a18	Standard query (0)	cloud.webcompanion.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.056051970 CEST	192.168.2.5	1.1.1.1	0x39d5	Standard query (0)	cloud.webcompanion.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:25.057182074 CEST	192.168.2.5	1.1.1.1	0xfa53	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.057555914 CEST	192.168.2.5	1.1.1.1	0xcef0	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 25, 2024 00:48:25.899389029 CEST	192.168.2.5	1.1.1.1	0x9db5	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.899949074 CEST	192.168.2.5	1.1.1.1	0x866	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:25.986874104 CEST	192.168.2.5	1.1.1.1	0x6b6c	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.987257957 CEST	192.168.2.5	1.1.1.1	0x4b2d	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 25, 2024 00:48:27.177884102 CEST	192.168.2.5	1.1.1.1	0xa548	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.178139925 CEST	192.168.2.5	1.1.1.1	0xf37	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:27.856931925 CEST	192.168.2.5	1.1.1.1	0x77c9	Standard query (0)	o.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.857119083 CEST	192.168.2.5	1.1.1.1	0x4301	Standard query (0)	o.clarity.ms	65	IN (0x0001)	false
Oct 25, 2024 00:48:27.905811071 CEST	192.168.2.5	1.1.1.1	0xe559	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.906200886 CEST	192.168.2.5	1.1.1.1	0x2e2b	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:27.907054901 CEST	192.168.2.5	1.1.1.1	0xaacb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.907371044 CEST	192.168.2.5	1.1.1.1	0x11a7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:27.926464081 CEST	192.168.2.5	1.1.1.1	0x76ba	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.926678896 CEST	192.168.2.5	1.1.1.1	0x5c71	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:27.968950033 CEST	192.168.2.5	1.1.1.1	0x317d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.981612921 CEST	192.168.2.5	1.1.1.1	0xf54c	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:28.261089087 CEST	192.168.2.5	1.1.1.1	0x52dc	Standard query (0)	cloud.webcompanion.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:28.261238098 CEST	192.168.2.5	1.1.1.1	0xf9b	Standard query (0)	cloud.webcompanion.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:31.512423992 CEST	192.168.2.5	1.1.1.1	0x740c	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:31.512602091 CEST	192.168.2.5	1.1.1.1	0x34ef	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 25, 2024 00:48:35.216757059 CEST	192.168.2.5	1.1.1.1	0x8adb	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:35.217058897 CEST	192.168.2.5	1.1.1.1	0x28ec	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 25, 2024 00:48:51.202544928 CEST	192.168.2.5	1.1.1.1	0xd82c	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:51.202841043 CEST	192.168.2.5	1.1.1.1	0x6176	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 00:48:51.205038071 CEST	192.168.2.5	1.1.1.1	0xe005	Standard query (0)	privacyportal-eu.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:51.205210924 CEST	192.168.2.5	1.1.1.1	0xfa98	Standard query (0)	privacyportal-eu.onetrust.com	65	IN (0x0001)	false
Oct 25, 2024 00:48:53.318419933 CEST	192.168.2.5	1.1.1.1	0xebc4	Standard query (0)	privacyportal-eu.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:53.318658113 CEST	192.168.2.5	1.1.1.1	0x87a1	Standard query (0)	privacyportal-eu.onetrust.com	65	IN (0x0001)	false
Oct 25, 2024 00:49:07.886518002 CEST	192.168.2.5	1.1.1.1	0xe949	Standard query (0)	publickeyservice.aws.privacysandboxservices.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:07.886774063 CEST	192.168.2.5	1.1.1.1	0xf368	Standard query (0)	publickeyservice.aws.privacysandboxservices.com	65	IN (0x0001)	false
Oct 25, 2024 00:49:09.904020071 CEST	192.168.2.5	1.1.1.1	0xbfa8	Standard query (0)	o.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:09.904525042 CEST	192.168.2.5	1.1.1.1	0xcb4a	Standard query (0)	o.clarity.ms	65	IN (0x0001)	false
Oct 25, 2024 00:49:10.744054079 CEST	192.168.2.5	1.1.1.1	0x2dec	Standard query (0)	webcompanion.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:10.744807005 CEST	192.168.2.5	1.1.1.1	0x2c1	Standard query (0)	webcompanion.com	65	IN (0x0001)	false
Oct 25, 2024 00:49:11.238759995 CEST	192.168.2.5	1.1.1.1	0x7d01	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:11.239377975 CEST	192.168.2.5	1.1.1.1	0x2c9f	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 00:47:59.306436062 CEST	1.1.1.1	192.168.2.5	0x3483	No error (0)	www.xn--invitacionesdecumpleaos-dic.org	xn--invitacionesdecumpleaos-dic.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:47:59.619437933 CEST	1.1.1.1	192.168.2.5	0xf751	No error (0)	www.xn--invitacionesdecumpleaos-dic.org	xn--invitacionesdecumpleaos-dic.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:47:59.619437933 CEST	1.1.1.1	192.168.2.5	0xf751	No error (0)	xn--invitacionesdecumpleaos-dic.org		50.6.174.176	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:00.643887043 CEST	1.1.1.1	192.168.2.5	0x76ba	No error (0)	www.xn--invitacionesdecumpleaos-dic.org	xn--invitacionesdecumpleaos-dic.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:01.154067039 CEST	1.1.1.1	192.168.2.5	0x49f8	No error (0)	www.xn--invitacionesdecumpleaos-dic.org	xn--invitacionesdecumpleaos-dic.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:01.154067039 CEST	1.1.1.1	192.168.2.5	0x49f8	No error (0)	xn--invitacionesdecumpleaos-dic.org		50.6.174.176	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:02.008203983 CEST	1.1.1.1	192.168.2.5	0xd0a6	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:02.008505106 CEST	1.1.1.1	192.168.2.5	0xb0be	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:02.243361950 CEST	1.1.1.1	192.168.2.5	0x189b	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:02.243710995 CEST	1.1.1.1	192.168.2.5	0xc36c	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:03.554490089 CEST	1.1.1.1	192.168.2.5	0xcaca	No error (0)	www.xn--invitacionesdecumpleaos-dic.org	xn--invitacionesdecumpleaos-dic.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:03.554490089 CEST	1.1.1.1	192.168.2.5	0xcaca	No error (0)	xn--invitacionesdecumpleaos-dic.org		50.6.174.176	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:03.632535934 CEST	1.1.1.1	192.168.2.5	0x40a	No error (0)	googleads.g.doubleclick.net		142.250.74.194	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:03.632551908 CEST	1.1.1.1	192.168.2.5	0xab7e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 00:48:03.858470917 CEST	1.1.1.1	192.168.2.5	0x4fb9	No error (0)	www.xn--invitacionesdecumpleaos-dic.org	xn--invitacionesdecumpleaos-dic.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:07.051784992 CEST	1.1.1.1	192.168.2.5	0x88ee	No error (0)	googleads.g.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:07.052400112 CEST	1.1.1.1	192.168.2.5	0xbcc	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 00:48:07.097662926 CEST	1.1.1.1	192.168.2.5	0x289c	No error (0)	ep1.adtrafficquality.google		172.217.16.194	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:07.101963997 CEST	1.1.1.1	192.168.2.5	0x76e4	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Oct 25, 2024 00:48:08.634674072 CEST	1.1.1.1	192.168.2.5	0x3e31	No error (0)	ep2.adtrafficquality.google		142.250.185.97	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:08.637794971 CEST	1.1.1.1	192.168.2.5	0xce98	No error (0)	ep1.adtrafficquality.google		172.217.16.194	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:08.637892008 CEST	1.1.1.1	192.168.2.5	0x4399	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Oct 25, 2024 00:48:10.657464981 CEST	1.1.1.1	192.168.2.5	0x6cd7	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:10.657464981 CEST	1.1.1.1	192.168.2.5	0x6cd7	No error (0)	www3.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:10.658430099 CEST	1.1.1.1	192.168.2.5	0xe2ca	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:10.924650908 CEST	1.1.1.1	192.168.2.5	0xf79e	No error (0)	ep2.adtrafficquality.google		216.58.206.65	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:10.926367044 CEST	1.1.1.1	192.168.2.5	0xfb59	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:10.927181005 CEST	1.1.1.1	192.168.2.5	0x56e5	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:11.136528015 CEST	1.1.1.1	192.168.2.5	0xc837	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:11.136528015 CEST	1.1.1.1	192.168.2.5	0xc837	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:12.298062086 CEST	1.1.1.1	192.168.2.5	0x3e02	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:12.298062086 CEST	1.1.1.1	192.168.2.5	0x3e02	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:12.298378944 CEST	1.1.1.1	192.168.2.5	0x2634	No error (0)	ep2.adtrafficquality.google		216.58.206.65	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:12.966692924 CEST	1.1.1.1	192.168.2.5	0x8f91	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:12.966692924 CEST	1.1.1.1	192.168.2.5	0x8f91	No error (0)	www3.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:12.967281103 CEST	1.1.1.1	192.168.2.5	0x888	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		64.233.167.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		74.125.206.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		74.125.206.154	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		64.233.167.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		74.125.206.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		142.251.168.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		74.125.206.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		64.233.184.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		64.233.184.154	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		142.251.173.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		64.233.184.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		64.233.184.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		142.251.173.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		142.251.168.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		142.251.173.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049731016 CEST	1.1.1.1	192.168.2.5	0x5155	No error (0)	bid.g.doubleclick.net		142.251.168.154	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:15.049741030 CEST	1.1.1.1	192.168.2.5	0xc22	No error (0)	bid.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 00:48:16.474590063 CEST	1.1.1.1	192.168.2.5	0x90be	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.475836992 CEST	1.1.1.1	192.168.2.5	0x96e	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.477297068 CEST	1.1.1.1	192.168.2.5	0xef3b	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:16.477963924 CEST	1.1.1.1	192.168.2.5	0x1b5d	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:16.479208946 CEST	1.1.1.1	192.168.2.5	0x75ab	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.479208946 CEST	1.1.1.1	192.168.2.5	0x75ab	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.479208946 CEST	1.1.1.1	192.168.2.5	0x75ab	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.479208946 CEST	1.1.1.1	192.168.2.5	0x75ab	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.479208946 CEST	1.1.1.1	192.168.2.5	0x75ab	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.479208946 CEST	1.1.1.1	192.168.2.5	0x75ab	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.482650995 CEST	1.1.1.1	192.168.2.5	0x61ba	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:16.482650995 CEST	1.1.1.1	192.168.2.5	0x61ba	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:16.482650995 CEST	1.1.1.1	192.168.2.5	0x61ba	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.485011101 CEST	1.1.1.1	192.168.2.5	0xd41e	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:16.485011101 CEST	1.1.1.1	192.168.2.5	0xd41e	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:16.500205040 CEST	1.1.1.1	192.168.2.5	0xb3df	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:16.500292063 CEST	1.1.1.1	192.168.2.5	0xc1a1	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:16.501430035 CEST	1.1.1.1	192.168.2.5	0xbb40	No error (0)	sync.gonet-ads.com		23.109.14.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.501430035 CEST	1.1.1.1	192.168.2.5	0xbb40	No error (0)	sync.gonet-ads.com		23.109.14.90	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.502044916 CEST	1.1.1.1	192.168.2.5	0x16c9	No error (0)	cm.g.doubleclick.net		216.58.212.130	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.628853083 CEST	1.1.1.1	192.168.2.5	0x13ec	No error (0)	gcdn.2mdn.net		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:16.635525942 CEST	1.1.1.1	192.168.2.5	0xcc33	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:16.636265993 CEST	1.1.1.1	192.168.2.5	0x8808	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:17.484246969 CEST	1.1.1.1	192.168.2.5	0x4246	No error (0)	googleads.g.doubleclick.net		172.217.18.98	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.484308958 CEST	1.1.1.1	192.168.2.5	0x3282	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 00:48:17.539119959 CEST	1.1.1.1	192.168.2.5	0xd5a4	No error (0)	bid.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		74.125.71.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		108.177.15.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		108.177.15.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		108.177.15.154	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		108.177.15.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		74.125.71.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		74.125.71.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.539134026 CEST	1.1.1.1	192.168.2.5	0x53af	No error (0)	bid.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.821500063 CEST	1.1.1.1	192.168.2.5	0xee67	No error (0)	secure.flashtalking.com	secure.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:17.821512938 CEST	1.1.1.1	192.168.2.5	0xe2df	No error (0)	secure.flashtalking.com	secure.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:17.843878984 CEST	1.1.1.1	192.168.2.5	0xfe1d	No error (0)	cdn.flashtalking.com	cdn.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:17.844729900 CEST	1.1.1.1	192.168.2.5	0xe6e8	No error (0)	cdn.flashtalking.com	d3fxn7cse5tdjr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:17.844729900 CEST	1.1.1.1	192.168.2.5	0xe6e8	No error (0)	d3fxn7cse5tdjr.cloudfront.net		18.245.60.28	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.844729900 CEST	1.1.1.1	192.168.2.5	0xe6e8	No error (0)	d3fxn7cse5tdjr.cloudfront.net		18.245.60.100	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.844729900 CEST	1.1.1.1	192.168.2.5	0xe6e8	No error (0)	d3fxn7cse5tdjr.cloudfront.net		18.245.60.34	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.844729900 CEST	1.1.1.1	192.168.2.5	0xe6e8	No error (0)	d3fxn7cse5tdjr.cloudfront.net		18.245.60.114	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.848002911 CEST	1.1.1.1	192.168.2.5	0x3e4c	No error (0)	r3---sn-q4flrne7.c.2mdn.net	r3.sn-q4flrne7.c.2mdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:17.848002911 CEST	1.1.1.1	192.168.2.5	0x3e4c	No error (0)	r3.sn-q4flrne7.c.2mdn.net		209.85.165.168	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:17.867145061 CEST	1.1.1.1	192.168.2.5	0x9288	No error (0)	r3---sn-q4flrne7.c.2mdn.net	r3.sn-q4flrne7.c.2mdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:17.867145061 CEST	1.1.1.1	192.168.2.5	0x9288	No error (0)	r3.sn-q4flrne7.c.2mdn.net			65	IN (0x0001)	false
Oct 25, 2024 00:48:17.916189909 CEST	1.1.1.1	192.168.2.5	0x491c	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:17.916232109 CEST	1.1.1.1	192.168.2.5	0x67b5	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:18.225986004 CEST	1.1.1.1	192.168.2.5	0x8e4c	No error (0)	www.googletagservices.com		142.250.186.66	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:18.838959932 CEST	1.1.1.1	192.168.2.5	0x9ed1	No error (0)	googleads.g.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:18.841492891 CEST	1.1.1.1	192.168.2.5	0xd76	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 00:48:18.892299891 CEST	1.1.1.1	192.168.2.5	0x913b	No error (0)	free.webcompanion.com		45.63.66.114	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:18.917129040 CEST	1.1.1.1	192.168.2.5	0x6619	No error (0)	r3---sn-q4flrne7.c.2mdn.net	r3.sn-q4flrne7.c.2mdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:18.917129040 CEST	1.1.1.1	192.168.2.5	0x6619	No error (0)	r3.sn-q4flrne7.c.2mdn.net		209.85.165.168	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:18.970149040 CEST	1.1.1.1	192.168.2.5	0x27b1	No error (0)	r3---sn-q4flrne7.c.2mdn.net	r3.sn-q4flrne7.c.2mdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:18.970149040 CEST	1.1.1.1	192.168.2.5	0x27b1	No error (0)	r3.sn-q4flrne7.c.2mdn.net			65	IN (0x0001)	false
Oct 25, 2024 00:48:20.248323917 CEST	1.1.1.1	192.168.2.5	0x2e5a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:20.248323917 CEST	1.1.1.1	192.168.2.5	0x2e5a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:20.248547077 CEST	1.1.1.1	192.168.2.5	0xbf6	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:21.053329945 CEST	1.1.1.1	192.168.2.5	0xf790	No error (0)	cm.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:21.469717979 CEST	1.1.1.1	192.168.2.5	0x9dfe	No error (0)	secure.flashtalking.com	secure.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:21.469728947 CEST	1.1.1.1	192.168.2.5	0x2e96	No error (0)	www.googletagservices.com		142.250.185.66	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:21.470335007 CEST	1.1.1.1	192.168.2.5	0x57fc	No error (0)	secure.flashtalking.com	secure.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:22.767235041 CEST	1.1.1.1	192.168.2.5	0x7ba4	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:22.891077995 CEST	1.1.1.1	192.168.2.5	0xd0bf	No error (0)	free.webcompanion.com		45.63.66.114	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:22.900270939 CEST	1.1.1.1	192.168.2.5	0xa7ce	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:22.900270939 CEST	1.1.1.1	192.168.2.5	0xa7ce	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:22.901144981 CEST	1.1.1.1	192.168.2.5	0x3632	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Oct 25, 2024 00:48:23.061326981 CEST	1.1.1.1	192.168.2.5	0xf032	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:23.061326981 CEST	1.1.1.1	192.168.2.5	0xf032	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:23.061928988 CEST	1.1.1.1	192.168.2.5	0xdd66	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:24.174855947 CEST	1.1.1.1	192.168.2.5	0x6832	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Oct 25, 2024 00:48:24.175132990 CEST	1.1.1.1	192.168.2.5	0xdee	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:24.175132990 CEST	1.1.1.1	192.168.2.5	0xdee	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.064346075 CEST	1.1.1.1	192.168.2.5	0xfa53	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.064346075 CEST	1.1.1.1	192.168.2.5	0xfa53	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.064346075 CEST	1.1.1.1	192.168.2.5	0xfa53	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.064346075 CEST	1.1.1.1	192.168.2.5	0xfa53	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.064925909 CEST	1.1.1.1	192.168.2.5	0xcef0	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.064925909 CEST	1.1.1.1	192.168.2.5	0xcef0	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.096199989 CEST	1.1.1.1	192.168.2.5	0x39d5	No error (0)	cloud.webcompanion.com	webcompanion-gtm-tagging-prd-cc-1.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.096199989 CEST	1.1.1.1	192.168.2.5	0x39d5	No error (0)	webcompanion-gtm-tagging-prd-cc-1.azurewebsites.net	waws-prod-yt1-053.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.096199989 CEST	1.1.1.1	192.168.2.5	0x39d5	No error (0)	waws-prod-yt1-053.sip.azurewebsites.windows.net	waws-prod-yt1-053-803d.canadacentral.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.106014967 CEST	1.1.1.1	192.168.2.5	0x5a18	No error (0)	cloud.webcompanion.com	webcompanion-gtm-tagging-prd-cc-1.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.106014967 CEST	1.1.1.1	192.168.2.5	0x5a18	No error (0)	webcompanion-gtm-tagging-prd-cc-1.azurewebsites.net	waws-prod-yt1-053.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.106014967 CEST	1.1.1.1	192.168.2.5	0x5a18	No error (0)	waws-prod-yt1-053.sip.azurewebsites.windows.net	waws-prod-yt1-053-803d.canadacentral.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.906774044 CEST	1.1.1.1	192.168.2.5	0x9db5	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.906774044 CEST	1.1.1.1	192.168.2.5	0x9db5	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.906953096 CEST	1.1.1.1	192.168.2.5	0x866	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:25.913882017 CEST	1.1.1.1	192.168.2.5	0xcce8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.913882017 CEST	1.1.1.1	192.168.2.5	0xcce8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.994179964 CEST	1.1.1.1	192.168.2.5	0x6b6c	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.994179964 CEST	1.1.1.1	192.168.2.5	0x6b6c	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.994179964 CEST	1.1.1.1	192.168.2.5	0x6b6c	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.994179964 CEST	1.1.1.1	192.168.2.5	0x6b6c	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:25.995110989 CEST	1.1.1.1	192.168.2.5	0x4b2d	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:25.995110989 CEST	1.1.1.1	192.168.2.5	0x4b2d	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:27.187063932 CEST	1.1.1.1	192.168.2.5	0xa548	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.187063932 CEST	1.1.1.1	192.168.2.5	0xa548	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.187998056 CEST	1.1.1.1	192.168.2.5	0xf37	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:27.866947889 CEST	1.1.1.1	192.168.2.5	0x4301	No error (0)	o.clarity.ms	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:27.889528990 CEST	1.1.1.1	192.168.2.5	0x77c9	No error (0)	o.clarity.ms	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:27.915153027 CEST	1.1.1.1	192.168.2.5	0xe559	No error (0)	adservice.google.com		142.250.186.34	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.916098118 CEST	1.1.1.1	192.168.2.5	0xaacb	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.916106939 CEST	1.1.1.1	192.168.2.5	0x2e2b	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:27.916718960 CEST	1.1.1.1	192.168.2.5	0x11a7	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:27.936712980 CEST	1.1.1.1	192.168.2.5	0x5c71	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 00:48:27.936846972 CEST	1.1.1.1	192.168.2.5	0x76ba	No error (0)	googleads.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:27.978717089 CEST	1.1.1.1	192.168.2.5	0x317d	No error (0)	td.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:28.299669027 CEST	1.1.1.1	192.168.2.5	0xf9b	No error (0)	cloud.webcompanion.com	webcompanion-gtm-tagging-prd-cc-1.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:28.299669027 CEST	1.1.1.1	192.168.2.5	0xf9b	No error (0)	webcompanion-gtm-tagging-prd-cc-1.azurewebsites.net	waws-prod-yt1-053.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:28.299669027 CEST	1.1.1.1	192.168.2.5	0xf9b	No error (0)	waws-prod-yt1-053.sip.azurewebsites.windows.net	waws-prod-yt1-053-803d.canadacentral.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:28.311804056 CEST	1.1.1.1	192.168.2.5	0x52dc	No error (0)	cloud.webcompanion.com	webcompanion-gtm-tagging-prd-cc-1.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:28.311804056 CEST	1.1.1.1	192.168.2.5	0x52dc	No error (0)	webcompanion-gtm-tagging-prd-cc-1.azurewebsites.net	waws-prod-yt1-053.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:28.311804056 CEST	1.1.1.1	192.168.2.5	0x52dc	No error (0)	waws-prod-yt1-053.sip.azurewebsites.windows.net	waws-prod-yt1-053-803d.canadacentral.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:31.521923065 CEST	1.1.1.1	192.168.2.5	0x740c	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:31.521923065 CEST	1.1.1.1	192.168.2.5	0x740c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:31.522555113 CEST	1.1.1.1	192.168.2.5	0x34ef	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:31.522555113 CEST	1.1.1.1	192.168.2.5	0x34ef	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:35.224509001 CEST	1.1.1.1	192.168.2.5	0x8adb	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:35.224509001 CEST	1.1.1.1	192.168.2.5	0x8adb	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:35.236532927 CEST	1.1.1.1	192.168.2.5	0x28ec	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:35.236532927 CEST	1.1.1.1	192.168.2.5	0x28ec	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:49.101099014 CEST	1.1.1.1	192.168.2.5	0x11e5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:48:49.101099014 CEST	1.1.1.1	192.168.2.5	0x11e5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:51.299220085 CEST	1.1.1.1	192.168.2.5	0xe005	No error (0)	privacyportal-eu.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:51.299220085 CEST	1.1.1.1	192.168.2.5	0xe005	No error (0)	privacyportal-eu.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:51.299657106 CEST	1.1.1.1	192.168.2.5	0xd82c	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:51.299657106 CEST	1.1.1.1	192.168.2.5	0xd82c	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:51.299657106 CEST	1.1.1.1	192.168.2.5	0xd82c	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:51.299657106 CEST	1.1.1.1	192.168.2.5	0xd82c	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:51.300460100 CEST	1.1.1.1	192.168.2.5	0xfa98	No error (0)	privacyportal-eu.onetrust.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:53.328965902 CEST	1.1.1.1	192.168.2.5	0x87a1	No error (0)	privacyportal-eu.onetrust.com			65	IN (0x0001)	false
Oct 25, 2024 00:48:53.329349041 CEST	1.1.1.1	192.168.2.5	0xebc4	No error (0)	privacyportal-eu.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:48:53.329349041 CEST	1.1.1.1	192.168.2.5	0xebc4	No error (0)	privacyportal-eu.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:07.894257069 CEST	1.1.1.1	192.168.2.5	0xe949	No error (0)	publickeyservice.aws.privacysandboxservices.com	publickeyservice.msmt-1.aws.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:49:07.894257069 CEST	1.1.1.1	192.168.2.5	0xe949	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		18.66.122.6	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:07.894257069 CEST	1.1.1.1	192.168.2.5	0xe949	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		18.66.122.18	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:07.894257069 CEST	1.1.1.1	192.168.2.5	0xe949	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		18.66.122.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:07.894257069 CEST	1.1.1.1	192.168.2.5	0xe949	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		18.66.122.90	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:07.897620916 CEST	1.1.1.1	192.168.2.5	0xf368	No error (0)	publickeyservice.aws.privacysandboxservices.com	publickeyservice.msmt-1.aws.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:49:10.145927906 CEST	1.1.1.1	192.168.2.5	0xcb4a	No error (0)	o.clarity.ms	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:49:10.146414042 CEST	1.1.1.1	192.168.2.5	0xbfa8	No error (0)	o.clarity.ms	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:49:10.583986044 CEST	1.1.1.1	192.168.2.5	0x26cb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:49:10.583986044 CEST	1.1.1.1	192.168.2.5	0x26cb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:10.752595901 CEST	1.1.1.1	192.168.2.5	0x2dec	No error (0)	webcompanion.com		104.19.159.224	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:10.752595901 CEST	1.1.1.1	192.168.2.5	0x2dec	No error (0)	webcompanion.com		104.19.208.152	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:10.753859997 CEST	1.1.1.1	192.168.2.5	0x2c1	No error (0)	webcompanion.com			65	IN (0x0001)	false
Oct 25, 2024 00:49:11.246083021 CEST	1.1.1.1	192.168.2.5	0x7d01	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:49:11.246748924 CEST	1.1.1.1	192.168.2.5	0x2c9f	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	50.6.174.176	80	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 00:47:59.627871990 CEST	454	OUT	GET / HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 00:48:00.629111052 CEST	511	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 24 Oct 2024 22:47:59 GMT Server: Apache Expires: Thu, 24 Oct 2024 23:47:59 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress - Really Simple Security Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Location: https://www.xn--invitacionesdecumpleaos-dic.org/ Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 0 Keep-Alive: timeout=5, max=100 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	50.6.174.176	80	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 00:48:44.633725882 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:01 UTC	682	OUT	GET / HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:01 UTC	403	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 20:31:59 GMT Cache-Control: max-age=7200 Expires: Fri, 25 Oct 2024 00:48:01 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-24 22:48:01 UTC	7789	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 4d 53 49 45 7c 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 54 72 69 64 65 6e 74 5c 2f 37 5c 2e 2e 2a 3f 72 76 3a 31 31 2f 69 29 29 7b 76 61 72 20 68 72 65 66 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 69 66 28 21 68 72 65 66 2e 6d 61 74 63 68 28 2f 5b 3f 26 5d 6e 6f 77 70 72 6f 63 6b 65 74 2f 29 29 7b 69 66 28 68 72 Data Ascii: 2000<!DOCTYPE html><html lang="es"><head><meta charset="UTF-8"><script>if(navigator.userAgent.match(/MSIE\|Internet Explorer/i)\|\|navigator.userAgent.match(/Trident\/7\..*?rv:11/i)){var href=document.location.href;if(!href.match(/[?&]nowprocket/)){if(hr
2024-10-24 22:48:01 UTC	409	IN	Data Raw: 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 7d 6a 28 74 29 7b 6c 65 74 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 69 2c 6f 29 7b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 65 76 65 6e 74 73 54 6f 52 65 77 72 69 74 65 2e 69 6e 64 65 78 4f 66 28 69 29 3e 3d 30 26 26 21 74 2e 65 76 65 72 79 74 68 69 6e 67 4c 6f 61 64 65 64 3f 22 72 6f 63 6b 65 74 2d 22 2b 69 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6f 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 74 5d 7c 7c 28 65 5b 74 5d 3d 7b 6f 72 69 67 69 6e 61 6c 46 75 6e 63 74 69 6f 6e 73 3a 7b 61 64 64 3a 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 72 65 6d 6f 76 65 3a 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7d 2c 65 76 65 6e 74 73 54 6f Data Ascii: ument.head.appendChild(i)}j(t){let e={};function i(i,o){return e[o].eventsToRewrite.indexOf(i)>=0&&!t.everythingLoaded?"rocket-"+i:i}function o(t,o){!function(t){e[t]\|\|(e[t]={originalFunctions:{add:t.addEventListener,remove:t.removeEventListener},eventsTo
2024-10-24 22:48:01 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-24 22:48:02 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 72 67 75 6d 65 6e 74 73 5b 30 5d 3d 69 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 74 29 2c 65 5b 74 5d 2e 6f 72 69 67 69 6e 61 6c 46 75 6e 63 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 7d 28 74 29 2c 65 5b 74 5d 2e 65 76 65 6e 74 73 54 6f 52 65 77 72 69 74 65 2e 70 75 73 68 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 69 29 7b 6c 65 74 20 6f 3d 65 5b 69 5d 3b 65 5b 69 5d 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 67 65 74 3a 28 29 3d 3e 6f 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 65 74 28 73 29 7b 74 2e 65 76 65 72 79 74 68 69 6e 67 4c 6f 61 64 65 64 3f 6f 3d 73 3a 65 5b 22 72 6f 63 6b 65 74 22 2b 69 5d 3d 6f 3d 73 Data Ascii: 2000rguments[0]=i(arguments[0],t),e[t].originalFunctions.remove.apply(t,arguments)})}(t),e[t].eventsToRewrite.push(o)}function s(e,i){let o=e[i];e[i]=null,Object.defineProperty(e,i,{get:()=>o\|\|function(){},set(s){t.everythingLoaded?o=s:e["rocket"+i]=o=s
2024-10-24 22:48:02 UTC	6	IN	Data Raw: 67 3a 2e 35 65 6d Data Ascii: g:.5em
2024-10-24 22:48:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-24 22:48:02 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 20 31 65 6d 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 20 61 3a 6e 6f 74 28 2e 77 70 2d 65 6c 65 6d 65 6e 74 2d 62 75 74 74 6f 6e 29 29 2c 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 61 3a 6e 6f 74 28 2e 77 70 2d 65 6c 65 6d 65 6e 74 2d 62 75 74 74 6f 6e 29 29 Data Ascii: 2000 1em}:where(.wp-block-navigation .wp-block-navigation__submenu-container .wp-block-navigation-item a:not(.wp-element-button)),:where(.wp-block-navigation .wp-block-navigation__submenu-container .wp-block-navigation-submenu a:not(.wp-element-button))
2024-10-24 22:48:02 UTC	6	IN	Data Raw: 2d 2d 77 6e 64 62 Data Ascii: --wndb
2024-10-24 22:48:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-24 22:48:02 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 2d 2d 62 6f 72 64 65 72 2d 2d 72 61 64 69 75 73 2d 2d 78 6c 3a 31 72 65 6d 7d 3a 77 68 65 72 65 28 3a 72 6f 6f 74 29 7b 2d 2d 77 6e 64 62 2d 67 72 61 79 3a 23 36 63 36 63 38 39 3b 2d 2d 77 6e 64 62 2d 67 72 61 79 2d 35 30 3a 23 66 37 66 37 66 38 3b 2d 2d 77 6e 64 62 2d 67 72 61 79 2d 31 30 30 3a 23 65 62 65 62 65 66 3b 2d 2d 77 6e 64 62 2d 67 72 61 79 2d 31 35 30 3a 23 65 35 65 35 65 39 3b 2d 2d 77 6e 64 62 2d 67 72 61 79 2d 32 30 30 3a 23 64 31 64 31 64 62 3b 2d 2d 77 6e 64 62 2d 67 72 61 79 2d 33 30 30 3a 23 61 39 61 39 62 63 3b 2d 2d 77 6e 64 62 2d 67 72 61 79 2d 34 30 30 3a 23 38 61 38 61 61 33 3b 2d 2d 77 6e 64 62 2d 67 72 61 79 2d 35 30 30 3a 23 36 63 36 63 38 39 3b 2d 2d 77 6e 64 62 2d 67 72 61 79 2d 36 30 30 3a 23 35 35 35 35 36 Data Ascii: 2000--border--radius--xl:1rem}:where(:root){--wndb-gray:#6c6c89;--wndb-gray-50:#f7f7f8;--wndb-gray-100:#ebebef;--wndb-gray-150:#e5e5e9;--wndb-gray-200:#d1d1db;--wndb-gray-300:#a9a9bc;--wndb-gray-400:#8a8aa3;--wndb-gray-500:#6c6c89;--wndb-gray-600:#55556

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49718	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:02 UTC	703	OUT	GET /wp-content/uploads/2020/04/Invitaciones-para-cumplea%C3%B1os-Banner-1536x346.jpg HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:03 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Jul 2024 18:00:10 GMT Accept-Ranges: bytes Content-Length: 68669 Cache-Control: max-age=31536000, public, public Expires: Fri, 24 Oct 2025 22:48:02 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: image/jpeg
2024-10-24 22:48:03 UTC	7766	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 01 5a 06 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 02 03 04 01 07 08 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa e0 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEZ"5
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: fe 26 3f 09 4f 22 d1 be 4a 0e 67 4a 68 00 00 00 00 0d 7b 08 f3 d1 20 00 00 00 39 fa 06 8d b9 0f 3d 0e 6e 90 00 00 00 00 00 00 00 00 00 00 0f 39 fa 46 b8 e9 51 ab dd 80 00 00 00 0c 79 fa 90 c7 22 40 00 00 00 00 d5 b4 57 56 21 5d 58 85 75 62 15 d5 88 57 56 21 5d 58 85 75 62 15 d5 88 57 56 21 5d 58 85 75 62 15 d5 88 57 56 21 5d 58 85 75 62 15 d5 88 57 56 21 5d 58 85 75 62 15 d5 88 73 74 80 00 7f ff c4 00 41 10 00 02 01 03 02 03 05 06 03 08 01 03 04 02 03 00 01 02 03 00 04 11 05 12 13 21 31 06 10 14 20 22 15 23 30 32 41 51 33 42 54 24 34 35 36 40 52 53 61 43 16 25 62 44 50 60 71 46 70 63 81 82 ff da 00 08 01 01 00 01 0c 01 ff 00 f7 41 91 17 ab 01 4d 75 0a ff 00 c8 28 10 c0 11 d3 ff 00 95 9d 6a 35 91 94 c6 d4 da dd aa 2e e7 dc a0 ea d6 63 e6 9c 25 25 f5 ac 9f Data Ascii: &?O"JgJh{ 9=n9FQy"@WV!]XubWV!]XubWV!]XubWV!]XubWV!]XubstA!1 "#02AQ3BT$456@RSaC%bDP`qFpcAMu(j5.c%%
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 71 e4 b0 43 13 4e 8f 75 c7 67 18 91 87 74 36 dc 45 dc 4e 02 c6 60 b9 4f b3 4e 2d e1 96 46 a9 ee 24 b8 6d ce d4 39 56 9b 7e cc fc 19 4e 6a 72 44 0e 42 6f 36 0c cf 65 13 3c 1c 06 ef 65 0d d4 50 50 bd 39 54 ef 14 49 be 5c 62 7e d0 c5 17 a6 38 4b 52 f6 89 01 fd d6 a2 d7 ec e5 3e f1 0a 34 1a ad b4 b2 70 b3 b1 b1 9a 11 aa f4 00 77 14 56 ea 2b 03 18 c7 2e 1a 7f 68 ae 1a 0f ca 3b b8 49 9c e3 9e 31 dc 11 47 40 28 c4 ad cc a8 ee ff 00 ee b6 28 e8 a3 ba 4f c7 8b cb 27 f3 2c 1f d7 1e 86 bb 3f fc 3d a8 f7 ce 33 11 ab 6b 75 b7 4c 0e bd c6 40 33 ce b8 ec d1 2b c6 84 d6 64 e3 01 b4 70 c4 92 85 90 b4 74 67 da 23 ca 1c 89 94 ca 63 fc c2 78 ca 16 0d e9 dc 39 73 f2 6d 1f 6a e1 af da b8 42 b8 3f ee b8 27 1c 8d 35 b4 cc 79 e0 d4 36 9b 1b 73 1c d5 d2 96 8b 95 22 00 07 2a 2c 14 Data Ascii: qCNugt6EN`ON-F$m9V~NjrDBo6e<ePP9TI\b~8KR>4pwV+.h;I1G@((O',?=3kuL@3+dptg#cx9smjB?'5y6s"*,
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: d7 5f 8b ad 5c d7 69 4f 0b b3 b1 20 ae cb 69 91 df 5d bc 93 ae e8 d3 55 d3 e7 bf 6d 30 26 4f 69 34 f4 d3 f5 22 b0 8c 47 5a 5e 9b 26 a9 76 21 8c e0 7f d2 3a 7e 38 5c 67 e2 ea ba 64 9a 5d d9 85 fd 42 d6 ce 7b d9 78 76 f1 97 69 bb 31 a8 c1 17 10 c4 1a 88 2a 70 79 1f 25 8c 70 cb 79 12 5c b6 d8 bd 97 a1 dd a9 b5 87 87 c4 d5 7b 3d 65 a6 69 8c e6 62 67 f8 9d 89 4c dd dc b7 c1 3c c1 a1 c8 63 ba cc 0d a4 fd 66 00 14 3f 57 6b 68 b5 a4 f7 0d e2 6a 2f 99 be 13 36 05 44 37 36 f3 f1 65 be db 21 55 5a f1 a9 c2 dd 8e 70 5e 09 5f 69 18 3d d3 a2 c9 03 ab b1 55 d3 f8 07 4e 09 6d 31 9a 3e e6 9f c3 58 b3 8f 99 98 bb 65 8e 4d 69 b7 46 29 84 64 fa 27 19 82 41 bf 87 5a 7a ec b2 89 78 fe 23 cb 3d b2 4e 39 f5 9e ca 58 7e 9b 96 c3 f3 d5 c9 db 03 77 23 6c 60 d4 ad b9 41 15 1e 9e 8d Data Ascii: _\iO i]Um0&Oi4"GZ^&v!:~8\gd]B{xvi1*py%py\{=eibgL<cf?Wkhj/6D76e!UZp^_i=UNm1>XeMiF)d'AZzx#=N9X~w#l`A
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: c8 3c b7 64 9a 24 b6 71 01 51 98 36 42 fc 47 bc 07 97 ba 6b 65 b4 b3 e6 2a d7 0e a2 13 3f da d8 f3 aa 51 02 8f 46 f6 45 d6 b8 9d 8a a2 10 c2 74 4e cc 81 89 5b 26 e4 63 25 4f 89 71 c7 15 49 85 b6 b7 0a e6 b9 8a 83 c9 6a 19 8a 98 66 6a 7e 35 9c 4d c1 51 ac dc 19 d4 ec fa 1a e9 34 e8 8a 15 6a 6b c7 d8 cf 45 f9 4a dd cd 95 f1 30 c7 f0 89 c2 42 8c a5 7b bf 96 ad 53 46 00 04 3e 25 f9 0a 3b e3 29 e7 25 99 2b 47 5e 9e 61 e4 9d 96 fa d4 74 54 80 80 6f c9 72 88 2d 8c d1 cd ae c9 1d 4b b3 fa 23 9d 1b db 2c 2a 20 06 f9 1d d9 51 08 23 5b 3f 64 cc 68 de d7 60 7e 8b 50 dc 42 d1 f4 83 00 8e bc 8e 8d 4d f2 31 da 9a fa 0a 88 2d 36 42 d8 8b 9b 28 97 3c 7b a1 4c 44 e3 1d d1 76 04 94 31 38 71 51 f5 09 b0 27 fb 1d d6 6e 39 35 9d d1 c6 c3 30 44 c4 07 2a 11 89 71 9c 56 e8 d2 8c Data Ascii: <d$qQ6BGke?QFEtN[&c%OqIjfj~5MQ4jkEJ0B{SF>%;)%+G^atTor-K#, Q#[?dh`~PBM1-6B(<{LDv18qQ'n950D*qV
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: e2 6b 08 e4 df c3 68 73 4b 9f dc aa a2 ff 00 f8 bd 66 0c 95 c7 81 2f 2a 19 2a 3d 06 39 45 f8 62 0d bb 6b 3d bc b4 e6 a0 1e b8 fc cb a5 55 08 c7 36 4e cc fb b2 98 fa 03 85 31 55 13 b0 5e c3 31 da 35 0c a8 b0 ba 5b ca eb 3c 90 35 62 a3 20 e4 c0 73 f9 95 83 04 b0 72 88 f5 ab 7c 44 91 ea c7 cb af 3d e6 ae 35 1f 60 d1 a2 02 73 d0 69 d4 8e 02 b6 48 60 df 32 9e a3 37 84 a8 f4 fa 46 89 76 67 c8 bb 10 c7 ef 78 b9 6b a0 d9 55 53 d5 9f 98 3d ea 81 63 dd 81 1c 39 76 47 68 49 66 79 bf da 08 27 4b f8 08 be 4f 80 b8 4f b6 8c b1 d1 3c a3 e7 b3 c2 e2 0d 66 86 bb b3 7c 7d e2 de e0 32 c6 33 ad 11 0e 21 05 32 3e 04 fe 62 36 97 60 7e 22 ea ef 5f d8 83 85 ed de cc 08 60 1d 89 98 63 51 dd da 3b bf 36 71 e2 1c 16 05 83 0c 80 2b 5e 27 ef c0 0f 5c 52 c7 c1 43 04 ef be 66 ba 7c 10 Data Ascii: khsKf/**=9Ebk=U6N1U^15[<5b sr\|D=5`siH`27FvgxkUS=c9vGhIfy'KOO<f\|}23!2>b6`~"_`cQ;6q+^'\RCf\|
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 1b d3 f6 98 db c3 e1 7d b2 e3 4d 59 7c 00 e5 68 80 22 f3 c9 3f bd c3 ce 2d 01 3a 93 36 ec 1c 62 b4 a1 9d 0c 82 59 17 46 f0 ad 3b 4c 69 85 5b 86 59 54 6b 61 44 73 01 79 49 bb ad d2 5a 50 76 20 05 00 3a 41 4d 03 b1 03 66 de 52 95 ed 03 18 42 86 b2 45 06 a8 a5 4c c5 ad 0a 34 ac 4a a1 1b 0a 22 62 82 c2 97 51 31 0d 48 6b df cb f1 99 fc ae 71 f1 d7 ef f7 11 b2 91 de 8e 4f eb 03 e2 a0 85 e7 89 b7 87 76 03 e6 08 45 29 57 36 e3 e1 87 7f 8a 87 58 a0 64 d5 f1 78 9b 87 6a 35 88 4a d9 90 2d cc da 5a 93 97 54 52 c1 55 4b 85 72 28 8d c1 ea c6 22 20 52 2e 9d a1 89 d6 35 31 36 85 2c 5e 05 6c 90 a0 aa ca b4 83 50 0d 65 b0 ae 90 35 57 6c 28 69 88 24 6c df ab f5 4d 95 50 3b 39 f8 62 84 68 5d c6 e6 f0 d6 6a 0d 68 35 c1 2e c9 1b a1 54 0f 84 09 c5 6e c2 31 61 92 ae c9 95 b3 76 Data Ascii: }MY\|h"?-:6bYF;Li[YTkaDsyIZPv :AMfRBEL4J"bQ1HkqOvE)W6Xdxj5J-ZTRUKr(" R.516,^lPe5Wl(i$lMP;9bh]jh5.Tn1av
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 93 21 c6 24 d4 f1 04 56 83 2b 2b c0 e8 f8 31 85 54 34 73 33 c2 1e 3e 9a 89 84 ed 0d 83 b1 cc d2 28 f9 3c b9 93 4d f9 ff 00 c0 b1 1b 51 61 ee 44 8f 15 01 ea 4d e6 4c 14 65 d1 cc 7b 85 d8 0d ea a5 db e1 45 77 a8 d5 6a 35 42 2f 06 4c 7c d4 2b 2d 50 3c 3f f6 68 92 6c 7b 0f bc d2 29 8f 4c 1f 92 53 8d d6 ae f9 8f 4e f4 53 2b 4e 4f bc a6 b9 c4 6a b6 f6 9c e4 81 8b df e5 89 94 ca a5 29 78 8c 16 b9 83 83 19 89 74 e3 b5 f9 aa 3d 48 f7 9f e6 08 7d 2f ef b9 f0 0b 06 cb 98 48 30 88 5b 03 a9 62 ac 97 c8 d8 05 7b 97 e7 31 ec 2c 22 ea 59 ad 6d 1d a7 a9 86 20 dc 04 b8 d4 81 bb 12 ab 75 bd 62 51 70 9a 76 db b5 8d d4 fa 5c 2f 05 c7 22 04 60 ba 45 2f 0e d4 f7 84 d6 b2 80 e8 4a 4b 62 e9 ea 4a 79 65 47 30 b4 1b 8a 99 68 ab f8 88 de 75 31 03 5d 97 8f 36 0d be 79 1c 12 ce eb c3 Data Ascii: !$V++1T4s3>(<MQaDMLe{Ewj5B/L\|+-P<?hl{)LSNS+NOj)xt=H}/H0[b{1,"Ym ubQpv\/"`E/JKbJyeG0hu1]6y
2024-10-24 22:48:03 UTC	4903	IN	Data Raw: f4 34 53 0a 9d bd 20 f9 f4 8c b1 67 88 b0 51 42 e8 4f a6 b9 e6 cb f7 1d d7 d6 7b 08 ba 03 32 a5 dc e7 76 70 e3 3f 42 0f 15 91 3c 90 93 75 4c d1 fa 45 8c 3a 20 a7 8f 3c 55 65 6a 44 19 23 ff 00 4f c1 18 b9 45 e7 1d e1 1a 33 79 cd 57 a6 d4 63 9f b7 1d 76 7d c7 cd c2 37 0f f7 9f ff c4 00 31 11 00 02 01 04 00 05 03 04 01 03 04 03 00 00 00 00 01 02 03 00 04 11 12 05 10 13 21 31 20 40 41 14 22 30 32 33 23 34 50 06 15 51 61 35 42 71 ff da 00 08 01 03 01 01 08 00 f6 98 cf f9 72 8c 2b 18 ff 00 00 01 a1 13 9f 02 de 43 42 d5 fe 45 a7 fc 98 62 53 86 16 f1 d3 b4 71 b0 5a 00 0a 71 86 23 fc 61 8b 10 ef e8 16 d3 14 dc 70 7b 0e bb 99 24 61 a9 23 d0 09 08 09 6d 09 1b 14 54 3d d1 50 8c 9a d0 f7 f6 81 49 a1 0b 9f 02 da 43 42 d5 be 45 a0 f9 31 42 87 56 10 47 4e e9 1b 05 1d be Data Ascii: 4S gQBO{2vp?B<uLE: <UejD#OE3yWcv}71!1 @A"023#4PQa5Bqr+CBEbSqZq#ap{$a#mT=PICBE1BVGN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:02 UTC	671	OUT	GET /wp-content/uploads/2020/04/Estrellas-1536x90.jpg HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:03 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Jul 2024 18:00:10 GMT Accept-Ranges: bytes Content-Length: 12384 Cache-Control: max-age=31536000, public, public Expires: Fri, 24 Oct 2025 22:48:02 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: image/jpeg
2024-10-24 22:48:03 UTC	7766	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 00 5a 06 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 01 03 04 02 07 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 01 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa db 87 71 2e 90 47 18 50 f8 c7 4c a7 ca Data Ascii: JFIF")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEZ"4q.GPL
2024-10-24 22:48:03 UTC	4618	IN	Data Raw: 1c c6 ae 22 07 98 c2 25 ea fa 61 0f 04 68 0a 38 22 00 92 c5 56 f1 a7 d2 64 1f 20 88 ef 8e 6a 6b ed 3e 21 49 88 98 63 a2 34 88 2e cf 6c a5 c7 f1 3e 67 de e0 48 95 a9 f5 e4 12 a8 5b d3 13 53 f7 bd aa 6a f4 f7 0f dc 03 49 6e 5d c3 4e 14 e6 f7 ce f5 25 77 80 53 77 82 0d 44 7a e1 5d e7 8c 9e 40 e7 6b a0 89 64 d8 18 62 e2 c6 ef 98 d3 69 ea 99 a5 3f 65 44 ee 3c 80 f6 9a d7 be d1 a7 a0 f2 0f f6 1f a3 6d 7a c2 e8 bd 63 34 fc 3a 35 23 5e 63 7e 16 30 7f 91 b5 53 75 ff 00 2f ea 51 bb de a5 f9 8b 52 ac cc c9 e4 6f 19 1f 81 ac 45 14 56 a2 73 6a 94 4d d0 23 74 d6 bb 44 bd 8e 5b 82 6e d4 ee 23 36 88 dd 8a 42 d3 92 97 21 64 aa f8 e8 d2 00 ee a1 fe c2 a9 8f 30 9c 44 99 ae 05 8b 56 08 e5 57 57 99 e0 65 7b 11 19 75 e0 9a 71 ef 8e a8 43 77 44 ac 25 73 d3 bc 32 ba 3c 15 37 78 Data Ascii: "%ah8"Vd jk>!Ic4.l>gH[SjIn]N%wSwDz]@kdbi?eD<mzc4:5#^c~0Su/QRoEVsjM#tD[n#6B!d0DVWWe{uqCwD%s2<7x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49722	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:03 UTC	704	OUT	GET /wp-content/cache/min/1/wp-content/plugins/wp-plugin-hostgator/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=1721138300 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:03 UTC	444	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 16 Jul 2024 13:58:20 GMT Accept-Ranges: bytes Content-Length: 2146 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:02 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:03 UTC	2146	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 63 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 7b 63 6c 69 65 6e 74 49 64 3a 74 2c 2e 2e 2e 6e 7d 3d 7b 7d 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 7b 61 63 74 69 76 65 43 6c 61 73 73 3a 22 6e 66 64 2d 77 62 2d 61 6e 69 6d 61 74 65 64 2d 69 6e 22 2c 72 6f 6f 74 3a 6e 75 6c 6c 2c 72 6f 6f 74 4d 61 72 67 69 6e 3a 22 30 70 78 22 2c 74 68 72 65 73 68 6f 6c 64 3a 30 2c 2e 2e 2e 6e 7d 7d 6f 62 73 65 72 76 65 45 6c 65 6d 65 6e 74 73 28 74 2c 6e 3d 6e 75 6c 6c 2c 65 3d 21 31 29 7b 69 66 28 21 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 21 74 3f 2e 6c 65 6e 67 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 Data Ascii: (()=>{var c=class{constructor({clientId:t,...n}={}){this.options={activeClass:"nfd-wb-animated-in",root:null,rootMargin:"0px",threshold:0,...n}}observeElements(t,n=null,e=!1){if(!("IntersectionObserver"in window)\|\|!t?.length\|\|document.documentElement.clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49724	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:03 UTC	608	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:03 UTC	445	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 15 Nov 2023 14:28:54 GMT Accept-Ranges: bytes Content-Length: 87553 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:02 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:03 UTC	7747	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 Data Ascii: n}}function F(e){return e[S]=!0,e}function $(e){var t=T.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t)
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 61 62 6c 65 64 3a 7a 28 21 30 29 2c 63 68 65 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 21 21 65 2e 63 68 65 63 6b 65 64 7c 7c 66 65 28 65 2c 22 6f 70 74 69 6f 6e 22 29 26 26 21 21 65 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 Data Ascii: abled:z(!0),checked:function(e){return fe(e,"input")&&!!e.checked\|\|fe(e,"option")&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)r
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 2e 6c 65 6e 67 74 68 3a 2d 31 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 28 63 65 2e 6d 65 72 67 65 28 74 68 69 73 2e 67 65 74 28 29 2c 63 65 28 65 2c 74 29 29 29 29 7d 2c 61 64 64 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 6e 75 6c 6c 3d 3d 65 3f 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 3a 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 2e 66 69 6c 74 65 72 28 65 29 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 31 31 21 3d 3d 74 2e 6e 6f 64 Data Ascii: .length:-1},add:function(e,t){return this.pushStack(ce.uniqueSort(ce.merge(this.get(),ce(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),ce.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nod
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 69 6f 6e 28 29 7b 7a 2e 73 65 74 28 74 68 69 73 2c 6e 29 7d 29 3a 4d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 6f 26 26 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 28 74 3d 7a 2e 67 65 74 28 6f 2c 6e 29 29 3f 74 3a 76 6f 69 64 20 30 21 3d 3d 28 74 3d 56 28 6f 2c 6e 29 29 3f 74 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 73 65 74 28 74 68 69 73 2c 6e 2c 65 29 7d 29 7d 2c 6e 75 6c 6c 2c 65 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e Data Ascii: ion(){z.set(this,n)}):M(this,function(e){var t;if(o&&void 0===e)return void 0!==(t=z.get(o,n))?t:void 0!==(t=V(o,n))?t:void 0;this.each(function(){z.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){z.
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 69 73 70 61 74 63 68 7c 7c 21 31 21 3d 3d 63 2e 70 72 65 44 69 73 70 61 74 63 68 2e 63 61 6c 6c 28 74 68 69 73 2c 75 29 29 7b 61 3d 63 65 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 72 73 2e 63 61 6c 6c 28 74 68 69 73 2c 75 2c 6c 29 2c 74 3d 30 3b 77 68 69 6c 65 28 28 69 3d 61 5b 74 2b 2b 5d 29 26 26 21 75 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 7b 75 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 69 2e 65 6c 65 6d 2c 6e 3d 30 3b 77 68 69 6c 65 28 28 6f 3d 69 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 75 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 75 2e 72 6e 61 6d 65 73 70 61 63 65 26 26 21 31 21 3d 3d 6f 2e 6e 61 6d 65 73 70 61 63 65 26 26 21 75 2e 72 6e 61 6d 65 Data Ascii: ispatch\|\|!1!==c.preDispatch.call(this,u)){a=ce.event.handlers.call(this,u,l),t=0;while((i=a[t++])&&!u.isPropagationStopped()){u.currentTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rname
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 28 65 29 7b 31 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 31 31 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 52 65 28 74 68 69 73 2c 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 74 3d 52 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 Data Ascii: (e){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType\|\|Re(this,e).appendChild(e)})},prepend:function(){return $e(this,arguments,function(e){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var t=Re(this,e);t.insertBefore(e,t.firstChild)
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 74 68 69 73 2e 65 6c 65 6d 3d 65 2c 74 68 69 73 2e 70 72 6f 70 3d 6e 2c 74 68 69 73 2e 65 61 73 69 6e 67 3d 69 7c 7c 63 65 2e 65 61 73 69 6e 67 2e 5f 64 65 66 61 75 6c 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 3d 74 68 69 73 2e 6e 6f 77 3d 74 68 69 73 2e 63 75 72 28 29 2c 74 68 69 73 2e 65 6e 64 3d 72 2c 74 68 69 73 2e 75 6e 69 74 3d 6f 7c 7c 28 63 65 2e 63 73 73 4e 75 6d 62 65 72 5b 6e 5d 3f 22 22 3a 22 70 78 22 29 7d 2c 63 75 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 67 65 74 3f 65 2e 67 65 74 28 74 68 69 73 29 3a 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 Data Ascii: this.elem=e,this.prop=n,this.easing=i\|\|ce.easing._default,this.options=t,this.start=this.now=this.cur(),this.end=r,this.unit=o\|\|(ce.cssNumber[n]?"":"px")},cur:function(){var e=at.propHooks[this.prop];return e&&e.get?e.get(this):at.propHooks._default.get(t
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 63 65 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 63 65 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 63 65 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 6d 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e Data Ascii: })}}),ce.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?ce.prop(e,t,n):(1===o&&ce.isXMLDoc(e)\|\|(i=ce.attrHooks[t.toLowerCase()]\|\|(ce.expr.match.bool.test(t)?mt:void 0)),void 0!==n?null===n
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 74 68 69 73 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 61 6d 65 26 26 21 63 65 28 74 68 69 73 29 2e 69 73 28 22 3a 64 69 73 61 62 6c 65 64 22 29 26 26 4f 74 2e 74 65 73 74 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 21 48 74 2e 74 65 73 74 28 65 29 26 26 28 74 68 69 73 2e 63 68 65 63 6b 65 64 7c 7c 21 77 65 2e 74 65 73 74 28 65 29 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 65 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 75 6c 6c 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 63 65 2e 6d 61 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 Data Ascii: this}).filter(function(){var e=this.type;return this.name&&!ce(this).is(":disabled")&&Ot.test(this.nodeName)&&!Ht.test(e)&&(this.checked\|\|!we.test(e))}).map(function(e,t){var n=ce(this).val();return null==n?null:Array.isArray(n)?ce.map(n,function(e){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49723	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:03 UTC	616	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:03 UTC	445	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 19 Aug 2023 03:21:46 GMT Accept-Ranges: bytes Content-Length: 13577 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:02 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:03 UTC	7747	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-10-24 22:48:03 UTC	5830	IN	Data Raw: 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 3d 78 28 65 29 2c 6e 3d 72 2c 43 2e 74 65 73 74 28 6e 29 26 26 4e 2e 74 65 73 74 28 6e 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 29 7c 7c 41 5b 72 5d 7c 7c 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 27 4e 75 6d 62 65 72 2d 74 79 70 65 64 20 76 61 6c 75 65 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 6c 75 65 20 29 27 29 29 2c 51 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 22 63 73 73 2d 6e 75 6d 62 65 72 22 29 3b 76 61 72 20 53 2c 50 2c 6b 2c 48 2c 45 3d 73 2e 64 61 74 61 3b 69 28 73 2c 22 64 61 74 61 22 2c 66 Data Ascii: s):("number"==typeof t&&(r=x(e),n=r,C.test(n)&&N.test(n[0].toUpperCase()+n.slice(1))\|\|A[r]\|\|u("css-number",'Number-typed values are deprecated for jQuery.fn.css( "'+e+'", value )')),Q.apply(this,arguments))},"css-number");var S,P,k,H,E=s.data;i(s,"data",f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49725	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:03 UTC	626	OUT	GET /wp-content/cache/min/1/releases/v5.7.2/js/all.js?ver=1721138301 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:03 UTC	447	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 16 Jul 2024 13:58:21 GMT Accept-Ranges: bytes Content-Length: 1111314 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:02 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:03 UTC	7745	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 7b 7d 2c 6c 3d 7b 7d 3b 74 72 79 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 63 3d 77 69 6e 64 6f 77 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 28 6c 3d 64 6f 63 75 6d 65 6e 74 29 7d 63 61 74 63 68 28 63 29 7b 7d 76 61 72 20 68 3d 28 63 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 7b 7d 29 2e 75 73 65 72 41 67 65 6e 74 2c 7a 3d 76 6f 69 64 20 30 3d 3d 3d 68 3f 22 22 3a 68 2c 76 3d 63 2c 6d 3d 6c 2c 73 3d 28 76 2e 64 6f 63 75 6d 65 6e 74 2c 21 21 6d 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 21 6d 2e 68 65 61 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: !function(){"use strict";var c={},l={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(l=document)}catch(c){}var h=(c.navigator\|\|{}).userAgent,z=void 0===h?"":h,v=c,m=l,s=(v.document,!!m.documentElement&&!!m.head&&"function"==typ
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 38 2e 37 2d 31 39 2e 35 20 31 39 2e 35 2d 31 39 2e 35 68 34 35 2e 33 63 31 30 2e 38 20 30 20 31 39 2e 35 20 38 2e 37 20 31 39 2e 35 20 31 39 2e 35 76 31 35 2e 34 63 30 20 31 2e 38 2d 31 2e 37 20 33 2d 33 2e 33 20 32 2e 35 2d 31 32 2e 33 2d 33 2e 34 2d 32 35 2e 31 2d 35 2e 31 2d 33 38 2e 31 2d 35 2e 31 2d 31 33 2e 35 20 30 2d 32 36 2e 37 20 31 2e 38 2d 33 39 2e 34 20 35 2e 35 2d 31 2e 37 2e 35 2d 33 2e 34 2d 2e 38 2d 33 2e 34 2d 32 2e 35 76 2d 31 35 2e 38 7a 6d 2d 38 34 2e 34 20 33 37 6c 39 2e 32 2d 39 2e 32 63 37 2e 36 2d 37 2e 36 20 31 39 2e 39 2d 37 2e 36 20 32 37 2e 35 20 30 6c 37 2e 37 20 37 2e 37 63 31 2e 31 20 31 2e 31 20 31 20 33 2d 2e 33 20 34 2d 36 2e 32 20 34 2e 35 2d 31 32 2e 31 20 39 2e 34 2d 31 37 2e 36 20 31 34 2e 39 2d 35 2e 34 20 35 2e 34 Data Ascii: 8.7-19.5 19.5-19.5h45.3c10.8 0 19.5 8.7 19.5 19.5v15.4c0 1.8-1.7 3-3.3 2.5-12.3-3.4-25.1-5.1-38.1-5.1-13.5 0-26.7 1.8-39.4 5.5-1.7.5-3.4-.8-3.4-2.5v-15.8zm-84.4 37l9.2-9.2c7.6-7.6 19.9-7.6 27.5 0l7.7 7.7c1.1 1.1 1 3-.3 4-6.2 4.5-12.1 9.4-17.6 14.9-5.4 5.4
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 2e 33 2d 32 20 31 38 2e 31 20 33 34 2e 35 2d 32 2e 33 2d 33 2e 32 20 32 38 2e 32 2d 33 34 2e 34 20 32 2e 32 2d 32 2e 33 20 32 30 2e 31 20 33 34 2e 34 2d 32 2e 32 2d 33 20 32 36 2e 31 2d 36 34 2e 37 20 34 2e 31 20 31 32 2e 37 2d 31 31 33 2e 32 4c 35 32 37 20 33 36 35 2e 32 6c 2d 33 31 2e 39 20 32 2d 32 33 2e 38 2d 31 31 37 2e 38 20 33 30 2e 33 2d 32 20 31 33 2e 36 20 37 39 2e 34 20 33 31 2e 37 2d 38 32 2e 34 20 39 33 2e 31 2d 36 2e 32 7a 4d 34 32 36 2e 38 20 33 37 31 2e 35 6c 32 38 2e 33 2d 31 2e 38 4c 34 36 38 20 32 34 39 2e 36 6c 2d 32 38 2e 34 20 31 2e 39 2d 31 32 2e 38 20 31 32 30 7a 4d 31 36 32 20 33 38 38 2e 31 6c 2d 31 39 2e 34 2d 33 36 2d 33 2e 35 20 33 37 2e 34 2d 32 38 2e 32 20 31 2e 37 20 32 2e 37 2d 32 39 2e 31 63 2d 31 31 20 31 38 2d 33 32 20 Data Ascii: .3-2 18.1 34.5-2.3-3.2 28.2-34.4 2.2-2.3 20.1 34.4-2.2-3 26.1-64.7 4.1 12.7-113.2L527 365.2l-31.9 2-23.8-117.8 30.3-2 13.6 79.4 31.7-82.4 93.1-6.2zM426.8 371.5l28.3-1.8L468 249.6l-28.4 1.9-12.8 120zM162 388.1l-19.4-36-3.5 37.4-28.2 1.7 2.7-29.1c-11 18-32
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 35 20 34 39 35 2e 35 20 32 2e 35 20 35 2e 31 20 37 2e 37 20 38 2e 34 20 31 33 2e 34 20 38 2e 34 48 34 39 37 63 31 31 2e 32 20 30 20 31 38 2e 34 2d 31 31 2e 38 20 31 33 2e 34 2d 32 31 2e 37 20 30 20 30 2d 32 33 34 2e 35 2d 34 37 30 2e 36 2d 32 34 30 2e 34 2d 34 38 32 2e 33 2d 35 2e 33 2d 31 30 2e 36 2d 31 38 2e 38 2d 31 30 2e 38 2d 32 35 2e 36 2e 31 7a 22 5d 2c 61 75 64 69 62 6c 65 3a 5b 36 34 30 2c 35 31 32 2c 5b 5d 2c 22 66 33 37 33 22 2c 22 4d 36 34 30 20 31 39 39 2e 39 76 35 34 6c 2d 33 32 30 20 32 30 30 4c 30 20 32 35 34 76 2d 35 34 6c 33 32 30 20 32 30 30 20 33 32 30 2d 32 30 30 2e 31 7a 6d 2d 31 39 34 2e 35 20 37 32 6c 34 37 2e 31 2d 32 39 2e 34 63 2d 33 37 2e 32 2d 35 35 2e 38 2d 31 30 30 2e 37 2d 39 32 2e 36 2d 31 37 32 2e 37 2d 39 32 2e 36 2d 37 Data Ascii: 5 495.5 2.5 5.1 7.7 8.4 13.4 8.4H497c11.2 0 18.4-11.8 13.4-21.7 0 0-234.5-470.6-240.4-482.3-5.3-10.6-18.8-10.8-25.6.1z"],audible:[640,512,[],"f373","M640 199.9v54l-320 200L0 254v-54l320 200 320-200.1zm-194.5 72l47.1-29.4c-37.2-55.8-100.7-92.6-172.7-92.6-7
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 2e 32 20 31 34 37 7a 22 5d 2c 62 69 74 63 6f 69 6e 3a 5b 35 31 32 2c 35 31 32 2c 5b 5d 2c 22 66 33 37 39 22 2c 22 4d 35 30 34 20 32 35 36 63 30 20 31 33 36 2e 39 36 37 2d 31 31 31 2e 30 33 33 20 32 34 38 2d 32 34 38 20 32 34 38 53 38 20 33 39 32 2e 39 36 37 20 38 20 32 35 36 20 31 31 39 2e 30 33 33 20 38 20 32 35 36 20 38 73 32 34 38 20 31 31 31 2e 30 33 33 20 32 34 38 20 32 34 38 7a 6d 2d 31 34 31 2e 36 35 31 2d 33 35 2e 33 33 63 34 2e 39 33 37 2d 33 32 2e 39 39 39 2d 32 30 2e 31 39 31 2d 35 30 2e 37 33 39 2d 35 34 2e 35 35 2d 36 32 2e 35 37 33 6c 31 31 2e 31 34 36 2d 34 34 2e 37 30 32 2d 32 37 2e 32 31 33 2d 36 2e 37 38 31 2d 31 30 2e 38 35 31 20 34 33 2e 35 32 34 63 2d 37 2e 31 35 34 2d 31 2e 37 38 33 2d 31 34 2e 35 30 32 2d 33 2e 34 36 34 2d 32 31 2e Data Ascii: .2 147z"],bitcoin:[512,512,[],"f379","M504 256c0 136.967-111.033 248-248 248S8 392.967 8 256 119.033 8 256 8s248 111.033 248 248zm-141.651-35.33c4.937-32.999-20.191-50.739-54.55-62.573l11.146-44.702-27.213-6.781-10.851 43.524c-7.154-1.783-14.502-3.464-21.
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 2e 32 20 31 30 2e 34 20 31 31 2e 32 7a 4d 35 37 36 20 38 30 76 33 35 32 63 30 20 32 36 2e 35 2d 32 31 2e 35 20 34 38 2d 34 38 20 34 38 48 34 38 63 2d 32 36 2e 35 20 30 2d 34 38 2d 32 31 2e 35 2d 34 38 2d 34 38 56 38 30 63 30 2d 32 36 2e 35 20 32 31 2e 35 2d 34 38 20 34 38 2d 34 38 68 34 38 30 63 32 36 2e 35 20 30 20 34 38 20 32 31 2e 35 20 34 38 20 34 38 7a 6d 2d 32 30 37 2e 35 20 32 33 2e 39 63 2e 34 20 31 2e 37 2e 39 20 33 2e 34 20 31 2e 36 20 35 2e 31 20 31 36 2e 35 20 34 30 2e 36 20 33 32 2e 39 20 38 31 2e 33 20 34 39 2e 35 20 31 32 31 2e 39 20 31 2e 34 20 33 2e 35 20 31 2e 37 20 36 2e 34 2e 32 20 39 2e 39 2d 32 2e 38 20 36 2e 32 2d 34 2e 39 20 31 32 2e 36 2d 37 2e 38 20 31 38 2e 37 2d 32 2e 36 20 35 2e 35 2d 36 2e 37 20 39 2e 35 2d 31 32 2e 37 20 31 Data Ascii: .2 10.4 11.2zM576 80v352c0 26.5-21.5 48-48 48H48c-26.5 0-48-21.5-48-48V80c0-26.5 21.5-48 48-48h480c26.5 0 48 21.5 48 48zm-207.5 23.9c.4 1.7.9 3.4 1.6 5.1 16.5 40.6 32.9 81.3 49.5 121.9 1.4 3.5 1.7 6.4.2 9.9-2.8 6.2-4.9 12.6-7.8 18.7-2.6 5.5-6.7 9.5-12.7 1
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 35 20 30 20 34 38 2d 32 31 2e 35 20 34 38 2d 34 38 56 38 30 63 30 2d 32 36 2e 35 2d 32 31 2e 35 2d 34 38 2d 34 38 2d 34 38 7a 6d 2d 34 34 2e 31 20 31 33 38 2e 39 63 32 32 2e 36 20 30 20 35 32 2e 39 2d 34 2e 31 20 35 32 2e 39 20 32 34 2e 34 20 30 20 31 32 2e 36 2d 36 2e 36 20 32 30 2e 37 2d 31 38 2e 37 20 32 33 2e 32 6c 32 35 2e 38 20 33 34 2e 34 68 2d 31 39 2e 36 6c 2d 32 32 2e 32 2d 33 32 2e 38 68 2d 32 2e 32 76 33 32 2e 38 68 2d 31 36 7a 6d 2d 35 35 2e 39 2e 31 68 34 35 2e 33 76 31 34 48 34 34 34 76 31 38 2e 32 68 32 38 2e 33 56 32 31 37 48 34 34 34 76 32 32 2e 32 68 32 39 2e 33 56 32 35 33 48 34 32 38 7a 6d 2d 36 38 2e 37 20 30 6c 32 31 2e 39 20 35 35 2e 32 20 32 32 2e 32 2d 35 35 2e 32 68 31 37 2e 35 6c 2d 33 35 2e 35 20 38 34 2e 32 68 2d 38 2e 36 6c Data Ascii: 5 0 48-21.5 48-48V80c0-26.5-21.5-48-48-48zm-44.1 138.9c22.6 0 52.9-4.1 52.9 24.4 0 12.6-6.6 20.7-18.7 23.2l25.8 34.4h-19.6l-22.2-32.8h-2.2v32.8h-16zm-55.9.1h45.3v14H444v18.2h28.3V217H444v22.2h29.3V253H428zm-68.7 0l21.9 55.2 22.2-55.2h17.5l-35.5 84.2h-8.6l
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 2e 37 6c 2d 2e 37 20 33 2e 31 63 31 35 2e 38 20 34 20 32 39 2e 39 20 39 2e 38 20 34 32 2e 32 20 31 37 2e 31 6c 33 35 2e 38 20 31 33 35 68 34 32 2e 35 7a 6d 39 34 2e 34 2e 32 4c 32 37 32 2e 31 20 31 37 36 68 2d 34 30 2e 32 6c 2d 32 35 2e 31 20 31 35 35 2e 34 68 34 30 2e 31 7a 6d 31 33 39 2e 39 2d 35 30 2e 38 63 2e 32 2d 31 37 2e 37 2d 31 30 2e 36 2d 33 31 2e 32 2d 33 33 2e 37 2d 34 32 2e 33 2d 31 34 2e 31 2d 37 2e 31 2d 32 32 2e 37 2d 31 31 2e 39 2d 32 32 2e 37 2d 31 39 2e 32 2e 32 2d 36 2e 36 20 37 2e 33 2d 31 33 2e 34 20 32 33 2e 31 2d 31 33 2e 34 20 31 33 2e 31 2d 2e 33 20 32 32 2e 37 20 32 2e 38 20 32 39 2e 39 20 35 2e 39 6c 33 2e 36 20 31 2e 37 20 35 2e 35 2d 33 33 2e 36 63 2d 37 2e 39 2d 33 2e 31 2d 32 30 2e 35 2d 36 2e 36 2d 33 36 2d 36 2e 36 2d 33 Data Ascii: .7l-.7 3.1c15.8 4 29.9 9.8 42.2 17.1l35.8 135h42.5zm94.4.2L272.1 176h-40.2l-25.1 155.4h40.1zm139.9-50.8c.2-17.7-10.6-31.2-33.7-42.3-14.1-7.1-22.7-11.9-22.7-19.2.2-6.6 7.3-13.4 23.1-13.4 13.1-.3 22.7 2.8 29.9 5.9l3.6 1.7 5.5-33.6c-7.9-3.1-20.5-6.6-36-6.6-3
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 39 38 2e 30 33 36 2d 31 30 31 2e 35 31 38 2e 32 36 38 2e 32 36 38 7a 4d 32 39 31 2e 37 35 20 33 35 35 2e 31 30 37 6c 31 31 2e 35 31 38 20 31 31 2e 37 38 36 48 32 38 30 2e 35 6c 31 31 2e 32 35 2d 31 31 2e 37 38 36 7a 6d 2d 2e 32 36 38 2d 31 31 2e 32 35 6c 2d 38 33 2e 33 30 33 2d 38 35 2e 34 34 36 20 37 39 2e 35 35 33 2d 38 34 2e 33 37 35 20 38 33 2e 30 33 36 20 38 37 2e 35 38 39 2d 37 39 2e 32 38 36 20 38 32 2e 32 33 32 7a 6d 35 2e 33 35 37 20 35 2e 38 39 33 6c 37 39 2e 32 38 36 2d 38 32 2e 32 33 32 20 36 37 2e 35 20 37 31 2e 32 35 2d 35 2e 38 39 32 20 32 38 2e 31 32 35 48 33 31 33 2e 37 31 34 6c 2d 31 36 2e 38 37 35 2d 31 37 2e 31 34 33 7a 4d 34 31 30 2e 34 31 31 20 34 34 2e 33 39 33 63 31 2e 30 37 31 2e 35 33 36 20 32 2e 31 34 32 20 31 2e 30 37 32 20 33 Data Ascii: 98.036-101.518.268.268zM291.75 355.107l11.518 11.786H280.5l11.25-11.786zm-.268-11.25l-83.303-85.446 79.553-84.375 83.036 87.589-79.286 82.232zm5.357 5.893l79.286-82.232 67.5 71.25-5.892 28.125H313.714l-16.875-17.143zM410.411 44.393c1.071.536 2.142 1.072 3
2024-10-24 22:48:03 UTC	8000	IN	Data Raw: 33 2e 37 2d 32 30 32 2e 38 20 30 2d 31 30 35 2e 34 20 38 35 2e 35 2d 32 30 33 2e 33 20 32 30 33 2e 37 2d 32 30 33 2e 33 20 31 31 32 2e 36 20 30 20 32 30 32 2e 39 20 38 39 2e 35 20 32 30 32 2e 38 20 32 30 33 2e 33 20 30 20 31 32 31 2e 37 2d 39 39 2e 36 20 32 30 32 2e 38 2d 32 30 32 2e 38 20 32 30 32 2e 38 7a 4d 33 31 36 2e 37 20 31 38 36 68 2d 35 33 2e 32 76 31 33 37 2e 32 68 35 33 2e 32 63 32 31 2e 34 20 30 20 37 30 2d 35 2e 31 20 37 30 2d 36 38 2e 36 20 30 2d 36 33 2e 34 2d 34 38 2e 36 2d 36 38 2e 36 2d 37 30 2d 36 38 2e 36 7a 6d 2e 38 20 31 30 38 2e 35 68 2d 31 39 2e 39 76 2d 37 39 2e 37 6c 31 39 2e 34 2d 2e 31 63 33 2e 38 20 30 20 33 35 2d 32 2e 31 20 33 35 20 33 39 2e 39 20 30 20 32 34 2e 36 2d 31 30 2e 35 20 33 39 2e 39 2d 33 34 2e 35 20 33 39 2e 39 Data Ascii: 3.7-202.8 0-105.4 85.5-203.3 203.7-203.3 112.6 0 202.9 89.5 202.8 203.3 0 121.7-99.6 202.8-202.8 202.8zM316.7 186h-53.2v137.2h53.2c21.4 0 70-5.1 70-68.6 0-63.4-48.6-68.6-70-68.6zm.8 108.5h-19.9v-79.7l19.4-.1c3.8 0 35-2.1 35 39.9 0 24.6-10.5 39.9-34.5 39.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49728	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:03 UTC	626	OUT	GET /wp-content/themes/orbital/assets/js/cookies.min.js?ver=20190101 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:03 UTC	445	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Mar 2020 05:14:42 GMT Accept-Ranges: bytes Content-Length: 19933 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:03 UTC	7747	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 68 61 73 49 6e 69 74 69 61 6c 69 73 65 64 29 7b 76 61 72 20 74 3d 7b 65 73 63 61 70 65 52 65 67 45 78 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 2d 5c 5b 5c 5d 5c 2f 5c 7b 5c 7d 5c 28 5c 29 5c 2a 5c 2b 5c 3f 5c 2e 5c 5c 5c 5e 5c 24 5c 7c 5d 2f 67 2c 22 5c 5c 24 26 22 29 7d 2c 68 61 73 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 22 20 22 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 69 2b 65 2e 63 6c 61 73 73 4e 61 6d 65 2b 69 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 6e 5c 74 5d 2f 67 2c 69 29 2e 69 6e 64 65 78 4f 66 28 69 2b 74 2b 69 29 3e 3d 30 7d 2c 61 64 64 43 6c 61 73 73 3a 66 Data Ascii: !function(e){if(!e.hasInitialised){var t={escapeRegExp:function(e){return e.replace(/[\-\[\]\/\{\}\*\+\?\.\\\^\$\\|]/g,"\\$&")},hasClass:function(e,t){var i=" ";return 1===e.nodeType&&(i+e.className+i).replace(/[\n\t]/g,i).indexOf(i+t+i)>=0},addClass:f
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 72 20 67 3d 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 63 6f 6e 74 61 69 6e 65 72 3a 6e 75 6c 6c 2c 63 6f 6f 6b 69 65 3a 7b 6e 61 6d 65 3a 22 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 5f 73 74 61 74 75 73 22 2c 70 61 74 68 3a 22 2f 22 2c 64 6f 6d 61 69 6e 3a 22 22 2c 65 78 70 69 72 79 44 61 79 73 3a 33 36 35 7d 2c 6f 6e 50 6f 70 75 70 4f 70 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 50 6f 70 75 70 43 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 49 6e 69 74 69 61 6c 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 2c 6f 6e 53 74 61 74 75 73 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 7d 2c 6f 6e 52 65 76 6f 6b 65 43 68 6f 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 63 6f 6e 74 65 6e 74 3a 7b 68 65 61 64 65 72 3a Data Ascii: r g={enabled:!0,container:null,cookie:{name:"cookieconsent_status",path:"/",domain:"",expiryDays:365},onPopupOpen:function(){},onPopupClose:function(){},onInitialise:function(e){},onStatusChange:function(e,t){},onRevokeChoice:function(){},content:{header:
2024-10-24 22:48:04 UTC	4186	IN	Data Raw: 6c 6c 62 61 63 6b 7d 22 2c 69 73 53 63 72 69 70 74 3a 21 30 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 76 61 72 20 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 3b 72 65 74 75 72 6e 22 45 52 52 4f 52 22 3d 3d 69 2e 73 74 61 74 75 73 43 6f 64 65 3f 6e 28 7b 65 72 72 6f 72 3a 69 2e 73 74 61 74 75 73 4d 65 73 73 61 67 65 7d 29 3a 7b 63 6f 64 65 3a 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 7d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 7b 65 72 72 6f 72 3a 22 49 6e 76 61 6c 69 64 20 72 65 73 70 6f 6e 73 65 20 28 22 2b 65 2b 22 29 22 7d 29 7d 7d 7d 7d 2c 6d 61 78 6d 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 75 72 6c 3a 22 2f 2f 6a 73 2e 6d 61 78 6d 69 6e 64 2e 63 6f 6d 2f 6a 73 2f 61 70 Data Ascii: llback}",isScript:!0,callback:function(e,t){try{var i=JSON.parse(t);return"ERROR"==i.statusCode?n({error:i.statusMessage}):{code:i.countryCode}}catch(e){return n({error:"Invalid response ("+e+")"})}}}},maxmind:function(){return{url:"//js.maxmind.com/js/ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49730	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:03 UTC	625	OUT	GET /wp-content/themes/orbital/assets/js/navigation.js?ver=20190101 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	441	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Mar 2020 05:14:42 GMT Accept-Ranges: bytes Content-Length: 0 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49729	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:03 UTC	625	OUT	GET /wp-content/themes/orbital/assets/js/social.min.js?ver=20190101 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	444	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Mar 2020 05:14:42 GMT Accept-Ranges: bytes Content-Length: 6521 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:04 UTC	6521	IN	Data Raw: 76 61 72 20 53 6f 63 69 61 6c 4f 72 62 69 74 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 6d 61 74 63 68 28 75 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 2c 63 3d 69 28 65 2c 74 2c 6e 29 2c 73 3d 6f 28 65 2c 74 2c 6e 2c 63 29 2c 75 3d 76 6f 69 64 20 30 21 3d 3d 63 2e 74 69 74 6c 65 3f 63 2e 74 69 74 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 74 77 69 74 74 65 72 22 3d 3d 65 26 26 28 74 3d 72 28 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 29 29 3b 72 65 74 75 Data Ascii: var SocialOrbital=function(){function e(e){return document.querySelectorAll(e)}function t(e){return e.className.match(u)}function n(e,t,n){var a,c=i(e,t,n),s=o(e,t,n,c),u=void 0!==c.title?c.title:function(e){var t;"twitter"==e&&(t=r("twitter:title"));retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 22:48:04 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237458 Date: Thu, 24 Oct 2024 22:48:04 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49731	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:04 UTC	644	OUT	GET /wp-content/cache/min/1/wp-content/themes/orbital/assets/js/main.js?ver=1721138301 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	444	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 16 Jul 2024 13:58:21 GMT Accept-Ranges: bytes Content-Length: 3076 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:04 UTC	3076	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 72 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 27 70 72 65 2d 63 6f 64 65 27 29 2c 70 6c 3d 70 72 65 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 70 6c 3b 69 2b 2b 29 7b 70 72 65 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 69 6e 65 2d 6e 75 6d 62 65 72 22 3e 3c 2f 73 70 61 6e 3e 27 2b 70 72 65 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3b 76 61 72 20 6e 75 6d 3d 70 72 65 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 2e 73 70 6c 69 74 28 2f 5c 6e 2f 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 6a 3d 30 3b 6a 3c 6e 75 6d 3b 6a 2b 2b 29 7b 76 61 72 20 6c 69 6e 65 5f 6e 75 6d 3d 70 72 65 5b 69 Data Ascii: (function(){var pre=document.getElementsByClassName('pre-code'),pl=pre.length;for(var i=0;i<pl;i++){pre[i].innerHTML='<span class="line-number"></span>'+pre[i].innerHTML;var num=pre[i].innerHTML.split(/\n/).length;for(var j=0;j<num;j++){var line_num=pre[i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49732	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:04 UTC	633	OUT	GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	444	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 28 Sep 2024 19:33:01 GMT Accept-Ranges: bytes Content-Length: 8892 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:04 UTC	7748	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 6e 7c 7c 73 65 6c 66 29 2e 4c 61 7a 79 4c 6f 61 64 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d Data Ascii: !function(n,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(n="undefined"!=typeof globalThis?globalThis:n\|\|self).LazyLoad=t()}(this,(function(){"use strict";function n(){return n=
2024-10-24 22:48:04 UTC	1144	IN	Data Raw: 6e 6c 69 6e 65 48 61 6e 64 6c 65 72 29 29 7d 28 6f 2c 74 68 69 73 29 2c 74 68 69 73 2e 75 70 64 61 74 65 28 65 29 7d 3b 72 65 74 75 72 6e 20 45 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 2c 6f 2c 61 3d 74 68 69 73 2e 5f 73 65 74 74 69 6e 67 73 2c 72 3d 68 6e 28 6e 2c 61 29 3b 47 28 74 68 69 73 2c 72 2e 6c 65 6e 67 74 68 29 2c 21 65 26 26 69 3f 67 6e 28 61 29 3f 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 2d 31 21 3d 3d 5f 6e 2e 69 6e 64 65 78 4f 66 28 6e 2e 74 61 67 4e 61 6d 65 29 26 26 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 6f 61 64 69 6e 67 22 2c 22 6c 61 Data Ascii: nlineHandler))}(o,this),this.update(e)};return En.prototype={update:function(n){var t,o,a=this._settings,r=hn(n,a);G(this,r.length),!e&&i?gn(a)?function(n,t,e){n.forEach((function(n){-1!==_n.indexOf(n.tagName)&&function(n,t,e){n.setAttribute("loading","la

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49735	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:04 UTC	411	OUT	GET /wp-content/uploads/2020/04/Estrellas-1536x90.jpg HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Jul 2024 18:00:10 GMT Accept-Ranges: bytes Content-Length: 12384 Cache-Control: max-age=31536000, public, public Expires: Fri, 24 Oct 2025 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: image/jpeg
2024-10-24 22:48:04 UTC	7766	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 00 5a 06 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 01 03 04 02 07 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 01 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa db 87 71 2e 90 47 18 50 f8 c7 4c a7 ca Data Ascii: JFIF")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEZ"4q.GPL
2024-10-24 22:48:04 UTC	4618	IN	Data Raw: 1c c6 ae 22 07 98 c2 25 ea fa 61 0f 04 68 0a 38 22 00 92 c5 56 f1 a7 d2 64 1f 20 88 ef 8e 6a 6b ed 3e 21 49 88 98 63 a2 34 88 2e cf 6c a5 c7 f1 3e 67 de e0 48 95 a9 f5 e4 12 a8 5b d3 13 53 f7 bd aa 6a f4 f7 0f dc 03 49 6e 5d c3 4e 14 e6 f7 ce f5 25 77 80 53 77 82 0d 44 7a e1 5d e7 8c 9e 40 e7 6b a0 89 64 d8 18 62 e2 c6 ef 98 d3 69 ea 99 a5 3f 65 44 ee 3c 80 f6 9a d7 be d1 a7 a0 f2 0f f6 1f a3 6d 7a c2 e8 bd 63 34 fc 3a 35 23 5e 63 7e 16 30 7f 91 b5 53 75 ff 00 2f ea 51 bb de a5 f9 8b 52 ac cc c9 e4 6f 19 1f 81 ac 45 14 56 a2 73 6a 94 4d d0 23 74 d6 bb 44 bd 8e 5b 82 6e d4 ee 23 36 88 dd 8a 42 d3 92 97 21 64 aa f8 e8 d2 00 ee a1 fe c2 a9 8f 30 9c 44 99 ae 05 8b 56 08 e5 57 57 99 e0 65 7b 11 19 75 e0 9a 71 ef 8e a8 43 77 44 ac 25 73 d3 bc 32 ba 3c 15 37 78 Data Ascii: "%ah8"Vd jk>!Ic4.l>gH[SjIn]N%wSwDz]@kdbi?eD<mzc4:5#^c~0Su/QRoEVsjM#tD[n#6B!d0DVWWe{uqCwD%s2<7x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49736	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:04 UTC	443	OUT	GET /wp-content/uploads/2020/04/Invitaciones-para-cumplea%C3%B1os-Banner-1536x346.jpg HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 04 Jul 2024 18:00:10 GMT Accept-Ranges: bytes Content-Length: 68669 Cache-Control: max-age=31536000, public, public Expires: Fri, 24 Oct 2025 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: image/jpeg
2024-10-24 22:48:04 UTC	7766	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 01 5a 06 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 02 03 04 01 07 08 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa e0 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEZ"5
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: fe 26 3f 09 4f 22 d1 be 4a 0e 67 4a 68 00 00 00 00 0d 7b 08 f3 d1 20 00 00 00 39 fa 06 8d b9 0f 3d 0e 6e 90 00 00 00 00 00 00 00 00 00 00 0f 39 fa 46 b8 e9 51 ab dd 80 00 00 00 0c 79 fa 90 c7 22 40 00 00 00 00 d5 b4 57 56 21 5d 58 85 75 62 15 d5 88 57 56 21 5d 58 85 75 62 15 d5 88 57 56 21 5d 58 85 75 62 15 d5 88 57 56 21 5d 58 85 75 62 15 d5 88 57 56 21 5d 58 85 75 62 15 d5 88 73 74 80 00 7f ff c4 00 41 10 00 02 01 03 02 03 05 06 03 08 01 03 04 02 03 00 01 02 03 00 04 11 05 12 13 21 31 06 10 14 20 22 15 23 30 32 41 51 33 42 54 24 34 35 36 40 52 53 61 43 16 25 62 44 50 60 71 46 70 63 81 82 ff da 00 08 01 01 00 01 0c 01 ff 00 f7 41 91 17 ab 01 4d 75 0a ff 00 c8 28 10 c0 11 d3 ff 00 95 9d 6a 35 91 94 c6 d4 da dd aa 2e e7 dc a0 ea d6 63 e6 9c 25 25 f5 ac 9f Data Ascii: &?O"JgJh{ 9=n9FQy"@WV!]XubWV!]XubWV!]XubWV!]XubWV!]XubstA!1 "#02AQ3BT$456@RSaC%bDP`qFpcAMu(j5.c%%
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 71 e4 b0 43 13 4e 8f 75 c7 67 18 91 87 74 36 dc 45 dc 4e 02 c6 60 b9 4f b3 4e 2d e1 96 46 a9 ee 24 b8 6d ce d4 39 56 9b 7e cc fc 19 4e 6a 72 44 0e 42 6f 36 0c cf 65 13 3c 1c 06 ef 65 0d d4 50 50 bd 39 54 ef 14 49 be 5c 62 7e d0 c5 17 a6 38 4b 52 f6 89 01 fd d6 a2 d7 ec e5 3e f1 0a 34 1a ad b4 b2 70 b3 b1 b1 9a 11 aa f4 00 77 14 56 ea 2b 03 18 c7 2e 1a 7f 68 ae 1a 0f ca 3b b8 49 9c e3 9e 31 dc 11 47 40 28 c4 ad cc a8 ee ff 00 ee b6 28 e8 a3 ba 4f c7 8b cb 27 f3 2c 1f d7 1e 86 bb 3f fc 3d a8 f7 ce 33 11 ab 6b 75 b7 4c 0e bd c6 40 33 ce b8 ec d1 2b c6 84 d6 64 e3 01 b4 70 c4 92 85 90 b4 74 67 da 23 ca 1c 89 94 ca 63 fc c2 78 ca 16 0d e9 dc 39 73 f2 6d 1f 6a e1 af da b8 42 b8 3f ee b8 27 1c 8d 35 b4 cc 79 e0 d4 36 9b 1b 73 1c d5 d2 96 8b 95 22 00 07 2a 2c 14 Data Ascii: qCNugt6EN`ON-F$m9V~NjrDBo6e<ePP9TI\b~8KR>4pwV+.h;I1G@((O',?=3kuL@3+dptg#cx9smjB?'5y6s"*,
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: d7 5f 8b ad 5c d7 69 4f 0b b3 b1 20 ae cb 69 91 df 5d bc 93 ae e8 d3 55 d3 e7 bf 6d 30 26 4f 69 34 f4 d3 f5 22 b0 8c 47 5a 5e 9b 26 a9 76 21 8c e0 7f d2 3a 7e 38 5c 67 e2 ea ba 64 9a 5d d9 85 fd 42 d6 ce 7b d9 78 76 f1 97 69 bb 31 a8 c1 17 10 c4 1a 88 2a 70 79 1f 25 8c 70 cb 79 12 5c b6 d8 bd 97 a1 dd a9 b5 87 87 c4 d5 7b 3d 65 a6 69 8c e6 62 67 f8 9d 89 4c dd dc b7 c1 3c c1 a1 c8 63 ba cc 0d a4 fd 66 00 14 3f 57 6b 68 b5 a4 f7 0d e2 6a 2f 99 be 13 36 05 44 37 36 f3 f1 65 be db 21 55 5a f1 a9 c2 dd 8e 70 5e 09 5f 69 18 3d d3 a2 c9 03 ab b1 55 d3 f8 07 4e 09 6d 31 9a 3e e6 9f c3 58 b3 8f 99 98 bb 65 8e 4d 69 b7 46 29 84 64 fa 27 19 82 41 bf 87 5a 7a ec b2 89 78 fe 23 cb 3d b2 4e 39 f5 9e ca 58 7e 9b 96 c3 f3 d5 c9 db 03 77 23 6c 60 d4 ad b9 41 15 1e 9e 8d Data Ascii: _\iO i]Um0&Oi4"GZ^&v!:~8\gd]B{xvi1*py%py\{=eibgL<cf?Wkhj/6D76e!UZp^_i=UNm1>XeMiF)d'AZzx#=N9X~w#l`A
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: c8 3c b7 64 9a 24 b6 71 01 51 98 36 42 fc 47 bc 07 97 ba 6b 65 b4 b3 e6 2a d7 0e a2 13 3f da d8 f3 aa 51 02 8f 46 f6 45 d6 b8 9d 8a a2 10 c2 74 4e cc 81 89 5b 26 e4 63 25 4f 89 71 c7 15 49 85 b6 b7 0a e6 b9 8a 83 c9 6a 19 8a 98 66 6a 7e 35 9c 4d c1 51 ac dc 19 d4 ec fa 1a e9 34 e8 8a 15 6a 6b c7 d8 cf 45 f9 4a dd cd 95 f1 30 c7 f0 89 c2 42 8c a5 7b bf 96 ad 53 46 00 04 3e 25 f9 0a 3b e3 29 e7 25 99 2b 47 5e 9e 61 e4 9d 96 fa d4 74 54 80 80 6f c9 72 88 2d 8c d1 cd ae c9 1d 4b b3 fa 23 9d 1b db 2c 2a 20 06 f9 1d d9 51 08 23 5b 3f 64 cc 68 de d7 60 7e 8b 50 dc 42 d1 f4 83 00 8e bc 8e 8d 4d f2 31 da 9a fa 0a 88 2d 36 42 d8 8b 9b 28 97 3c 7b a1 4c 44 e3 1d d1 76 04 94 31 38 71 51 f5 09 b0 27 fb 1d d6 6e 39 35 9d d1 c6 c3 30 44 c4 07 2a 11 89 71 9c 56 e8 d2 8c Data Ascii: <d$qQ6BGke?QFEtN[&c%OqIjfj~5MQ4jkEJ0B{SF>%;)%+G^atTor-K#, Q#[?dh`~PBM1-6B(<{LDv18qQ'n950D*qV
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: e2 6b 08 e4 df c3 68 73 4b 9f dc aa a2 ff 00 f8 bd 66 0c 95 c7 81 2f 2a 19 2a 3d 06 39 45 f8 62 0d bb 6b 3d bc b4 e6 a0 1e b8 fc cb a5 55 08 c7 36 4e cc fb b2 98 fa 03 85 31 55 13 b0 5e c3 31 da 35 0c a8 b0 ba 5b ca eb 3c 90 35 62 a3 20 e4 c0 73 f9 95 83 04 b0 72 88 f5 ab 7c 44 91 ea c7 cb af 3d e6 ae 35 1f 60 d1 a2 02 73 d0 69 d4 8e 02 b6 48 60 df 32 9e a3 37 84 a8 f4 fa 46 89 76 67 c8 bb 10 c7 ef 78 b9 6b a0 d9 55 53 d5 9f 98 3d ea 81 63 dd 81 1c 39 76 47 68 49 66 79 bf da 08 27 4b f8 08 be 4f 80 b8 4f b6 8c b1 d1 3c a3 e7 b3 c2 e2 0d 66 86 bb b3 7c 7d e2 de e0 32 c6 33 ad 11 0e 21 05 32 3e 04 fe 62 36 97 60 7e 22 ea ef 5f d8 83 85 ed de cc 08 60 1d 89 98 63 51 dd da 3b bf 36 71 e2 1c 16 05 83 0c 80 2b 5e 27 ef c0 0f 5c 52 c7 c1 43 04 ef be 66 ba 7c 10 Data Ascii: khsKf/**=9Ebk=U6N1U^15[<5b sr\|D=5`siH`27FvgxkUS=c9vGhIfy'KOO<f\|}23!2>b6`~"_`cQ;6q+^'\RCf\|
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 1b d3 f6 98 db c3 e1 7d b2 e3 4d 59 7c 00 e5 68 80 22 f3 c9 3f bd c3 ce 2d 01 3a 93 36 ec 1c 62 b4 a1 9d 0c 82 59 17 46 f0 ad 3b 4c 69 85 5b 86 59 54 6b 61 44 73 01 79 49 bb ad d2 5a 50 76 20 05 00 3a 41 4d 03 b1 03 66 de 52 95 ed 03 18 42 86 b2 45 06 a8 a5 4c c5 ad 0a 34 ac 4a a1 1b 0a 22 62 82 c2 97 51 31 0d 48 6b df cb f1 99 fc ae 71 f1 d7 ef f7 11 b2 91 de 8e 4f eb 03 e2 a0 85 e7 89 b7 87 76 03 e6 08 45 29 57 36 e3 e1 87 7f 8a 87 58 a0 64 d5 f1 78 9b 87 6a 35 88 4a d9 90 2d cc da 5a 93 97 54 52 c1 55 4b 85 72 28 8d c1 ea c6 22 20 52 2e 9d a1 89 d6 35 31 36 85 2c 5e 05 6c 90 a0 aa ca b4 83 50 0d 65 b0 ae 90 35 57 6c 28 69 88 24 6c df ab f5 4d 95 50 3b 39 f8 62 84 68 5d c6 e6 f0 d6 6a 0d 68 35 c1 2e c9 1b a1 54 0f 84 09 c5 6e c2 31 61 92 ae c9 95 b3 76 Data Ascii: }MY\|h"?-:6bYF;Li[YTkaDsyIZPv :AMfRBEL4J"bQ1HkqOvE)W6Xdxj5J-ZTRUKr(" R.516,^lPe5Wl(i$lMP;9bh]jh5.Tn1av
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 93 21 c6 24 d4 f1 04 56 83 2b 2b c0 e8 f8 31 85 54 34 73 33 c2 1e 3e 9a 89 84 ed 0d 83 b1 cc d2 28 f9 3c b9 93 4d f9 ff 00 c0 b1 1b 51 61 ee 44 8f 15 01 ea 4d e6 4c 14 65 d1 cc 7b 85 d8 0d ea a5 db e1 45 77 a8 d5 6a 35 42 2f 06 4c 7c d4 2b 2d 50 3c 3f f6 68 92 6c 7b 0f bc d2 29 8f 4c 1f 92 53 8d d6 ae f9 8f 4e f4 53 2b 4e 4f bc a6 b9 c4 6a b6 f6 9c e4 81 8b df e5 89 94 ca a5 29 78 8c 16 b9 83 83 19 89 74 e3 b5 f9 aa 3d 48 f7 9f e6 08 7d 2f ef b9 f0 0b 06 cb 98 48 30 88 5b 03 a9 62 ac 97 c8 d8 05 7b 97 e7 31 ec 2c 22 ea 59 ad 6d 1d a7 a9 86 20 dc 04 b8 d4 81 bb 12 ab 75 bd 62 51 70 9a 76 db b5 8d d4 fa 5c 2f 05 c7 22 04 60 ba 45 2f 0e d4 f7 84 d6 b2 80 e8 4a 4b 62 e9 ea 4a 79 65 47 30 b4 1b 8a 99 68 ab f8 88 de 75 31 03 5d 97 8f 36 0d be 79 1c 12 ce eb c3 Data Ascii: !$V++1T4s3>(<MQaDMLe{Ewj5B/L\|+-P<?hl{)LSNS+NOj)xt=H}/H0[b{1,"Ym ubQpv\/"`E/JKbJyeG0hu1]6y
2024-10-24 22:48:04 UTC	4903	IN	Data Raw: f4 34 53 0a 9d bd 20 f9 f4 8c b1 67 88 b0 51 42 e8 4f a6 b9 e6 cb f7 1d d7 d6 7b 08 ba 03 32 a5 dc e7 76 70 e3 3f 42 0f 15 91 3c 90 93 75 4c d1 fa 45 8c 3a 20 a7 8f 3c 55 65 6a 44 19 23 ff 00 4f c1 18 b9 45 e7 1d e1 1a 33 79 cd 57 a6 d4 63 9f b7 1d 76 7d c7 cd c2 37 0f f7 9f ff c4 00 31 11 00 02 01 04 00 05 03 04 01 03 04 03 00 00 00 00 01 02 03 00 04 11 12 05 10 13 21 31 20 40 41 14 22 30 32 33 23 34 50 06 15 51 61 35 42 71 ff da 00 08 01 03 01 01 08 00 f6 98 cf f9 72 8c 2b 18 ff 00 00 01 a1 13 9f 02 de 43 42 d5 fe 45 a7 fc 98 62 53 86 16 f1 d3 b4 71 b0 5a 00 0a 71 86 23 fc 61 8b 10 ef e8 16 d3 14 dc 70 7b 0e bb 99 24 61 a9 23 d0 09 08 09 6d 09 1b 14 54 3d d1 50 8c 9a d0 f7 f6 81 49 a1 0b 9f 02 da 43 42 d5 be 45 a0 f9 31 42 87 56 10 47 4e e9 1b 05 1d be Data Ascii: 4S gQBO{2vp?B<uLE: <UejD#OE3yWcv}71!1 @A"023#4PQa5Bqr+CBEbSqZq#ap{$a#mT=PICBE1BVGN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49737	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:04 UTC	504	OUT	GET /wp-content/cache/min/1/wp-content/plugins/wp-plugin-hostgator/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=1721138300 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	444	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 16 Jul 2024 13:58:20 GMT Accept-Ranges: bytes Content-Length: 2146 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:04 UTC	2146	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 63 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 7b 63 6c 69 65 6e 74 49 64 3a 74 2c 2e 2e 2e 6e 7d 3d 7b 7d 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 7b 61 63 74 69 76 65 43 6c 61 73 73 3a 22 6e 66 64 2d 77 62 2d 61 6e 69 6d 61 74 65 64 2d 69 6e 22 2c 72 6f 6f 74 3a 6e 75 6c 6c 2c 72 6f 6f 74 4d 61 72 67 69 6e 3a 22 30 70 78 22 2c 74 68 72 65 73 68 6f 6c 64 3a 30 2c 2e 2e 2e 6e 7d 7d 6f 62 73 65 72 76 65 45 6c 65 6d 65 6e 74 73 28 74 2c 6e 3d 6e 75 6c 6c 2c 65 3d 21 31 29 7b 69 66 28 21 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 21 74 3f 2e 6c 65 6e 67 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 Data Ascii: (()=>{var c=class{constructor({clientId:t,...n}={}){this.options={activeClass:"nfd-wb-animated-in",root:null,rootMargin:"0px",threshold:0,...n}}observeElements(t,n=null,e=!1){if(!("IntersectionObserver"in window)\|\|!t?.length\|\|document.documentElement.clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49734	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:04 UTC	416	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	445	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 19 Aug 2023 03:21:46 GMT Accept-Ranges: bytes Content-Length: 13577 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:04 UTC	7747	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-10-24 22:48:04 UTC	5830	IN	Data Raw: 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 3d 78 28 65 29 2c 6e 3d 72 2c 43 2e 74 65 73 74 28 6e 29 26 26 4e 2e 74 65 73 74 28 6e 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 29 7c 7c 41 5b 72 5d 7c 7c 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 27 4e 75 6d 62 65 72 2d 74 79 70 65 64 20 76 61 6c 75 65 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 6c 75 65 20 29 27 29 29 2c 51 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 22 63 73 73 2d 6e 75 6d 62 65 72 22 29 3b 76 61 72 20 53 2c 50 2c 6b 2c 48 2c 45 3d 73 2e 64 61 74 61 3b 69 28 73 2c 22 64 61 74 61 22 2c 66 Data Ascii: s):("number"==typeof t&&(r=x(e),n=r,C.test(n)&&N.test(n[0].toUpperCase()+n.slice(1))\|\|A[r]\|\|u("css-number",'Number-typed values are deprecated for jQuery.fn.css( "'+e+'", value )')),Q.apply(this,arguments))},"css-number");var S,P,k,H,E=s.data;i(s,"data",f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49733	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:04 UTC	408	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	445	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 15 Nov 2023 14:28:54 GMT Accept-Ranges: bytes Content-Length: 87553 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:03 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:04 UTC	7747	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 Data Ascii: n}}function F(e){return e[S]=!0,e}function $(e){var t=T.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t)
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 61 62 6c 65 64 3a 7a 28 21 30 29 2c 63 68 65 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 21 21 65 2e 63 68 65 63 6b 65 64 7c 7c 66 65 28 65 2c 22 6f 70 74 69 6f 6e 22 29 26 26 21 21 65 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 Data Ascii: abled:z(!0),checked:function(e){return fe(e,"input")&&!!e.checked\|\|fe(e,"option")&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)r
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 2e 6c 65 6e 67 74 68 3a 2d 31 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 28 63 65 2e 6d 65 72 67 65 28 74 68 69 73 2e 67 65 74 28 29 2c 63 65 28 65 2c 74 29 29 29 29 7d 2c 61 64 64 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 6e 75 6c 6c 3d 3d 65 3f 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 3a 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 2e 66 69 6c 74 65 72 28 65 29 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 31 31 21 3d 3d 74 2e 6e 6f 64 Data Ascii: .length:-1},add:function(e,t){return this.pushStack(ce.uniqueSort(ce.merge(this.get(),ce(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),ce.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nod
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 69 6f 6e 28 29 7b 7a 2e 73 65 74 28 74 68 69 73 2c 6e 29 7d 29 3a 4d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 6f 26 26 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 28 74 3d 7a 2e 67 65 74 28 6f 2c 6e 29 29 3f 74 3a 76 6f 69 64 20 30 21 3d 3d 28 74 3d 56 28 6f 2c 6e 29 29 3f 74 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 73 65 74 28 74 68 69 73 2c 6e 2c 65 29 7d 29 7d 2c 6e 75 6c 6c 2c 65 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e Data Ascii: ion(){z.set(this,n)}):M(this,function(e){var t;if(o&&void 0===e)return void 0!==(t=z.get(o,n))?t:void 0!==(t=V(o,n))?t:void 0;this.each(function(){z.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){z.
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 69 73 70 61 74 63 68 7c 7c 21 31 21 3d 3d 63 2e 70 72 65 44 69 73 70 61 74 63 68 2e 63 61 6c 6c 28 74 68 69 73 2c 75 29 29 7b 61 3d 63 65 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 72 73 2e 63 61 6c 6c 28 74 68 69 73 2c 75 2c 6c 29 2c 74 3d 30 3b 77 68 69 6c 65 28 28 69 3d 61 5b 74 2b 2b 5d 29 26 26 21 75 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 7b 75 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 69 2e 65 6c 65 6d 2c 6e 3d 30 3b 77 68 69 6c 65 28 28 6f 3d 69 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 75 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 75 2e 72 6e 61 6d 65 73 70 61 63 65 26 26 21 31 21 3d 3d 6f 2e 6e 61 6d 65 73 70 61 63 65 26 26 21 75 2e 72 6e 61 6d 65 Data Ascii: ispatch\|\|!1!==c.preDispatch.call(this,u)){a=ce.event.handlers.call(this,u,l),t=0;while((i=a[t++])&&!u.isPropagationStopped()){u.currentTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rname
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 28 65 29 7b 31 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 31 31 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 52 65 28 74 68 69 73 2c 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 74 3d 52 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 Data Ascii: (e){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType\|\|Re(this,e).appendChild(e)})},prepend:function(){return $e(this,arguments,function(e){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var t=Re(this,e);t.insertBefore(e,t.firstChild)
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 74 68 69 73 2e 65 6c 65 6d 3d 65 2c 74 68 69 73 2e 70 72 6f 70 3d 6e 2c 74 68 69 73 2e 65 61 73 69 6e 67 3d 69 7c 7c 63 65 2e 65 61 73 69 6e 67 2e 5f 64 65 66 61 75 6c 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 3d 74 68 69 73 2e 6e 6f 77 3d 74 68 69 73 2e 63 75 72 28 29 2c 74 68 69 73 2e 65 6e 64 3d 72 2c 74 68 69 73 2e 75 6e 69 74 3d 6f 7c 7c 28 63 65 2e 63 73 73 4e 75 6d 62 65 72 5b 6e 5d 3f 22 22 3a 22 70 78 22 29 7d 2c 63 75 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 67 65 74 3f 65 2e 67 65 74 28 74 68 69 73 29 3a 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 Data Ascii: this.elem=e,this.prop=n,this.easing=i\|\|ce.easing._default,this.options=t,this.start=this.now=this.cur(),this.end=r,this.unit=o\|\|(ce.cssNumber[n]?"":"px")},cur:function(){var e=at.propHooks[this.prop];return e&&e.get?e.get(this):at.propHooks._default.get(t
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 63 65 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 63 65 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 63 65 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 6d 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e Data Ascii: })}}),ce.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?ce.prop(e,t,n):(1===o&&ce.isXMLDoc(e)\|\|(i=ce.attrHooks[t.toLowerCase()]\|\|(ce.expr.match.bool.test(t)?mt:void 0)),void 0!==n?null===n
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 74 68 69 73 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 61 6d 65 26 26 21 63 65 28 74 68 69 73 29 2e 69 73 28 22 3a 64 69 73 61 62 6c 65 64 22 29 26 26 4f 74 2e 74 65 73 74 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 21 48 74 2e 74 65 73 74 28 65 29 26 26 28 74 68 69 73 2e 63 68 65 63 6b 65 64 7c 7c 21 77 65 2e 74 65 73 74 28 65 29 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 65 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 75 6c 6c 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 63 65 2e 6d 61 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 Data Ascii: this}).filter(function(){var e=this.type;return this.name&&!ce(this).is(":disabled")&&Ot.test(this.nodeName)&&!Ht.test(e)&&(this.checked\|\|!we.test(e))}).map(function(e,t){var n=ce(this).val();return null==n?null:Array.isArray(n)?ce.map(n,function(e){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49739	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:04 UTC	426	OUT	GET /wp-content/themes/orbital/assets/js/cookies.min.js?ver=20190101 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:04 UTC	445	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Mar 2020 05:14:42 GMT Accept-Ranges: bytes Content-Length: 19933 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:04 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:04 UTC	7747	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 68 61 73 49 6e 69 74 69 61 6c 69 73 65 64 29 7b 76 61 72 20 74 3d 7b 65 73 63 61 70 65 52 65 67 45 78 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 2d 5c 5b 5c 5d 5c 2f 5c 7b 5c 7d 5c 28 5c 29 5c 2a 5c 2b 5c 3f 5c 2e 5c 5c 5c 5e 5c 24 5c 7c 5d 2f 67 2c 22 5c 5c 24 26 22 29 7d 2c 68 61 73 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 22 20 22 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 69 2b 65 2e 63 6c 61 73 73 4e 61 6d 65 2b 69 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 6e 5c 74 5d 2f 67 2c 69 29 2e 69 6e 64 65 78 4f 66 28 69 2b 74 2b 69 29 3e 3d 30 7d 2c 61 64 64 43 6c 61 73 73 3a 66 Data Ascii: !function(e){if(!e.hasInitialised){var t={escapeRegExp:function(e){return e.replace(/[\-\[\]\/\{\}\*\+\?\.\\\^\$\\|]/g,"\\$&")},hasClass:function(e,t){var i=" ";return 1===e.nodeType&&(i+e.className+i).replace(/[\n\t]/g,i).indexOf(i+t+i)>=0},addClass:f
2024-10-24 22:48:04 UTC	8000	IN	Data Raw: 72 20 67 3d 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 63 6f 6e 74 61 69 6e 65 72 3a 6e 75 6c 6c 2c 63 6f 6f 6b 69 65 3a 7b 6e 61 6d 65 3a 22 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 5f 73 74 61 74 75 73 22 2c 70 61 74 68 3a 22 2f 22 2c 64 6f 6d 61 69 6e 3a 22 22 2c 65 78 70 69 72 79 44 61 79 73 3a 33 36 35 7d 2c 6f 6e 50 6f 70 75 70 4f 70 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 50 6f 70 75 70 43 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 49 6e 69 74 69 61 6c 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 2c 6f 6e 53 74 61 74 75 73 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 7d 2c 6f 6e 52 65 76 6f 6b 65 43 68 6f 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 63 6f 6e 74 65 6e 74 3a 7b 68 65 61 64 65 72 3a Data Ascii: r g={enabled:!0,container:null,cookie:{name:"cookieconsent_status",path:"/",domain:"",expiryDays:365},onPopupOpen:function(){},onPopupClose:function(){},onInitialise:function(e){},onStatusChange:function(e,t){},onRevokeChoice:function(){},content:{header:
2024-10-24 22:48:04 UTC	4186	IN	Data Raw: 6c 6c 62 61 63 6b 7d 22 2c 69 73 53 63 72 69 70 74 3a 21 30 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 76 61 72 20 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 3b 72 65 74 75 72 6e 22 45 52 52 4f 52 22 3d 3d 69 2e 73 74 61 74 75 73 43 6f 64 65 3f 6e 28 7b 65 72 72 6f 72 3a 69 2e 73 74 61 74 75 73 4d 65 73 73 61 67 65 7d 29 3a 7b 63 6f 64 65 3a 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 7d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 7b 65 72 72 6f 72 3a 22 49 6e 76 61 6c 69 64 20 72 65 73 70 6f 6e 73 65 20 28 22 2b 65 2b 22 29 22 7d 29 7d 7d 7d 7d 2c 6d 61 78 6d 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 75 72 6c 3a 22 2f 2f 6a 73 2e 6d 61 78 6d 69 6e 64 2e 63 6f 6d 2f 6a 73 2f 61 70 Data Ascii: llback}",isScript:!0,callback:function(e,t){try{var i=JSON.parse(t);return"ERROR"==i.statusCode?n({error:i.statusMessage}):{code:i.countryCode}}catch(e){return n({error:"Invalid response ("+e+")"})}}}},maxmind:function(){return{url:"//js.maxmind.com/js/ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49746	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:05 UTC	689	OUT	GET /wp-content/uploads/2024/07/Invitaciones-de-cumpleanos-pagina-R.jpg HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:05 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 16 Jul 2024 16:06:28 GMT Accept-Ranges: bytes Content-Length: 28418 Cache-Control: max-age=31536000, public, public Expires: Fri, 24 Oct 2025 22:48:04 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: image/jpeg
2024-10-24 22:48:05 UTC	7766	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 7c 01 7c 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 bb 02 ee 03 01 22 00 02 11 01 03 11 01 ff c4 00 37 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 05 06 03 04 09 02 01 01 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f5 4d 0e 75 ed 55 35 a1 ac 89 2a Data Ascii: JFIF\|\|"7MuU5*
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 62 53 98 46 48 5d 99 5b 34 ab 53 ed 34 5c c9 fb fe 6c d6 60 49 54 b5 cb c5 36 11 20 9c 63 25 72 e3 ba 49 ed a0 77 d6 76 f9 41 ba 61 dc 5a fc 7d 99 ed b5 99 0b 55 23 51 a8 08 11 72 8e 91 13 0f d6 8b 27 6c 4f 61 d9 78 22 7c c9 c3 60 48 c3 a3 54 a4 a8 0d 71 87 19 59 94 dd ba c5 27 2f dc 8e ca 49 a7 ae 2c 8d 9c 98 3b 9d ad 68 e7 65 04 dd a8 17 50 6d fd 91 7f 33 6a cf a3 b3 33 43 70 6c a7 b2 2c 4d c4 f2 54 f4 c6 0a 85 c5 eb ea 8c 9b 85 2c 54 b3 cc 1f fb 87 f3 0c f2 8f 22 7d 31 33 32 3a b8 7b d7 41 43 96 84 30 f7 0c 4a 2d 24 be 7a b3 a4 99 2e 0b 1d b1 ae a9 40 fd 22 69 2f 24 d6 5c e5 9a 9b 0b 10 48 23 c2 2c d5 ab 35 86 0f 01 5a 04 ce 81 51 11 d0 3a 02 d4 a6 2c 65 1a d1 c9 ed 4b 54 19 cb 13 19 84 cc 4e 17 14 4d 31 a9 43 85 62 d2 d9 85 2c ee 4d 19 11 4f a4 20 e4 Data Ascii: bSFH][4S4\l`IT6 c%rIwvAaZ}U#Qr'lOax"\|`HTqY'/I,;hePm3j3Cpl,MT,T"}132:{AC0J-$z.@"i/$\H#,5ZQ:,eKTNM1Cb,MO
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: da 3e f5 70 0c aa c2 85 ba 47 73 0e 4e 3f b8 6e 68 f9 c8 d7 d2 31 b8 55 be de db 67 09 e1 aa 81 a9 6e 6c 6c 2d be 09 df 1b 31 67 d8 b1 e9 1a b6 55 b2 36 61 da 87 c4 64 ca 8d 86 68 8b f7 a1 ba f4 84 77 4c 5a 34 46 64 fa 8f 17 7f 66 3e 44 ab 2d 7b 0c b1 d0 7d 05 ee ac 90 fd ed 4a b9 6d 9c df c9 88 f7 ba 07 19 85 b6 56 a1 1b 45 ed 16 8c de 94 f1 bc cc ca 0f 70 dd 6d 84 34 82 40 63 52 63 d2 34 74 99 63 a0 fb bb 62 1f 90 d8 58 9c c0 e7 5d 35 9e 20 f8 7e 8a 3d 61 6b ce 93 29 0c f2 c0 d9 d2 a7 7b a1 a7 9e c6 95 b4 70 0c 5e 81 ca cb 14 94 09 f4 28 bf 33 ec d6 3a 3c 3b 90 a6 cd aa b2 54 ac c9 5c a1 da cb e6 54 6e 0d 4e ed 2a 10 cb 02 c1 a2 4c eb 3d 3f 47 fb 69 18 78 c8 d1 b0 05 d7 bc 35 21 d0 b5 76 03 75 84 0d 7d 11 99 6c ea 0c 94 19 56 2c 32 b3 54 36 74 75 47 36 Data Ascii: >pGsN?nh1Ugnll-1gU6adhwLZ4Fdf>D-{}JmVEpm4@cRc4tcbX]5 ~=ak){p^(3:<;T\TnN*L=?Gix5!vu}lV,2T6tuG6
2024-10-24 22:48:05 UTC	4652	IN	Data Raw: db 74 58 75 ba 1a b4 c1 c7 aa b2 13 70 94 3a 2a e5 05 7c b3 16 a5 24 ab 0d 8d d4 16 78 98 a6 a1 6b 44 c5 ad 18 ba c4 6f cb d9 53 4a b8 40 17 1d ce 85 e6 f9 97 98 13 c8 c3 77 9f bf 16 ae cf bd d8 fd 02 9d 09 f6 51 2f e6 21 15 1e 64 52 3a 88 1c 76 3b c3 08 29 84 21 3a ab 6f 02 ed 2c 07 43 c1 51 1d 91 7a 46 00 d1 61 92 39 05 4e 4e f0 56 8b a3 21 62 7b c3 ba aa 95 75 43 cb 3d 20 48 a5 54 bf c4 20 40 a3 45 a0 56 dc 5c 36 b3 b4 6b 4b 64 11 54 44 02 61 2f 0b 35 1e 9b 2f 80 bc ea 34 d2 e9 e5 88 28 48 11 51 52 59 4b ce d5 86 71 3d 02 6e 15 81 bd 86 8e 2d 20 7f 5f 4a 08 5d 80 60 fa 48 cf 59 05 33 58 1a ab ba 83 2e db d8 0a 16 b9 18 bb 69 8b ac 45 44 32 c4 83 53 09 73 55 06 30 b5 a5 55 29 52 35 a3 07 4c a6 a3 29 ee 16 c4 04 0c d2 65 c3 0b 52 3b b5 84 26 d6 63 e1 8e Data Ascii: tXup:*\|$xkDoSJ@wQ/!dR:v;)!:o,CQzFa9NNV!b{uC= HT @EV\6kKdTDa/5/4(HQRYKq=n- _J]`HY3X.iED2SsU0U)R5L)eR;&c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49747	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:05 UTC	426	OUT	GET /wp-content/cache/min/1/releases/v5.7.2/js/all.js?ver=1721138301 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:05 UTC	447	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 16 Jul 2024 13:58:21 GMT Accept-Ranges: bytes Content-Length: 1111314 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:04 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:05 UTC	7745	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 7b 7d 2c 6c 3d 7b 7d 3b 74 72 79 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 63 3d 77 69 6e 64 6f 77 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 28 6c 3d 64 6f 63 75 6d 65 6e 74 29 7d 63 61 74 63 68 28 63 29 7b 7d 76 61 72 20 68 3d 28 63 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 7b 7d 29 2e 75 73 65 72 41 67 65 6e 74 2c 7a 3d 76 6f 69 64 20 30 3d 3d 3d 68 3f 22 22 3a 68 2c 76 3d 63 2c 6d 3d 6c 2c 73 3d 28 76 2e 64 6f 63 75 6d 65 6e 74 2c 21 21 6d 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 21 6d 2e 68 65 61 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: !function(){"use strict";var c={},l={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(l=document)}catch(c){}var h=(c.navigator\|\|{}).userAgent,z=void 0===h?"":h,v=c,m=l,s=(v.document,!!m.documentElement&&!!m.head&&"function"==typ
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 38 2e 37 2d 31 39 2e 35 20 31 39 2e 35 2d 31 39 2e 35 68 34 35 2e 33 63 31 30 2e 38 20 30 20 31 39 2e 35 20 38 2e 37 20 31 39 2e 35 20 31 39 2e 35 76 31 35 2e 34 63 30 20 31 2e 38 2d 31 2e 37 20 33 2d 33 2e 33 20 32 2e 35 2d 31 32 2e 33 2d 33 2e 34 2d 32 35 2e 31 2d 35 2e 31 2d 33 38 2e 31 2d 35 2e 31 2d 31 33 2e 35 20 30 2d 32 36 2e 37 20 31 2e 38 2d 33 39 2e 34 20 35 2e 35 2d 31 2e 37 2e 35 2d 33 2e 34 2d 2e 38 2d 33 2e 34 2d 32 2e 35 76 2d 31 35 2e 38 7a 6d 2d 38 34 2e 34 20 33 37 6c 39 2e 32 2d 39 2e 32 63 37 2e 36 2d 37 2e 36 20 31 39 2e 39 2d 37 2e 36 20 32 37 2e 35 20 30 6c 37 2e 37 20 37 2e 37 63 31 2e 31 20 31 2e 31 20 31 20 33 2d 2e 33 20 34 2d 36 2e 32 20 34 2e 35 2d 31 32 2e 31 20 39 2e 34 2d 31 37 2e 36 20 31 34 2e 39 2d 35 2e 34 20 35 2e 34 Data Ascii: 8.7-19.5 19.5-19.5h45.3c10.8 0 19.5 8.7 19.5 19.5v15.4c0 1.8-1.7 3-3.3 2.5-12.3-3.4-25.1-5.1-38.1-5.1-13.5 0-26.7 1.8-39.4 5.5-1.7.5-3.4-.8-3.4-2.5v-15.8zm-84.4 37l9.2-9.2c7.6-7.6 19.9-7.6 27.5 0l7.7 7.7c1.1 1.1 1 3-.3 4-6.2 4.5-12.1 9.4-17.6 14.9-5.4 5.4
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 2e 33 2d 32 20 31 38 2e 31 20 33 34 2e 35 2d 32 2e 33 2d 33 2e 32 20 32 38 2e 32 2d 33 34 2e 34 20 32 2e 32 2d 32 2e 33 20 32 30 2e 31 20 33 34 2e 34 2d 32 2e 32 2d 33 20 32 36 2e 31 2d 36 34 2e 37 20 34 2e 31 20 31 32 2e 37 2d 31 31 33 2e 32 4c 35 32 37 20 33 36 35 2e 32 6c 2d 33 31 2e 39 20 32 2d 32 33 2e 38 2d 31 31 37 2e 38 20 33 30 2e 33 2d 32 20 31 33 2e 36 20 37 39 2e 34 20 33 31 2e 37 2d 38 32 2e 34 20 39 33 2e 31 2d 36 2e 32 7a 4d 34 32 36 2e 38 20 33 37 31 2e 35 6c 32 38 2e 33 2d 31 2e 38 4c 34 36 38 20 32 34 39 2e 36 6c 2d 32 38 2e 34 20 31 2e 39 2d 31 32 2e 38 20 31 32 30 7a 4d 31 36 32 20 33 38 38 2e 31 6c 2d 31 39 2e 34 2d 33 36 2d 33 2e 35 20 33 37 2e 34 2d 32 38 2e 32 20 31 2e 37 20 32 2e 37 2d 32 39 2e 31 63 2d 31 31 20 31 38 2d 33 32 20 Data Ascii: .3-2 18.1 34.5-2.3-3.2 28.2-34.4 2.2-2.3 20.1 34.4-2.2-3 26.1-64.7 4.1 12.7-113.2L527 365.2l-31.9 2-23.8-117.8 30.3-2 13.6 79.4 31.7-82.4 93.1-6.2zM426.8 371.5l28.3-1.8L468 249.6l-28.4 1.9-12.8 120zM162 388.1l-19.4-36-3.5 37.4-28.2 1.7 2.7-29.1c-11 18-32
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 35 20 34 39 35 2e 35 20 32 2e 35 20 35 2e 31 20 37 2e 37 20 38 2e 34 20 31 33 2e 34 20 38 2e 34 48 34 39 37 63 31 31 2e 32 20 30 20 31 38 2e 34 2d 31 31 2e 38 20 31 33 2e 34 2d 32 31 2e 37 20 30 20 30 2d 32 33 34 2e 35 2d 34 37 30 2e 36 2d 32 34 30 2e 34 2d 34 38 32 2e 33 2d 35 2e 33 2d 31 30 2e 36 2d 31 38 2e 38 2d 31 30 2e 38 2d 32 35 2e 36 2e 31 7a 22 5d 2c 61 75 64 69 62 6c 65 3a 5b 36 34 30 2c 35 31 32 2c 5b 5d 2c 22 66 33 37 33 22 2c 22 4d 36 34 30 20 31 39 39 2e 39 76 35 34 6c 2d 33 32 30 20 32 30 30 4c 30 20 32 35 34 76 2d 35 34 6c 33 32 30 20 32 30 30 20 33 32 30 2d 32 30 30 2e 31 7a 6d 2d 31 39 34 2e 35 20 37 32 6c 34 37 2e 31 2d 32 39 2e 34 63 2d 33 37 2e 32 2d 35 35 2e 38 2d 31 30 30 2e 37 2d 39 32 2e 36 2d 31 37 32 2e 37 2d 39 32 2e 36 2d 37 Data Ascii: 5 495.5 2.5 5.1 7.7 8.4 13.4 8.4H497c11.2 0 18.4-11.8 13.4-21.7 0 0-234.5-470.6-240.4-482.3-5.3-10.6-18.8-10.8-25.6.1z"],audible:[640,512,[],"f373","M640 199.9v54l-320 200L0 254v-54l320 200 320-200.1zm-194.5 72l47.1-29.4c-37.2-55.8-100.7-92.6-172.7-92.6-7
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 2e 32 20 31 34 37 7a 22 5d 2c 62 69 74 63 6f 69 6e 3a 5b 35 31 32 2c 35 31 32 2c 5b 5d 2c 22 66 33 37 39 22 2c 22 4d 35 30 34 20 32 35 36 63 30 20 31 33 36 2e 39 36 37 2d 31 31 31 2e 30 33 33 20 32 34 38 2d 32 34 38 20 32 34 38 53 38 20 33 39 32 2e 39 36 37 20 38 20 32 35 36 20 31 31 39 2e 30 33 33 20 38 20 32 35 36 20 38 73 32 34 38 20 31 31 31 2e 30 33 33 20 32 34 38 20 32 34 38 7a 6d 2d 31 34 31 2e 36 35 31 2d 33 35 2e 33 33 63 34 2e 39 33 37 2d 33 32 2e 39 39 39 2d 32 30 2e 31 39 31 2d 35 30 2e 37 33 39 2d 35 34 2e 35 35 2d 36 32 2e 35 37 33 6c 31 31 2e 31 34 36 2d 34 34 2e 37 30 32 2d 32 37 2e 32 31 33 2d 36 2e 37 38 31 2d 31 30 2e 38 35 31 20 34 33 2e 35 32 34 63 2d 37 2e 31 35 34 2d 31 2e 37 38 33 2d 31 34 2e 35 30 32 2d 33 2e 34 36 34 2d 32 31 2e Data Ascii: .2 147z"],bitcoin:[512,512,[],"f379","M504 256c0 136.967-111.033 248-248 248S8 392.967 8 256 119.033 8 256 8s248 111.033 248 248zm-141.651-35.33c4.937-32.999-20.191-50.739-54.55-62.573l11.146-44.702-27.213-6.781-10.851 43.524c-7.154-1.783-14.502-3.464-21.
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 2e 32 20 31 30 2e 34 20 31 31 2e 32 7a 4d 35 37 36 20 38 30 76 33 35 32 63 30 20 32 36 2e 35 2d 32 31 2e 35 20 34 38 2d 34 38 20 34 38 48 34 38 63 2d 32 36 2e 35 20 30 2d 34 38 2d 32 31 2e 35 2d 34 38 2d 34 38 56 38 30 63 30 2d 32 36 2e 35 20 32 31 2e 35 2d 34 38 20 34 38 2d 34 38 68 34 38 30 63 32 36 2e 35 20 30 20 34 38 20 32 31 2e 35 20 34 38 20 34 38 7a 6d 2d 32 30 37 2e 35 20 32 33 2e 39 63 2e 34 20 31 2e 37 2e 39 20 33 2e 34 20 31 2e 36 20 35 2e 31 20 31 36 2e 35 20 34 30 2e 36 20 33 32 2e 39 20 38 31 2e 33 20 34 39 2e 35 20 31 32 31 2e 39 20 31 2e 34 20 33 2e 35 20 31 2e 37 20 36 2e 34 2e 32 20 39 2e 39 2d 32 2e 38 20 36 2e 32 2d 34 2e 39 20 31 32 2e 36 2d 37 2e 38 20 31 38 2e 37 2d 32 2e 36 20 35 2e 35 2d 36 2e 37 20 39 2e 35 2d 31 32 2e 37 20 31 Data Ascii: .2 10.4 11.2zM576 80v352c0 26.5-21.5 48-48 48H48c-26.5 0-48-21.5-48-48V80c0-26.5 21.5-48 48-48h480c26.5 0 48 21.5 48 48zm-207.5 23.9c.4 1.7.9 3.4 1.6 5.1 16.5 40.6 32.9 81.3 49.5 121.9 1.4 3.5 1.7 6.4.2 9.9-2.8 6.2-4.9 12.6-7.8 18.7-2.6 5.5-6.7 9.5-12.7 1
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 35 20 30 20 34 38 2d 32 31 2e 35 20 34 38 2d 34 38 56 38 30 63 30 2d 32 36 2e 35 2d 32 31 2e 35 2d 34 38 2d 34 38 2d 34 38 7a 6d 2d 34 34 2e 31 20 31 33 38 2e 39 63 32 32 2e 36 20 30 20 35 32 2e 39 2d 34 2e 31 20 35 32 2e 39 20 32 34 2e 34 20 30 20 31 32 2e 36 2d 36 2e 36 20 32 30 2e 37 2d 31 38 2e 37 20 32 33 2e 32 6c 32 35 2e 38 20 33 34 2e 34 68 2d 31 39 2e 36 6c 2d 32 32 2e 32 2d 33 32 2e 38 68 2d 32 2e 32 76 33 32 2e 38 68 2d 31 36 7a 6d 2d 35 35 2e 39 2e 31 68 34 35 2e 33 76 31 34 48 34 34 34 76 31 38 2e 32 68 32 38 2e 33 56 32 31 37 48 34 34 34 76 32 32 2e 32 68 32 39 2e 33 56 32 35 33 48 34 32 38 7a 6d 2d 36 38 2e 37 20 30 6c 32 31 2e 39 20 35 35 2e 32 20 32 32 2e 32 2d 35 35 2e 32 68 31 37 2e 35 6c 2d 33 35 2e 35 20 38 34 2e 32 68 2d 38 2e 36 6c Data Ascii: 5 0 48-21.5 48-48V80c0-26.5-21.5-48-48-48zm-44.1 138.9c22.6 0 52.9-4.1 52.9 24.4 0 12.6-6.6 20.7-18.7 23.2l25.8 34.4h-19.6l-22.2-32.8h-2.2v32.8h-16zm-55.9.1h45.3v14H444v18.2h28.3V217H444v22.2h29.3V253H428zm-68.7 0l21.9 55.2 22.2-55.2h17.5l-35.5 84.2h-8.6l
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 2e 37 6c 2d 2e 37 20 33 2e 31 63 31 35 2e 38 20 34 20 32 39 2e 39 20 39 2e 38 20 34 32 2e 32 20 31 37 2e 31 6c 33 35 2e 38 20 31 33 35 68 34 32 2e 35 7a 6d 39 34 2e 34 2e 32 4c 32 37 32 2e 31 20 31 37 36 68 2d 34 30 2e 32 6c 2d 32 35 2e 31 20 31 35 35 2e 34 68 34 30 2e 31 7a 6d 31 33 39 2e 39 2d 35 30 2e 38 63 2e 32 2d 31 37 2e 37 2d 31 30 2e 36 2d 33 31 2e 32 2d 33 33 2e 37 2d 34 32 2e 33 2d 31 34 2e 31 2d 37 2e 31 2d 32 32 2e 37 2d 31 31 2e 39 2d 32 32 2e 37 2d 31 39 2e 32 2e 32 2d 36 2e 36 20 37 2e 33 2d 31 33 2e 34 20 32 33 2e 31 2d 31 33 2e 34 20 31 33 2e 31 2d 2e 33 20 32 32 2e 37 20 32 2e 38 20 32 39 2e 39 20 35 2e 39 6c 33 2e 36 20 31 2e 37 20 35 2e 35 2d 33 33 2e 36 63 2d 37 2e 39 2d 33 2e 31 2d 32 30 2e 35 2d 36 2e 36 2d 33 36 2d 36 2e 36 2d 33 Data Ascii: .7l-.7 3.1c15.8 4 29.9 9.8 42.2 17.1l35.8 135h42.5zm94.4.2L272.1 176h-40.2l-25.1 155.4h40.1zm139.9-50.8c.2-17.7-10.6-31.2-33.7-42.3-14.1-7.1-22.7-11.9-22.7-19.2.2-6.6 7.3-13.4 23.1-13.4 13.1-.3 22.7 2.8 29.9 5.9l3.6 1.7 5.5-33.6c-7.9-3.1-20.5-6.6-36-6.6-3
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 39 38 2e 30 33 36 2d 31 30 31 2e 35 31 38 2e 32 36 38 2e 32 36 38 7a 4d 32 39 31 2e 37 35 20 33 35 35 2e 31 30 37 6c 31 31 2e 35 31 38 20 31 31 2e 37 38 36 48 32 38 30 2e 35 6c 31 31 2e 32 35 2d 31 31 2e 37 38 36 7a 6d 2d 2e 32 36 38 2d 31 31 2e 32 35 6c 2d 38 33 2e 33 30 33 2d 38 35 2e 34 34 36 20 37 39 2e 35 35 33 2d 38 34 2e 33 37 35 20 38 33 2e 30 33 36 20 38 37 2e 35 38 39 2d 37 39 2e 32 38 36 20 38 32 2e 32 33 32 7a 6d 35 2e 33 35 37 20 35 2e 38 39 33 6c 37 39 2e 32 38 36 2d 38 32 2e 32 33 32 20 36 37 2e 35 20 37 31 2e 32 35 2d 35 2e 38 39 32 20 32 38 2e 31 32 35 48 33 31 33 2e 37 31 34 6c 2d 31 36 2e 38 37 35 2d 31 37 2e 31 34 33 7a 4d 34 31 30 2e 34 31 31 20 34 34 2e 33 39 33 63 31 2e 30 37 31 2e 35 33 36 20 32 2e 31 34 32 20 31 2e 30 37 32 20 33 Data Ascii: 98.036-101.518.268.268zM291.75 355.107l11.518 11.786H280.5l11.25-11.786zm-.268-11.25l-83.303-85.446 79.553-84.375 83.036 87.589-79.286 82.232zm5.357 5.893l79.286-82.232 67.5 71.25-5.892 28.125H313.714l-16.875-17.143zM410.411 44.393c1.071.536 2.142 1.072 3
2024-10-24 22:48:05 UTC	8000	IN	Data Raw: 33 2e 37 2d 32 30 32 2e 38 20 30 2d 31 30 35 2e 34 20 38 35 2e 35 2d 32 30 33 2e 33 20 32 30 33 2e 37 2d 32 30 33 2e 33 20 31 31 32 2e 36 20 30 20 32 30 32 2e 39 20 38 39 2e 35 20 32 30 32 2e 38 20 32 30 33 2e 33 20 30 20 31 32 31 2e 37 2d 39 39 2e 36 20 32 30 32 2e 38 2d 32 30 32 2e 38 20 32 30 32 2e 38 7a 4d 33 31 36 2e 37 20 31 38 36 68 2d 35 33 2e 32 76 31 33 37 2e 32 68 35 33 2e 32 63 32 31 2e 34 20 30 20 37 30 2d 35 2e 31 20 37 30 2d 36 38 2e 36 20 30 2d 36 33 2e 34 2d 34 38 2e 36 2d 36 38 2e 36 2d 37 30 2d 36 38 2e 36 7a 6d 2e 38 20 31 30 38 2e 35 68 2d 31 39 2e 39 76 2d 37 39 2e 37 6c 31 39 2e 34 2d 2e 31 63 33 2e 38 20 30 20 33 35 2d 32 2e 31 20 33 35 20 33 39 2e 39 20 30 20 32 34 2e 36 2d 31 30 2e 35 20 33 39 2e 39 2d 33 34 2e 35 20 33 39 2e 39 Data Ascii: 3.7-202.8 0-105.4 85.5-203.3 203.7-203.3 112.6 0 202.9 89.5 202.8 203.3 0 121.7-99.6 202.8-202.8 202.8zM316.7 186h-53.2v137.2h53.2c21.4 0 70-5.1 70-68.6 0-63.4-48.6-68.6-70-68.6zm.8 108.5h-19.9v-79.7l19.4-.1c3.8 0 35-2.1 35 39.9 0 24.6-10.5 39.9-34.5 39.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49748	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:05 UTC	425	OUT	GET /wp-content/themes/orbital/assets/js/navigation.js?ver=20190101 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:05 UTC	441	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Mar 2020 05:14:42 GMT Accept-Ranges: bytes Content-Length: 0 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:04 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49749	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:05 UTC	425	OUT	GET /wp-content/themes/orbital/assets/js/social.min.js?ver=20190101 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:05 UTC	444	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Mar 2020 05:14:42 GMT Accept-Ranges: bytes Content-Length: 6521 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:04 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:05 UTC	6521	IN	Data Raw: 76 61 72 20 53 6f 63 69 61 6c 4f 72 62 69 74 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 6d 61 74 63 68 28 75 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 2c 63 3d 69 28 65 2c 74 2c 6e 29 2c 73 3d 6f 28 65 2c 74 2c 6e 2c 63 29 2c 75 3d 76 6f 69 64 20 30 21 3d 3d 63 2e 74 69 74 6c 65 3f 63 2e 74 69 74 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 74 77 69 74 74 65 72 22 3d 3d 65 26 26 28 74 3d 72 28 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 29 29 3b 72 65 74 75 Data Ascii: var SocialOrbital=function(){function e(e){return document.querySelectorAll(e)}function t(e){return e.className.match(u)}function n(e,t,n){var a,c=i(e,t,n),s=o(e,t,n,c),u=void 0!==c.title?c.title:function(e){var t;"twitter"==e&&(t=r("twitter:title"));retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:05 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 22:48:05 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237457 Date: Thu, 24 Oct 2024 22:48:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 22:48:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49750	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:05 UTC	444	OUT	GET /wp-content/cache/min/1/wp-content/themes/orbital/assets/js/main.js?ver=1721138301 HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:05 UTC	444	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 16 Jul 2024 13:58:21 GMT Accept-Ranges: bytes Content-Length: 3076 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:04 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:05 UTC	3076	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 72 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 27 70 72 65 2d 63 6f 64 65 27 29 2c 70 6c 3d 70 72 65 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 70 6c 3b 69 2b 2b 29 7b 70 72 65 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 69 6e 65 2d 6e 75 6d 62 65 72 22 3e 3c 2f 73 70 61 6e 3e 27 2b 70 72 65 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3b 76 61 72 20 6e 75 6d 3d 70 72 65 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 2e 73 70 6c 69 74 28 2f 5c 6e 2f 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 6a 3d 30 3b 6a 3c 6e 75 6d 3b 6a 2b 2b 29 7b 76 61 72 20 6c 69 6e 65 5f 6e 75 6d 3d 70 72 65 5b 69 Data Ascii: (function(){var pre=document.getElementsByClassName('pre-code'),pl=pre.length;for(var i=0;i<pl;i++){pre[i].innerHTML='<span class="line-number"></span>'+pre[i].innerHTML;var num=pre[i].innerHTML.split(/\n/).length;for(var j=0;j<num;j++){var line_num=pre[i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49751	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:05 UTC	433	OUT	GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:05 UTC	444	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 28 Sep 2024 19:33:01 GMT Accept-Ranges: bytes Content-Length: 8892 Cache-Control: max-age=2592000, public, public Expires: Sat, 23 Nov 2024 22:48:04 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: text/javascript; charset=utf-8
2024-10-24 22:48:05 UTC	7748	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 6e 7c 7c 73 65 6c 66 29 2e 4c 61 7a 79 4c 6f 61 64 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d Data Ascii: !function(n,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(n="undefined"!=typeof globalThis?globalThis:n\|\|self).LazyLoad=t()}(this,(function(){"use strict";function n(){return n=
2024-10-24 22:48:05 UTC	1144	IN	Data Raw: 6e 6c 69 6e 65 48 61 6e 64 6c 65 72 29 29 7d 28 6f 2c 74 68 69 73 29 2c 74 68 69 73 2e 75 70 64 61 74 65 28 65 29 7d 3b 72 65 74 75 72 6e 20 45 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 2c 6f 2c 61 3d 74 68 69 73 2e 5f 73 65 74 74 69 6e 67 73 2c 72 3d 68 6e 28 6e 2c 61 29 3b 47 28 74 68 69 73 2c 72 2e 6c 65 6e 67 74 68 29 2c 21 65 26 26 69 3f 67 6e 28 61 29 3f 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 2d 31 21 3d 3d 5f 6e 2e 69 6e 64 65 78 4f 66 28 6e 2e 74 61 67 4e 61 6d 65 29 26 26 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 6f 61 64 69 6e 67 22 2c 22 6c 61 Data Ascii: nlineHandler))}(o,this),this.update(e)};return En.prototype={update:function(n){var t,o,a=this._settings,r=hn(n,a);G(this,r.length),!e&&i?gn(a)?function(n,t,e){n.forEach((function(n){-1!==_n.indexOf(n.tagName)&&function(n,t,e){n.setAttribute("loading","la

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49753	50.6.174.176	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:06 UTC	429	OUT	GET /wp-content/uploads/2024/07/Invitaciones-de-cumpleanos-pagina-R.jpg HTTP/1.1 Host: www.xn--invitacionesdecumpleaos-dic.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:06 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 16 Jul 2024 16:06:28 GMT Accept-Ranges: bytes Content-Length: 28418 Cache-Control: max-age=31536000, public, public Expires: Fri, 24 Oct 2025 22:48:05 GMT Vary: Accept-Encoding X-Newfold-Cache-Level: 2 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Type: image/jpeg
2024-10-24 22:48:06 UTC	7766	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 7c 01 7c 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 bb 02 ee 03 01 22 00 02 11 01 03 11 01 ff c4 00 37 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 05 06 03 04 09 02 01 01 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f5 4d 0e 75 ed 55 35 a1 ac 89 2a Data Ascii: JFIF\|\|"7MuU5*
2024-10-24 22:48:06 UTC	8000	IN	Data Raw: 62 53 98 46 48 5d 99 5b 34 ab 53 ed 34 5c c9 fb fe 6c d6 60 49 54 b5 cb c5 36 11 20 9c 63 25 72 e3 ba 49 ed a0 77 d6 76 f9 41 ba 61 dc 5a fc 7d 99 ed b5 99 0b 55 23 51 a8 08 11 72 8e 91 13 0f d6 8b 27 6c 4f 61 d9 78 22 7c c9 c3 60 48 c3 a3 54 a4 a8 0d 71 87 19 59 94 dd ba c5 27 2f dc 8e ca 49 a7 ae 2c 8d 9c 98 3b 9d ad 68 e7 65 04 dd a8 17 50 6d fd 91 7f 33 6a cf a3 b3 33 43 70 6c a7 b2 2c 4d c4 f2 54 f4 c6 0a 85 c5 eb ea 8c 9b 85 2c 54 b3 cc 1f fb 87 f3 0c f2 8f 22 7d 31 33 32 3a b8 7b d7 41 43 96 84 30 f7 0c 4a 2d 24 be 7a b3 a4 99 2e 0b 1d b1 ae a9 40 fd 22 69 2f 24 d6 5c e5 9a 9b 0b 10 48 23 c2 2c d5 ab 35 86 0f 01 5a 04 ce 81 51 11 d0 3a 02 d4 a6 2c 65 1a d1 c9 ed 4b 54 19 cb 13 19 84 cc 4e 17 14 4d 31 a9 43 85 62 d2 d9 85 2c ee 4d 19 11 4f a4 20 e4 Data Ascii: bSFH][4S4\l`IT6 c%rIwvAaZ}U#Qr'lOax"\|`HTqY'/I,;hePm3j3Cpl,MT,T"}132:{AC0J-$z.@"i/$\H#,5ZQ:,eKTNM1Cb,MO
2024-10-24 22:48:06 UTC	8000	IN	Data Raw: da 3e f5 70 0c aa c2 85 ba 47 73 0e 4e 3f b8 6e 68 f9 c8 d7 d2 31 b8 55 be de db 67 09 e1 aa 81 a9 6e 6c 6c 2d be 09 df 1b 31 67 d8 b1 e9 1a b6 55 b2 36 61 da 87 c4 64 ca 8d 86 68 8b f7 a1 ba f4 84 77 4c 5a 34 46 64 fa 8f 17 7f 66 3e 44 ab 2d 7b 0c b1 d0 7d 05 ee ac 90 fd ed 4a b9 6d 9c df c9 88 f7 ba 07 19 85 b6 56 a1 1b 45 ed 16 8c de 94 f1 bc cc ca 0f 70 dd 6d 84 34 82 40 63 52 63 d2 34 74 99 63 a0 fb bb 62 1f 90 d8 58 9c c0 e7 5d 35 9e 20 f8 7e 8a 3d 61 6b ce 93 29 0c f2 c0 d9 d2 a7 7b a1 a7 9e c6 95 b4 70 0c 5e 81 ca cb 14 94 09 f4 28 bf 33 ec d6 3a 3c 3b 90 a6 cd aa b2 54 ac c9 5c a1 da cb e6 54 6e 0d 4e ed 2a 10 cb 02 c1 a2 4c eb 3d 3f 47 fb 69 18 78 c8 d1 b0 05 d7 bc 35 21 d0 b5 76 03 75 84 0d 7d 11 99 6c ea 0c 94 19 56 2c 32 b3 54 36 74 75 47 36 Data Ascii: >pGsN?nh1Ugnll-1gU6adhwLZ4Fdf>D-{}JmVEpm4@cRc4tcbX]5 ~=ak){p^(3:<;T\TnN*L=?Gix5!vu}lV,2T6tuG6
2024-10-24 22:48:06 UTC	4652	IN	Data Raw: db 74 58 75 ba 1a b4 c1 c7 aa b2 13 70 94 3a 2a e5 05 7c b3 16 a5 24 ab 0d 8d d4 16 78 98 a6 a1 6b 44 c5 ad 18 ba c4 6f cb d9 53 4a b8 40 17 1d ce 85 e6 f9 97 98 13 c8 c3 77 9f bf 16 ae cf bd d8 fd 02 9d 09 f6 51 2f e6 21 15 1e 64 52 3a 88 1c 76 3b c3 08 29 84 21 3a ab 6f 02 ed 2c 07 43 c1 51 1d 91 7a 46 00 d1 61 92 39 05 4e 4e f0 56 8b a3 21 62 7b c3 ba aa 95 75 43 cb 3d 20 48 a5 54 bf c4 20 40 a3 45 a0 56 dc 5c 36 b3 b4 6b 4b 64 11 54 44 02 61 2f 0b 35 1e 9b 2f 80 bc ea 34 d2 e9 e5 88 28 48 11 51 52 59 4b ce d5 86 71 3d 02 6e 15 81 bd 86 8e 2d 20 7f 5f 4a 08 5d 80 60 fa 48 cf 59 05 33 58 1a ab ba 83 2e db d8 0a 16 b9 18 bb 69 8b ac 45 44 32 c4 83 53 09 73 55 06 30 b5 a5 55 29 52 35 a3 07 4c a6 a3 29 ee 16 c4 04 0c d2 65 c3 0b 52 3b b5 84 26 d6 63 e1 8e Data Ascii: tXup:*\|$xkDoSJ@wQ/!dR:v;)!:o,CQzFa9NNV!b{uC= HT @EV\6kKdTDa/5/4(HQRYKq=n- _J]`HY3X.iED2SsU0U)R5L)eR;&c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49760	172.217.16.194	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:08 UTC	653	OUT	GET /getconfig/sodar?sv=200&tid=gda&tv=r20241022&st=env HTTP/1.1 Host: ep1.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.xn--invitacionesdecumpleaos-dic.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:08 UTC	610	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Thu, 24 Oct 2024 22:48:08 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:08 UTC	768	IN	Data Raw: 34 32 39 36 0d 0a 7b 22 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 22 3a 22 71 4d 34 61 5a 35 6e 52 44 74 61 63 6a 75 77 50 33 4d 50 67 32 51 34 22 2c 22 69 6e 6a 65 63 74 6f 72 5f 62 61 73 65 6e 61 6d 65 22 3a 22 73 6f 64 61 72 32 22 2c 22 62 67 5f 68 61 73 68 5f 62 61 73 65 6e 61 6d 65 22 3a 22 77 43 59 65 49 50 34 62 58 56 30 72 6a 4a 47 70 6c 4c 6c 4c 62 66 6d 6a 49 75 6c 4c 4b 79 4a 74 61 51 33 7a 5a 4d 57 44 4e 55 30 22 2c 22 62 67 5f 62 69 6e 61 72 79 22 3a 22 48 6c 56 53 69 74 6f 41 64 66 77 35 2b 42 6a 49 4e 4f 6d 61 4b 50 68 73 48 79 78 32 78 6c 46 75 45 35 78 37 35 6c 31 46 66 4a 6c 33 6f 70 79 62 4e 5a 49 45 46 51 48 68 61 50 49 76 75 46 34 4f 37 37 42 66 66 41 56 39 50 75 2b 46 73 32 61 63 71 4a 71 52 59 79 7a 76 77 55 62 52 58 6c 68 58 31 59 Data Ascii: 4296{"sodar_query_id":"qM4aZ5nRDtacjuwP3MPg2Q4","injector_basename":"sodar2","bg_hash_basename":"wCYeIP4bXV0rjJGplLlLbfmjIulLKyJtaQ3zZMWDNU0","bg_binary":"HlVSitoAdfw5+BjINOmaKPhsHyx2xlFuE5x75l1FfJl3opybNZIEFQHhaPIvuF4O77BffAV9Pu+Fs2acqJqRYyzvwUbRXlhX1Y
2024-10-24 22:48:08 UTC	1378	IN	Data Raw: 64 48 74 46 46 6b 58 75 7a 70 77 41 59 6c 66 4e 36 30 56 69 74 54 41 55 42 74 61 31 2f 4f 47 33 4c 37 75 6b 4e 4e 5a 72 52 65 67 56 66 43 42 32 38 59 50 4c 47 6e 4e 4d 2f 5a 4e 31 77 74 77 6c 7a 31 42 4f 70 59 52 4c 34 49 58 47 39 35 35 38 6a 53 51 51 6c 55 4e 69 72 77 58 58 64 66 7a 7a 66 52 58 56 36 32 71 52 33 33 42 36 56 37 77 63 67 57 69 2b 30 32 76 6a 66 68 37 4b 49 2b 75 4b 64 50 66 2b 6f 62 4b 6c 32 69 4d 47 4a 5a 36 4b 70 38 4a 45 6c 56 30 76 30 71 2b 31 72 36 33 62 35 78 33 75 72 37 7a 41 66 34 6a 74 38 70 4b 43 68 79 63 4e 32 37 49 6f 6f 57 4c 4c 53 4a 36 4f 54 62 77 43 4f 69 48 43 32 37 66 30 79 56 6f 4e 51 4e 69 30 5a 58 66 2b 30 7a 38 52 79 31 53 7a 32 66 48 70 49 31 64 54 5a 2f 59 43 39 49 42 67 49 65 5a 4f 35 6d 2b 55 70 2b 32 6b 37 73 70 Data Ascii: dHtFFkXuzpwAYlfN60VitTAUBta1/OG3L7ukNNZrRegVfCB28YPLGnNM/ZN1wtwlz1BOpYRL4IXG9558jSQQlUNirwXXdfzzfRXV62qR33B6V7wcgWi+02vjfh7KI+uKdPf+obKl2iMGJZ6Kp8JElV0v0q+1r63b5x3ur7zAf4jt8pKChycN27IooWLLSJ6OTbwCOiHC27f0yVoNQNi0ZXf+0z8Ry1Sz2fHpI1dTZ/YC9IBgIeZO5m+Up+2k7sp
2024-10-24 22:48:08 UTC	1378	IN	Data Raw: 55 68 44 62 68 73 4c 65 4b 68 37 38 6c 36 49 6b 78 4d 57 5a 49 32 69 65 6c 76 42 31 62 5a 66 2f 6d 35 78 65 5a 78 4e 6e 34 51 65 61 34 38 43 37 77 70 73 79 4e 63 57 4f 41 73 79 36 5a 34 2b 58 63 6b 63 46 62 2b 46 37 44 4b 55 51 49 78 56 2b 63 6a 50 32 6d 4b 66 35 31 46 37 75 68 75 76 6b 32 37 77 31 4b 72 2b 67 49 71 62 36 37 62 43 53 50 76 4a 74 6a 52 73 4e 48 47 45 58 61 7a 42 67 45 44 76 77 52 33 4c 39 4f 47 4e 32 4e 49 4a 51 30 35 6a 59 73 70 61 7a 6e 54 48 44 44 74 32 6a 31 78 5a 36 49 50 4a 4f 50 79 78 35 30 45 2b 47 31 58 62 6c 31 53 77 37 77 68 5a 41 2b 4a 66 53 45 65 4a 61 51 5a 4a 4f 32 41 35 6c 73 51 42 6e 62 58 57 58 51 49 43 59 7a 78 6b 6a 53 34 33 39 6d 58 52 61 61 49 79 31 62 67 34 6b 41 63 78 6e 51 69 4e 76 41 4b 76 30 48 37 54 4b 75 76 34 Data Ascii: UhDbhsLeKh78l6IkxMWZI2ielvB1bZf/m5xeZxNn4Qea48C7wpsyNcWOAsy6Z4+XckcFb+F7DKUQIxV+cjP2mKf51F7uhuvk27w1Kr+gIqb67bCSPvJtjRsNHGEXazBgEDvwR3L9OGN2NIJQ05jYspaznTHDDt2j1xZ6IPJOPyx50E+G1Xbl1Sw7whZA+JfSEeJaQZJO2A5lsQBnbXWXQICYzxkjS439mXRaaIy1bg4kAcxnQiNvAKv0H7TKuv4
2024-10-24 22:48:08 UTC	1378	IN	Data Raw: 53 46 43 6b 53 61 38 52 69 6b 74 57 6d 61 30 38 70 39 79 48 4f 58 55 58 44 64 6e 57 38 53 42 70 54 4e 62 56 54 42 62 31 67 7a 4a 32 32 4b 63 70 4f 43 34 39 63 33 42 30 4f 31 6c 71 39 5a 67 2f 2b 56 49 71 72 33 33 42 75 52 32 65 41 34 68 75 70 6c 37 4b 76 70 49 73 78 6e 44 6f 7a 78 70 61 4f 6a 63 48 65 7a 44 38 6d 74 49 73 76 79 66 2b 4e 49 42 79 75 30 37 79 34 30 6a 31 63 76 77 68 37 4e 62 37 4d 46 49 53 6f 76 51 51 41 69 6b 6d 7a 52 65 57 45 54 69 69 4b 2b 43 6d 49 55 77 36 6e 2b 4a 5a 50 57 5a 36 30 4e 6c 61 53 31 58 34 54 52 79 4f 64 4a 64 74 69 42 4a 4e 66 42 37 75 67 30 65 4c 46 4f 75 59 4b 72 66 78 59 45 4c 30 56 63 76 52 78 41 51 47 37 7a 6a 73 34 4e 33 77 4f 50 56 4f 42 43 4f 2f 62 44 66 68 49 4d 7a 6f 56 57 55 51 41 6f 34 65 4c 43 41 58 5a 79 37 Data Ascii: SFCkSa8RiktWma08p9yHOXUXDdnW8SBpTNbVTBb1gzJ22KcpOC49c3B0O1lq9Zg/+VIqr33BuR2eA4hupl7KvpIsxnDozxpaOjcHezD8mtIsvyf+NIByu07y40j1cvwh7Nb7MFISovQQAikmzReWETiiK+CmIUw6n+JZPWZ60NlaS1X4TRyOdJdtiBJNfB7ug0eLFOuYKrfxYEL0VcvRxAQG7zjs4N3wOPVOBCO/bDfhIMzoVWUQAo4eLCAXZy7
2024-10-24 22:48:08 UTC	1378	IN	Data Raw: 35 36 2f 57 65 6e 78 49 37 53 39 52 57 69 52 69 55 56 46 54 59 4f 72 45 36 56 34 63 59 68 70 44 67 4f 6a 54 72 73 57 71 38 41 74 5a 52 64 43 31 34 38 51 52 36 42 65 47 54 71 55 5a 6c 2b 4e 31 59 56 67 6d 53 58 67 73 55 63 6b 35 36 34 35 79 38 64 66 70 67 66 5a 44 70 4c 70 44 36 42 67 63 67 53 41 33 6d 6d 68 51 35 4c 35 67 56 73 50 61 38 63 7a 55 2b 63 4d 41 73 74 46 74 53 2f 56 48 6c 47 4a 66 68 41 2b 46 33 59 41 69 50 4c 35 4e 49 62 66 49 35 79 62 55 65 4a 73 76 67 56 48 61 78 32 78 71 68 50 6e 72 62 69 4e 5a 4a 71 6b 61 72 59 4f 39 51 44 57 61 49 33 58 41 4d 75 6b 48 43 42 74 38 2f 63 34 65 67 49 6c 73 67 41 67 66 58 47 4a 79 48 78 61 61 2b 69 53 33 64 30 57 78 4b 69 32 58 78 45 51 59 44 47 4e 69 66 30 51 5a 63 2f 56 44 49 67 55 6c 73 42 62 55 44 4f 6c Data Ascii: 56/WenxI7S9RWiRiUVFTYOrE6V4cYhpDgOjTrsWq8AtZRdC148QR6BeGTqUZl+N1YVgmSXgsUck5645y8dfpgfZDpLpD6BgcgSA3mmhQ5L5gVsPa8czU+cMAstFtS/VHlGJfhA+F3YAiPL5NIbfI5ybUeJsvgVHax2xqhPnrbiNZJqkarYO9QDWaI3XAMukHCBt8/c4egIlsgAgfXGJyHxaa+iS3d0WxKi2XxEQYDGNif0QZc/VDIgUlsBbUDOl
2024-10-24 22:48:08 UTC	1378	IN	Data Raw: 2b 4a 57 6d 37 36 58 35 77 5a 79 55 75 51 53 66 48 51 57 53 74 4b 30 6f 6f 5a 71 37 70 4a 6c 2f 4a 74 4f 50 2b 63 45 45 37 54 79 6a 64 4a 74 49 71 77 66 2b 7a 71 76 2b 58 54 77 54 52 71 67 75 31 64 51 30 45 7a 4b 4f 77 4e 2f 75 58 38 31 43 4a 74 64 4e 57 76 4d 49 2f 46 51 6c 41 57 70 61 32 2f 48 4e 57 48 53 67 45 44 37 4f 6e 37 6e 6d 4c 4b 44 73 42 56 39 77 31 37 4f 32 63 33 64 76 75 55 6f 57 4f 4d 49 33 76 5a 5a 6d 56 75 44 63 58 55 50 63 35 77 61 43 48 70 42 4a 37 4f 32 47 49 4a 74 6b 69 5a 59 6b 53 35 4e 30 75 67 77 43 4d 7a 65 63 2b 74 6c 4f 56 78 45 42 79 67 37 74 7a 32 42 41 38 65 70 56 45 38 4e 6d 51 74 51 2b 61 50 6d 51 4c 6c 41 64 5a 67 45 72 55 71 72 37 75 42 74 72 4a 41 78 38 78 41 76 74 4b 6d 50 31 7a 5a 73 6b 52 51 4a 78 75 4f 68 67 5a 33 30 Data Ascii: +JWm76X5wZyUuQSfHQWStK0ooZq7pJl/JtOP+cEE7TyjdJtIqwf+zqv+XTwTRqgu1dQ0EzKOwN/uX81CJtdNWvMI/FQlAWpa2/HNWHSgED7On7nmLKDsBV9w17O2c3dvuUoWOMI3vZZmVuDcXUPc5waCHpBJ7O2GIJtkiZYkS5N0ugwCMzec+tlOVxEByg7tz2BA8epVE8NmQtQ+aPmQLlAdZgErUqr7uBtrJAx8xAvtKmP1zZskRQJxuOhgZ30
2024-10-24 22:48:08 UTC	1378	IN	Data Raw: 4d 53 63 52 67 64 33 67 53 33 56 49 4c 67 67 6b 52 64 52 36 41 72 6e 6f 64 6f 48 53 4f 6f 48 4c 6d 4a 6f 41 7a 6a 52 78 79 58 43 36 45 62 58 76 31 4b 44 69 6c 42 50 65 67 66 6f 6f 44 6f 78 58 77 77 37 63 7a 37 38 75 6e 65 77 46 4c 53 6a 68 70 75 47 54 48 62 64 57 68 55 31 4b 4d 72 49 32 78 4f 71 4d 34 5a 4e 4e 62 5a 79 68 66 35 47 6d 6a 32 6c 6e 32 50 33 71 70 34 75 70 51 4f 30 2f 75 6b 2f 77 63 77 42 45 4e 6e 54 71 4b 58 64 4c 73 4b 4d 76 66 44 57 76 44 33 67 77 7a 53 59 37 30 6d 55 6d 52 43 45 69 47 34 61 73 73 70 2f 64 44 47 44 47 4e 48 41 58 4f 53 54 32 44 6e 36 6e 67 76 70 39 70 49 73 32 43 73 38 51 35 4a 4b 65 72 4c 4f 39 34 4b 7a 31 43 43 7a 69 51 68 6b 73 55 5a 7a 34 50 65 75 57 54 31 35 42 33 6b 50 5a 59 79 61 50 73 76 45 74 42 57 74 38 55 53 30 Data Ascii: MScRgd3gS3VILggkRdR6ArnodoHSOoHLmJoAzjRxyXC6EbXv1KDilBPegfooDoxXww7cz78unewFLSjhpuGTHbdWhU1KMrI2xOqM4ZNNbZyhf5Gmj2ln2P3qp4upQO0/uk/wcwBENnTqKXdLsKMvfDWvD3gwzSY70mUmRCEiG4assp/dDGDGNHAXOST2Dn6ngvp9pIs2Cs8Q5JKerLO94Kz1CCziQhksUZz4PeuWT15B3kPZYyaPsvEtBWt8US0
2024-10-24 22:48:08 UTC	1378	IN	Data Raw: 5a 6e 58 34 53 77 4c 36 63 39 75 75 75 2f 64 56 33 36 48 63 76 6f 46 61 4e 4e 67 6d 4c 41 69 67 59 57 72 41 6a 30 50 70 61 30 4b 66 70 57 38 5a 49 36 31 4b 48 32 52 61 39 56 68 33 2f 33 4c 74 59 77 56 70 67 2b 33 4a 39 2f 6a 6f 47 62 57 49 46 79 62 39 4f 6b 62 5a 6f 73 59 59 2f 6f 69 71 38 6a 61 49 6b 61 6a 72 65 50 6f 6b 4b 47 4b 62 2b 62 2b 74 50 38 46 77 62 64 4d 77 65 37 43 4e 4f 61 46 54 52 70 41 4e 49 6e 4f 66 79 64 49 54 76 65 2f 6a 48 6f 4e 77 59 35 6f 52 63 66 64 69 55 6a 79 4a 32 36 53 48 35 61 51 32 76 51 49 66 36 33 43 72 6b 44 6f 58 2b 7a 42 49 32 76 42 6c 57 77 39 79 66 38 6a 71 79 4a 42 61 4f 4d 48 36 38 73 30 44 72 63 75 2f 62 62 51 4f 77 62 54 63 55 73 5a 32 42 6b 59 4f 74 2f 4e 74 4f 69 53 4a 6c 68 38 6c 45 4d 69 34 30 4f 39 70 49 41 76 Data Ascii: ZnX4SwL6c9uuu/dV36HcvoFaNNgmLAigYWrAj0Ppa0KfpW8ZI61KH2Ra9Vh3/3LtYwVpg+3J9/joGbWIFyb9OkbZosYY/oiq8jaIkajrePokKGKb+b+tP8FwbdMwe7CNOaFTRpANInOfydITve/jHoNwY5oRcfdiUjyJ26SH5aQ2vQIf63CrkDoX+zBI2vBlWw9yf8jqyJBaOMH68s0Drcu/bbQOwbTcUsZ2BkYOt/NtOiSJlh8lEMi40O9pIAv
2024-10-24 22:48:08 UTC	1378	IN	Data Raw: 6f 66 46 63 2b 2b 34 62 4d 31 67 4c 38 6c 56 34 6a 72 62 5a 2b 68 38 36 54 74 34 35 38 75 59 4f 2b 39 2b 74 2b 2f 57 64 62 6a 64 50 67 35 2b 4f 53 4a 6f 78 30 70 77 33 72 74 74 38 77 54 53 67 30 6d 6b 4c 70 69 51 32 45 4f 61 6b 4f 30 58 4e 51 61 5a 33 67 36 70 2b 66 50 6a 75 5a 52 47 2f 32 65 70 78 62 51 44 7a 2f 58 4e 72 73 42 46 67 61 58 49 75 42 48 4d 74 66 45 45 4a 6f 6b 2f 75 2f 70 45 78 76 74 6f 68 35 71 48 43 5a 31 4b 56 6e 6d 49 78 63 5a 79 49 53 37 33 65 6d 75 54 6e 72 64 54 4a 47 37 77 42 7a 48 49 32 6f 66 4e 6d 79 64 4a 5a 57 61 6b 39 55 2f 58 7a 44 6a 43 69 35 73 44 66 79 31 65 69 4f 71 45 49 37 55 4b 73 52 4a 54 6e 42 6a 76 57 79 4f 38 44 7a 70 6d 70 35 46 50 68 36 58 6d 36 59 4a 48 32 56 51 37 4d 39 53 5a 5a 4a 4e 79 51 6c 39 64 30 5a 6f 32 Data Ascii: ofFc++4bM1gL8lV4jrbZ+h86Tt458uYO+9+t+/WdbjdPg5+OSJox0pw3rtt8wTSg0mkLpiQ2EOakO0XNQaZ3g6p+fPjuZRG/2epxbQDz/XNrsBFgaXIuBHMtfEEJok/u/pExvtoh5qHCZ1KVnmIxcZyIS73emuTnrdTJG7wBzHI2ofNmydJZWak9U/XzDjCi5sDfy1eiOqEI7UKsRJTnBjvWyO8Dzpmp5FPh6Xm6YJH2VQ7M9SZZJNyQl9d0Zo2
2024-10-24 22:48:08 UTC	1378	IN	Data Raw: 37 71 71 44 65 6c 44 4c 42 46 64 76 4d 4d 48 4e 38 77 55 65 35 6f 35 54 59 72 75 4e 2b 63 4d 37 4f 4b 47 6d 6b 37 6d 43 77 7a 67 76 71 74 75 76 51 75 78 34 75 41 52 72 4c 51 39 65 77 51 6a 52 68 54 66 52 74 6d 62 45 35 6d 6a 4f 55 75 4c 7a 53 38 31 52 69 43 6d 44 46 2b 67 5a 35 45 64 4d 69 5a 63 45 61 4d 38 2b 79 76 30 45 33 66 48 37 33 6d 38 54 69 71 36 75 32 46 7a 72 43 54 4f 35 63 64 75 43 6e 64 57 65 6d 74 6f 79 48 33 2f 67 4e 6a 46 72 2f 66 79 68 36 65 41 6f 64 6e 44 6a 4e 47 75 73 61 4e 34 5a 61 66 33 6e 33 4e 50 37 2b 79 36 68 58 6c 79 36 6b 76 50 53 4e 46 37 55 6b 58 6c 6b 36 50 50 38 6e 5a 68 36 65 67 56 46 53 5a 73 67 70 4b 6b 4b 6c 30 64 46 2b 65 77 67 30 48 44 44 4d 36 7a 6e 51 6f 76 65 2b 47 72 42 6d 72 42 4b 73 33 46 73 71 4b 46 36 36 73 75 Data Ascii: 7qqDelDLBFdvMMHN8wUe5o5TYruN+cM7OKGmk7mCwzgvqtuvQux4uARrLQ9ewQjRhTfRtmbE5mjOUuLzS81RiCmDF+gZ5EdMiZcEaM8+yv0E3fH73m8Tiq6u2FzrCTO5cduCndWemtoyH3/gNjFr/fyh6eAodnDjNGusaN4Zaf3n3NP7+y6hXly6kvPSNF7UkXlk6PP8nZh6egVFSZsgpKkKl0dF+ewg0HDDM6znQove+GrBmrBKs3FsqKF66su

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:08 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:08 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:08 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224808Z-15b8d89586ff5l62aha9080wv000000000w000000000cx94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:08 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 22:48:08 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 22:48:08 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 22:48:08 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 22:48:08 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 22:48:08 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 22:48:08 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 22:48:08 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 22:48:08 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 22:48:08 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49769	172.217.16.194	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:09 UTC	401	OUT	GET /getconfig/sodar?sv=200&tid=gda&tv=r20241022&st=env HTTP/1.1 Host: ep1.adtrafficquality.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:09 UTC	610	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Thu, 24 Oct 2024 22:48:09 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:09 UTC	768	IN	Data Raw: 34 32 62 65 0d 0a 7b 22 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 22 3a 22 71 63 34 61 5a 2d 57 59 4c 6f 4f 51 6a 75 77 50 6c 64 75 45 67 41 51 22 2c 22 69 6e 6a 65 63 74 6f 72 5f 62 61 73 65 6e 61 6d 65 22 3a 22 73 6f 64 61 72 32 22 2c 22 62 67 5f 68 61 73 68 5f 62 61 73 65 6e 61 6d 65 22 3a 22 77 43 59 65 49 50 34 62 58 56 30 72 6a 4a 47 70 6c 4c 6c 4c 62 66 6d 6a 49 75 6c 4c 4b 79 4a 74 61 51 33 7a 5a 4d 57 44 4e 55 30 22 2c 22 62 67 5f 62 69 6e 61 72 79 22 3a 22 48 6c 56 67 70 52 2f 68 7a 66 79 58 55 35 6c 6e 2f 45 6f 31 54 76 70 57 6d 38 75 72 58 72 48 35 35 65 4c 55 2b 5a 77 58 56 50 70 6a 41 66 4a 74 46 51 58 63 52 39 2f 64 65 4f 65 34 56 74 5a 70 54 37 6f 73 50 73 59 62 59 62 45 53 48 2b 61 51 42 61 73 69 77 47 67 47 6d 4a 34 30 5a 50 53 6d 71 7a Data Ascii: 42be{"sodar_query_id":"qc4aZ-WYLoOQjuwPlduEgAQ","injector_basename":"sodar2","bg_hash_basename":"wCYeIP4bXV0rjJGplLlLbfmjIulLKyJtaQ3zZMWDNU0","bg_binary":"HlVgpR/hzfyXU5ln/Eo1TvpWm8urXrH55eLU+ZwXVPpjAfJtFQXcR9/deOe4VtZpT7osPsYbYbESH+aQBasiwGgGmJ40ZPSmqz
2024-10-24 22:48:09 UTC	1378	IN	Data Raw: 72 31 49 31 37 4c 6a 6e 72 4c 47 37 68 4a 57 33 46 76 6f 54 43 5a 56 34 2f 6c 45 55 4b 54 62 79 45 31 38 33 77 66 34 6e 48 4e 37 67 62 71 4a 38 55 4e 49 4b 4e 76 2b 38 6f 4f 4c 44 59 36 75 30 53 71 56 69 53 47 38 37 46 48 77 37 30 55 31 47 34 48 44 35 32 4c 78 70 41 6e 73 2b 76 6a 36 42 41 59 6b 31 4b 31 36 65 4c 76 52 4c 6f 66 5a 57 69 62 33 65 4b 6b 53 76 45 49 2f 6c 54 46 38 4f 6f 43 51 33 44 41 6d 70 54 68 4f 39 57 68 42 58 77 62 57 79 46 79 46 4b 76 66 49 71 65 41 72 4b 71 65 73 6e 38 5a 4b 36 35 4a 6d 74 30 63 42 31 32 34 2f 2f 38 36 51 6c 54 4f 75 73 43 74 41 49 54 75 56 68 53 45 6c 4f 77 36 6d 4c 63 2b 2b 74 6b 32 4f 56 75 2f 5a 67 2f 53 44 41 47 46 4a 70 6c 70 48 55 56 79 75 49 71 2b 41 59 66 34 68 36 77 79 79 50 76 6c 71 5a 6e 70 6a 46 58 4a 66 Data Ascii: r1I17LjnrLG7hJW3FvoTCZV4/lEUKTbyE183wf4nHN7gbqJ8UNIKNv+8oOLDY6u0SqViSG87FHw70U1G4HD52LxpAns+vj6BAYk1K16eLvRLofZWib3eKkSvEI/lTF8OoCQ3DAmpThO9WhBXwbWyFyFKvfIqeArKqesn8ZK65Jmt0cB124//86QlTOusCtAITuVhSElOw6mLc++tk2OVu/Zg/SDAGFJplpHUVyuIq+AYf4h6wyyPvlqZnpjFXJf
2024-10-24 22:48:09 UTC	1378	IN	Data Raw: 77 41 67 35 59 61 49 78 50 42 6d 61 4d 4c 46 6a 53 69 79 38 5a 4c 59 55 34 43 2f 49 2f 6f 79 73 38 56 56 5a 70 59 4e 4a 38 4a 6f 52 4f 7a 69 47 4e 6f 41 2b 78 61 38 66 51 6e 48 6b 6d 74 43 48 4f 50 72 7a 46 75 68 4e 57 4e 57 49 74 4f 4d 32 39 48 4e 61 2b 30 49 51 39 52 79 6a 46 72 41 62 68 78 59 2f 59 45 37 33 74 57 44 38 6c 57 77 38 33 56 45 77 48 4e 66 72 47 52 33 79 66 4e 65 75 43 50 73 75 65 79 48 75 6f 66 46 30 6c 70 32 31 48 32 41 41 4e 65 7a 64 67 59 4b 70 77 35 78 53 41 46 78 71 4f 6c 7a 51 48 2b 41 46 50 73 76 44 71 59 74 42 4c 6e 67 7a 39 76 75 74 65 74 39 6e 6b 66 2f 62 6c 74 30 72 39 6d 75 48 71 61 73 4f 4f 6a 77 7a 73 68 35 72 4b 58 42 4c 6d 6f 4b 4c 4c 76 69 31 33 6e 71 77 35 75 45 76 63 70 70 69 49 57 52 79 6c 37 71 78 4f 48 47 56 45 71 4f Data Ascii: wAg5YaIxPBmaMLFjSiy8ZLYU4C/I/oys8VVZpYNJ8JoROziGNoA+xa8fQnHkmtCHOPrzFuhNWNWItOM29HNa+0IQ9RyjFrAbhxY/YE73tWD8lWw83VEwHNfrGR3yfNeuCPsueyHuofF0lp21H2AANezdgYKpw5xSAFxqOlzQH+AFPsvDqYtBLngz9vutet9nkf/blt0r9muHqasOOjwzsh5rKXBLmoKLLvi13nqw5uEvcppiIWRyl7qxOHGVEqO
2024-10-24 22:48:09 UTC	1378	IN	Data Raw: 32 4b 46 5a 71 46 68 61 66 4e 46 6d 36 38 4d 31 4c 53 72 2f 53 37 6e 4e 6d 35 65 57 39 44 30 69 44 51 66 57 6d 39 43 52 76 53 37 44 54 4d 2b 42 4c 44 66 44 6b 77 47 43 71 64 5a 69 75 73 77 4b 4c 45 2b 52 57 46 55 76 4c 5a 48 6a 64 62 48 61 2f 74 69 50 54 6f 6d 70 57 57 34 4d 52 43 52 45 64 30 6e 54 33 5a 4f 35 64 4d 6f 4a 78 4f 7a 72 65 46 76 58 6a 71 64 36 57 4f 61 57 4a 73 77 78 51 39 42 51 49 75 66 53 31 4e 4a 39 7a 54 6d 48 71 34 75 46 4b 52 70 68 71 52 6b 4c 58 52 2f 61 52 75 49 7a 57 64 47 72 42 4e 73 56 51 70 4b 50 55 33 63 56 59 65 38 48 37 4b 6e 7a 6a 2f 46 6f 38 43 58 35 46 54 77 33 76 6e 44 73 47 65 6d 37 55 6b 31 34 66 51 6c 58 73 57 71 31 5a 72 77 68 5a 47 54 70 53 58 6c 50 71 52 78 68 73 74 74 5a 4d 76 34 34 57 48 47 49 4f 77 31 66 45 65 48 Data Ascii: 2KFZqFhafNFm68M1LSr/S7nNm5eW9D0iDQfWm9CRvS7DTM+BLDfDkwGCqdZiuswKLE+RWFUvLZHjdbHa/tiPTompWW4MRCREd0nT3ZO5dMoJxOzreFvXjqd6WOaWJswxQ9BQIufS1NJ9zTmHq4uFKRphqRkLXR/aRuIzWdGrBNsVQpKPU3cVYe8H7Knzj/Fo8CX5FTw3vnDsGem7Uk14fQlXsWq1ZrwhZGTpSXlPqRxhsttZMv44WHGIOw1fEeH
2024-10-24 22:48:09 UTC	1378	IN	Data Raw: 4f 38 4f 63 35 7a 63 32 61 53 61 58 53 42 4b 66 31 38 7a 4b 4e 45 33 43 76 30 56 43 4f 77 4b 54 35 71 35 70 52 38 35 65 79 45 39 47 37 50 65 4b 48 52 62 47 6f 41 73 44 42 59 33 6a 49 46 54 70 65 4a 2b 5a 64 6f 4e 47 37 4d 30 61 41 36 79 56 4a 38 66 4e 36 61 55 51 69 76 35 36 74 46 31 65 52 33 30 65 45 43 65 52 47 6c 53 63 6a 67 71 43 7a 6b 47 31 39 4d 6e 49 4b 53 78 32 50 77 65 51 4b 30 76 36 43 50 48 58 44 64 4a 35 75 2b 55 49 54 4b 2f 49 6a 64 31 47 42 6d 4c 6c 56 77 58 64 6a 76 31 5a 77 32 36 5a 74 46 73 34 79 42 77 32 75 6b 33 35 45 4f 2b 2b 34 36 50 62 53 33 59 52 41 4b 46 45 62 35 41 47 62 35 32 57 7a 73 4b 34 74 38 43 78 41 61 7a 36 69 68 33 43 59 44 78 65 41 73 56 64 67 34 6b 54 61 44 66 70 6a 4a 69 4c 41 51 4e 31 65 65 35 4c 43 59 4c 78 34 2f 65 Data Ascii: O8Oc5zc2aSaXSBKf18zKNE3Cv0VCOwKT5q5pR85eyE9G7PeKHRbGoAsDBY3jIFTpeJ+ZdoNG7M0aA6yVJ8fN6aUQiv56tF1eR30eECeRGlScjgqCzkG19MnIKSx2PweQK0v6CPHXDdJ5u+UITK/Ijd1GBmLlVwXdjv1Zw26ZtFs4yBw2uk35EO++46PbS3YRAKFEb5AGb52WzsK4t8CxAaz6ih3CYDxeAsVdg4kTaDfpjJiLAQN1ee5LCYLx4/e
2024-10-24 22:48:09 UTC	1378	IN	Data Raw: 32 77 54 50 6a 62 75 47 6b 70 7a 57 48 37 31 72 42 66 78 71 6c 46 7a 6f 58 4a 59 39 69 64 49 41 62 78 6f 65 54 46 6f 41 72 31 34 6d 69 45 77 42 71 49 63 58 50 6e 4a 33 4e 63 64 4c 35 74 4c 30 77 30 78 6f 32 58 54 63 64 58 6d 35 2f 5a 46 77 4b 47 75 46 45 74 2b 2b 4a 72 6d 6e 44 44 45 43 33 49 33 6c 75 54 4c 51 46 79 73 2f 69 43 6d 6c 70 4d 45 39 6f 4e 69 30 6a 31 63 63 79 6d 66 46 35 58 38 36 38 65 35 33 52 44 56 62 71 43 48 34 4e 6a 2b 57 68 79 76 62 48 4a 64 37 75 6a 2f 61 51 44 79 72 53 51 2f 36 5a 47 41 6a 45 77 67 5a 4b 70 65 31 6f 70 56 72 61 66 72 2b 4e 36 43 66 2b 4e 6e 42 74 2f 6b 65 38 59 34 6e 6e 35 43 42 35 48 4a 57 38 4b 65 7a 4a 51 62 77 6b 76 4f 75 4b 75 47 57 45 4a 4e 4c 71 76 31 4d 35 77 45 42 7a 38 73 73 75 73 62 7a 63 59 32 6a 71 49 75 Data Ascii: 2wTPjbuGkpzWH71rBfxqlFzoXJY9idIAbxoeTFoAr14miEwBqIcXPnJ3NcdL5tL0w0xo2XTcdXm5/ZFwKGuFEt++JrmnDDEC3I3luTLQFys/iCmlpME9oNi0j1ccymfF5X868e53RDVbqCH4Nj+WhyvbHJd7uj/aQDyrSQ/6ZGAjEwgZKpe1opVrafr+N6Cf+NnBt/ke8Y4nn5CB5HJW8KezJQbwkvOuKuGWEJNLqv1M5wEBz8ssusbzcY2jqIu
2024-10-24 22:48:09 UTC	1378	IN	Data Raw: 32 73 72 46 78 58 58 35 74 41 79 5a 2b 31 66 61 4b 51 6e 41 45 30 36 2f 39 43 78 7a 62 7a 39 44 65 76 69 37 37 56 62 30 34 64 75 38 57 2f 73 70 77 41 61 57 42 70 70 45 73 70 6a 72 67 50 58 30 35 57 4f 79 66 32 6f 6e 59 79 33 62 73 54 68 32 46 6c 48 7a 41 51 53 5a 41 52 57 6a 38 66 6c 78 44 62 77 52 43 44 45 59 4e 73 72 47 2b 36 6a 51 72 76 4a 41 78 31 6a 4c 4e 59 31 4a 4c 2f 63 6e 76 4e 62 71 53 35 67 4b 50 4f 63 4c 6f 53 63 35 77 59 59 41 56 2b 4c 4b 52 54 72 76 70 6b 45 4f 4d 31 46 51 45 6e 55 34 77 65 54 76 72 2b 35 53 56 59 4f 37 36 4d 49 49 48 59 32 56 48 30 32 52 48 59 53 63 63 4a 49 6b 35 4a 46 36 34 62 41 69 6d 72 65 4a 35 50 41 33 75 4d 6f 6d 2b 32 4c 35 4c 69 45 68 43 47 5a 6f 35 7a 31 58 73 48 56 72 56 47 6f 6c 58 79 72 2b 68 2f 32 6f 72 6c 61 Data Ascii: 2srFxXX5tAyZ+1faKQnAE06/9Cxzbz9Devi77Vb04du8W/spwAaWBppEspjrgPX05WOyf2onYy3bsTh2FlHzAQSZARWj8flxDbwRCDEYNsrG+6jQrvJAx1jLNY1JL/cnvNbqS5gKPOcLoSc5wYYAV+LKRTrvpkEOM1FQEnU4weTvr+5SVYO76MIIHY2VH02RHYSccJIk5JF64bAimreJ5PA3uMom+2L5LiEhCGZo5z1XsHVrVGolXyr+h/2orla
2024-10-24 22:48:09 UTC	1378	IN	Data Raw: 63 36 2b 74 71 56 64 52 2b 44 2f 4b 6a 35 34 41 4b 4c 57 63 37 41 34 30 77 50 73 6a 43 51 70 37 71 4a 6b 72 7a 39 62 6f 65 2f 38 69 33 4b 72 41 42 49 56 57 56 31 38 59 36 59 35 6e 51 62 42 73 34 6f 55 43 61 74 36 44 52 58 7a 73 4d 57 6c 63 48 30 4d 42 4d 67 68 30 44 6a 6e 4b 43 68 46 4f 63 6a 6c 55 6d 55 6c 49 65 42 44 45 6a 55 65 49 68 30 6a 59 55 6a 6e 55 50 76 58 51 44 36 74 56 79 49 73 6e 34 33 74 6a 4d 52 58 55 68 77 5a 33 77 57 45 33 54 56 4e 46 79 6a 72 72 45 62 71 79 34 62 73 36 2b 50 6a 53 37 38 65 41 50 48 4e 6b 54 61 75 71 4d 32 59 6c 44 57 35 68 76 35 66 35 59 4f 37 31 6f 54 5a 59 4a 44 56 4a 36 55 41 33 4d 44 4e 73 75 71 53 51 2f 75 65 56 39 71 73 32 4b 68 6f 68 51 6a 4d 62 4a 70 58 5a 74 67 54 32 42 67 4b 54 58 39 78 46 6e 66 33 6f 4b 70 4a Data Ascii: c6+tqVdR+D/Kj54AKLWc7A40wPsjCQp7qJkrz9boe/8i3KrABIVWV18Y6Y5nQbBs4oUCat6DRXzsMWlcH0MBMgh0DjnKChFOcjlUmUlIeBDEjUeIh0jYUjnUPvXQD6tVyIsn43tjMRXUhwZ3wWE3TVNFyjrrEbqy4bs6+PjS78eAPHNkTauqM2YlDW5hv5f5YO71oTZYJDVJ6UA3MDNsuqSQ/ueV9qs2KhohQjMbJpXZtgT2BgKTX9xFnf3oKpJ
2024-10-24 22:48:09 UTC	1378	IN	Data Raw: 33 6a 2b 66 4a 51 32 70 79 65 4b 70 30 76 33 41 6a 4a 53 46 51 33 70 57 63 71 77 38 4a 55 51 78 63 4b 46 46 34 72 39 76 41 6a 4c 71 6e 6e 41 47 32 4a 72 36 70 75 39 77 76 4d 64 53 7a 76 41 57 5a 6c 42 55 5a 6c 4e 69 66 71 66 78 2b 62 59 6d 55 53 38 7a 5a 49 61 44 79 34 54 71 32 64 49 4e 59 76 31 49 39 55 5a 55 63 4a 78 7a 46 4a 33 58 47 52 6f 62 67 68 41 48 7a 79 33 4f 4b 79 54 30 6d 55 4f 34 47 79 48 62 6d 37 4e 72 65 78 55 4c 4a 49 5a 79 75 45 71 61 4a 7a 4d 6d 52 37 62 64 49 68 59 6e 31 53 33 31 7a 6b 34 77 44 79 50 61 71 68 50 35 77 43 65 6c 67 38 74 41 4b 6e 6c 6b 45 64 48 63 43 33 55 2b 64 45 55 44 49 55 6b 49 61 55 49 48 6d 79 35 6e 32 5a 4b 31 7a 52 48 62 33 4c 55 6f 65 77 66 36 72 35 4d 49 79 67 50 31 68 54 49 67 5a 6d 49 68 35 57 7a 78 56 78 69 Data Ascii: 3j+fJQ2pyeKp0v3AjJSFQ3pWcqw8JUQxcKFF4r9vAjLqnnAG2Jr6pu9wvMdSzvAWZlBUZlNifqfx+bYmUS8zZIaDy4Tq2dINYv1I9UZUcJxzFJ3XGRobghAHzy3OKyT0mUO4GyHbm7NrexULJIZyuEqaJzMmR7bdIhYn1S31zk4wDyPaqhP5wCelg8tAKnlkEdHcC3U+dEUDIUkIaUIHmy5n2ZK1zRHb3LUoewf6r5MIygP1hTIgZmIh5WzxVxi
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 72 32 53 73 6e 56 36 68 31 65 72 33 43 44 42 61 2f 48 6e 44 32 37 44 7a 70 76 72 65 4a 30 50 56 74 36 76 57 78 32 5a 41 4a 58 4b 31 7a 5a 51 4d 6d 50 75 45 59 72 30 66 34 51 4d 62 36 42 54 4a 31 37 38 70 6d 31 79 75 4f 4e 76 62 6c 74 53 71 74 51 6b 35 7a 4c 67 6c 6f 6a 6f 41 33 44 77 65 71 52 63 4a 38 69 69 51 45 32 54 72 65 55 46 46 37 2f 63 2f 56 45 73 72 42 65 53 6a 42 6c 4a 62 6f 62 78 6a 47 71 54 54 44 30 42 76 31 67 47 67 52 6c 31 50 36 41 6e 4e 52 6a 43 46 56 6e 67 32 76 67 65 6d 41 7a 4a 37 52 57 67 73 64 58 66 45 38 79 43 30 79 54 6d 75 69 43 6d 59 34 33 72 35 6d 33 46 57 77 6c 44 79 59 38 4b 76 38 57 32 61 54 79 6c 69 31 62 6d 63 2b 62 41 6a 67 69 6a 47 78 36 69 30 55 5a 68 70 49 66 43 39 6f 63 42 45 4b 48 7a 61 37 6d 77 6f 61 58 41 73 72 6f 42 Data Ascii: r2SsnV6h1er3CDBa/HnD27DzpvreJ0PVt6vWx2ZAJXK1zZQMmPuEYr0f4QMb6BTJ178pm1yuONvbltSqtQk5zLglojoA3DweqRcJ8iiQE2TreUFF7/c/VEsrBeSjBlJbobxjGqTTD0Bv1gGgRl1P6AnNRjCFVng2vgemAzJ7RWgsdXfE8yC0yTmuiCmY43r5m3FWwlDyY8Kv8W2aTyli1bmc+bAjgijGx6i0UZhpIfC9ocBEKHza7mwoaXAsroB

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:09 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 626c88a9-b01e-003d-54f3-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224809Z-15b8d89586fvk4kmbg8pf84y8800000000p00000000024g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:09 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:09 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:09 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:09 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 2f084f0e-501e-0029-2021-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224809Z-17c5cb586f6qk7x5scs1ghy2m400000001s0000000006h4k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:09 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:09 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:09 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224809Z-16849878b785jsrm4477mv3ezn00000008c0000000004csb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:09 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:09 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:09 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 106bf0d0-c01e-0066-1446-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224809Z-17c5cb586f68889gd1vu6gsd9400000001wg000000000s77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:09 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:09 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:09 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9afce852-e01e-0020-6fef-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224809Z-15b8d89586fx2hlt035xdehq580000000fe0000000000bfq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:09 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49768	142.250.185.97	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:10 UTC	565	OUT	GET /sodar/sodar2.js HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:10 UTC	665	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 17945 Date: Thu, 24 Oct 2024 22:48:10 GMT Expires: Thu, 24 Oct 2024 22:48:10 GMT Cache-Control: private, max-age=3000 ETag: "1727224258380615" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:10 UTC	713	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 67 3d 64 5b 30 5d 2c 66 3b 21 61 26 26 67 20 69 6e 20 72 3f 66 3d 72 3a 66 3d 6e 3b 66 6f 72 28 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 67 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 67 5d 3b 69 66 28 21 28 65 20 69 6e 20 66 29 29 62 72 65 61 6b 20 61 3b 66 3d 66 5b 65 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 70 26 26 63 3d 3d 3d 22 65 73 36 22 3f 66 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 6b 28 72 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 Data Ascii: d 0?c:a[b]}}function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,wr
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 76 61 72 20 66 61 3d 74 79 70 65 6f 66 20 4f Data Ascii: ;return a}function ea(a){var b=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&a[w(r.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var fa=typeof O
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 3a 21 30 7d 7d 2c 62 2c 61 2e 67 2e 72 65 74 75 72 6e 29 3b 61 2e 67 2e 72 65 74 75 72 6e 28 62 29 3b 72 65 74 75 72 6e 20 48 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 67 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 68 2c 63 29 3b 69 66 28 21 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 67 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 67 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 67 2e 6d 3d 21 31 2c 67 3b 76 61 72 20 66 3d 67 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 45 28 61 2e Data Ascii: :!0}},b,a.g.return);a.g.return(b);return H(a)}function G(a,b,c,d){try{var g=b.call(a.g.h,c);if(!(g instanceof Object))throw new TypeError("Iterator result "+g+" is not an object");if(!g.done)return a.g.m=!1,g;var f=g.value}catch(e){return a.g.h=null,E(a.
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 65 6f 66 20 62 3f 65 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 65 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6d 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 65 29 7d 3b 76 61 72 20 67 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 Data Ascii: eof b?e:new b(function(h){h(e)})}if(a)return a;c.prototype.h=function(e){if(this.g==null){this.g=[];var h=this;this.i(function(){h.m()})}this.g.push(e)};var g=n.setTimeout;c.prototype.i=function(e){g(e,0)};c.prototype.m=function(){for(;this.g&&this.g.leng
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 74 6f 6d 45 76 65 6e 74 2c 68 3d 6e 2e 45 76 65 6e 74 2c 6c 3d 6e 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 74 79 70 65 6f 66 20 6c 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 65 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 65 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 65 2e 69 6e 69 74 Data Ascii: tomEvent,h=n.Event,l=n.dispatchEvent;if(typeof l==="undefined")return!0;typeof e==="function"?e=new e("unhandledrejection",{cancelable:!0}):typeof h==="function"?e=new h("unhandledrejection",{cancelable:!0}):(e=n.document.createEvent("CustomEvent"),e.init
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 30 26 26 6d 28 74 29 7d 7d 76 61 72 20 74 3d 5b 5d 2c 76 3d 30 3b 64 6f 20 74 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 76 2b 2b 2c 64 28 6c 2e 76 61 6c 75 65 29 2e 43 28 4f 28 74 2e 6c 65 6e 67 74 68 2d 31 29 2c 71 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 0a 78 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6e 7d 2c 22 65 73 5f 32 30 32 30 22 29 3b 78 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 Data Ascii: 0&&m(t)}}var t=[],v=0;do t.push(void 0),v++,d(l.value).C(O(t.length-1),q),l=h.next();while(!l.done)})};return b},"es6");x("globalThis",function(a){return a\|\|n},"es_2020");x("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){retur
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 64 5d 29 2b 61 5b 64 2b 31 5d 3b 72 65 74 75 72 6e 20 4c 28 63 29 7d 3b 76 61 72 20 73 61 3d 79 28 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 61 66 72 61 6d 65 22 5d 29 2c 74 61 3d 50 28 73 61 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 73 72 63 3d 72 61 28 62 29 3b 76 61 72 20 63 2c 64 3b 28 63 3d 28 62 3d 28 64 3d 28 63 3d 28 61 2e 6f 77 6e 65 72 Data Ascii: ;d<b.length;d++)c+=encodeURIComponent(b[d])+a[d+1];return L(c)};var sa=y(["https://www.google.com/recaptcha/api2/aframe"]),ta=P(sa);function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};function ua(a,b){a.src=ra(b);var c,d;(c=(b=(d=(c=(a.owner
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 62 67 2f 22 2c 22 2e 6a 73 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 67 3d 77 69 6e 64 6f 77 3b 67 3d 67 3d 3d 3d 76 6f 69 64 20 30 3f 77 69 6e 64 6f 77 3a 67 3b 74 68 69 73 2e 4a 3d 62 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6f 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 63 3b 74 68 69 73 2e 69 3d 28 64 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 64 29 3f 50 28 7a 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3a 50 28 41 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 49 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 77 69 74 63 Data Ascii: ad2.googlesyndication.com/bg/",".js"]);function R(a,b,c,d){var g=window;g=g===void 0?window:g;this.J=b;this.h=g;this.o=c===void 0?0:c;this.i=(d===void 0?0:d)?P(za,encodeURIComponent(a)):P(Aa,encodeURIComponent(a))}function Ba(a){return I(function(b){switc
2024-10-24 22:48:10 UTC	1378	IN	Data Raw: 78 74 3a 46 61 28 61 2e 5f 63 74 78 5f 29 2c 41 3a 61 2e 5f 62 67 76 5f 2c 76 3a 61 2e 5f 62 67 70 5f 2c 47 3a 61 2e 5f 6c 69 5f 2c 46 3a 61 2e 5f 6a 6b 5f 2c 48 3a 47 61 28 61 2e 5f 73 74 5f 29 2c 49 3a 61 2e 5f 72 63 5f 2c 6f 3a 61 2e 5f 64 6c 5f 2c 44 3a 61 2e 5f 67 32 5f 2c 6a 3a 48 61 28 61 2e 5f 61 74 71 67 5f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 69 66 28 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 72 65 74 75 72 6e 20 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 5b 30 5d 3b 76 61 72 20 62 3d 6e 65 77 20 72 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 5b 62 2c 63 5d 7d 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 Data Ascii: xt:Fa(a._ctx_),A:a._bgv_,v:a._bgp_,G:a._li_,F:a._jk_,H:Ga(a._st_),I:a._rc_,o:a._dl_,D:a._g2_,j:Ha(a._atqg_)}}function Ja(){var a=window;if(a.GoogleDX5YKUSk)return a.GoogleDX5YKUSk[0];var b=new r.Promise(function(c){a.GoogleDX5YKUSk=[b,c]});return b}funct

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:10 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224810Z-16849878b78jfqwd1dsrhqg3aw00000008b000000000smnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:10 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:10 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: d919e2dc-e01e-001f-153d-261633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224810Z-17c5cb586f6g6g2sbe6edp75y400000001rg000000002kne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:10 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:10 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 83a5bbbc-601e-005c-5bad-24f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224810Z-15b8d89586frzkk2umu6w8qnt80000000f5g000000000300 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:10 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:10 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 88497579-201e-0000-113a-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224810Z-r197bdfb6b4k6h5jmacuw3pcw800000000s000000000kfp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:10 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:10 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:10 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: f2ab8105-101e-0065-6df4-244088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224810Z-r197bdfb6b4kkrkjudg185sarw00000002fg000000009aqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:10 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49793	142.250.186.68	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:11 UTC	818	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:12 UTC	1117	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Thu, 24 Oct 2024 22:48:11 GMT Date: Thu, 24 Oct 2024 22:48:11 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-OOjO_knnZBEtDMateUvyCw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:12 UTC	261	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4f 4f 6a 4f 5f 6b 6e 6e 5a 42 45 74 44 4d 61 74 65 55 76 79 43 77 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="OOjO_knnZBEtDMateUvyCw">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-10-24 22:48:12 UTC	575	IN	Data Raw: 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 27 7d 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 69 66 28 61 2e 73 6f 75 72 63 65 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 Data Ascii: /pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorag
2024-10-24 22:48:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49792	216.58.206.65	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:11 UTC	741	OUT	GET /sodar/sodar2/232/runner.html HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:12 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 13020 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:48:11 GMT Expires: Thu, 24 Oct 2024 23:38:11 GMT Cache-Control: public, max-age=3000 Last-Modified: Mon, 23 Sep 2024 18:12:21 GMT Content-Type: text/html Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:12 UTC	692	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 70 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d Data Ascii: <!DOCTYPE html><meta charset=utf-8><script>(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==
2024-10-24 22:48:12 UTC	1378	IN	Data Raw: 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 77 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 65 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 65 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 66 3d 65 5b 30 5d 2c 68 3b 21 61 26 26 66 20 69 6e 20 76 3f 68 3d 76 3a 68 3d 72 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 66 2b 2b 29 7b 76 61 72 20 64 3d 65 5b 66 5d 3b 69 66 28 21 28 64 20 69 6e 20 68 29 29 62 72 65 61 6b 20 61 3b 68 3d 68 5b 64 5d 7d 65 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 75 26 Data Ascii: (!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&
2024-10-24 22:48:12 UTC	1378	IN	Data Raw: 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 76 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 78 28 76 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 78 28 76 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6d 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 Data Ascii: (a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}function A(a){var b=typeof v.Symbol!="undefined"&&x(v.Symbol,"iterator")&&a[x(v.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:m(a)};throw Error(
2024-10-24 22:48:12 UTC	1378	IN	Data Raw: 61 2e 67 2e 6a 3d 21 31 2c 66 3b 76 61 72 20 68 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 48 28 61 2e 67 2c 64 29 2c 4b 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 65 2e 63 61 6c 6c 28 61 2e 67 2c 68 29 3b 72 65 74 75 72 6e 20 4b 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 66 6f 72 28 3b 61 2e 67 2e 67 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 68 28 61 2e 67 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 67 2e 6a 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d 63 61 74 63 68 28 63 29 7b 61 2e 67 2e 6c 3d 76 6f 69 64 20 30 2c 48 28 61 2e 67 2c 63 29 7d 61 2e 67 2e 6a 3d 21 31 3b 69 66 28 61 2e 67 2e 69 29 7b 62 3d 61 2e 67 2e 69 3b 61 2e 67 2e Data Ascii: a.g.j=!1,f;var h=f.value}catch(d){return a.g.h=null,H(a.g,d),K(a)}a.g.h=null;e.call(a.g,h);return K(a)}function K(a){for(;a.g.g;)try{var b=a.h(a.g);if(b)return a.g.j=!1,{value:b.value,done:!1}}catch(c){a.g.l=void 0,H(a.g,c)}a.g.j=!1;if(a.g.i){b=a.g.i;a.g.
2024-10-24 22:48:12 UTC	1378	IN	Data Raw: 28 64 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 7b 76 61 72 20 6b 3d 0a 64 5b 67 5d 3b 64 5b 67 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6a 28 6c 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 64 3b 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (d,0)};c.prototype.l=function(){for(;this.g&&this.g.length;){var d=this.g;this.g=[];for(var g=0;g<d.length;++g){var k=d[g];d[g]=null;try{k()}catch(l){this.j(l)}}}this.g=null};c.prototype.j=function(d){this.i(function(){throw d;})};b.prototype.j=function(
2024-10-24 22:48:12 UTC	1378	IN	Data Raw: 62 6c 65 3a 21 30 7d 29 3a 28 64 3d 72 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 64 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 64 29 29 3b 64 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 64 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6b 28 64 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 67 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 68 2e 68 28 74 68 69 73 2e 67 5b 64 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 68 3d 6e 65 77 Data Ascii: ble:!0}):(d=r.document.createEvent("CustomEvent"),d.initCustomEvent("unhandledrejection",!1,!0,d));d.promise=this;d.reason=this.i;return k(d)};b.prototype.R=function(){if(this.g!=null){for(var d=0;d<this.g.length;++d)h.h(this.g[d]);this.g=null}};var h=new
2024-10-24 22:48:12 UTC	1378	IN	Data Raw: 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 50 3d 76 2e 67 6c 6f 62 61 6c 54 68 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 51 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 21 50 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 50 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b Data Ascii: DX-License-Identifier: Apache-2.0*/var P=v.globalThis.trustedTypes,Q;function la(){var a=null;if(!P)return a;try{var b=function(c){return c};a=P.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};function R(a){
2024-10-24 22:48:12 UTC	1378	IN	Data Raw: 70 65 6e 64 43 68 69 6c 64 28 64 29 7d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 76 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 62 28 76 6f 69 64 20 30 29 7d 2c 61 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 61 3d 61 3d 3d 3d 76 6f 69 64 20 30 3f 64 6f 63 75 6d 65 6e 74 3a 61 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 76 61 72 20 72 61 3d 7a 28 5b 22 68 74 74 70 73 3a 2f 2f 65 70 31 2e 61 64 74 72 61 66 66 69 63 71 75 61 6c 69 74 79 2e 67 6f 6f 67 6c 65 2f 62 67 2f 22 2c 22 2e 6a 73 22 5d 29 2c 73 61 3d 7a 28 5b 22 68 74 74 70 Data Ascii: pendChild(d)})};function pa(a){return new v.Promise(function(b){setTimeout(function(){return void b(void 0)},a)})}function qa(a){a=a===void 0?document:a;return a.createElement("img")};var ra=z(["https://ep1.adtrafficquality.google/bg/",".js"]),sa=z(["http
2024-10-24 22:48:12 UTC	1378	IN	Data Raw: 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 29 7b 62 2e 64 61 74 61 3d 3d 3d 22 47 6f 6f 67 6c 65 42 61 73 52 59 6f 43 4a 6c 56 45 42 22 3f 28 62 3d 62 2e 70 6f 72 74 73 5b 30 5d 2c 62 2e 6f 6e 6d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 44 61 28 61 2c 63 29 7d 2c 62 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 22 29 29 3a 28 62 3d 42 61 28 62 2e 64 61 74 61 29 29 26 26 45 61 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 2c 66 2c 68 3b 72 65 74 75 72 6e 20 4c 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 73 77 69 74 63 68 28 64 2e 67 29 7b 63 61 73 65 20 31 3a 63 3d 62 2e 64 61 74 61 3b 65 3d 62 2e 70 6f 72 74 73 5b 30 5d 3b 69 66 28 63 5b 30 5d 3d 3d 3d 31 26 26 74 79 Data Ascii: )}};function Ca(a,b){b.data==="GoogleBasRYoCJlVEB"?(b=b.ports[0],b.onmessage=function(c){return Da(a,c)},b.postMessage("")):(b=Ba(b.data))&&Ea(a,b)}function Da(a,b){var c,e,f,h;return L(function(d){switch(d.g){case 1:c=b.data;e=b.ports[0];if(c[0]===1&&ty
2024-10-24 22:48:12 UTC	1304	IN	Data Raw: 20 30 3f 21 31 3a 62 2e 6f 29 2c 66 3d 62 3d 3d 3d 76 6f 69 64 20 30 7c 7c 62 2e 4e 21 3d 3d 22 30 22 3b 63 21 3d 3d 21 31 26 26 66 7c 7c 28 65 2e 75 72 6c 3d 65 2e 6f 3f 22 68 74 74 70 73 3a 2f 2f 65 70 31 2e 61 64 74 72 61 66 66 69 63 71 75 61 6c 69 74 79 2e 67 6f 6f 67 6c 65 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 69 64 3d 73 6f 64 61 72 32 26 76 3d 32 33 31 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 69 64 3d 73 6f 64 61 72 32 26 76 3d 32 33 31 22 29 3b 57 28 65 2c 22 74 22 2c 61 29 3b 62 26 26 28 57 28 65 2c 22 6c 69 22 2c 62 2e 50 29 2c 57 28 65 2c 62 2e 63 6f 6e 74 65 78 74 3d 3d 3d 22 63 72 22 3f 22 62 67 61 69 22 3a 22 6a 6b 22 Data Ascii: 0?!1:b.o),f=b===void 0\|\|b.N!=="0";c!==!1&&f\|\|(e.url=e.o?"https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231":"https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231");W(e,"t",a);b&&(W(e,"li",b.P),W(e,b.context==="cr"?"bgai":"jk"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49775	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:11 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ClzwDoULPAu65Hm&MD=52pr2yry HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 22:48:12 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d5dd82f0-11de-41e4-9fef-3dbf733c8191 MS-RequestId: b6674599-e56f-4215-b427-8ca41e3c37f1 MS-CV: xcElnoYdVkqBJov9.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 22:48:10 GMT Connection: close Content-Length: 24490
2024-10-24 22:48:12 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 22:48:12 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49791	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:11 UTC	743	OUT	GET /i/ca-pub-7820871901371481?href=https%3A%2F%2Fwww.xn--invitacionesdecumpleaos-dic.org&ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:12 UTC	1954	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:12 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-vbwPtPthZUCMa9oRPcB12w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmII1pBiOO90h-k6EEt8fcmkBcRO6TNYQ4C49eY51ulAnPTvPGsJELtrXWT1B2JDhUuszkDsWHSJ1ROIVXsusZoD8f11l1ifA_Hej5dYjwJxkcQV1hYgvt10hfUxEDN8vcLKAcRC3Bxr5r7ewSYw4-YjKSWNpPzC-OT8vJKizKTSkvyitOS01OLUorLUongjAyMTQwMjIz0Dg_gCAwCWNUjA" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 36 65 65 39 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 6ee9if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 6e 20 66 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 Data Ascii: n fa(ba(this))}})}return a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.q=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{ne
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4b 28 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 75 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 6c 61 28 68 2c 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 Data Ascii: witch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.K(g):this.A(g)}};e.prototype.K=function(g){var h=void 0;try{h=g.then}catch(k){this.u(k);return}typeof h=="function"?this.la(h,g):this.A(g)};e.prototype.u
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 6d 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 77 28 78 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 45 29 7b 42 5b 78 5d 3d 45 3b 41 2d 2d 3b 41 3d 3d 30 26 26 6d 28 42 29 7d 7d 76 61 72 20 42 3d 5b 5d 2c 41 3d 30 3b 64 6f 20 42 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 41 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 6d 62 28 77 28 42 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 Data Ascii: m,n){function w(x){return function(E){B[x]=E;A--;A==0&&m(B)}}var B=[],A=0;do B.push(void 0),A++,c(k.value).mb(w(B.length-1),n),k=h.next();while(!k.done)})};return e});var ra=function(a,b,c){if(a==null)throw new TypeError("k`"+c);if(b instanceof RegExp)th
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 71 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 Data Ascii: n"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(_.q([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),n=m.next();if(n.done\|\|n.value[0]!=h
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 65 74 75 72 6e 20 6d 3d 0a 6d 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6d 29 7d 3b 6d 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 71 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 70 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 Data Ascii: eturn m=m.next,{done:!1,value:k(m)};m=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.qa=h.next=h.head=h},g=0;return c});p("Set",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="functi
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e Data Ascii: };var e=[],f=typeof Symbol!="undefined"&&Symbol.iterator&&b[Symbol.iterator];if(typeof f=="function"){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});p("Object.
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 0a 70 28 22 55 69 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 Data Ascii: prototype.fill};p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fill",ta);p("Int16Array.prototype.fill",ta);p("Uint16Array.prototype.fill",ta);p("Int32Array.prototype.fill",ta);p("Uint32Array.prototype.fi
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 30 3a 5f 2e 74 28 22 45 64 67 65 22 29 29 7c 7c 5f 2e 74 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 48 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 47 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 49 61 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 5f 2e 79 61 28 61 29 7d 3b 5f 2e 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 45 72 72 6f 72 28 61 29 3b 49 61 28 61 2c 22 77 61 72 6e 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 7d 3b 4e Data Ascii: 0:_.t("Edge"))\|\|_.t("Silk")};_.Ha=function(a){return Ga&&a!=null&&a instanceof Uint8Array};Ka=function(){var a=Error();Ia(a,"incident");_.ya(a)};_.La=function(a){a=Error(a);Ia(a,"warning");return a};_.Ma=function(a){return Array.prototype.slice.call(a)};N
2024-10-24 22:48:12 UTC	1954	IN	Data Raw: 65 2e 63 6f 6e 63 61 74 2e 63 61 6c 6c 28 5b 5d 2c 62 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 7d 74 62 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 26 26 28 61 5b 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 5d 3d 21 30 29 7d 3b 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 7b 76 61 72 20 64 3d 4e 75 6d 62 65 72 28 63 29 2c 65 3b 69 66 28 65 3d 5f 2e 57 61 28 62 2c 63 29 26 26 4e 75 6d 62 65 72 2e 69 73 49 6e 74 65 67 65 72 28 64 29 29 65 3d 61 5b 64 5d 2c 64 3d 62 5b Data Ascii: e.concat.call([],b).length===1}tb&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};wb=function(a,b){if(a.length!==b.length)return!1;for(var c in b){var d=Number(c),e;if(e=_.Wa(b,c)&&Number.isInteger(d))e=a[d],d=b[

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:11 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: d7788b78-601e-0084-2f37-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224812Z-16849878b78lhh9t0fb3392enw00000008a00000000042gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:11 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:12 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 802631a9-901e-002a-57ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224812Z-15b8d89586fhl2qtatrz3vfkf000000005s0000000000g93 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:11 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a568b4a7-501e-0035-1a18-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224812Z-17c5cb586f67cgf6fyv0p8rq5s00000001qg0000000040q1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:12 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224812Z-16849878b78fmrkt2ukpvh9wh400000008bg000000006ndp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:12 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224812Z-16849878b78nx5sne3fztmu6xc00000000kg00000000h0p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49801	142.250.186.68	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	798	OUT	GET /pagead/drt/ui HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:13 UTC	426	IN	HTTP/1.1 302 Found Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 22:48:13 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49803	216.58.206.65	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	366	OUT	GET /sodar/sodar2.js HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:13 UTC	665	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 17945 Date: Thu, 24 Oct 2024 22:48:13 GMT Expires: Thu, 24 Oct 2024 22:48:13 GMT Cache-Control: private, max-age=3000 ETag: "1727224258380615" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:13 UTC	713	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2024-10-24 22:48:13 UTC	1378	IN	Data Raw: 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 67 3d 64 5b 30 5d 2c 66 3b 21 61 26 26 67 20 69 6e 20 72 3f 66 3d 72 3a 66 3d 6e 3b 66 6f 72 28 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 67 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 67 5d 3b 69 66 28 21 28 65 20 69 6e 20 66 29 29 62 72 65 61 6b 20 61 3b 66 3d 66 5b 65 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 70 26 26 63 3d 3d 3d 22 65 73 36 22 3f 66 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 6b 28 72 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 Data Ascii: d 0?c:a[b]}}function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,wr
2024-10-24 22:48:13 UTC	1378	IN	Data Raw: 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 76 61 72 20 66 61 3d 74 79 70 65 6f 66 20 4f Data Ascii: ;return a}function ea(a){var b=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&a[w(r.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var fa=typeof O
2024-10-24 22:48:13 UTC	1378	IN	Data Raw: 3a 21 30 7d 7d 2c 62 2c 61 2e 67 2e 72 65 74 75 72 6e 29 3b 61 2e 67 2e 72 65 74 75 72 6e 28 62 29 3b 72 65 74 75 72 6e 20 48 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 67 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 68 2c 63 29 3b 69 66 28 21 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 67 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 67 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 67 2e 6d 3d 21 31 2c 67 3b 76 61 72 20 66 3d 67 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 45 28 61 2e Data Ascii: :!0}},b,a.g.return);a.g.return(b);return H(a)}function G(a,b,c,d){try{var g=b.call(a.g.h,c);if(!(g instanceof Object))throw new TypeError("Iterator result "+g+" is not an object");if(!g.done)return a.g.m=!1,g;var f=g.value}catch(e){return a.g.h=null,E(a.
2024-10-24 22:48:13 UTC	1378	IN	Data Raw: 65 6f 66 20 62 3f 65 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 65 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6d 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 65 29 7d 3b 76 61 72 20 67 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 Data Ascii: eof b?e:new b(function(h){h(e)})}if(a)return a;c.prototype.h=function(e){if(this.g==null){this.g=[];var h=this;this.i(function(){h.m()})}this.g.push(e)};var g=n.setTimeout;c.prototype.i=function(e){g(e,0)};c.prototype.m=function(){for(;this.g&&this.g.leng
2024-10-24 22:48:13 UTC	1378	IN	Data Raw: 74 6f 6d 45 76 65 6e 74 2c 68 3d 6e 2e 45 76 65 6e 74 2c 6c 3d 6e 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 74 79 70 65 6f 66 20 6c 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 65 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 65 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 65 2e 69 6e 69 74 Data Ascii: tomEvent,h=n.Event,l=n.dispatchEvent;if(typeof l==="undefined")return!0;typeof e==="function"?e=new e("unhandledrejection",{cancelable:!0}):typeof h==="function"?e=new h("unhandledrejection",{cancelable:!0}):(e=n.document.createEvent("CustomEvent"),e.init
2024-10-24 22:48:13 UTC	1378	IN	Data Raw: 30 26 26 6d 28 74 29 7d 7d 76 61 72 20 74 3d 5b 5d 2c 76 3d 30 3b 64 6f 20 74 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 76 2b 2b 2c 64 28 6c 2e 76 61 6c 75 65 29 2e 43 28 4f 28 74 2e 6c 65 6e 67 74 68 2d 31 29 2c 71 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 0a 78 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6e 7d 2c 22 65 73 5f 32 30 32 30 22 29 3b 78 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 Data Ascii: 0&&m(t)}}var t=[],v=0;do t.push(void 0),v++,d(l.value).C(O(t.length-1),q),l=h.next();while(!l.done)})};return b},"es6");x("globalThis",function(a){return a\|\|n},"es_2020");x("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){retur
2024-10-24 22:48:13 UTC	1378	IN	Data Raw: 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 64 5d 29 2b 61 5b 64 2b 31 5d 3b 72 65 74 75 72 6e 20 4c 28 63 29 7d 3b 76 61 72 20 73 61 3d 79 28 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 61 66 72 61 6d 65 22 5d 29 2c 74 61 3d 50 28 73 61 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 73 72 63 3d 72 61 28 62 29 3b 76 61 72 20 63 2c 64 3b 28 63 3d 28 62 3d 28 64 3d 28 63 3d 28 61 2e 6f 77 6e 65 72 Data Ascii: ;d<b.length;d++)c+=encodeURIComponent(b[d])+a[d+1];return L(c)};var sa=y(["https://www.google.com/recaptcha/api2/aframe"]),ta=P(sa);function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};function ua(a,b){a.src=ra(b);var c,d;(c=(b=(d=(c=(a.owner
2024-10-24 22:48:13 UTC	1378	IN	Data Raw: 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 62 67 2f 22 2c 22 2e 6a 73 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 67 3d 77 69 6e 64 6f 77 3b 67 3d 67 3d 3d 3d 76 6f 69 64 20 30 3f 77 69 6e 64 6f 77 3a 67 3b 74 68 69 73 2e 4a 3d 62 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6f 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 63 3b 74 68 69 73 2e 69 3d 28 64 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 64 29 3f 50 28 7a 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3a 50 28 41 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 49 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 77 69 74 63 Data Ascii: ad2.googlesyndication.com/bg/",".js"]);function R(a,b,c,d){var g=window;g=g===void 0?window:g;this.J=b;this.h=g;this.o=c===void 0?0:c;this.i=(d===void 0?0:d)?P(za,encodeURIComponent(a)):P(Aa,encodeURIComponent(a))}function Ba(a){return I(function(b){switc
2024-10-24 22:48:13 UTC	1378	IN	Data Raw: 78 74 3a 46 61 28 61 2e 5f 63 74 78 5f 29 2c 41 3a 61 2e 5f 62 67 76 5f 2c 76 3a 61 2e 5f 62 67 70 5f 2c 47 3a 61 2e 5f 6c 69 5f 2c 46 3a 61 2e 5f 6a 6b 5f 2c 48 3a 47 61 28 61 2e 5f 73 74 5f 29 2c 49 3a 61 2e 5f 72 63 5f 2c 6f 3a 61 2e 5f 64 6c 5f 2c 44 3a 61 2e 5f 67 32 5f 2c 6a 3a 48 61 28 61 2e 5f 61 74 71 67 5f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 69 66 28 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 72 65 74 75 72 6e 20 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 5b 30 5d 3b 76 61 72 20 62 3d 6e 65 77 20 72 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 5b 62 2c 63 5d 7d 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 Data Ascii: xt:Fa(a._ctx_),A:a._bgv_,v:a._bgp_,G:a._li_,F:a._jk_,H:Ga(a._st_),I:a._rc_,o:a._dl_,D:a._g2_,j:Ha(a._atqg_)}}function Ja(){var a=window;if(a.GoogleDX5YKUSk)return a.GoogleDX5YKUSk[0];var b=new r.Promise(function(c){a.GoogleDX5YKUSk=[b,c]});return b}funct

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f94f539d-b01e-001e-773a-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224813Z-15b8d89586fzhrwgk23ex2bvhw00000002e0000000007kcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:48:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:13 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: fc173041-601e-0097-79ad-24f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224813Z-15b8d89586f8nxpt6ys645x5v000000000wg000000005u0k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:13 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f981d888-e01e-0099-4d18-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224813Z-17c5cb586f6qk7x5scs1ghy2m400000001s0000000006h97 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224813Z-17c5cb586f6g6g2sbe6edp75y400000001hg00000000a2mx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:13 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:13 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1ff5e4cc-601e-0001-30ce-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224813Z-15b8d89586f6nn8zb8x99wuenc00000000qg000000008amu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:13 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49814	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	901	OUT	POST /el/AGSKWxWy3x9V2OEFveoc38wOdQ6ULu8hI3qhgInDkicneHIK0Uqoa7DBaoFEhUO-c7A8Vmt0gUAzYBinwTOdbDGJS1pP0wbDgK06jDXjZqCXQjzl3bgZoEKS5O9RtmaUVnQiPTztnZ5nsw== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 247 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.xn--invitacionesdecumpleaos-dic.org X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:13 UTC	247	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 39 38 31 30 30 39 31 35 39 38 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 5b 6e 75 6c 6c 2c 5b 22 49 44 3d 39 63 38 65 39 64 63 33 38 31 65 66 38 37 64 62 3a 54 3d 31 37 32 39 38 31 30 30 38 38 3a 52 54 3d 31 37 32 39 38 31 30 30 38 38 3a 53 3d 41 4c 4e 49 5f 4d 61 66 45 77 34 57 4a 57 66 38 6b 6b 51 44 36 78 63 6d 6b 65 58 35 36 6e 31 71 30 41 22 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1729810091598,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,[null,["ID=9c8e9dc381ef87db:T=1729810088:RT=1729810088:S=ALNI_MafEw4WJWf8kkQD6xcmkeX56n1q0A"]]]
2024-10-24 22:48:13 UTC	1899	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.xn--invitacionesdecumpleaos-dic.org Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:13 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-nvi_fpcmH7c1L7HnOCAS-g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmLw15BicEqfwRoCxO5aF1n9gXjvx0usR4GY4esVVg4gFuLhWDv39Q42gQNdn3YzKbkk5RfGJ-fnlaTmlegmphTrgthFmUmlJflFKOzUMpCKnPz09My89HgjAyMTQwMjYz0Ds_gCAwBsaC44" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49822	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	1076	OUT	GET /f/AGSKWxUElS9I_rKA8CUE5vfInqASDBvdyrD-xTwFkOi30OquysbT4Zv3YCWiux7wNZ4b8sWy7bg1YkLjq89omzKVYIWIrkRuNePUT1P1a-TAfubgirRY2mkjmN-VauajJb_cMrA_5o_xdg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDkxLDY1NjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cueG4tLWludml0YWNpb25lc2RlY3VtcGxlYW9zLWRpYy5vcmcvIixudWxsLFtbOCwiWjdmeFZ6V2NISzQiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:13 UTC	1956	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:13 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-MPoH9A5ANGjSs2gi-Se_qg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmJw15BiOO90h-k6EEt8fcmkBcRO6TNYQ4C49eY51ulAnPTvPGsJELtrXWT1B2JDhUuszkDsWHSJ1ROIVXsusZoD8f11l1ifA_Hej5dYjwJxkcQV1hYgvt10hfUxEDN8vcLKAcRCPBxr577ewSbw4vOkp0xKGkn5hfHJ-XklRZlJpSX5RWnJaanFqUVlqUXxRgZGJoYGRkZ6BgbxBQYA8Y1JnQ" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:13 UTC	1956	IN	Data Raw: 32 38 36 31 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 58 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 5f 2e 73 Data Ascii: 2861if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Xo=function(a){if(!a)return null;a=_.s
2024-10-24 22:48:13 UTC	1956	IN	Data Raw: 61 3d 3d 3d 31 26 26 5f 2e 4a 6e 28 63 2c 31 30 2c 21 30 29 3b 62 28 63 29 7d 3b 76 61 72 20 6e 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 3d 5b 5d 7d 3b 6e 70 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 69 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 62 5d 2e 63 6f 6e 63 61 74 28 5f 2e 68 61 28 5f 2e 47 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 29 7d 3b 6e 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5f 2e 47 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 2c 62 3d 74 68 69 73 2e 69 2c 63 3d Data Ascii: a===1&&_.Jn(c,10,!0);b(c)};var np=function(){this.i=[]};np.prototype.addEventListener=function(a,b){this.i.push(function(){a.call.apply(a,[b].concat(_.ha(_.Gc.apply(0,arguments))))})};np.prototype.g=function(){for(var a=_.Gc.apply(0,arguments),b=this.i,c=
2024-10-24 22:48:13 UTC	1956	IN	Data Raw: 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 70 28 61 2c 32 29 7d 29 7d 3b 0a 76 61 72 20 54 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 62 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 2e 6f 3b 62 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 62 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 30 30 30 30 70 78 22 3b 62 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 39 39 39 30 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 30 29 2b 22 70 78 22 3b 62 2e 73 74 79 6c 65 2e 7a 49 6e Data Ascii: },function(){rp(a,2)})};var Tp=function(a){var b=document.createElement("div");b.className=a.o;b.style.width="1px";b.style.height="1px";b.style.position="absolute";b.style.left="-10000px";b.style.top="-"+Math.floor(9990+Math.random()*20)+"px";b.style.zIn
2024-10-24 22:48:13 UTC	1956	IN	Data Raw: 2e 42 29 3b 4f 70 28 61 2e 75 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 73 74 61 72 74 28 65 2c 62 29 7d 29 3b 76 61 72 20 64 3d 67 71 28 61 29 3b 48 70 28 61 2e 75 2c 64 2e 69 63 29 3b 64 2e 49 63 28 29 7d 3b 76 61 72 20 6a 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6a 71 2c 5f 2e 4a 29 3b 76 61 72 20 6b 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6b 71 2c 5f 2e 4a 29 3b 76 61 72 20 6c 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6c 71 2c 5f 2e 4a 29 3b 76 61 72 20 6d 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6d 71 2c 5f 2e 4a 29 3b Data Ascii: .B);Op(a.u,function(e){c.start(e,b)});var d=gq(a);Hp(a.u,d.ic);d.Ic()};var jq=function(a){this.l=_.u(a)};_.y(jq,_.J);var kq=function(a){this.l=_.u(a)};_.y(kq,_.J);var lq=function(a){this.l=_.u(a)};_.y(lq,_.J);var mq=function(a){this.l=_.u(a)};_.y(mq,_.J);
2024-10-24 22:48:13 UTC	1956	IN	Data Raw: 48 51 74 63 6d 46 70 62 43 31 68 5a 43 42 68 5a 46 39 6b 5a 58 4e 6a 63 6d 6c 77 64 47 39 79 49 69 78 62 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6d 68 30 64 48 42 7a 4f 69 38 76 63 47 46 6e 5a 57 46 6b 4d 69 35 6e 62 32 39 6e 62 47 56 7a 65 57 35 6b 61 57 4e 68 64 47 6c 76 62 69 35 6a 62 32 30 76 63 47 46 6e 5a 57 46 6b 4c 32 70 7a 4c 32 78 70 5a 47 46 79 4c 6d 70 7a 50 32 5a 6a 5a 46 78 31 4d 44 41 7a 5a 48 52 79 64 57 55 69 58 53 78 62 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 5a 32 56 68 5a 44 49 75 5a 32 39 76 5a 32 78 6c 63 33 6c 75 5a 47 6c 6a 59 58 52 70 62 32 34 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 61 57 4e 76 49 6c 30 73 4d 54 41 77 4c 44 55 73 57 32 35 31 62 47 77 73 Data Ascii: HQtcmFpbC1hZCBhZF9kZXNjcmlwdG9yIixbbnVsbCxudWxsLG51bGwsImh0dHBzOi8vcGFnZWFkMi5nb29nbGVzeW5kaWNhdGlvbi5jb20vcGFnZWFkL2pzL2xpZGFyLmpzP2ZjZFx1MDAzZHRydWUiXSxbbnVsbCxudWxsLCJodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL2Zhdmljb24uaWNvIl0sMTAwLDUsW251bGws
2024-10-24 22:48:13 UTC	565	IN	Data Raw: 62 32 35 30 63 6d 6c 69 64 58 52 76 63 6c 4e 6c 63 6e 5a 70 62 6d 64 58 5a 57 4a 54 64 32 6c 30 59 32 68 69 62 32 46 79 5a 45 68 30 64 48 41 76 61 6e 4e 6c 63 6e 4a 76 63 69 4a 64 58 56 30 5c 5c 75 30 30 33 64 5c 78 32 32 5c 78 35 64 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 66 5c 2f 41 47 53 4b 57 78 57 55 69 6f 44 79 58 77 63 56 47 66 31 77 67 38 69 72 68 58 4f 79 36 54 30 50 32 5f 6e 74 78 77 36 43 6a 6b 68 35 74 42 4f 4f 54 69 33 33 44 4e 54 30 58 79 6f 72 32 47 58 74 46 73 6b 49 4b 64 76 51 6d 48 4e 41 65 78 76 6c 43 5f 6e 6e 4b 79 76 73 2d 42 6a 36 66 5f 6b 38 62 4d 49 4d 6e Data Ascii: b250cmlidXRvclNlcnZpbmdXZWJTd2l0Y2hib2FyZEh0dHAvanNlcnJvciJdXV0\\u003d\x22\x5d\x5d,\x5bnull,null,null,\x22https:\/\/fundingchoicesmessages.google.com\/f\/AGSKWxWUioDyXwcVGf1wg8irhXOy6T0P2_ntxw6Cjkh5tBOOTi33DNT0Xyor2GXtFskIKdvQmHNAexvlC_nnKyvs-Bj6f_k8bMIMn
2024-10-24 22:48:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49838	142.250.184.206	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:13 UTC	544	OUT	GET /i/ca-pub-7820871901371481?href=https%3A%2F%2Fwww.xn--invitacionesdecumpleaos-dic.org&ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:14 UTC	1956	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:13 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-zgS8R2gTTXxj8P0MJDy1QQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmLw1ZBiOO90h-k6EEt8fcmkBcRO6TNYQ4C49eY51ulAnPTvPGsJELtrXWT1B2JDhUuszkDsWHSJ1ROIVXsusZoD8f11l1ifA_Hej5dYjwJxkcQV1hYgvt10hfUxEDN8vcLKAcRCPBxr577ewSawYeHiq8xKGkn5hfHJ-XklRZlJpSX5RWnJaanFqUVlqUXxRgZGJoYGRkZ6BgbxBQYA3PlJGw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 36 65 65 39 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 6ee9if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 66 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 Data Ascii: fa(ba(this))}})}return a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.q=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4b 28 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 75 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 6c 61 28 68 2c 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 3d 66 75 6e Data Ascii: h(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.K(g):this.A(g)}};e.prototype.K=function(g){var h=void 0;try{h=g.then}catch(k){this.u(k);return}typeof h=="function"?this.la(h,g):this.A(g)};e.prototype.u=fun
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 77 28 78 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 45 29 7b 42 5b 78 5d 3d 45 3b 41 2d 2d 3b 41 3d 3d 30 26 26 6d 28 42 29 7d 7d 76 61 72 20 42 3d 5b 5d 2c 41 3d 30 3b 64 6f 20 42 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 41 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 6d 62 28 77 28 42 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 Data Ascii: unction w(x){return function(E){B[x]=E;A--;A==0&&m(B)}}var B=[],A=0;do B.push(void 0),A++,c(k.value).mb(w(B.length-1),n),k=h.next();while(!k.done)})};return e});var ra=function(a,b,c){if(a==null)throw new TypeError("k`"+c);if(b instanceof RegExp)throw ne
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 71 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 6e 2e 76 61 6c 75 Data Ascii: rototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(_.q([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),n=m.next();if(n.done\|\|n.value[0]!=h\|\|n.valu
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6d 29 7d 3b 6d 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 71 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 70 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e Data Ascii: .next,{done:!1,value:k(m)};m=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.qa=h.next=h.head=h},g=0;return c});p("Set",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e Data Ascii: =typeof Symbol!="undefined"&&Symbol.iterator&&b[Symbol.iterator];if(typeof f=="function"){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});p("Object.entries",fun
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 0a 70 28 22 55 69 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 46 6c 6f Data Ascii: };p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fill",ta);p("Int16Array.prototype.fill",ta);p("Uint16Array.prototype.fill",ta);p("Int32Array.prototype.fill",ta);p("Uint32Array.prototype.fill",ta);p("Flo
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 5f 2e 74 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 48 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 47 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 49 61 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 5f 2e 79 61 28 61 29 7d 3b 5f 2e 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 45 72 72 6f 72 28 61 29 3b 49 61 28 61 2c 22 77 61 72 6e 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 7d 3b 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: _.t("Silk")};_.Ha=function(a){return Ga&&a!=null&&a instanceof Uint8Array};Ka=function(){var a=Error();Ia(a,"incident");_.ya(a)};_.La=function(a){a=Error(a);Ia(a,"warning");return a};_.Ma=function(a){return Array.prototype.slice.call(a)};Na=function(a){re
2024-10-24 22:48:14 UTC	1956	IN	Data Raw: 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 7d 74 62 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 26 26 28 61 5b 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 5d 3d 21 30 29 7d 3b 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 7b 76 61 72 20 64 3d 4e 75 6d 62 65 72 28 63 29 2c 65 3b 69 66 28 65 3d 5f 2e 57 61 28 62 2c 63 29 26 26 4e 75 6d 62 65 72 2e 69 73 49 6e 74 65 67 65 72 28 64 29 29 65 3d 61 5b 64 5d 2c 64 3d 62 5b 64 5d 2c 65 3d 21 28 4e 75 6d 62 65 72 2e 69 73 4e 61 Data Ascii: ).length===1}tb&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};wb=function(a,b){if(a.length!==b.length)return!1;for(var c in b){var d=Number(c),e;if(e=_.Wa(b,c)&&Number.isInteger(d))e=a[d],d=b[d],e=!(Number.isNa

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:14 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:15 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224815Z-r197bdfb6b4k6h5jmacuw3pcw800000000vg000000007x6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:15 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:14 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224815Z-16849878b787sbpl0sv29sm89s00000008h0000000001ytr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:14 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9e6b2b63-d01e-008e-7443-26387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224815Z-r197bdfb6b4kq4j5t834fh90qn0000000bqg000000008y79 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:14 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:15 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224815Z-16849878b78dsttbr1qw36rxs800000008c000000000dqbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:15 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49854	142.250.184.206	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	877	OUT	GET /f/AGSKWxUElS9I_rKA8CUE5vfInqASDBvdyrD-xTwFkOi30OquysbT4Zv3YCWiux7wNZ4b8sWy7bg1YkLjq89omzKVYIWIrkRuNePUT1P1a-TAfubgirRY2mkjmN-VauajJb_cMrA_5o_xdg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDkxLDY1NjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cueG4tLWludml0YWNpb25lc2RlY3VtcGxlYW9zLWRpYy5vcmcvIixudWxsLFtbOCwiWjdmeFZ6V2NISzQiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:15 UTC	1954	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:15 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-pB6F3ZF5r2zAlIXRO4KpFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmJw0ZBiOO90h-k6EEt8fcmkBcRO6TNYQ4C49eY51ulAnPTvPGsJELtrXWT1B2JDhUuszkDsWHSJ1ROIVXsusZoD8f11l1ifA_Hej5dYjwJxkcQV1hYgvt10hfUxEDN8vcLKAcRC3Bzr577ewSZwYdaXZCWNpPzC-OT8vJKizKTSkvyitOS01OLUorLUongjAyMTQwMjIz0Dg_gCAwCbJEkI" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:15 UTC	1954	IN	Data Raw: 32 38 34 32 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 58 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 5f 2e 73 Data Ascii: 2842if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Xo=function(a){if(!a)return null;a=_.s
2024-10-24 22:48:15 UTC	1954	IN	Data Raw: 26 0a 61 3d 3d 3d 31 26 26 5f 2e 4a 6e 28 63 2c 31 30 2c 21 30 29 3b 62 28 63 29 7d 3b 76 61 72 20 6e 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 3d 5b 5d 7d 3b 6e 70 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 69 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 62 5d 2e 63 6f 6e 63 61 74 28 5f 2e 68 61 28 5f 2e 47 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 29 7d 3b 6e 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5f 2e 47 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 2c 62 3d 74 68 69 73 2e 69 2c Data Ascii: &a===1&&_.Jn(c,10,!0);b(c)};var np=function(){this.i=[]};np.prototype.addEventListener=function(a,b){this.i.push(function(){a.call.apply(a,[b].concat(_.ha(_.Gc.apply(0,arguments))))})};np.prototype.g=function(){for(var a=_.Gc.apply(0,arguments),b=this.i,
2024-10-24 22:48:15 UTC	1954	IN	Data Raw: 62 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 70 28 61 2c 32 29 7d 29 7d 3b 0a 76 61 72 20 54 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 62 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 2e 6f 3b 62 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 62 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 30 30 30 30 70 78 22 3b 62 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 39 39 39 30 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 30 29 2b 22 70 78 22 3b 62 2e 73 74 79 6c 65 Data Ascii: b)})},function(){rp(a,2)})};var Tp=function(a){var b=document.createElement("div");b.className=a.o;b.style.width="1px";b.style.height="1px";b.style.position="absolute";b.style.left="-10000px";b.style.top="-"+Math.floor(9990+Math.random()*20)+"px";b.style
2024-10-24 22:48:15 UTC	1954	IN	Data Raw: 2c 61 2e 43 2c 61 2e 42 29 3b 4f 70 28 61 2e 75 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 73 74 61 72 74 28 65 2c 62 29 7d 29 3b 76 61 72 20 64 3d 67 71 28 61 29 3b 48 70 28 61 2e 75 2c 64 2e 69 63 29 3b 64 2e 49 63 28 29 7d 3b 76 61 72 20 6a 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6a 71 2c 5f 2e 4a 29 3b 76 61 72 20 6b 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6b 71 2c 5f 2e 4a 29 3b 76 61 72 20 6c 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6c 71 2c 5f 2e 4a 29 3b 76 61 72 20 6d 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6d 71 Data Ascii: ,a.C,a.B);Op(a.u,function(e){c.start(e,b)});var d=gq(a);Hp(a.u,d.ic);d.Ic()};var jq=function(a){this.l=_.u(a)};_.y(jq,_.J);var kq=function(a){this.l=_.u(a)};_.y(kq,_.J);var lq=function(a){this.l=_.u(a)};_.y(lq,_.J);var mq=function(a){this.l=_.u(a)};_.y(mq
2024-10-24 22:48:15 UTC	1954	IN	Data Raw: 6d 56 6d 63 6d 56 7a 61 43 49 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 5a 32 56 68 5a 44 49 75 5a 32 39 76 5a 32 78 6c 63 33 6c 75 5a 47 6c 6a 59 58 52 70 62 32 34 75 59 32 39 74 4c 33 42 68 5a 32 56 68 5a 43 39 71 63 79 39 73 61 57 52 68 63 69 35 71 63 7a 39 6d 59 32 52 63 64 54 41 77 4d 32 52 30 63 6e 56 6c 49 6c 30 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 4c 79 39 77 59 57 64 6c 59 57 51 79 4c 6d 64 76 62 32 64 73 5a 58 4e 35 62 6d 52 70 59 32 46 30 61 57 39 75 4c 6d 4e 76 62 53 39 6d 59 58 5a 70 59 32 39 75 4c 6d 6c 6a 62 79 4a 64 4c 44 45 77 4d 43 77 31 4c 46 74 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 Data Ascii: mVmcmVzaCIsW251bGwsbnVsbCxudWxsLCJodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL3BhZ2VhZC9qcy9saWRhci5qcz9mY2RcdTAwM2R0cnVlIl0sW251bGwsbnVsbCwiaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9mYXZpY29uLmljbyJdLDEwMCw1LFtudWxsLG51bGwsbnVsbCwiaHR0cHM6
2024-10-24 22:48:15 UTC	544	IN	Data Raw: 54 5a 58 4a 32 61 57 35 6e 56 32 56 69 55 33 64 70 64 47 4e 6f 59 6d 39 68 63 6d 52 49 64 48 52 77 4c 32 70 7a 5a 58 4a 79 62 33 49 69 58 56 31 64 5c 78 32 32 5c 78 35 64 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 66 5c 2f 41 47 53 4b 57 78 55 6b 44 51 30 74 7a 32 6f 54 76 45 30 58 4d 54 47 44 69 48 59 61 51 50 46 59 59 42 39 4c 38 61 61 43 51 61 73 39 5a 4a 50 44 4f 58 70 74 6b 37 73 57 39 42 77 6e 55 71 4c 49 5a 75 63 79 35 77 62 35 4d 63 64 34 4b 6f 4f 57 6c 6c 68 46 56 66 39 68 48 55 78 74 6b 58 76 74 32 59 4a 4d 2d 45 75 32 76 32 70 48 6e 6d 79 70 36 56 75 51 79 64 66 52 34 63 Data Ascii: TZXJ2aW5nV2ViU3dpdGNoYm9hcmRIdHRwL2pzZXJyb3IiXV1d\x22\x5d\x5d,\x5bnull,null,null,\x22https:\/\/fundingchoicesmessages.google.com\/f\/AGSKWxUkDQ0tz2oTvE0XMTGDiHYaQPFYYB9L8aaCQas9ZJPDOXptk7sW9BwnUqLIZucy5wb5Mcd4KoOWllhFVf9hHUxtkXvt2YJM-Eu2v2pHnmyp6VuQydfR4c
2024-10-24 22:48:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224815Z-16849878b78rjhv97f3nhawr7s00000008d0000000001mbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49858	142.250.186.68	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	804	OUT	GET /ads/measurement/l?ebcid=ALh7CaSweIXDP1BCjN1xkxC-rcnUk7oACc6FMXAxmdgItqlWkF4lYSw6XGVE_8UF9ycx8WwEGKbpylyalks0uesngYznJl4fyg HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:16 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 22:48:16 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49869	64.233.167.157	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	5054	OUT	GET /dbm/vast?dbm_c=AKAmf-A9yQt3YvwzzLIIOKlYK_waZ1eHQbtEsAnayYZcd6bokL5gPGFd-WnJ_FM-GfBJG0dBRWW5VncoQcjxzITNoASrz-Mt3g&cry=1&dbm_d=AKAmf-CfBe8WD2J5dCpSTCu1P-zyHgRZSCSMFe2MHmCwqwCHTa9BsjaHmLGx_HnC5e-UxJQ0ApM7TNBKeXvMLTZVxd3_Fo8hy31NOTsGUt92vDc8VjqcsW132P6RTtaZX5u1QqXTixIcbiqiv6crAd5JOF-4A5DpH17u5QV1hCE_8nBuXd-3Ig0iWV3KRGKLrXa2bsViG8g7uiFMq4CODCmCeGAzNDpghKftXP3jTL9svbcRva4EjYt_KEVA2mQxeYvOoqdlOQ_SZ7PzI9aaM0dFbeIdQRdKooRpZLXMD_Lilq9Ejw7XOl-B0KypLvW9B2T7nqo93-fX4mr6yVvZsZTMK3oO5GPawNXL28KMzDx-bhTzwxE3mBIqhpy-9CH46I3KbQkh6p-P8sI5WfOd5PdqSiyah82JPHh0wb_s7gEZ95Ks0pDERE-vybOhN9h2n4Dvc6XhxlInGR9-xtlgJ4tFpGk1NaYXqLQujUmbmk7rF3nmhYEQ1NOE-pDkuWSlV_SA20cW0BgDt4koA4uUaerUQQtJy1QTwaxtDpluXmcd67inuA52nRNo5OHLrs9NjLm7cswCdu0GVfKmtKzcvQCDY1YOIQGbr8ZuQeG6I3v-sfBJkhPnULuFXKwpV2I6bH24pttotxvEu9qMtAZP6LYVpqukgUNK5NpEWM9PlnERWTxI485Y92PchO9tXcKQEchOgBRJJJDf_ugHdbesO1aErvI0tEsOEmzAjZtqQzU63vGcO9b4VcLOupCoeTCXka98bMcIzsbQ2jVLL6aTxnz24HfQjWCSFIvDXNtbjk995w7Ib8dmzEbnx5ZeJ3PPKQaKLaH0GQtfDtwNJSqz2zwhWMqev666WNTCPP3TYFHprbkf3QzHfFGpkKGro [TRUNCATED] Host: bid.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA
2024-10-24 22:48:16 UTC	930	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 22:48:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi6YRERa1nkQPwJxQZQEdvK2fEtk-5xu6-miCMUfih7aA1Wegw; expires=Tue, 22-Apr-2025 22:48:16 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:16 UTC	448	IN	Data Raw: 35 66 36 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 32 2e 30 22 3e 0a 20 3c 41 64 20 69 64 3d 22 35 39 38 39 34 33 38 32 30 22 3e 0a 20 20 3c 57 72 61 70 70 65 72 3e 0a 20 20 20 3c 41 64 53 79 73 74 65 6d 3e 44 42 4d 3c 2f 41 64 53 79 73 74 65 6d 3e 0a 20 20 20 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f Data Ascii: 5f6f<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0"> <Ad id="598943820"> <Wrapper> <AdSystem>DBM</AdSystem> <VASTAdTagURI><![CDATA[https:/
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 63 71 4a 36 44 58 6d 4b 77 64 78 62 26 66 74 5f 63 75 73 74 6f 6d 3d 41 42 41 6a 48 30 67 6c 5a 66 6b 6e 50 37 32 4c 63 71 4a 36 44 58 6d 4b 77 64 78 62 26 62 75 6e 64 6c 65 5f 69 64 3d 26 73 69 74 65 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 6e 2d 2d 69 6e 76 69 74 61 63 69 6f 6e 65 73 64 65 63 75 6d 70 6c 65 61 6f 73 2d 64 69 63 2e 6f 72 67 2f 26 70 75 62 5f 69 64 3d 31 26 73 75 70 5f 70 6c 61 74 66 6f 72 6d 3d 31 26 70 62 4d 65 74 68 6f 64 73 3d 5b 50 4c 41 59 42 41 43 4b 4d 45 54 48 4f 44 53 5d 7c 5b 43 4f 4e 54 49 4e 55 4f 55 53 50 4c 41 59 5d 7c 5b 54 49 4d 45 53 49 4e 43 45 49 4e 54 45 52 41 43 54 49 4f 4e 5d 26 63 61 63 68 65 62 75 73 74 65 72 3d 5b 43 41 43 48 45 42 55 53 54 45 52 5d 5d 5d 3e 3c 2f 56 41 53 54 41 64 54 61 67 55 52 49 Data Ascii: cqJ6DXmKwdxb&ft_custom=ABAjH0glZfknP72LcqJ6DXmKwdxb&bundle_id=&site_url=https://www.xn--invitacionesdecumpleaos-dic.org/&pub_id=1&sup_platform=1&pbMethods=[PLAYBACKMETHODS]\|[CONTINUOUSPLAY]\|[TIMESINCEINTERACTION]&cachebuster=[CACHEBUSTER]...</VASTAdTagURI
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 32 4c 41 78 53 69 70 38 37 79 4c 77 36 57 67 4a 5a 4a 73 6b 67 4c 61 67 49 55 72 37 41 36 76 36 6b 38 33 37 50 35 43 6c 78 61 67 5f 47 65 53 64 6e 44 37 78 66 32 64 76 59 4d 71 62 69 46 46 33 4c 6e 49 75 68 31 46 33 7a 42 71 73 6e 61 38 67 35 58 68 44 67 6a 66 4d 79 79 57 62 55 68 4b 76 62 4e 38 54 6a 75 32 78 4d 46 38 44 63 5a 31 52 5a 42 51 58 55 36 36 52 69 65 5f 79 61 30 50 4e 30 6e 62 6c 78 49 42 71 6b 34 5f 2d 30 43 53 34 58 30 43 64 41 42 6a 69 72 6b 54 71 6e 44 35 44 67 4e 69 6c 52 7a 66 42 50 79 6e 64 76 35 6a 74 72 58 34 36 4e 6e 47 47 53 41 44 32 71 72 50 30 6c 59 4f 78 5a 66 49 51 48 30 76 6e 50 59 30 48 49 35 61 55 56 37 41 41 34 33 56 4a 57 71 59 6c 56 76 44 4d 37 6e 4e 78 77 4a 66 72 67 2d 74 6b 37 7a 4c 72 37 6b 54 76 76 36 34 77 55 61 30 Data Ascii: 2LAxSip87yLw6WgJZJskgLagIUr7A6v6k837P5Clxag_GeSdnD7xf2dvYMqbiFF3LnIuh1F3zBqsna8g5XhDgjfMyyWbUhKvbN8Tju2xMF8DcZ1RZBQXU66Rie_ya0PN0nblxIBqk4_-0CS4X0CdABjirkTqnD5DgNilRzfBPyndv5jtrX46NnGGSAD2qrP0lYOxZfIQH0vnPY0HI5aUV7AA43VJWqYlVvDM7nNxwJfrg-tk7zLr7kTvv64wUa0
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 35 68 2d 6c 47 39 74 72 35 2d 6f 74 67 34 4e 79 66 4b 5f 34 57 48 58 61 6f 59 36 43 6b 44 4f 58 38 70 74 71 53 69 78 56 77 75 68 74 72 6e 44 79 77 44 4b 61 4c 4b 74 32 75 46 53 58 31 30 4d 4b 36 76 56 31 77 75 33 75 63 72 6f 53 76 4e 68 58 6f 4f 33 6e 4c 56 59 64 71 62 79 44 53 42 65 36 70 6d 4f 70 26 73 69 67 3d 43 67 30 41 72 4b 4a 53 7a 41 65 6f 36 30 52 72 6e 6f 45 41 45 41 45 26 75 61 63 68 5f 6d 3d 25 35 42 55 41 43 48 25 35 44 26 63 72 64 3d 61 48 52 30 63 48 4d 36 4c 79 39 68 5a 47 39 69 5a 53 35 6a 62 32 30 26 66 62 73 5f 61 65 69 64 3d 25 35 42 67 77 5f 66 62 73 61 65 69 64 25 35 44 26 75 72 6c 66 69 78 3d 31 26 6e 69 73 3d 34 26 61 64 75 72 6c 3d 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 0a 20 20 20 3c 43 72 65 61 74 69 76 65 73 3e 0a 20 Data Ascii: 5h-lG9tr5-otg4NyfK_4WHXaoY6CkDOX8ptqSixVwuhtrnDywDKaLKt2uFSX10MK6vV1wu3ucroSvNhXoO3nLVYdqbyDSBe6pmOp&sig=Cg0ArKJSzAeo60RrnoEAEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9hZG9iZS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&nis=4&adurl=...</Impression> <Creatives>
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 5f 53 4d 41 78 66 72 39 79 57 48 6c 61 53 56 31 6a 62 6f 5a 46 77 4b 63 73 43 45 46 7a 76 6e 71 4e 4a 37 32 6f 79 5f 54 6e 47 7a 42 53 4a 62 59 3b 6d 65 74 3d 31 3b 65 63 6e 31 3d 31 3b 65 74 6d 31 3d 30 3b 65 69 64 31 3d 39 36 30 35 38 34 3b 5d 5d 3e 3c 2f 54 72 61 63 6b 69 6e 67 3e 0a 20 20 20 20 20 20 20 3c 54 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 22 6d 69 64 70 6f 69 6e 74 22 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 64 65 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 64 64 6d 2f 61 63 74 69 76 69 74 79 2f 64 63 5f 6f 65 3d 43 68 4d 49 77 5f 79 33 34 6f 79 6f 69 51 4d 56 6d 44 73 47 41 42 32 51 69 52 42 6b 45 41 41 59 41 43 43 5f 38 59 4e 72 51 68 4d 49 39 4e 62 51 33 6f 79 6f 69 51 4d 56 70 6f 69 44 42 78 32 Data Ascii: _SMAxfr9yWHlaSV1jboZFwKcsCEFzvnqNJ72oy_TnGzBSJbY;met=1;ecn1=1;etm1=0;eid1=960584;...</Tracking> <Tracking event="midpoint"><![CDATA[https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIw_y34oyoiQMVmDsGAB2QiRBkEAAYACC_8YNrQhMI9NbQ3oyoiQMVpoiDBx2
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 64 35 64 4d 4b 61 49 69 46 68 38 49 42 65 4e 79 69 73 67 53 43 41 5a 6f 42 43 68 4d 49 39 4e 62 51 33 6f 79 6f 69 51 4d 56 70 6f 69 44 42 78 32 79 67 79 74 65 45 68 4d 49 77 4d 71 33 34 6f 79 6f 69 51 4d 56 53 45 54 32 43 42 32 76 53 51 67 66 49 68 6b 49 6a 39 54 50 6d 56 41 51 70 75 72 56 6f 41 4b 6f 41 73 4f 34 39 41 47 77 41 6f 65 69 6f 2d 55 44 4b 50 55 48 51 41 48 67 41 51 47 41 41 67 47 59 41 67 47 67 41 74 44 2d 68 70 75 42 45 36 67 43 42 73 41 43 65 63 67 43 69 4e 33 5a 4a 39 49 43 4a 68 67 41 49 68 4d 49 39 4e 62 51 33 6f 79 6f 69 51 4d 56 70 6f 69 44 42 78 32 79 67 79 74 65 4b 41 45 77 41 54 6a 51 5f 6f 61 62 67 52 4e 41 41 55 67 42 6d 67 4d 45 72 66 37 36 52 39 41 44 41 77 3b 64 63 5f 65 70 73 3d 41 48 61 73 38 63 43 59 30 77 4b 6d 5f 6e 37 56 Data Ascii: d5dMKaIiFh8IBeNyisgSCAZoBChMI9NbQ3oyoiQMVpoiDBx2ygyteEhMIwMq34oyoiQMVSET2CB2vSQgfIhkIj9TPmVAQpurVoAKoAsO49AGwAoeio-UDKPUHQAHgAQGAAgGYAgGgAtD-hpuBE6gCBsACecgCiN3ZJ9ICJhgAIhMI9NbQ3oyoiQMVpoiDBx2ygyteKAEwATjQ_oabgRNAAUgBmgMErf76R9ADAw;dc_eps=AHas8cCY0wKm_n7V
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 78 66 72 39 79 57 48 6c 61 53 56 31 6a 62 6f 5a 46 77 4b 63 73 43 45 46 7a 76 6e 71 4e 4a 37 32 6f 79 5f 54 6e 47 7a 42 53 4a 62 59 3b 6d 65 74 3d 31 3b 65 63 6e 31 3d 31 3b 65 74 6d 31 3d 30 3b 65 69 64 31 3d 31 34 39 36 34 35 3b 5d 5d 3e 3c 2f 54 72 61 63 6b 69 6e 67 3e 0a 20 20 20 20 20 20 20 3c 54 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 22 70 61 75 73 65 22 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 64 65 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 64 64 6d 2f 61 63 74 69 76 69 74 79 2f 64 63 5f 6f 65 3d 43 68 4d 49 77 5f 79 33 34 6f 79 6f 69 51 4d 56 6d 44 73 47 41 42 32 51 69 52 42 6b 45 41 41 59 41 43 43 5f 38 59 4e 72 51 68 4d 49 39 4e 62 51 33 6f 79 6f 69 51 4d 56 70 6f 69 44 42 78 32 79 67 79 74 65 53 41 Data Ascii: xfr9yWHlaSV1jboZFwKcsCEFzvnqNJ72oy_TnGzBSJbY;met=1;ecn1=1;etm1=0;eid1=149645;...</Tracking> <Tracking event="pause"><![CDATA[https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIw_y34oyoiQMVmDsGAB2QiRBkEAAYACC_8YNrQhMI9NbQ3oyoiQMVpoiDBx2ygyteSA
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 4b 6f 32 53 6e 44 54 31 33 65 5f 42 4e 35 2d 49 6a 4d 67 6d 4b 37 30 69 6b 46 5f 36 55 6b 6f 41 74 70 65 4c 32 57 58 58 7a 47 32 68 7a 6b 6d 2d 62 56 70 4f 61 6c 61 4f 45 52 30 39 48 2d 66 7a 65 78 4b 31 43 64 68 61 74 47 4d 59 35 4e 51 44 43 72 55 79 49 6b 4e 66 50 5f 36 59 58 54 68 7a 6e 41 2d 67 51 48 30 33 59 76 47 6a 38 78 37 4d 31 65 52 49 35 74 56 30 73 46 39 35 50 6f 54 41 41 5f 72 37 56 79 78 51 4d 30 68 47 6c 45 50 76 52 42 5f 6b 49 76 58 67 68 68 34 37 7a 65 75 79 6f 41 79 53 73 64 46 6d 66 79 65 33 68 44 31 50 79 70 5f 4c 72 44 43 43 33 38 32 54 6b 4f 50 6e 63 50 79 54 64 39 33 5f 5a 47 74 4c 2d 7a 33 39 65 63 48 48 74 6f 36 55 37 77 30 66 4c 35 62 79 58 58 39 7a 42 6f 37 75 75 41 4b 31 56 6f 78 33 69 51 67 31 76 50 78 45 59 49 70 4a 41 70 69 Data Ascii: Ko2SnDT13e_BN5-IjMgmK70ikF_6UkoAtpeL2WXXzG2hzkm-bVpOalaOER09H-fzexK1CdhatGMY5NQDCrUyIkNfP_6YXThznA-gQH03YvGj8x7M1eRI5tV0sF95PoTAA_r7VyxQM0hGlEPvRB_kIvXghh47zeuyoAySsdFmfye3hD1Pyp_LrDCC382TkOPncPyTd93_ZGtL-z39ecHHto6U7w0fL5byXX9zBo7uuAK1Vox3iQg1vPxEYIpJApi
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 6e 48 4c 70 5f 33 37 48 41 52 6d 32 57 4b 37 64 37 31 59 52 34 53 73 31 4c 64 63 35 50 46 62 6e 59 53 51 79 4a 63 6e 5f 30 71 74 75 50 6c 30 5f 39 63 74 62 68 59 38 4f 61 6f 6d 36 78 41 68 57 5f 49 30 7a 61 59 58 4a 63 53 51 63 70 4f 44 77 52 4d 5a 64 4e 44 33 32 41 51 65 6d 54 44 6d 70 46 45 63 72 52 72 61 47 78 53 64 52 54 5a 50 62 7a 78 6b 4b 61 51 69 4e 49 77 7a 59 38 41 67 78 44 79 69 55 61 57 58 4c 46 74 70 59 62 47 58 71 77 61 7a 44 35 70 6f 31 49 4a 34 56 72 72 67 35 68 6d 34 59 6f 56 43 66 46 4b 59 30 4a 72 37 49 4e 46 76 51 43 74 59 34 6e 68 35 63 47 50 4b 63 32 56 32 67 66 4e 71 73 73 43 6d 78 69 78 4d 26 73 61 69 3d 41 4d 66 6c 2d 59 51 6e 39 47 63 50 77 76 30 6c 38 76 65 68 53 56 30 62 62 55 30 31 59 62 58 57 66 6b 41 33 79 72 54 6a 6e 31 37 Data Ascii: nHLp_37HARm2WK7d71YR4Ss1Ldc5PFbnYSQyJcn_0qtuPl0_9ctbhY8Oaom6xAhW_I0zaYXJcSQcpODwRMZdND32AQemTDmpFEcrRraGxSdRTZPbzxkKaQiNIwzY8AgxDyiUaWXLFtpYbGXqwazD5po1IJ4Vrrg5hm4YoVCfFKY0Jr7INFvQCtY4nh5cGPKc2V2gfNqssCmxixM&sai=AMfl-YQn9GcPwv0l8vehSV0bbU01YbXWfkA3yrTjn17
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 6d 59 2f 65 4d 34 6f 75 33 76 4f 32 64 36 74 49 74 73 34 49 67 64 35 6a 37 53 32 57 45 4f 63 4f 45 37 56 41 36 67 34 5a 75 43 35 6b 7a 57 46 68 54 75 45 6a 70 53 35 6e 64 67 51 5a 7a 4d 4a 43 73 59 54 4b 72 54 74 73 68 61 50 33 31 70 48 31 54 6c 47 4c 4c 4d 59 42 4d 44 2f 31 43 52 72 48 78 7a 77 2b 4c 6d 35 57 6f 4b 37 33 49 61 46 77 56 73 56 48 4d 50 4a 49 56 31 35 66 36 43 47 38 56 73 46 78 4c 2f 62 58 66 75 4c 45 59 41 57 74 7a 68 65 77 43 47 4b 65 5a 57 32 43 38 6d 69 54 4e 42 66 55 78 73 33 2f 42 78 6a 48 70 2b 6c 31 65 7a 77 75 52 54 38 75 35 35 65 51 52 46 77 73 7a 32 63 41 32 65 58 2b 67 4e 30 36 70 43 6e 44 6a 2f 36 30 38 78 50 44 6f 43 49 7a 78 45 32 71 4d 47 4d 78 4c 43 50 63 41 48 7a 70 51 79 70 49 57 52 51 6a 66 41 44 6f 45 37 4a 31 47 45 45 Data Ascii: mY/eM4ou3vO2d6tIts4Igd5j7S2WEOcOE7VA6g4ZuC5kzWFhTuEjpS5ndgQZzMJCsYTKrTtshaP31pH1TlGLLMYBMD/1CRrHxzw+Lm5WoK73IaFwVsVHMPJIV15f6CG8VsFxL/bXfuLEYAWtzhewCGKeZW2C8miTNBfUxs3/BxjHp+l1ezwuRT8u55eQRFwsz2cA2eX+gN06pCnDj/608xPDoCIzxE2qMGMxLCPcAHzpQypIWRQjfADoE7J1GEE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49863	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	907	OUT	GET /f/AGSKWxVj0DK1sRvTR19UsqrnxFeucgRs-KNQ80sUAUHXbfgCqcyDYz6b__swfJJl3oSzk-geBPeTb-XIIxkqLE1KuvuDnVa4hXH3zBWXFLWTLzfxiISiD7Ix5g6yJay4897baFSBTUEyv-cR1BBn9_OBMhL7Lf2VDOCynhbatqjt-mmPQd1ad0Qhl5iCOfZ6/_/blog_ad?/AdForm_trackpoint_/ad728t./overlay_ad_/vghd2.gif HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:16 UTC	1930	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:16 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-_ZjYAE-k7w389wsXbd_Jhg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmII1pBiOO90h-k6EEt8fcmkBcRO6TNYQ4C49eY51ulAnPTvPGsJELtrXWT1B2JDhUuszkDsWHSJ1ROIVXsusZoD8f11l1ifA_Hej5dYjwJxkcQV1hYgvt10hfUxEDN8vcLKAcRC3Bwb5r7ewSZw4s1rRSWNpPzC-OT8vJKizKTSkvyitOS01OLUorLUongjAyMTQwMjIz0Dg_gCAwCltUkX" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:16 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 66 34 32 62 30 61 36 36 2d 64 30 39 38 2d 34 64 63 31 2d 39 34 63 30 2d 32 62 37 37 35 31 39 65 37 36 34 32 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['f42b0a66-d098-4dc1-94c0-2b77519e7642'] = true;
2024-10-24 22:48:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49868	64.233.167.157	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	5113	OUT	GET /dbm/vast?dbm_c=AKAmf-AfC0uDWPf4lJVl5yNcYt99LMNojNAyB28W9FQzTutldpMeqVRcg4KTF8x8AbAjLR0g9E-6qUgoCT92YCX7Vqta6FyoEQ&cry=1&dbm_d=AKAmf-BXnmIyXEaue3V3L75d7SIhkmkkkxjQyOsm1io_muQf68TpQzVdlB9T3MMzsgmEuqRbOscvCI-uUCvg3pjmrXB_Wez2RiTtFT7FpoMMPTE43AthCck28QrXoCqYANmjr9IwJzOhpoTeXUMYTjoNgrtomYx4UztXguptTaK6m9pgDOq4G7NZctZRy4EZjCuazJg0Saan0bcySrNX8LGoJ0AFDQX_3z8sPkXl61y2PQ-VCWDNPVdybu_6WfIavZKrJVHP7DdiUM8S1c1nXkhX8ewj50P_6ymfD57SQRe2FTuaG1Ixusc6PQCdTuSK0L0tC5zTW5W0_rI15NtVAZL_ifoAwoFcD578IqNlafztGZHSkTX9Esh7MjiaXZf8UtCs8p7RVAlVnrwXciVfbBLLpO49BmFqIBRweJjbf5oSCWru7ny70_GJfeZRtCpa51NyocipkjEeXzadbH4_Jcx4j4cU7ykB2BRieXhIKusQkC2Rx8Zomyto2gM9rboshd-PA3kb_G70Z8LnR48zGDyWWmsHMEd_AsfTGhh651icBgTDbIBGtrjkCcEUMvF4Uc-iZfLnS6oeAoGKoRauS1op3PRTsEM0xsgDu2TB0pb5q2dqxp1NNaUZKVC_sDRn-Vt29SfKjlsmSpk2WsKqUydnCHEWd9g8E4GEkBraMT5kZyEO2mD4bglJN6VzgWRX4WrHfIhCDfgt5ScvUakGzZV_EStE_9M_uFhMHLCDuoq0xOdyRAt296dwUseh1ztyyp8-VK4wRInQqN3ZeV3r1Ct_VDUH1DQ_Tet-eZpSI84kaYNWx8UQciyDxy8MM-7lABjGhEPq0dB_mYf-DjTaF_b_SB3iDraQJrCHK4PTRNSTnRFGQRVdKhsGGYYax [TRUNCATED] Host: bid.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA
2024-10-24 22:48:16 UTC	930	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 22:48:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw; expires=Tue, 22-Apr-2025 22:48:16 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:16 UTC	448	IN	Data Raw: 37 38 31 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 32 2e 30 22 3e 0a 20 3c 41 64 20 69 64 3d 22 35 39 32 36 36 30 37 37 39 22 3e 0a 20 20 3c 49 6e 4c 69 6e 65 3e 0a 20 20 20 3c 41 64 53 79 73 74 65 6d 3e 44 42 4d 3c 2f 41 64 53 79 73 74 65 6d 3e 0a 20 20 20 3c 41 64 54 69 74 6c 65 3e 49 6e 2d 53 74 72 65 61 6d 20 56 69 64 65 6f 3c 2f 41 64 54 69 74 Data Ascii: 7818<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0"> <Ad id="592660779"> <InLine> <AdSystem>DBM</AdSystem> <AdTitle>In-Stream Video</AdTit
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 53 45 54 55 52 49 5d 26 6f 72 64 3d 5b 43 41 43 48 45 42 55 53 54 49 4e 47 5d 26 6f 66 66 73 65 74 3d 5b 43 4f 4e 54 45 4e 54 50 4c 41 59 48 45 41 44 5d 26 64 3d 41 50 45 75 63 4e 58 6d 4d 64 56 64 67 4c 6c 54 32 6e 49 65 30 36 50 4b 47 6d 6d 39 56 4c 48 47 46 54 32 57 6a 6f 52 70 57 49 6c 33 6c 59 79 45 5a 44 75 62 6f 73 51 31 5f 76 72 46 4c 58 39 32 59 79 74 77 50 58 76 41 36 59 4d 54 65 54 6b 48 45 79 41 74 45 77 74 59 54 66 73 39 45 62 51 5a 5f 41 5d 5d 3e 3c 2f 45 72 72 6f 72 3e 0a 20 20 20 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 78 62 62 65 2f 70 69 78 65 6c 3f 64 3d 43 4c 7a 47 71 41 45 51 6c 4c 54 5f 70 41 4d 59 6d 4c Data Ascii: SETURI]&ord=[CACHEBUSTING]&offset=[CONTENTPLAYHEAD]&d=APEucNXmMdVdgLlT2nIe06PKGmm9VLHGFT2WjoRpWIl3lYyEZDubosQ1_vrFLX92YytwPXvA6YMTeTkHEyAtEwtYTfs9EbQZ_A...</Error> <Impression><![CDATA[https://googleads.g.doubleclick.net/xbbe/pixel?d=CLzGqAEQlLT_pAMYmL
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 47 38 64 6c 6a 32 68 4d 78 6b 58 33 77 72 31 33 4f 32 6f 72 4f 55 59 75 36 6e 4d 4f 32 6e 45 48 69 42 67 73 63 34 5a 67 49 41 79 30 77 4b 56 31 2d 33 7a 79 74 38 56 44 5f 46 4b 61 33 6b 50 65 72 53 68 6f 4c 77 56 73 55 74 79 4f 69 31 46 32 2d 37 68 46 5a 43 6d 7a 50 77 4d 57 4e 52 67 65 31 46 43 79 50 4f 7a 52 79 51 4b 59 53 77 6e 52 65 6f 5f 2d 30 69 57 62 61 32 79 6a 79 47 62 6d 67 49 49 37 4f 64 63 47 48 4b 5f 59 79 2d 38 58 56 4e 68 56 6f 51 4a 43 58 62 78 39 45 42 6d 32 39 54 73 52 66 50 30 53 4c 4d 45 5f 6d 4b 5f 2d 57 73 6c 43 5a 68 6a 43 31 47 4a 6f 77 43 56 71 6c 57 55 64 4e 4f 30 6e 46 67 65 6e 78 38 48 69 49 61 58 59 66 44 76 63 72 49 44 6b 32 65 45 54 47 59 59 73 75 54 43 45 36 6a 39 71 2d 68 59 58 6f 66 6f 78 30 50 55 4e 6f 4e 54 72 4c 4b 65 Data Ascii: G8dlj2hMxkX3wr13O2orOUYu6nMO2nEHiBgsc4ZgIAy0wKV1-3zyt8VD_FKa3kPerShoLwVsUtyOi1F2-7hFZCmzPwMWNRge1FCyPOzRyQKYSwnReo_-0iWba2yjyGbmgII7OdcGHK_Yy-8XVNhVoQJCXbx9EBm29TsRfP0SLME_mK_-WslCZhjC1GJowCVqlWUdNO0nFgenx8HiIaXYfDvcrIDk2eETGYYsuTCE6j9q-hYXofox0PUNoNTrLKe
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 67 5a 4e 45 41 41 59 41 43 43 4d 75 59 4e 70 4f 68 6f 49 6c 4c 54 5f 70 41 4d 51 79 61 4f 30 6b 2d 41 45 47 4f 62 73 73 2d 55 44 49 4e 4c 35 6a 71 44 36 45 6b 49 54 43 4e 50 6b 71 65 47 4d 71 49 6b 44 46 65 75 50 67 77 63 64 54 38 67 56 71 55 67 42 55 44 70 59 73 4f 6f 42 59 50 58 62 6b 41 31 6f 35 50 32 59 76 77 46 34 70 71 4b 4e 42 59 49 42 63 67 6f 54 43 4e 50 6b 71 65 47 4d 71 49 6b 44 46 65 75 50 67 77 63 64 54 38 67 56 71 52 49 54 43 49 4f 2d 75 4f 4b 4d 71 49 6b 44 46 57 74 44 39 67 67 64 68 5a 38 57 79 79 49 61 43 4c 2d 46 68 5a 46 51 45 4a 69 33 35 5a 67 43 71 41 4b 55 74 50 2d 6b 41 37 41 43 35 75 79 7a 35 51 4d 6f 7a 67 46 41 41 65 41 42 41 59 41 43 41 5a 67 43 41 61 41 43 30 76 6d 4f 6f 50 6f 53 71 41 49 47 77 41 4a 32 79 41 4b 49 33 64 6b 6e Data Ascii: gZNEAAYACCMuYNpOhoIlLT_pAMQyaO0k-AEGObss-UDINL5jqD6EkITCNPkqeGMqIkDFeuPgwcdT8gVqUgBUDpYsOoBYPXbkA1o5P2YvwF4pqKNBYIBcgoTCNPkqeGMqIkDFeuPgwcdT8gVqRITCIO-uOKMqIkDFWtD9ggdhZ8WyyIaCL-FhZFQEJi35ZgCqAKUtP-kA7AC5uyz5QMozgFAAeABAYACAZgCAaAC0vmOoPoSqAIGwAJ2yAKI3dkn
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 4b 55 74 50 2d 6b 41 37 41 43 35 75 79 7a 35 51 4d 6f 7a 67 46 41 41 65 41 42 41 59 41 43 41 5a 67 43 41 61 41 43 30 76 6d 4f 6f 50 6f 53 71 41 49 47 77 41 4a 32 79 41 4b 49 33 64 6b 6e 6d 67 4d 45 72 66 37 36 52 39 41 44 41 77 3b 64 63 5f 72 6d 63 69 64 3d 43 41 51 53 50 41 43 61 37 4c 37 64 57 43 6f 54 2d 77 78 71 58 34 32 46 39 78 6c 4d 36 67 4e 34 78 65 6e 78 42 67 49 79 62 45 47 75 68 72 6b 52 34 41 31 4e 59 43 47 56 68 50 70 54 76 52 56 66 41 57 67 5f 67 76 64 48 53 75 50 48 63 75 43 71 61 34 44 75 42 78 67 42 3b 65 70 73 3d 43 49 42 68 45 41 45 59 48 7a 49 43 69 67 49 36 43 34 42 41 67 4d 43 41 67 49 43 67 71 49 41 43 53 4c 33 39 77 54 70 59 38 38 69 70 34 59 79 6f 69 51 4d 3b 6d 65 74 3d 31 3b 65 63 6e 31 3d 31 3b 65 74 6d 31 3d 30 3b 65 69 64 31 Data Ascii: KUtP-kA7AC5uyz5QMozgFAAeABAYACAZgCAaAC0vmOoPoSqAIGwAJ2yAKI3dknmgMErf76R9ADAw;dc_rmcid=CAQSPACa7L7dWCoT-wxqX42F9xlM6gN4xenxBgIybEGuhrkR4A1NYCGVhPpTvRVfAWg_gvdHSuPHcuCqa4DuBxgB;eps=CIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpY88ip4YyoiQM;met=1;ecn1=1;etm1=0;eid1
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 49 36 43 34 42 41 67 4d 43 41 67 49 43 67 71 49 41 43 53 4c 33 39 77 54 70 59 38 38 69 70 34 59 79 6f 69 51 4d 3b 6d 65 74 3d 31 3b 65 63 6e 31 3d 31 3b 65 74 6d 31 3d 30 3b 65 69 64 31 3d 31 33 3b 5d 5d 3e 3c 2f 54 72 61 63 6b 69 6e 67 3e 0a 20 20 20 20 20 20 20 3c 54 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 22 6d 75 74 65 22 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 64 65 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 64 64 6d 2f 61 63 74 69 76 69 74 79 2f 64 63 5f 6f 65 3d 43 68 4d 49 38 4f 65 34 34 6f 79 6f 69 51 4d 56 75 6c 6e 32 43 42 30 67 4d 67 5a 4e 45 41 41 59 41 43 43 4d 75 59 4e 70 4f 68 6f 49 6c 4c 54 5f 70 41 4d 51 79 61 4f 30 6b 2d 41 45 47 4f 62 73 73 2d 55 44 49 4e 4c 35 6a 71 44 36 45 6b 49 54 43 4e Data Ascii: I6C4BAgMCAgICgqIACSL39wTpY88ip4YyoiQM;met=1;ecn1=1;etm1=0;eid1=13;...</Tracking> <Tracking event="mute"><![CDATA[https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI8Oe44oyoiQMVuln2CB0gMgZNEAAYACCMuYNpOhoIlLT_pAMQyaO0k-AEGObss-UDINL5jqD6EkITCN
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 41 59 41 43 43 4d 75 59 4e 70 4f 68 6f 49 6c 4c 54 5f 70 41 4d 51 79 61 4f 30 6b 2d 41 45 47 4f 62 73 73 2d 55 44 49 4e 4c 35 6a 71 44 36 45 6b 49 54 43 4e 50 6b 71 65 47 4d 71 49 6b 44 46 65 75 50 67 77 63 64 54 38 67 56 71 55 67 42 55 44 70 59 73 4f 6f 42 59 50 58 62 6b 41 31 6f 35 50 32 59 76 77 46 34 70 71 4b 4e 42 59 49 42 63 67 6f 54 43 4e 50 6b 71 65 47 4d 71 49 6b 44 46 65 75 50 67 77 63 64 54 38 67 56 71 52 49 54 43 49 4f 2d 75 4f 4b 4d 71 49 6b 44 46 57 74 44 39 67 67 64 68 5a 38 57 79 79 49 61 43 4c 2d 46 68 5a 46 51 45 4a 69 33 35 5a 67 43 71 41 4b 55 74 50 2d 6b 41 37 41 43 35 75 79 7a 35 51 4d 6f 7a 67 46 41 41 65 41 42 41 59 41 43 41 5a 67 43 41 61 41 43 30 76 6d 4f 6f 50 6f 53 71 41 49 47 77 41 4a 32 79 41 4b 49 33 64 6b 6e 6d 67 4d 45 72 Data Ascii: AYACCMuYNpOhoIlLT_pAMQyaO0k-AEGObss-UDINL5jqD6EkITCNPkqeGMqIkDFeuPgwcdT8gVqUgBUDpYsOoBYPXbkA1o5P2YvwF4pqKNBYIBcgoTCNPkqeGMqIkDFeuPgwcdT8gVqRITCIO-uOKMqIkDFWtD9ggdhZ8WyyIaCL-FhZFQEJi35ZgCqAKUtP-kA7AC5uyz5QMozgFAAeABAYACAZgCAaAC0vmOoPoSqAIGwAJ2yAKI3dknmgMEr
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 4c 50 76 78 2d 4f 5f 55 2d 37 4c 72 71 56 6d 52 70 55 2d 38 4e 4c 53 38 78 70 37 35 71 79 68 4f 6c 44 35 6b 38 4b 55 6e 50 36 4d 52 56 6a 43 35 6f 75 66 53 63 2d 74 4e 31 51 47 42 5f 5f 4d 66 59 4c 5f 59 55 47 30 74 73 68 63 4e 53 4d 71 37 33 37 48 58 4b 77 71 38 32 73 6a 44 62 55 4f 77 73 6c 46 67 2d 4c 62 6f 33 4b 64 66 33 52 79 69 42 66 50 4c 4a 55 76 48 6f 5f 33 68 4e 48 46 6a 30 48 4e 65 37 34 6f 71 70 6f 4a 4c 4a 52 6f 51 62 50 37 36 75 35 49 4e 74 51 43 46 48 38 52 6f 2d 71 69 50 6a 73 42 5f 5a 55 42 79 6c 74 5a 52 65 67 53 4c 73 4a 44 76 31 63 75 5a 37 4f 70 51 38 5a 4e 32 64 43 6f 44 77 6c 4c 4e 4a 6c 50 4f 78 46 51 49 47 72 39 75 66 62 61 72 30 49 69 7a 69 54 52 30 75 50 74 64 44 73 6d 4c 6a 42 6e 41 50 6d 65 65 47 47 42 61 48 6a 4b 54 64 7a 65 Data Ascii: LPvx-O_U-7LrqVmRpU-8NLS8xp75qyhOlD5k8KUnP6MRVjC5oufSc-tN1QGB__MfYL_YUG0tshcNSMq737HXKwq82sjDbUOwslFg-Lbo3Kdf3RyiBfPLJUvHo_3hNHFj0HNe74oqpoJLJRoQbP76u5INtQCFH8Ro-qiPjsB_ZUByltZRegSLsJDv1cuZ7OpQ8ZN2dCoDwlLNJlPOxFQIGr9ufbar0IiziTR0uPtdDsmLjBnAPmeeGGBaHjKTdze
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 53 75 6e 5a 54 32 61 31 36 5f 33 6a 45 58 50 4d 56 48 7a 30 36 63 63 70 6f 7a 68 54 6c 54 6d 32 77 71 68 4f 48 61 38 35 43 72 34 7a 42 62 59 6f 73 58 47 6e 48 37 45 56 2d 6f 42 47 79 38 6a 6f 32 34 72 77 69 78 48 32 32 4f 51 5a 79 7a 73 63 70 55 41 26 73 61 69 3d 41 4d 66 6c 2d 59 53 37 79 30 6c 33 31 71 50 5a 61 34 41 78 6f 53 6a 47 72 39 71 6b 34 50 50 57 57 37 39 6f 4e 4c 51 36 44 58 73 51 44 35 30 30 76 77 36 49 6b 39 45 66 54 47 54 43 55 7a 51 62 65 36 70 37 30 70 53 4e 35 72 58 43 74 32 39 68 73 31 2d 71 43 34 4b 68 33 67 69 57 6f 46 54 32 4c 50 5a 48 6f 33 56 6d 6a 4c 52 34 31 53 61 73 45 6d 6d 5f 4f 5a 51 5a 54 35 66 54 69 4e 32 72 5f 5f 7a 67 39 65 61 75 54 74 55 59 68 4b 57 75 74 51 71 35 30 70 64 63 79 54 68 58 51 4b 43 49 4d 69 36 59 6b 77 50 Data Ascii: SunZT2a16_3jEXPMVHz06ccpozhTlTm2wqhOHa85Cr4zBbYosXGnH7EV-oBGy8jo24rwixH22OQZyzscpUA&sai=AMfl-YS7y0l31qPZa4AxoSjGr9qk4PPWW79oNLQ6DXsQD500vw6Ik9EfTGTCUzQbe6p70pSN5rXCt29hs1-qC4Kh3giWoFT2LPZHo3VmjLR41SasEmm_OZQZT5fTiN2r__zg9eauTtUYhKWutQq50pdcyThXQKCIMi6YkwP
2024-10-24 22:48:16 UTC	1378	IN	Data Raw: 61 36 38 2f 69 74 61 67 2f 31 38 2f 73 6f 75 72 63 65 2f 77 65 62 5f 76 69 64 65 6f 5f 61 64 73 2f 78 70 63 2f 45 67 56 6f 76 66 33 42 4f 67 25 33 44 25 33 44 2f 63 74 69 65 72 2f 4c 2f 61 63 61 6f 2f 79 65 73 2f 69 70 2f 30 2e 30 2e 30 2e 30 2f 69 70 62 69 74 73 2f 30 2f 65 78 70 69 72 65 2f 31 37 36 31 33 34 36 30 39 36 2f 73 70 61 72 61 6d 73 2f 69 70 2c 69 70 62 69 74 73 2c 65 78 70 69 72 65 2c 69 64 2c 69 74 61 67 2c 73 6f 75 72 63 65 2c 78 70 63 2c 63 74 69 65 72 2c 61 63 61 6f 2f 73 69 67 6e 61 74 75 72 65 2f 41 46 30 31 32 46 31 43 35 45 41 45 36 38 46 35 46 46 36 46 35 35 44 31 42 34 39 42 32 32 42 46 37 41 44 39 45 45 31 30 2e 31 36 44 32 39 34 33 45 46 37 41 38 44 43 35 31 33 38 38 36 41 38 31 34 38 42 35 32 31 34 46 46 38 38 35 35 43 46 43 39 Data Ascii: a68/itag/18/source/web_video_ads/xpc/EgVovf3BOg%3D%3D/ctier/L/acao/yes/ip/0.0.0.0/ipbits/0/expire/1761346096/sparams/ip,ipbits,expire,id,itag,source,xpc,ctier,acao/signature/AF012F1C5EAE68F5FF6F55D1B49B22BF7AD9EE10.16D2943EF7A8DC513886A8148B5214FF8855CFC9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49862	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	901	OUT	POST /el/AGSKWxWy3x9V2OEFveoc38wOdQ6ULu8hI3qhgInDkicneHIK0Uqoa7DBaoFEhUO-c7A8Vmt0gUAzYBinwTOdbDGJS1pP0wbDgK06jDXjZqCXQjzl3bgZoEKS5O9RtmaUVnQiPTztnZ5nsw== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.xn--invitacionesdecumpleaos-dic.org X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:15 UTC	155	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 39 38 31 30 30 39 33 37 39 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d Data Ascii: [null,null,null,null,null,null,null,null,1729810093799,null,null,[[1,1]],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0]
2024-10-24 22:48:16 UTC	1898	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.xn--invitacionesdecumpleaos-dic.org Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:16 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-nSQHsofD8bzfBlF33yKQ5g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmII1pBicEqfwRoCxO5aF1n9gXjvx0usR4GY4esVVg4gFuLm2DD39Q42gQ0r5mgouSTlF8Yn5-eVpOaV6CamFOuC2EWZSaUl-UUo7NQykIqc_PT0zLz0eCMDIxNDAyNjPQOz-AIDABwxLWE" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:16 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ea438a18-a01e-0053-68ef-258603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224816Z-r197bdfb6b466qclztvgs64z10000000010g00000000qqwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:16 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 96e16e7c-301e-000c-53ef-25323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224816Z-r197bdfb6b4t7wszkhsu1pyev000000000p000000000ak20 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224816Z-r197bdfb6b4kkrkjudg185sarw00000002k0000000003pbe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:48:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:15 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 43148558-a01e-0098-6adf-258556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224816Z-15b8d89586f8nxpt6ys645x5v000000000tg00000000f1d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:16 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fbaa75ab-301e-0020-3742-266299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224816Z-17c5cb586f6qt228zy1nuwhy2g00000001p000000000959g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49879	216.58.206.65	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:16 UTC	646	OUT	GET /generate_204?Oj1G2w HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:16 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 22:48:16 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49895	34.96.105.8	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	778	OUT	GET /v1/api/sync/AdxPixel?google_gid=CAESEH0TxfleCdecceb5s-O5Jhw&google_cver=1&google_push=AXcoOmRepKFeoqcIsWkdOuUMfywMjPqeVl7pGHqeUpbaw3GbcIUPSYQqh4qZhpfVp6kkoFAosBYzKnoNBxNGurlRbZMY6v3fpaVe1bc HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:17 UTC	277	IN	HTTP/1.1 204 No Content Set-Cookie: b=671ACEB1DCE19A2DFB93DA62BLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Date: Thu, 24 Oct 2024 22:48:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49894	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	901	OUT	POST /el/AGSKWxWy3x9V2OEFveoc38wOdQ6ULu8hI3qhgInDkicneHIK0Uqoa7DBaoFEhUO-c7A8Vmt0gUAzYBinwTOdbDGJS1pP0wbDgK06jDXjZqCXQjzl3bgZoEKS5O9RtmaUVnQiPTztnZ5nsw== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.xn--invitacionesdecumpleaos-dic.org X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:17 UTC	155	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 39 38 31 30 30 39 35 32 36 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 33 2c 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d Data Ascii: [null,null,null,null,null,null,null,null,1729810095269,null,null,[[3,1]],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0]
2024-10-24 22:48:17 UTC	1899	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.xn--invitacionesdecumpleaos-dic.org Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:17 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-VloNhfsC9JIyYVTdU6fbMQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmII0JBicEqfwRoCxO5aF1n9gXjvx0usR4GY4esVVg4gFuLh2Dj39Q42gQ0rfq9nVHJJyi-MT87PK0nNK9FNTCnWBbGLMpNKS_KLUNipZSAVOfnp6Zl56fFGBkYmhgZGxnoGZvEFBgBxCi5H" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 488bf4d4-001e-00a2-2656-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224817Z-17c5cb586f68889gd1vu6gsd9400000001r00000000099fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:17 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224817Z-16849878b784cpcc2dr9ch74ng00000008h0000000001znr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:17 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:17 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 06960f57-101e-000b-0c20-265e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224817Z-r197bdfb6b4tq6ldv3s2dcykm8000000028g000000009bs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:17 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d2baa5f3-801e-0078-3ff3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224817Z-r197bdfb6b4ld6jc5asqwvvz0w00000002e0000000006e9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49896	185.184.8.90	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	796	OUT	GET /cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:17 UTC	931	IN	HTTP/1.1 302 Found date: Thu, 24 Oct 2024 22:48:17 GMT vary: Accept-Encoding set-cookie: g=rDZxZPsmhcfpRBrokqox_1729810097453;Path=/;Domain=.creativecdn.com;Expires=Fri, 24-Oct-2025 22:48:17 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1729810097;Path=/;Domain=.creativecdn.com;Expires=Fri, 24-Oct-2025 22:48:17 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 24 Oct 2024 22:48:17 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49898	51.89.9.252	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	780	OUT	GET /match/?int_id=19&redir=1&google_gid=CAESEEjgybLKWpvTmOG3YwvTb1E&google_cver=1&google_push=AXcoOmQhelBJ1wSH0Emqb3WkFuG43WvNf_vcumYqWmVERJGxoaWuO0fjnuO8-WXIMbvVCgf3w1e903sl5dxzWdm72uQ3Ek0Y12jtKpc HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:17 UTC	483	IN	HTTP/1.1 302 Found p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache location: https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmQhelBJ1wSH0Emqb3WkFuG43WvNf_vcumYqWmVERJGxoaWuO0fjnuO8-WXIMbvVCgf3w1e903sl5dxzWdm72uQ3Ek0Y12jtKpc content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49899	208.93.169.131	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	784	OUT	GET /bh/rtset?pid=559960&gp=1&google_gid=CAESECJtRE2ItFqaWG-x9yvagB0&google_cver=1&google_push=AXcoOmS4tHHGCtIOgdS7IzRliJTgSqBb63NKj_93oDpNUY8vgaXYWL3yTtZoE8sF7BzRsh8n7sV2Hy3D1w0D5akleQLR7iSfI0GbIXuw HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:17 UTC	1466	IN	HTTP/1.1 302 Found p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version cw-server: bh-deployment-fc986c88d-7cglp cache-control: private, max-age=0, no-cache, no-store expires: -1 content-language: en-US set-cookie: V=REzVlieR0kKH;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 19-Oct-2025 22:48:17 GMT;Max-Age=31104000;SameSite=None set-cookie: VP=part_REzVlieR0kKH;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 19-Oct-2025 22:48:17 GMT;SameSite=None;Partitioned set-cookie: pb_rtb_ev=3-1udt\|7Bj.0.CAESECJtRE2ItFqaWG-x9yvagB0;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 24-Oct-2025 22:48:17 GMT;Max-Age=31536000;SameSite=None set-cookie: pb_rtb_ev_part=3-1udt\|7Bj.0.CAESECJtRE2ItFqaWG-x9yvagB0;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 24-Oct-2025 22:48:17 GMT;SameSite=None;Partitioned location: https://cm.g.doubleclick.net/pixel?google_nid=pulsepoint_inc_&google_push=AXcoOmS4tHHGCtIOgdS7IzRliJTgSqBb63NKj_93oDpNUY8vgaXYWL3yTtZoE8sF7BzRsh8n7sV2Hy3D1w0D5akleQLR7iSfI0GbIXuw&google_hm=UkV6VmxpZVIwa0tI transfer-encoding: chunked server: Jetty(10.0.14) set-cookie: INGRESSCOOKIE=ecc0af40bef04e79; path=/; HttpOnly; Secure; SameSite=None connection: close
2024-10-24 22:48:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49902	216.58.212.130	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	938	OUT	GET /pixel/attr?d=AHNF13I8PbalMp9BRXe9tqjULLelPKubrTLrxE3WNYBgXWMo6jRbzuEWY4J2y6DsBBF7f16-aVv3qYhm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
2024-10-24 22:48:17 UTC	236	IN	HTTP/1.1 204 No Content Date: Thu, 24 Oct 2024 22:48:17 GMT Content-Type: text/html Server: HTTP server (unknown) Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49908	172.217.18.14	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	874	OUT	HEAD /videoplayback/id/346941773297da68/itag/347/source/web_video_ads/xpc/EgVovf3BOg%3D%3D/ctier/L/acao/yes/ip/0.0.0.0/ipbits/0/expire/1761346096/sparams/ip,ipbits,expire,id,itag,source,xpc,ctier,acao/signature/844383AA9C91DDFC6736290E78917B3907D49242.86D86C8758B67B971045D05F8E7066C0B547BD16/key/ck2/file/file.mp4 HTTP/1.1 Host: gcdn.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:17 UTC	1452	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 22:48:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Location: https://r3---sn-q4flrne7.c.2mdn.net/videoplayback/id/346941773297da68/itag/347/source/web_video_ads/xpc/EgVovf3BOg%3D%3D/ctier/L/acao/yes/ip/0.0.0.0/ipbits/0/expire/1761346096/sparams/acao,ctier,expire,id,ip,ipbits,itag,met,mh,mip,mm,mn,ms,mv,mvi,pl,rms,source,xpc/signature/48C3F8B294E93BCE46020542EC1F00E0F157B6BA.698B24BA89FEC14079D6A3F27867742E34277915/key/cms1/cms_redirect/yes/met/1729810097,/mh/R-/mip/173.254.250.71/mm/42/mn/sn-q4flrne7/ms/onc/mt/1729809583/mv/u/mvi/3/pl/23/rms/onc,onc/file/file.mp4 Content-Type: text/html; charset=UTF-8 Server: ClientMapServer Content-Length: 705 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49903	23.109.14.96	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	772	OUT	GET /match/google?google_gid=CAESEEtXcYn5XTz2aUPkx96L_5s&google_cver=1&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q HTTP/1.1 Host: sync.gonet-ads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:17 UTC	556	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 24 Oct 2024 22:48:17 GMT Content-Length: 0 Connection: close Location: https://sync.gonet-ads.com/match/google?google_gid=CAESEEtXcYn5XTz2aUPkx96L_5s&google_cver=1&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q&chk=1 Set-Cookie: chk=1; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49910	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	901	OUT	POST /el/AGSKWxWy3x9V2OEFveoc38wOdQ6ULu8hI3qhgInDkicneHIK0Uqoa7DBaoFEhUO-c7A8Vmt0gUAzYBinwTOdbDGJS1pP0wbDgK06jDXjZqCXQjzl3bgZoEKS5O9RtmaUVnQiPTztnZ5nsw== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.xn--invitacionesdecumpleaos-dic.org X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:17 UTC	158	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 39 38 31 30 30 39 35 37 37 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5b 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d Data Ascii: [null,null,null,null,null,null,null,null,1729810095779,null,null,[null,[1]],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0]
2024-10-24 22:48:17 UTC	1899	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.xn--invitacionesdecumpleaos-dic.org Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:17 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-WbAiMMl_J6nmVQawKCrlRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmII0JBicEqfwRoCxO5aF1n9gXjvx0usR4GY4esVVg4gFuLh2Dj39Q42gQ-L5s1gVnJJyi-MT87PK0nNK9FNTCnWBbGLMpNKS_KLUNipZSAVOfnp6Zl56fFGBkYmhgZGxnoGZvEFBgBhny4P" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49911	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:17 UTC	901	OUT	POST /el/AGSKWxWy3x9V2OEFveoc38wOdQ6ULu8hI3qhgInDkicneHIK0Uqoa7DBaoFEhUO-c7A8Vmt0gUAzYBinwTOdbDGJS1pP0wbDgK06jDXjZqCXQjzl3bgZoEKS5O9RtmaUVnQiPTztnZ5nsw== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.xn--invitacionesdecumpleaos-dic.org X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:17 UTC	155	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 39 38 31 30 30 39 35 37 39 37 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 32 2c 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d Data Ascii: [null,null,null,null,null,null,null,null,1729810095797,null,null,[[2,1]],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0]
2024-10-24 22:48:17 UTC	1899	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.xn--invitacionesdecumpleaos-dic.org Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:17 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-ns9cnZcssH1yWJN1tur43A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmLw0JBicEqfwRoCxO5aF1n9gXjvx0usR4GY4esVVg4gFuLh2Dj39Q42gR_nNs5nVnJJyi-MT87PK0nNK9FNTCnWBbGLMpNKS_KLUNipZSAVOfnp6Zl56fFGBkYmhgZGxnoGZvEFBgB0Ui5V" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:18 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224818Z-16849878b78bkvbz1ry47zvsas000000089000000000s0yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:18 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49912	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	1141	OUT	GET /f/AGSKWxWUioDyXwcVGf1wg8irhXOy6T0P2_ntxw6Cjkh5tBOOTi33DNT0Xyor2GXtFskIKdvQmHNAexvlC_nnKyvs-Bj6f_k8bMIMnRA8Rdo-oLzyf63ht042M3jTIHW46W70wkHhwrPUAg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDk1LDgwOTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3LnhuLS1pbnZpdGFjaW9uZXNkZWN1bXBsZWFvcy1kaWMub3JnLyIsbnVsbCxbWzgsIlo3ZnhWeldjSEs0Il0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:18 UTC	1954	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:18 GMT Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-QxdRpGoiiELJYP_L-xkXdg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmII0pBiOO90h-k6EEt8fcmkBcRO6TNYQ4C49eY51ulAnPTvPGsJELtrXWT1B2JDhUuszkDsWHSJ1ROIVXsusZoD8f11l1ifA_Hej5dYjwJxkcQV1hYgvt10hfUxEDN8vcLKAcRC3Byb5r7ewSZw4-nWEiWNpPzC-OT8vJKizKTSkvyitOS01OLUorLUongjAyMTQwMjIz0Dg_gCAwCrwEk-" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:18 UTC	1954	IN	Data Raw: 64 39 66 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 78 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 72 6e 28 63 29 2c 66 2c 67 2c 68 3d Data Ascii: d9fif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var xn=function(a,b,c,d){var e=rn(c),f,g,h=
2024-10-24 22:48:18 UTC	1540	IN	Data Raw: 28 63 2c 5f 2e 24 66 2c 32 29 26 26 28 63 3d 5f 2e 47 28 63 2c 5f 2e 24 66 2c 32 29 2c 5f 2e 4f 28 64 2c 33 2c 63 29 29 3b 5f 2e 4f 28 62 2c 32 2c 64 29 3b 61 2e 52 28 32 2c 5f 2e 4b 28 62 29 29 7d 7d 7d 3b 76 61 72 20 45 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 45 6e 2c 5f 2e 4a 29 3b 76 61 72 20 46 6e 3d 5b 32 2c 33 5d 3b 76 61 72 20 44 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 44 6e 2c 5f 2e 4a 29 3b 76 61 72 20 47 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 47 6e 2c 5f 2e 4a 29 3b 76 61 72 20 48 6e 3d 5f 2e 76 28 47 6e 29 3b 76 61 72 20 49 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b Data Ascii: (c,_.$f,2)&&(c=_.G(c,_.$f,2),_.O(d,3,c));_.O(b,2,d);a.R(2,_.K(b))}}};var En=function(a){this.l=_.u(a)};_.y(En,_.J);var Fn=[2,3];var Dn=function(a){this.l=_.u(a)};_.y(Dn,_.J);var Gn=function(a){this.l=_.u(a)};_.y(Gn,_.J);var Hn=_.v(Gn);var In=function(){};
2024-10-24 22:48:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:18 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224818Z-16849878b78s2lqfdex4tmpp7800000008c000000000dhvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:18 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2897d81f-501e-005b-6528-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224818Z-r197bdfb6b4gx6v9pg74w9f47s00000001cg00000000ga8v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:18 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224818Z-16849878b78p8hrf1se7fucxk800000000cg000000007efk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:48:18 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49914	172.217.16.194	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	1810	OUT	GET /pagead/sodar?id=sodar2&v=232&t=2&li=gda_r20241022&jk=3613037213600863&bg=!LS6lLmHNAAbl67hexes7ADQBe5WfOMdfiGhO8QHrqQv9UCg34hgu9phBdt65j56Q8VFYbzH82B4Kv0RkPOpN4_7J7Yc0AgAAAVVSAAAACWgBB34ANhRUjccoubEfL36JNVCoidz1zoS4bM1RBFc5-FdpMhF3bSdbyJ3Ncqm2agtIa1qGC8yJ-0fMv5kCvtVxMI_NJmiuE1b1XE8qpWIJsBeDW8vCcr77jZ1poGPDa-pyJLNh8V1Niog3rCgq0G-DZfj4xGcrQjrUtq7kWTRahg1tOz9v-O0dolewmGDdLXufq3XceVWbKMqtZjW-88QhXGeNm2hpW3mjd_gGkgZF4KadYsSJuYDwhDvETcbhmaAKVhlhd2UxJ37R28_USq1Mh_hBI_XKbUJMNoYJl3U5kjHkcRy11d6cOWfKWLovujjAB2R6hVczW9NNGyvYfDXTcAq-9eEDtK_yn6BwLx746QO8k9RyBu9WA92Z3zasZJiaypnr2Z0RKoWsJox2-3-Q6U0GwMMYtqUOvQZdDnGCt7yIY7jakw69nBv9ZGT2PJVv_NVRXZMZgCzBThNj4-2aK2CatP7ukZwbXiq3CNRxSibegwg0e965kr9tDwcnw54xxM5BE8AbPgr6ttxpiOUOYXkPFDkGPVAoM_KMp2TVU5T4tmIReg7zmZaF1ZO3wCwC6Rgr5OeRa-n9cuY_9ONYsTP0cTrwFWu72c-JAvtHVJ2ub_Z8LKDhBH8V6FQyVl-b4GTVyqFQUHRxsnLDGxydPi1UEiXPMyJVar5KJflN_eGk5jhA3w0ovXKMeEdT0hOpjyOC8ELCt7b4hsJptkIP-iTCz5cQKfOcsmLOKIUw58S5KS88yvzCjvsoJwsBfMNUG2k7KzK6jM_62M3fW1d-npO_5G2_kGj07mlOVgBhIHFWusRartElkmJkh4yM6kv7ZChpa [TRUNCATED] Host: ep1.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:18 UTC	451	IN	HTTP/1.1 204 No Content P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 22:48:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 42f5c72c-c01e-00a1-6643-267e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224818Z-16849878b78smng4k6nq15r6s4000000015g00000000fd6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49927	185.184.8.90	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	862	OUT	GET /cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=rDZxZPsmhcfpRBrokqox_1729810097453; ts=1729810097
2024-10-24 22:48:18 UTC	625	IN	HTTP/1.1 302 Found date: Thu, 24 Oct 2024 22:48:18 GMT vary: Accept-Encoding location: https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=n08H3X-PwKP0NrNRb-fL27VqjJYJVoKi36K2UOcJI7g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 24 Oct 2024 22:48:18 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49929	216.58.212.130	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	924	OUT	GET /pixel?google_nid=pulsepoint_inc_&google_push=AXcoOmS4tHHGCtIOgdS7IzRliJTgSqBb63NKj_93oDpNUY8vgaXYWL3yTtZoE8sF7BzRsh8n7sV2Hy3D1w0D5akleQLR7iSfI0GbIXuw&google_hm=UkV6VmxpZVIwa0tI HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
2024-10-24 22:48:18 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 24 Oct 2024 22:48:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:18 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49925	74.125.133.156	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	4886	OUT	GET /dbm/vast?dbm_c=AKAmf-AfC0uDWPf4lJVl5yNcYt99LMNojNAyB28W9FQzTutldpMeqVRcg4KTF8x8AbAjLR0g9E-6qUgoCT92YCX7Vqta6FyoEQ&cry=1&dbm_d=AKAmf-BXnmIyXEaue3V3L75d7SIhkmkkkxjQyOsm1io_muQf68TpQzVdlB9T3MMzsgmEuqRbOscvCI-uUCvg3pjmrXB_Wez2RiTtFT7FpoMMPTE43AthCck28QrXoCqYANmjr9IwJzOhpoTeXUMYTjoNgrtomYx4UztXguptTaK6m9pgDOq4G7NZctZRy4EZjCuazJg0Saan0bcySrNX8LGoJ0AFDQX_3z8sPkXl61y2PQ-VCWDNPVdybu_6WfIavZKrJVHP7DdiUM8S1c1nXkhX8ewj50P_6ymfD57SQRe2FTuaG1Ixusc6PQCdTuSK0L0tC5zTW5W0_rI15NtVAZL_ifoAwoFcD578IqNlafztGZHSkTX9Esh7MjiaXZf8UtCs8p7RVAlVnrwXciVfbBLLpO49BmFqIBRweJjbf5oSCWru7ny70_GJfeZRtCpa51NyocipkjEeXzadbH4_Jcx4j4cU7ykB2BRieXhIKusQkC2Rx8Zomyto2gM9rboshd-PA3kb_G70Z8LnR48zGDyWWmsHMEd_AsfTGhh651icBgTDbIBGtrjkCcEUMvF4Uc-iZfLnS6oeAoGKoRauS1op3PRTsEM0xsgDu2TB0pb5q2dqxp1NNaUZKVC_sDRn-Vt29SfKjlsmSpk2WsKqUydnCHEWd9g8E4GEkBraMT5kZyEO2mD4bglJN6VzgWRX4WrHfIhCDfgt5ScvUakGzZV_EStE_9M_uFhMHLCDuoq0xOdyRAt296dwUseh1ztyyp8-VK4wRInQqN3ZeV3r1Ct_VDUH1DQ_Tet-eZpSI84kaYNWx8UQciyDxy8MM-7lABjGhEPq0dB_mYf-DjTaF_b_SB3iDraQJrCHK4PTRNSTnRFGQRVdKhsGGYYax [TRUNCATED] Host: bid.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA
2024-10-24 22:48:18 UTC	824	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 22:48:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi7QScyv0CREpXg7in6XIL95FXZt26C2_ruughucqsXkKurK9Q; expires=Tue, 22-Apr-2025 22:48:18 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:18 UTC	554	IN	Data Raw: 37 38 61 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 32 2e 30 22 3e 0a 20 3c 41 64 20 69 64 3d 22 35 39 32 36 36 30 37 37 39 22 3e 0a 20 20 3c 49 6e 4c 69 6e 65 3e 0a 20 20 20 3c 41 64 53 79 73 74 65 6d 3e 44 42 4d 3c 2f 41 64 53 79 73 74 65 6d 3e 0a 20 20 20 3c 41 64 54 69 74 6c 65 3e 49 6e 2d 53 74 72 65 61 6d 20 56 69 64 65 6f 3c 2f 41 64 54 69 74 Data Ascii: 78af<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0"> <Ad id="592660779"> <InLine> <AdSystem>DBM</AdSystem> <AdTitle>In-Stream Video</AdTit
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 33 7a 38 68 69 54 78 6b 6f 51 30 51 34 54 7a 57 6b 50 34 63 47 2d 75 46 55 43 54 69 54 68 30 4d 49 44 62 6a 6c 6d 46 51 6b 4f 62 4e 4f 51 5d 5d 3e 3c 2f 45 72 72 6f 72 3e 0a 20 20 20 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 78 62 62 65 2f 70 69 78 65 6c 3f 64 3d 43 4c 7a 47 71 41 45 51 6c 4c 54 5f 70 41 4d 59 6d 4c 66 6c 6d 41 49 67 41 54 41 42 26 76 3d 41 50 45 75 63 4e 58 33 47 64 79 79 5f 30 34 62 49 73 34 36 34 46 33 6b 76 75 6a 51 31 6d 62 31 48 4c 73 69 35 68 47 33 48 6b 46 55 72 36 45 54 37 2d 36 6a 71 5a 67 69 43 6b 30 52 65 49 6b 49 76 44 6f 69 4e 78 30 55 4e 71 75 74 44 70 69 72 43 61 67 66 54 37 33 54 33 4f 48 52 6f Data Ascii: 3z8hiTxkoQ0Q4TzWkP4cG-uFUCTiTh0MIDbjlmFQkObNOQ...</Error> <Impression><![CDATA[https://googleads.g.doubleclick.net/xbbe/pixel?d=CLzGqAEQlLT_pAMYmLflmAIgATAB&v=APEucNX3Gdyy_04bIs464F3kvujQ1mb1HLsi5hG3HkFUr6ET7-6jqZgiCk0ReIkIvDoiNx0UNqutDpirCagfT73T3OHRo
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 38 51 79 4a 38 45 55 74 36 38 6d 71 53 63 31 55 30 41 74 78 70 53 61 74 37 78 59 54 72 78 2d 51 57 39 4c 77 68 53 77 73 30 30 63 58 72 68 30 4a 6d 51 67 52 36 56 50 69 30 75 4e 68 72 41 34 76 68 65 4d 4b 75 56 4e 73 51 6e 4c 6f 5f 48 35 61 64 67 45 5f 56 51 53 4c 63 51 70 57 35 41 6b 7a 76 51 52 37 77 73 61 73 35 6d 77 6c 4f 44 4c 45 4f 75 59 54 42 4c 30 72 55 4a 43 62 6f 63 6d 50 39 64 70 6a 63 39 32 5f 50 53 6a 4e 79 49 6d 42 30 30 30 63 75 4b 6c 67 39 70 51 35 65 6f 66 6d 32 49 48 37 4d 54 73 73 37 69 33 4c 35 4c 78 55 66 2d 33 37 77 42 73 50 63 74 55 68 46 34 65 46 4a 4f 6e 4e 66 4b 49 75 5f 6c 68 62 6a 68 59 5f 4d 7a 44 43 74 67 52 35 51 55 39 6e 72 32 49 4e 35 6b 6b 49 39 34 46 54 57 31 50 4c 46 4c 4a 64 65 74 73 34 53 69 53 52 5f 6a 65 5a 71 34 54 Data Ascii: 8QyJ8EUt68mqSc1U0AtxpSat7xYTrx-QW9LwhSws00cXrh0JmQgR6VPi0uNhrA4vheMKuVNsQnLo_H5adgE_VQSLcQpW5AkzvQR7wsas5mwlODLEOuYTBL0rUJCbocmP9dpjc92_PSjNyImB000cuKlg9pQ5eofm2IH7MTss7i3L5LxUf-37wBsPctUhF4eFJOnNfKIu_lhbjhY_MzDCtgR5QU9nr2IN5kkI94FTW1PLFLJdets4SiSR_jeZq4T
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 34 70 71 4b 4e 42 59 49 42 63 67 6f 54 43 4e 50 6b 71 65 47 4d 71 49 6b 44 46 65 75 50 67 77 63 64 54 38 67 56 71 52 49 54 43 4f 48 76 33 75 4f 4d 71 49 6b 44 46 64 78 53 39 67 67 64 63 66 51 36 78 53 49 61 43 4c 2d 46 68 5a 46 51 45 4a 69 33 35 5a 67 43 71 41 4b 55 74 50 2d 6b 41 37 41 43 35 75 79 7a 35 51 4d 6f 7a 67 46 41 41 65 41 42 41 59 41 43 41 5a 67 43 41 61 41 43 30 76 6d 4f 6f 50 6f 53 71 41 49 47 77 41 4a 32 79 41 4b 49 33 64 6b 6e 6d 67 4d 45 72 66 37 36 52 39 41 44 41 77 3b 64 63 5f 72 6d 63 69 64 3d 43 41 51 53 50 41 43 61 37 4c 37 64 57 43 6f 54 2d 77 78 71 58 34 32 46 39 78 6c 4d 36 67 4e 34 78 65 6e 78 42 67 49 79 62 45 47 75 68 72 6b 52 34 41 31 4e 59 43 47 56 68 50 70 54 76 52 56 66 41 57 67 5f 67 76 64 48 53 75 50 48 63 75 43 71 61 34 Data Ascii: 4pqKNBYIBcgoTCNPkqeGMqIkDFeuPgwcdT8gVqRITCOHv3uOMqIkDFdxS9ggdcfQ6xSIaCL-FhZFQEJi35ZgCqAKUtP-kA7AC5uyz5QMozgFAAeABAYACAZgCAaAC0vmOoPoSqAIGwAJ2yAKI3dknmgMErf76R9ADAw;dc_rmcid=CAQSPACa7L7dWCoT-wxqX42F9xlM6gN4xenxBgIybEGuhrkR4A1NYCGVhPpTvRVfAWg_gvdHSuPHcuCqa4
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 58 34 32 46 39 78 6c 4d 36 67 4e 34 78 65 6e 78 42 67 49 79 62 45 47 75 68 72 6b 52 34 41 31 4e 59 43 47 56 68 50 70 54 76 52 56 66 41 57 67 5f 67 76 64 48 53 75 50 48 63 75 43 71 61 34 44 75 42 78 67 42 3b 65 70 73 3d 43 49 42 68 45 41 45 59 48 7a 49 43 69 67 49 36 43 34 42 41 67 4d 43 41 67 49 43 67 71 49 41 43 53 4c 33 39 77 54 70 59 38 38 69 70 34 59 79 6f 69 51 4d 3b 6d 65 74 3d 31 3b 65 63 6e 31 3d 31 3b 65 74 6d 31 3d 30 3b 65 69 64 31 3d 31 38 3b 5d 5d 3e 3c 2f 54 72 61 63 6b 69 6e 67 3e 0a 20 20 20 20 20 20 20 3c 54 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 22 74 68 69 72 64 51 75 61 72 74 69 6c 65 22 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 64 65 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 64 64 6d 2f 61 Data Ascii: X42F9xlM6gN4xenxBgIybEGuhrkR4A1NYCGVhPpTvRVfAWg_gvdHSuPHcuCqa4DuBxgB;eps=CIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpY88ip4YyoiQM;met=1;ecn1=1;etm1=0;eid1=18;...</Tracking> <Tracking event="thirdQuartile"><![CDATA[https://ade.googlesyndication.com/ddm/a
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 75 74 65 22 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 64 65 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 64 64 6d 2f 61 63 74 69 76 69 74 79 2f 64 63 5f 6f 65 3d 43 68 4d 49 31 35 76 66 34 34 79 6f 69 51 4d 56 64 46 77 64 43 52 32 78 4a 77 4c 78 45 41 41 59 41 43 43 4d 75 59 4e 70 4f 68 6f 49 6c 4c 54 5f 70 41 4d 51 79 61 4f 30 6b 2d 41 45 47 4f 62 73 73 2d 55 44 49 4e 4c 35 6a 71 44 36 45 6b 49 54 43 4e 50 6b 71 65 47 4d 71 49 6b 44 46 65 75 50 67 77 63 64 54 38 67 56 71 55 67 42 55 44 70 59 73 4f 6f 42 59 50 58 62 6b 41 31 6f 35 50 32 59 76 77 46 34 70 71 4b 4e 42 59 49 42 63 67 6f 54 43 4e 50 6b 71 65 47 4d 71 49 6b 44 46 65 75 50 67 77 63 64 54 38 67 56 71 52 49 54 43 4f 48 76 33 75 4f 4d 71 49 6b 44 46 64 78 53 Data Ascii: ute"><![CDATA[https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI15vf44yoiQMVdFwdCR2xJwLxEAAYACCMuYNpOhoIlLT_pAMQyaO0k-AEGObss-UDINL5jqD6EkITCNPkqeGMqIkDFeuPgwcdT8gVqUgBUDpYsOoBYPXbkA1o5P2YvwF4pqKNBYIBcgoTCNPkqeGMqIkDFeuPgwcdT8gVqRITCOHv3uOMqIkDFdxS
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 42 59 49 42 63 67 6f 54 43 4e 50 6b 71 65 47 4d 71 49 6b 44 46 65 75 50 67 77 63 64 54 38 67 56 71 52 49 54 43 4f 48 76 33 75 4f 4d 71 49 6b 44 46 64 78 53 39 67 67 64 63 66 51 36 78 53 49 61 43 4c 2d 46 68 5a 46 51 45 4a 69 33 35 5a 67 43 71 41 4b 55 74 50 2d 6b 41 37 41 43 35 75 79 7a 35 51 4d 6f 7a 67 46 41 41 65 41 42 41 59 41 43 41 5a 67 43 41 61 41 43 30 76 6d 4f 6f 50 6f 53 71 41 49 47 77 41 4a 32 79 41 4b 49 33 64 6b 6e 6d 67 4d 45 72 66 37 36 52 39 41 44 41 77 3b 64 63 5f 72 6d 63 69 64 3d 43 41 51 53 50 41 43 61 37 4c 37 64 57 43 6f 54 2d 77 78 71 58 34 32 46 39 78 6c 4d 36 67 4e 34 78 65 6e 78 42 67 49 79 62 45 47 75 68 72 6b 52 34 41 31 4e 59 43 47 56 68 50 70 54 76 52 56 66 41 57 67 5f 67 76 64 48 53 75 50 48 63 75 43 71 61 34 44 75 42 78 67 Data Ascii: BYIBcgoTCNPkqeGMqIkDFeuPgwcdT8gVqRITCOHv3uOMqIkDFdxS9ggdcfQ6xSIaCL-FhZFQEJi35ZgCqAKUtP-kA7AC5uyz5QMozgFAAeABAYACAZgCAaAC0vmOoPoSqAIGwAJ2yAKI3dknmgMErf76R9ADAw;dc_rmcid=CAQSPACa7L7dWCoT-wxqX42F9xlM6gN4xenxBgIybEGuhrkR4A1NYCGVhPpTvRVfAWg_gvdHSuPHcuCqa4DuBxg
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 57 6b 7a 4f 38 53 44 46 6f 65 67 58 64 54 72 78 38 73 54 42 67 49 59 76 79 7a 46 59 65 34 39 4d 55 5f 67 35 6f 52 65 77 74 6f 42 68 5f 4d 73 31 49 68 61 6d 4a 54 50 39 34 52 32 50 36 57 45 55 50 30 5a 47 5a 35 63 73 49 44 42 51 59 33 6d 39 51 42 4d 63 6a 4e 67 4c 37 45 66 71 72 6f 35 73 49 57 67 31 5a 73 45 48 36 37 38 68 73 4a 4f 47 77 31 33 51 5a 42 37 57 51 35 2d 38 30 51 41 46 72 75 4f 4d 45 52 4f 4c 70 76 49 72 4e 73 62 72 42 54 69 35 6a 4a 6f 6b 65 4b 70 49 4e 78 46 47 44 54 70 75 4c 6a 70 47 55 6e 45 7a 32 65 39 5a 73 68 58 50 54 2d 77 66 47 71 46 33 4f 74 37 62 56 72 6a 70 65 62 57 79 67 45 77 2d 56 53 52 67 5a 6d 6b 6a 6b 47 59 74 52 6c 42 55 44 55 42 4c 71 31 79 70 79 52 5f 34 30 4e 41 5f 34 7a 4f 73 77 56 35 55 53 70 66 7a 78 70 6e 66 70 54 72 Data Ascii: WkzO8SDFoegXdTrx8sTBgIYvyzFYe49MU_g5oRewtoBh_Ms1IhamJTP94R2P6WEUP0ZGZ5csIDBQY3m9QBMcjNgL7Efqro5sIWg1ZsEH678hsJOGw13QZB7WQ5-80QAFruOMEROLpvIrNsbrBTi5jJokeKpINxFGDTpuLjpGUnEz2e9ZshXPT-wfGqF3Ot7bVrjpebWygEw-VSRgZmkjkGYtRlBUDUBLq1ypyR_40NA_4zOswV5USpfzxpnfpTr
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 50 42 63 72 34 5a 48 72 6a 52 4e 4d 61 66 58 79 62 73 55 5f 73 52 62 68 4d 38 37 74 61 5f 6a 44 48 64 6c 6b 50 36 45 36 6b 6e 63 65 45 5a 53 58 54 70 75 42 50 46 69 54 61 57 78 41 71 47 61 55 61 4a 55 30 30 77 5f 51 52 38 39 35 6c 36 64 47 33 32 39 4c 66 43 4b 74 39 52 4b 45 79 79 5a 37 68 4a 61 39 75 4a 34 79 5f 68 44 36 37 73 4c 4e 47 78 69 61 44 74 6e 52 74 4f 55 72 4c 30 4b 67 68 44 65 53 46 37 69 4e 7a 79 56 61 4a 4a 52 6f 5a 46 4f 7a 38 76 44 43 42 46 5f 6b 37 48 77 61 53 63 78 7a 38 4d 62 50 6b 73 56 51 65 30 37 46 56 4b 70 37 33 4d 77 4e 69 53 59 5a 53 67 37 79 6c 38 35 36 79 57 61 65 46 56 79 72 64 53 44 52 4b 50 31 75 5a 4c 74 59 49 53 52 42 33 49 58 67 6b 2d 49 67 73 72 4b 48 76 7a 73 4e 30 54 45 71 50 33 2d 66 46 7a 43 44 76 6d 71 4b 6c 61 38 Data Ascii: PBcr4ZHrjRNMafXybsU_sRbhM87ta_jDHdlkP6E6knceEZSXTpuBPFiTaWxAqGaUaJU00w_QR895l6dG329LfCKt9RKEyyZ7hJa9uJ4y_hD67sLNGxiaDtnRtOUrL0KghDeSF7iNzyVaJJRoZFOz8vDCBF_k7HwaScxz8MbPksVQe07FVKp73MwNiSYZSg7yl856yWaeFVyrdSDRKP1uZLtYISRB3IXgk-IgsrKHvzsN0TEqP3-fFzCDvmqKla8
2024-10-24 22:48:19 UTC	1378	IN	Data Raw: 39 38 2f 73 70 61 72 61 6d 73 2f 69 70 2c 69 70 62 69 74 73 2c 65 78 70 69 72 65 2c 69 64 2c 69 74 61 67 2c 73 6f 75 72 63 65 2c 78 70 63 2c 63 74 69 65 72 2c 61 63 61 6f 2f 73 69 67 6e 61 74 75 72 65 2f 37 44 38 42 43 46 34 45 33 46 37 36 37 38 43 35 37 38 37 32 45 42 44 41 39 43 46 31 41 31 38 34 35 33 34 35 45 33 33 41 2e 32 37 31 45 31 44 46 44 36 34 39 42 37 43 37 43 45 33 39 46 37 44 34 34 41 33 30 30 39 39 39 35 30 37 42 44 31 32 44 38 2f 6b 65 79 2f 63 6b 32 2f 66 69 6c 65 2f 66 69 6c 65 2e 6d 70 34 5d 5d 3e 3c 2f 4d 65 64 69 61 46 69 6c 65 3e 0a 20 20 20 20 20 20 20 3c 4d 65 64 69 61 46 69 6c 65 20 69 64 3d 22 38 39 30 38 39 39 32 34 37 2d 32 32 22 20 64 65 6c 69 76 65 72 79 3d 22 70 72 6f 67 72 65 73 73 69 76 65 22 20 77 69 64 74 68 3d 22 31 32 Data Ascii: 98/sparams/ip,ipbits,expire,id,itag,source,xpc,ctier,acao/signature/7D8BCF4E3F7678C57872EBDA9CF1A1845345E33A.271E1DFD649B7C7CE39F7D44A300999507BD12D8/key/ck2/file/file.mp4...</MediaFile> <MediaFile id="890899247-22" delivery="progressive" width="12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49928	216.58.212.130	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	899	OUT	GET /pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmQhelBJ1wSH0Emqb3WkFuG43WvNf_vcumYqWmVERJGxoaWuO0fjnuO8-WXIMbvVCgf3w1e903sl5dxzWdm72uQ3Ek0Y12jtKpc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
2024-10-24 22:48:18 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 24 Oct 2024 22:48:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:18 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49924	74.125.133.156	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	4827	OUT	GET /dbm/vast?dbm_c=AKAmf-A9yQt3YvwzzLIIOKlYK_waZ1eHQbtEsAnayYZcd6bokL5gPGFd-WnJ_FM-GfBJG0dBRWW5VncoQcjxzITNoASrz-Mt3g&cry=1&dbm_d=AKAmf-CfBe8WD2J5dCpSTCu1P-zyHgRZSCSMFe2MHmCwqwCHTa9BsjaHmLGx_HnC5e-UxJQ0ApM7TNBKeXvMLTZVxd3_Fo8hy31NOTsGUt92vDc8VjqcsW132P6RTtaZX5u1QqXTixIcbiqiv6crAd5JOF-4A5DpH17u5QV1hCE_8nBuXd-3Ig0iWV3KRGKLrXa2bsViG8g7uiFMq4CODCmCeGAzNDpghKftXP3jTL9svbcRva4EjYt_KEVA2mQxeYvOoqdlOQ_SZ7PzI9aaM0dFbeIdQRdKooRpZLXMD_Lilq9Ejw7XOl-B0KypLvW9B2T7nqo93-fX4mr6yVvZsZTMK3oO5GPawNXL28KMzDx-bhTzwxE3mBIqhpy-9CH46I3KbQkh6p-P8sI5WfOd5PdqSiyah82JPHh0wb_s7gEZ95Ks0pDERE-vybOhN9h2n4Dvc6XhxlInGR9-xtlgJ4tFpGk1NaYXqLQujUmbmk7rF3nmhYEQ1NOE-pDkuWSlV_SA20cW0BgDt4koA4uUaerUQQtJy1QTwaxtDpluXmcd67inuA52nRNo5OHLrs9NjLm7cswCdu0GVfKmtKzcvQCDY1YOIQGbr8ZuQeG6I3v-sfBJkhPnULuFXKwpV2I6bH24pttotxvEu9qMtAZP6LYVpqukgUNK5NpEWM9PlnERWTxI485Y92PchO9tXcKQEchOgBRJJJDf_ugHdbesO1aErvI0tEsOEmzAjZtqQzU63vGcO9b4VcLOupCoeTCXka98bMcIzsbQ2jVLL6aTxnz24HfQjWCSFIvDXNtbjk995w7Ib8dmzEbnx5ZeJ3PPKQaKLaH0GQtfDtwNJSqz2zwhWMqev666WNTCPP3TYFHprbkf3QzHfFGpkKGro [TRUNCATED] Host: bid.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA
2024-10-24 22:48:18 UTC	824	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 22:48:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi6aw7Mth6PZF-YR7s6ddp4zzNSGJN5mDnmMsMYXKvhpVUBY8w; expires=Tue, 22-Apr-2025 22:48:18 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:18 UTC	554	IN	Data Raw: 35 66 65 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 32 2e 30 22 3e 0a 20 3c 41 64 20 69 64 3d 22 35 39 38 39 34 33 38 32 30 22 3e 0a 20 20 3c 57 72 61 70 70 65 72 3e 0a 20 20 20 3c 41 64 53 79 73 74 65 6d 3e 44 42 4d 3c 2f 41 64 53 79 73 74 65 6d 3e 0a 20 20 20 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f Data Ascii: 5fec<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="2.0"> <Ad id="598943820"> <Wrapper> <AdSystem>DBM</AdSystem> <VASTAdTagURI><![CDATA[https:/
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 6c 65 61 6f 73 2d 64 69 63 2e 6f 72 67 2f 26 70 75 62 5f 69 64 3d 31 26 73 75 70 5f 70 6c 61 74 66 6f 72 6d 3d 31 26 70 62 4d 65 74 68 6f 64 73 3d 5b 50 4c 41 59 42 41 43 4b 4d 45 54 48 4f 44 53 5d 7c 5b 43 4f 4e 54 49 4e 55 4f 55 53 50 4c 41 59 5d 7c 5b 54 49 4d 45 53 49 4e 43 45 49 4e 54 45 52 41 43 54 49 4f 4e 5d 26 63 61 63 68 65 62 75 73 74 65 72 3d 5b 43 41 43 48 45 42 55 53 54 45 52 5d 5d 5d 3e 3c 2f 56 41 53 54 41 64 54 61 67 55 52 49 3e 0a 20 20 20 3c 45 72 72 6f 72 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 3f 69 64 3d 6e 6f 74 69 66 79 26 65 78 63 68 61 6e 67 65 3d 61 64 78 26 63 72 65 61 74 69 76 65 5f Data Ascii: leaos-dic.org/&pub_id=1&sup_platform=1&pbMethods=[PLAYBACKMETHODS]\|[CONTINUOUSPLAY]\|[TIMESINCEINTERACTION]&cachebuster=[CACHEBUSTER]...</VASTAdTagURI> <Error><![CDATA[https://pagead2.googlesyndication.com/pagead/gen_204?id=notify&exchange=adx&creative_
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 4c 51 41 33 79 6f 78 54 70 79 41 57 67 58 64 4d 56 6f 4c 2d 35 78 39 45 50 36 62 51 65 38 65 71 38 49 52 55 6f 66 71 33 44 37 57 4d 59 4f 61 42 54 44 50 62 78 4c 49 47 78 5f 75 32 32 52 6c 67 4f 39 31 5f 44 63 4a 41 78 67 38 4c 51 62 68 33 34 49 41 58 68 48 36 33 4a 49 30 2d 65 41 72 76 31 43 76 6a 46 33 6f 44 62 41 4c 4a 68 79 71 4b 61 5f 6b 6f 53 6c 4b 48 57 36 68 2d 33 4d 75 6b 47 53 73 41 64 43 58 56 53 33 44 47 34 59 42 4d 47 62 59 4b 53 54 6b 58 6b 54 58 7a 59 39 6e 4c 4f 5f 7a 6b 67 49 54 64 30 4d 36 37 2d 79 5a 6f 36 78 33 6d 4a 67 39 4f 44 6e 49 50 36 53 42 66 6c 69 54 33 6b 39 79 6f 52 36 69 76 4b 78 54 35 54 32 32 38 4c 79 6b 57 61 37 48 53 73 5f 43 31 4e 66 6e 44 4b 68 45 52 58 66 31 65 45 4a 37 76 64 31 61 58 46 37 41 34 74 4f 35 2d 51 79 77 Data Ascii: LQA3yoxTpyAWgXdMVoL-5x9EP6bQe8eq8IRUofq3D7WMYOaBTDPbxLIGx_u22RlgO91_DcJAxg8LQbh34IAXhH63JI0-eArv1CvjF3oDbALJhyqKa_koSlKHW6h-3MukGSsAdCXVS3DG4YBMGbYKSTkXkTXzY9nLO_zkgITd0M67-yZo6x3mJg9ODnIP6SBfliT3k9yoR6ivKxT5T228LykWa7HSs_C1NfnDKhERXf1eEJ7vd1aXF7A4tO5-Qyw
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 67 30 41 72 4b 4a 53 7a 41 52 65 32 69 79 38 48 62 31 56 45 41 45 26 75 61 63 68 5f 6d 3d 25 35 42 55 41 43 48 25 35 44 26 63 72 64 3d 61 48 52 30 63 48 4d 36 4c 79 39 68 5a 47 39 69 5a 53 35 6a 62 32 30 26 66 62 73 5f 61 65 69 64 3d 25 35 42 67 77 5f 66 62 73 61 65 69 64 25 35 44 26 75 72 6c 66 69 78 3d 31 26 6e 69 73 3d 34 26 61 64 75 72 6c 3d 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 0a 20 20 20 3c 43 72 65 61 74 69 76 65 73 3e 0a 20 20 20 20 3c 43 72 65 61 74 69 76 65 20 69 64 3d 22 32 32 34 34 35 38 39 34 33 22 20 73 65 71 75 65 6e 63 65 3d 22 31 22 3e 0a 20 20 20 20 20 3c 4c 69 6e 65 61 72 3e 0a 20 20 20 20 20 20 3c 44 75 72 61 74 69 6f 6e 3e 30 30 3a 30 30 3a 31 35 3c 2f 44 75 72 61 74 69 6f 6e 3e 0a 20 20 20 20 20 20 3c 54 72 61 63 6b 69 6e Data Ascii: g0ArKJSzARe2iy8Hb1VEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9hZG9iZS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&nis=4&adurl=...</Impression> <Creatives> <Creative id="224458943" sequence="1"> <Linear> <Duration>00:00:15</Duration> <Trackin
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 22 6d 69 64 70 6f 69 6e 74 22 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 64 65 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 64 64 6d 2f 61 63 74 69 76 69 74 79 2f 64 63 5f 6f 65 3d 43 68 4d 49 69 39 62 66 34 34 79 6f 69 51 4d 56 66 30 54 32 43 42 31 64 4a 7a 46 6f 45 41 41 59 41 43 43 5f 38 59 4e 72 51 68 4d 49 39 4e 62 51 33 6f 79 6f 69 51 4d 56 70 6f 69 44 42 78 32 79 67 79 74 65 53 41 42 51 4f 6c 69 59 64 57 44 64 35 64 4d 4b 61 49 69 46 68 38 49 42 65 4e 79 69 73 67 53 43 41 5a 6f 42 43 68 4d 49 39 4e 62 51 33 6f 79 6f 69 51 4d 56 70 6f 69 44 42 78 32 79 67 79 74 65 45 68 4d 49 6f 71 4c 66 34 34 79 6f 69 51 4d 56 5a 30 48 32 43 42 32 34 67 77 34 63 49 68 6b 49 6a 39 54 50 6d Data Ascii: acking event="midpoint"><![CDATA[https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIi9bf44yoiQMVf0T2CB1dJzFoEAAYACC_8YNrQhMI9NbQ3oyoiQMVpoiDBx2ygyteSABQOliYdWDd5dMKaIiFh8IBeNyisgSCAZoBChMI9NbQ3oyoiQMVpoiDBx2ygyteEhMIoqLf44yoiQMVZ0H2CB24gw4cIhkIj9TPm
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 41 47 77 41 6f 65 69 6f 2d 55 44 4b 50 55 48 51 41 48 67 41 51 47 41 41 67 47 59 41 67 47 67 41 74 44 2d 68 70 75 42 45 36 67 43 42 73 41 43 65 63 67 43 69 4e 33 5a 4a 39 49 43 4a 68 67 41 49 68 4d 49 39 4e 62 51 33 6f 79 6f 69 51 4d 56 70 6f 69 44 42 78 32 79 67 79 74 65 4b 41 45 77 41 54 6a 51 5f 6f 61 62 67 52 4e 41 41 55 67 42 6d 67 4d 45 72 66 37 36 52 39 41 44 41 77 3b 64 63 5f 65 70 73 3d 41 48 61 73 38 63 41 39 47 35 78 47 46 62 6f 2d 33 7a 79 53 65 48 56 34 50 4f 37 44 30 34 58 4d 5f 67 6c 2d 52 76 67 6b 42 6e 37 57 58 4b 4d 4e 4a 4e 31 74 4c 34 44 79 66 73 56 72 33 6e 62 31 4f 7a 6a 55 43 51 46 5a 32 6e 6e 36 6c 75 50 63 7a 76 45 43 56 30 4b 77 62 62 73 3b 6d 65 74 3d 31 3b 65 63 6e 31 3d 31 3b 65 74 6d 31 3d 30 3b 65 69 64 31 3d 31 33 3b 5d 5d Data Ascii: AGwAoeio-UDKPUHQAHgAQGAAgGYAgGgAtD-hpuBE6gCBsACecgCiN3ZJ9ICJhgAIhMI9NbQ3oyoiQMVpoiDBx2ygyteKAEwATjQ_oabgRNAAUgBmgMErf76R9ADAw;dc_eps=AHas8cA9G5xGFbo-3zySeHV4PO7D04XM_gl-RvgkBn7WXKMNJN1tL4DyfsVr3nb1OzjUCQFZ2nn6luPczvECV0Kwbbs;met=1;ecn1=1;etm1=0;eid1=13;]]
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 6e 67 20 65 76 65 6e 74 3d 22 70 61 75 73 65 22 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 64 65 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 64 64 6d 2f 61 63 74 69 76 69 74 79 2f 64 63 5f 6f 65 3d 43 68 4d 49 69 39 62 66 34 34 79 6f 69 51 4d 56 66 30 54 32 43 42 31 64 4a 7a 46 6f 45 41 41 59 41 43 43 5f 38 59 4e 72 51 68 4d 49 39 4e 62 51 33 6f 79 6f 69 51 4d 56 70 6f 69 44 42 78 32 79 67 79 74 65 53 41 42 51 4f 6c 69 59 64 57 44 64 35 64 4d 4b 61 49 69 46 68 38 49 42 65 4e 79 69 73 67 53 43 41 5a 6f 42 43 68 4d 49 39 4e 62 51 33 6f 79 6f 69 51 4d 56 70 6f 69 44 42 78 32 79 67 79 74 65 45 68 4d 49 6f 71 4c 66 34 34 79 6f 69 51 4d 56 5a 30 48 32 43 42 32 34 67 77 34 63 49 68 6b 49 6a 39 54 50 6d 56 41 51 70 75 72 56 Data Ascii: ng event="pause"><![CDATA[https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIi9bf44yoiQMVf0T2CB1dJzFoEAAYACC_8YNrQhMI9NbQ3oyoiQMVpoiDBx2ygyteSABQOliYdWDd5dMKaIiFh8IBeNyisgSCAZoBChMI9NbQ3oyoiQMVpoiDBx2ygyteEhMIoqLf44yoiQMVZ0H2CB24gw4cIhkIj9TPmVAQpurV
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 77 54 61 33 61 63 4b 74 62 51 75 4a 53 34 65 56 5f 39 49 48 4f 36 4f 43 5a 68 5a 56 30 6d 50 69 70 52 65 47 51 48 6a 37 6a 7a 56 76 68 67 57 5a 5f 72 46 51 71 6f 6e 32 6b 47 4c 4c 34 62 68 79 32 5f 68 77 71 4b 66 34 4e 72 58 78 65 33 32 42 70 48 4b 72 62 6a 76 5f 39 41 58 54 52 73 58 4a 63 38 76 57 64 77 57 58 4d 42 43 47 56 36 71 37 30 6b 30 63 32 6e 77 56 43 6c 74 43 77 42 65 63 50 46 44 4c 61 68 6c 31 67 54 79 49 71 65 51 36 37 4c 56 48 53 62 7a 5a 39 38 6b 6e 79 63 79 6c 4d 69 42 4e 51 52 5f 33 48 34 55 30 32 37 7a 6d 78 66 50 66 76 62 4e 69 32 39 76 78 68 4d 43 5a 73 69 6f 66 6e 64 77 46 34 6f 4c 66 32 69 47 65 5a 46 4a 7a 49 6d 6d 42 61 49 71 6b 30 67 45 6f 32 2d 38 6d 6c 69 65 33 4e 38 50 72 70 68 62 6b 55 5a 35 57 37 4d 45 69 4f 33 55 37 38 58 51 Data Ascii: wTa3acKtbQuJS4eV_9IHO6OCZhZV0mPipReGQHj7jzVvhgWZ_rFQqon2kGLL4bhy2_hwqKf4NrXxe32BpHKrbjv_9AXTRsXJc8vWdwWXMBCGV6q70k0c2nwVCltCwBecPFDLahl1gTyIqeQ67LVHSbzZ98knycylMiBNQR_3H4U027zmxfPfvbNi29vxhMCZsiofndwF4oLf2iGeZFJzImmBaIqk0gEo2-8mlie3N8PrphbkUZ5W7MEiO3U78XQ
2024-10-24 22:48:18 UTC	1378	IN	Data Raw: 6c 4d 62 37 72 70 76 42 71 5a 70 6e 66 63 47 4d 4f 46 52 32 30 46 5a 73 62 6c 36 77 79 39 4c 5a 55 4d 4f 51 58 52 76 6d 77 5f 50 78 34 69 37 6f 6c 54 36 78 45 66 7a 39 4b 47 78 63 37 48 61 6e 72 72 4f 56 7a 6f 51 44 4c 36 55 38 6f 74 4e 31 5a 43 4c 48 4c 77 78 4f 56 69 35 52 6f 4c 2d 6c 46 67 52 53 73 26 73 61 69 3d 41 4d 66 6c 2d 59 53 33 32 74 4c 55 59 4c 4c 2d 35 5f 72 54 52 57 53 69 47 58 55 33 6d 35 78 74 61 48 47 50 44 4d 6c 76 6e 66 65 74 57 76 74 56 67 62 59 35 4b 42 70 53 46 74 56 68 75 42 45 61 32 38 35 70 51 4b 76 72 30 6b 77 31 4b 36 49 42 59 6d 73 79 66 67 62 73 64 54 59 75 47 56 44 2d 5f 74 75 41 32 43 48 2d 68 42 6f 2d 58 59 41 4e 51 4a 32 39 56 48 6d 31 66 54 6d 36 7a 79 2d 73 61 4d 47 79 66 7a 4e 4e 49 78 57 51 38 31 56 5a 63 43 6c 56 59 Data Ascii: lMb7rpvBqZpnfcGMOFR20FZsbl6wy9LZUMOQXRvmw_Px4i7olT6xEfz9KGxc7HanrrOVzoQDL6U8otN1ZCLHLwxOVi5RoL-lFgRSs&sai=AMfl-YS32tLUYLL-5_rTRWSiGXU3m5xtaHGPDMlvnfetWvtVgbY5KBpSFtVhuBEa285pQKvr0kw1K6IBYmsyfgbsdTYuGVD-_tuA2CH-hBo-XYANQJ29VHm1fTm6zy-saMGyfzNNIxWQ81VZcClVY
2024-10-24 22:48:19 UTC	1378	IN	Data Raw: 4d 47 2b 4a 49 71 32 47 75 33 53 44 48 4c 4d 69 68 33 4e 47 65 61 2f 55 56 34 41 36 2b 66 31 73 50 55 7a 53 6e 5a 30 64 4c 47 69 72 53 48 5a 61 69 41 5a 58 57 30 6d 62 70 64 2f 62 44 66 45 4e 76 4d 6c 50 5a 39 35 73 56 5a 36 31 33 4b 6b 57 36 45 4f 57 42 53 72 63 65 78 70 6c 35 32 53 47 43 6f 44 66 47 4f 58 74 47 4b 50 65 66 79 7a 79 55 75 32 77 66 31 45 35 78 4b 57 35 49 46 36 67 6e 79 47 79 4a 56 39 46 74 53 62 51 75 6a 45 31 6f 65 2b 47 33 56 39 70 45 47 2f 45 4b 6d 6d 77 4b 65 66 2b 61 6c 64 76 4c 4b 44 37 44 32 68 5a 4d 78 32 6d 4f 68 68 64 39 63 39 78 68 54 38 76 33 78 45 6f 61 46 75 4c 38 6d 6d 4d 2f 49 46 41 77 4f 32 47 6c 33 76 61 63 6e 6e 68 44 47 41 65 51 66 34 46 44 54 6c 64 6b 38 38 2b 36 39 35 4e 59 58 51 68 65 59 39 32 76 45 4c 70 69 74 4b Data Ascii: MG+JIq2Gu3SDHLMih3NGea/UV4A6+f1sPUzSnZ0dLGirSHZaiAZXW0mbpd/bDfENvMlPZ95sVZ613KkW6EOWBSrcexpl52SGCoDfGOXtGKPefyzyUu2wf1E5xKW5IF6gnyGyJV9FtSbQujE1oe+G3V9pEG/EKmmwKef+aldvLKD7D2hZMx2mOhhd9c9xhT8v3xEoaFuL8mmM/IFAwO2Gl3vacnnhDGAeQf4FDTldk88+695NYXQheY92vELpitK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49921	142.250.184.206	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	708	OUT	GET /f/AGSKWxVj0DK1sRvTR19UsqrnxFeucgRs-KNQ80sUAUHXbfgCqcyDYz6b__swfJJl3oSzk-geBPeTb-XIIxkqLE1KuvuDnVa4hXH3zBWXFLWTLzfxiISiD7Ix5g6yJay4897baFSBTUEyv-cR1BBn9_OBMhL7Lf2VDOCynhbatqjt-mmPQd1ad0Qhl5iCOfZ6/_/blog_ad?/AdForm_trackpoint_/ad728t./overlay_ad_/vghd2.gif HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:18 UTC	1932	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:18 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-sy2_UwQTWQLqtRb3iqfXFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmLw15BiOO90h-k6EEt8fcmkBcRO6TNYQ4C49eY51ulAnPTvPGsJELtrXWT1B2JDhUuszkDsWHSJ1ROIVXsusZoD8f11l1ifA_Hej5dYjwJxkcQV1hYgvt10hfUxEDN8vcLKAcRCPByb5r7ewSbwY-KWTmYljaT8wvjk_LySosyk0pL8orTktNTi1KKy1KJ4IwMjE0MDIyM9A4P4AgMA359JHw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:18 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 66 34 32 62 30 61 36 36 2d 64 30 39 38 2d 34 64 63 31 2d 39 34 63 30 2d 32 62 37 37 35 31 39 65 37 36 34 32 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['f42b0a66-d098-4dc1-94c0-2b77519e7642'] = true;
2024-10-24 22:48:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49935	209.85.165.168	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	1021	OUT	HEAD /videoplayback/id/346941773297da68/itag/347/source/web_video_ads/xpc/EgVovf3BOg%3D%3D/ctier/L/acao/yes/ip/0.0.0.0/ipbits/0/expire/1761346096/sparams/acao,ctier,expire,id,ip,ipbits,itag,met,mh,mip,mm,mn,ms,mv,mvi,pl,rms,source,xpc/signature/48C3F8B294E93BCE46020542EC1F00E0F157B6BA.698B24BA89FEC14079D6A3F27867742E34277915/key/cms1/cms_redirect/yes/met/1729810097,/mh/R-/mip/173.254.250.71/mm/42/mn/sn-q4flrne7/ms/onc/mt/1729809583/mv/u/mvi/3/pl/23/rms/onc,onc/file/file.mp4 HTTP/1.1 Host: r3---sn-q4flrne7.c.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:18 UTC	918	IN	HTTP/1.1 200 OK Last-Modified: Tue, 30 Jul 2024 12:26:25 GMT Content-Type: video/mp4 Date: Thu, 24 Oct 2024 22:48:18 GMT Expires: Thu, 24 Oct 2024 22:48:18 GMT Cache-Control: private, max-age=86400 Accept-Ranges: bytes Content-Length: 8548204 Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true Timing-Allow-Origin: null Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49934	18.245.60.28	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	741	OUT	GET /155970/FY24Q3_CC_Photography_Photoshop_US_EN_Psjuly2024release-Circularneonportal-2_VID_1920x1080_NA_NA_1920_1080_15100_2398.mp4?cb=1729721580000 HTTP/1.1 Host: cdn.flashtalking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://googleads.g.doubleclick.net/ Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=614198FC21CB80" Range: bytes=0-
2024-10-24 22:48:18 UTC	712	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 28836065 Connection: close Last-Modified: Thu, 01 Aug 2024 18:30:50 GMT Server: Flashtalking (AKA) X-Varnish: 78337698 Via: 1.1 prod-web-edge4.irl11.ftdns.net (Varnish/trunk), 1.1 0254a3d4b384cab4933ea28efe6685c2.cloudfront.net (CloudFront) Date: Thu, 24 Oct 2024 22:30:30 GMT Cache-Control: max-age=3600 Etag: "401340471c0dcd2239bc30bd8cac2a2a" Content-Range: bytes 0-28836064/28836065 Vary: Origin Accept-Ranges: bytes Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Content-Range X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA60-P5 X-Amz-Cf-Id: LAd7wwJMxEtgfqxWXIjPc2B2TAwaDNgXbYban-e4YJyvFm2vqVmdhQ==
2024-10-24 22:48:19 UTC	16384	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 23 11 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e8 00 00 3a ab 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 0d c3 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 3a a5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 07 80 00 00 04 38 00 00 00 00 00 24 65 64 74 Data Ascii: ftypisomisomiso2avc1mp41#moovlmvhd:@trak\tkhd:@8$edt
2024-10-24 22:48:19 UTC	16384	IN	Data Raw: 93 0a 93 56 1a 08 46 21 c7 66 aa 50 22 3f 5d 2f 7f 48 19 ed 53 8e b0 9d 3c ea 1f ea 91 93 c8 a5 31 2e e7 02 44 63 63 4f 0e 9a 0b 25 e0 bd a9 8e 46 78 28 e9 3f 4c dc 76 34 ad ec f4 32 a5 ea 66 fb e6 70 c7 b6 eb 8e 00 a5 9f 29 8c 8d 57 4c 46 31 1c dd 56 86 07 0d 38 7d 57 61 ca 36 14 db 34 27 b0 80 8f a8 fa dc b2 e8 24 60 81 c8 38 bf fc a1 00 08 db 15 e5 49 51 92 0d 9e b3 a9 5f 05 87 61 e5 b8 c7 ab 78 4f bf fb b2 eb 2c 11 d5 cc ad 78 0f ef d2 24 fa 21 19 91 e6 c8 f4 f2 7b 89 42 c2 33 d9 9c 62 c3 99 43 66 5a 81 40 3c 57 13 a6 c9 f6 b3 ae 1c 30 3b 32 e9 81 66 59 21 43 3a 23 e6 a7 8a 15 8c e8 95 28 c9 2c 71 17 46 af ec 16 fe b2 3b d4 1e 80 33 53 d6 74 f3 66 e8 01 98 ff c9 d2 10 8b 95 3d 51 20 20 0a 60 c7 5a f2 ee 16 93 20 f5 b0 2c fe 83 36 64 7d f8 14 43 5f 3a Data Ascii: VF!fP"?]/HS<1.DccO%Fx(?Lv42fp)WLF1V8}Wa64'$`8IQ_axO,x$!{B3bCfZ@<W0;2fY!C:#(,qF;3Stf=Q `Z ,6d}C_:
2024-10-24 22:48:19 UTC	16384	IN	Data Raw: 50 1d 38 19 ae ff ff e7 cd 7f 7c bd ff 29 16 be 90 00 19 cc ff 5a 44 f1 48 1b 5d bd dc 23 5c e0 ed 33 ff fd 1b 31 db 82 d3 e0 79 ec dc 5e 50 da af ff e6 5d ba 9c 33 34 cb 05 1e ee 29 ca 4a 15 98 68 46 45 f0 b6 64 81 16 d9 77 72 b1 3d c9 4e 69 de f0 da a3 3b 5a 00 00 16 75 78 61 40 d8 9f fb b6 6b 3f d0 00 00 15 70 6b 58 44 7f 77 7f bf 6e d5 4d 4d 9a b8 40 e0 00 02 c1 ac 81 23 ed 8c 10 0b ae 43 80 00 3d 58 8c cc cd a0 00 c6 8d b6 67 f8 6e 7d ab 6f a0 cf 75 90 00 01 4f 26 13 2d e6 e3 40 ce 21 ce a5 00 00 03 00 b2 30 f9 35 8c 00 00 2c 1b 3a 28 78 d9 bd 0e 00 00 6e 71 07 70 06 5f 36 fe 97 49 08 be 8a a1 f0 00 04 a4 7f a1 65 f3 0e 84 9d 7d c0 00 01 1d 35 22 0a 60 00 01 f1 cc ac 6e b3 01 93 00 00 24 79 08 60 0b be d0 ec dc e5 ba fc 1e b0 00 05 48 d5 1a d1 e1 b4 Data Ascii: P8\|)ZDH]#\31y^P]34)JhFEdwr=Ni;Zuxa@k?pkXDwnMM@#C=Xgn}ouO&-@!05,:(xnqp_6Ie}5"`n$y`H
2024-10-24 22:48:19 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:
2024-10-24 22:48:19 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:
2024-10-24 22:48:19 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:
2024-10-24 22:48:19 UTC	16384	IN	Data Raw: 7d 3d 48 19 cb 2c b5 2f db ea ac ba c1 5c cd 5b ca 5a 84 ad c5 55 9b 74 68 0c 30 e8 94 6a 2b 2d 36 90 45 ce 41 c5 72 31 ec dc 49 2e 1c a1 ca 8f c5 d4 05 23 e5 38 df 23 12 8d 87 ae 26 92 a3 e1 af e0 80 10 0d c6 50 b5 65 81 4e e1 91 55 27 76 cb f5 8d b9 56 ee da f8 fa 68 3d de 95 bc cb 83 89 a5 1a 09 77 d4 29 43 72 f9 ed 8f bc cc 40 21 5d 57 4c 32 1b d4 78 9b ee 82 11 24 84 f4 58 6c b4 c7 6c 1e b3 23 3c 1f 19 32 24 ec 16 98 03 2f ee f5 b6 9a 96 37 4c eb 64 56 e3 a7 ba 71 37 5d 6a 96 55 80 32 8d 1f b4 23 20 08 d2 87 3d bd e2 2a ea 04 79 a3 5d 90 45 da 2f 16 45 de 3e 31 7d d9 24 f2 7a c4 88 02 4b bb b7 4d af a2 14 47 b3 6a 9e 0d 29 3c 12 41 85 97 0a 67 02 52 7b 7f d5 6c 50 d0 ee 48 13 c3 97 3d 19 67 89 7d 35 bc b5 f5 ba 38 0a d5 32 4a 4f 8a 1d 04 9c b7 ef 6d Data Ascii: }=H,/\[ZUth0j+-6EAr1I.#8#&PeNU'vVh=w)Cr@!]WL2x$Xll#<2$/7LdVq7]jU2# =*y]E/E>1}$zKMGj)<AgR{lPH=g}582JOm
2024-10-24 22:48:19 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:
2024-10-24 22:48:19 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49936	216.58.212.130	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:18 UTC	936	OUT	GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmT0ctLnTozoBHAE1-jS0rDag3zRFVmI9FMtJkWsXyWgiHUsql5PZVwUPMg1jDvUJ2jyUVsQBfCRq2FWZYtUnvK3I80qb-D3lfg&google_hm=MjU2NTAzNDIyMzU1Nzc4NzYzMg== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
2024-10-24 22:48:18 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 24 Oct 2024 22:48:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:18 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49939	23.109.14.96	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	793	OUT	GET /match/google?google_gid=CAESEEtXcYn5XTz2aUPkx96L_5s&google_cver=1&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q&chk=1 HTTP/1.1 Host: sync.gonet-ads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chk=1
2024-10-24 22:48:19 UTC	630	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 24 Oct 2024 22:48:19 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=gonet_ads_&google_hm=MmFlMmY1Mjg4NTVkYWIzOQ&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q Set-Cookie: pid=MmFlMmY1Mjg4NTVkYWIzOQ; expires=Fri, 24 Oct 2025 22:48:19 GMT; domain=.gonet-ads.com; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49958	209.85.165.168	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	1070	OUT	GET /videoplayback/id/346941773297da68/itag/347/source/web_video_ads/xpc/EgVovf3BOg%3D%3D/ctier/L/acao/yes/ip/0.0.0.0/ipbits/0/expire/1761346096/sparams/acao,ctier,expire,id,ip,ipbits,itag,met,mh,mip,mm,mn,ms,mv,mvi,pl,rms,source,xpc/signature/48C3F8B294E93BCE46020542EC1F00E0F157B6BA.698B24BA89FEC14079D6A3F27867742E34277915/key/cms1/cms_redirect/yes/met/1729810097,/mh/R-/mip/173.254.250.71/mm/42/mn/sn-q4flrne7/ms/onc/mt/1729809583/mv/u/mvi/3/pl/23/rms/onc,onc/file/file.mp4 HTTP/1.1 Host: r3---sn-q4flrne7.c.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: video Referer: https://googleads.g.doubleclick.net/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-24 22:48:19 UTC	1033	IN	HTTP/1.1 206 Partial Content Last-Modified: Tue, 30 Jul 2024 12:26:25 GMT Content-Type: video/mp4 Date: Thu, 24 Oct 2024 22:48:19 GMT Expires: Thu, 24 Oct 2024 22:48:19 GMT Cache-Control: private, max-age=86400 Content-Range: bytes 0-8548203/8548204 Accept-Ranges: bytes Content-Length: 8548204 Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-24 22:48:19 UTC	918	IN	Data Raw: 00 00 00 18 66 74 79 70 6d 70 34 32 00 00 00 00 69 73 6f 6d 6d 70 34 32 00 00 29 0f 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e8 00 00 75 55 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 0e b2 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 75 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 04 00 00 00 02 40 00 00 00 00 0e 4e 6d 64 69 61 00 00 00 20 6d 64 68 Data Ascii: ftypmp42isommp42)moovlmvhduU@trak\tkhduN@@Nmdia mdh
2024-10-24 22:48:19 UTC	2880	IN	Data Raw: 00 00 6f ee 00 00 1f ee 00 00 22 4f 00 00 1e 92 00 00 1e 0c 00 00 21 fd 00 00 1f 19 00 00 20 d5 00 00 1e 9a 00 00 1e d6 00 00 1c ff 00 00 1d 99 00 00 21 77 00 00 20 61 00 00 1f 7c 00 00 1d a3 00 00 21 21 00 00 20 be 00 00 20 70 00 00 1f d2 00 00 1f 8c 00 00 1f 66 00 00 21 40 00 00 22 55 00 00 22 2c 00 00 22 fd 00 00 23 4f 00 00 22 d7 00 00 23 7e 00 00 23 4e 00 00 26 12 00 00 21 58 00 00 25 a4 00 00 20 29 00 00 20 6a 00 00 20 11 00 00 1f 76 00 00 1f e5 00 00 1f e5 00 00 1f aa 00 00 20 58 00 00 1e c9 00 00 1f ee 00 00 1e 4e 00 00 1e 5a 00 00 1d 23 00 00 1c de 00 00 1d 8c 00 00 1d ac 00 00 16 c5 00 00 97 d3 00 00 2c 7a 00 00 2f 84 00 00 2f a7 00 00 30 f5 00 00 31 f7 00 00 30 04 00 00 34 57 00 00 30 b1 00 00 33 c6 00 00 c9 2d 00 00 24 b0 00 00 26 85 00 00 29 Data Ascii: o"O! !w a\|!! pf!@"U","#O"#~#N&!X% ) j v XNZ#,z//0104W03-$&)
2024-10-24 22:48:19 UTC	944	IN	Data Raw: 00 00 00 54 73 74 73 73 00 00 00 00 00 00 00 11 00 00 00 01 00 00 00 3d 00 00 00 79 00 00 00 81 00 00 00 bd 00 00 00 f9 00 00 01 01 00 00 01 3d 00 00 01 79 00 00 01 81 00 00 01 bd 00 00 01 f9 00 00 02 01 00 00 02 3d 00 00 02 79 00 00 02 81 00 00 02 bd 00 00 00 14 76 6d 68 64 00 00 00 01 00 00 00 00 00 00 00 00 00 00 19 58 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 75 55 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 18 f4 6d 64 69 61 00 00 00 20 6d 64 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bb 80 00 16 00 00 15 c7 00 00 00 00 00 47 68 64 6c 72 00 00 00 Data Ascii: Tstss=y=y=yvmhdXtrak\tkhduU@mdia mdhdGhdlr
2024-10-24 22:48:19 UTC	5632	IN	Data Raw: 00 00 02 00 00 00 02 00 00 00 02 1e 00 00 02 25 00 00 02 28 00 00 02 33 00 00 02 36 00 00 02 63 00 00 02 84 00 00 02 40 00 00 01 b9 00 00 01 cb 00 00 01 cd 00 00 01 d7 00 00 01 e6 00 00 01 ee 00 00 01 f9 00 00 01 eb 00 00 01 f7 00 00 01 f0 00 00 01 fd 00 00 01 f9 00 00 01 f9 00 00 01 fc 00 00 02 00 00 00 01 f3 00 00 02 03 00 00 02 03 00 00 01 ff 00 00 01 fa 00 00 01 fa 00 00 01 ff 00 00 01 ff 00 00 02 09 00 00 02 04 00 00 01 f9 00 00 02 02 00 00 02 06 00 00 01 f8 00 00 01 fc 00 00 02 02 00 00 01 f9 00 00 02 03 00 00 02 08 00 00 01 fe 00 00 01 f9 00 00 02 04 00 00 02 0c 00 00 01 fa 00 00 01 fb 00 00 01 f7 00 00 02 07 00 00 01 fa 00 00 02 00 00 00 02 05 00 00 01 fc 00 00 02 09 00 00 01 f5 00 00 01 fd 00 00 02 06 00 00 01 f6 00 00 01 f6 00 00 02 07 00 00 02 Data Ascii: %(36c@
2024-10-24 22:48:19 UTC	169	IN	Data Raw: 00 00 00 10 73 6d 68 64 00 00 00 00 00 00 00 00 00 00 00 91 75 64 74 61 00 00 00 89 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 6d 64 69 72 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 5c 69 6c 73 74 00 00 00 1e a9 74 6f 6f 00 00 00 16 64 61 74 61 00 00 00 01 00 00 00 00 47 6f 6f 67 6c 65 00 00 00 19 67 73 73 74 00 00 00 11 64 61 74 61 00 00 00 01 00 00 00 00 30 00 00 00 1d 67 73 74 64 00 00 00 15 64 61 74 61 00 00 00 01 00 00 00 00 33 30 30 38 30 00 82 46 45 6d 64 61 74 Data Ascii: smhdudtameta!hdlrmdirappl\ilsttoodataGooglegsstdata0gstddata30080FEmdat
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 00 00 00 32 06 05 2e dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 35 35 20 72 32 39 30 31 20 37 64 30 66 66 32 32 00 80 00 00 6f b4 65 88 84 1f ff e3 c9 9b da 4c a3 14 48 ef 88 e9 29 cd ff 43 35 ac 90 b1 6e 59 c2 d7 c8 85 99 20 14 0a d2 fe 0d ec be b5 e2 9b f1 bf 49 fb 1d 4c d1 60 50 e0 81 7e b4 db ce b2 63 55 96 92 ba de 5c 50 1a 0b d5 c5 0b be 0b 5b b7 53 ac cf 92 77 da 4f 27 f8 0b 40 06 5b bb 39 0e e4 cb 89 32 11 28 df 6f f4 79 fc e2 ed 14 48 68 7f ea 69 e1 2e 09 e6 5d 24 c4 3d 3c a8 aa a3 55 e1 92 4b d1 16 63 4c 1a ae 5c a8 6a 79 a2 1b 25 95 7f 1c 7c 54 9f f9 38 95 33 c3 10 a9 8d 8e 23 82 b3 26 ef 0d b1 de 44 f0 8c cd 9c d0 d8 41 3e 29 cc 36 29 f0 f8 67 01 31 b9 0c e8 06 8f 47 f1 4d 3b 2a e1 cd 20 c5 64 19 e3 Data Ascii: 2.EH, #x264 - core 155 r2901 7d0ff22oeLH)C5nY IL`P~cU\P[SwO'@[92(oyHhi.]$=<UKcL\jy%\|T83#&DA>)6)g1GM;* d
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: d9 db f0 c9 d9 6f 97 5e 67 f2 d4 71 c9 44 e0 bd 5d de 78 6c e5 6b a8 97 0f 7c 17 ec 05 4b f4 87 9f d2 81 ff a8 ae a1 9a db 04 dc 95 0c e2 50 fc 66 67 01 05 48 79 fd 2a 45 97 fa cf 0b e2 ab bf 61 67 88 ce f5 15 bf 3c f1 58 ee 50 32 c5 ea f3 2e 77 af 45 15 97 64 8a 1b b3 2f cc 6e 0e 82 ab 37 01 88 7b b6 d8 c9 e0 5d 57 8a ca c6 7f c8 ba 8e 4d aa 16 f7 d3 92 e7 ea d8 1a 35 ac 04 3a b8 89 48 2a 17 41 11 c7 1e 41 6c f6 10 e0 3d 09 a0 9f 2b 69 c9 e1 41 70 f7 ab bc ce 55 88 18 53 60 7e a1 d2 3d a5 b4 d8 1d 89 5e de cc 09 1f 43 a5 df 64 6a 59 e9 c8 9c 80 98 f2 0f 2c 30 65 10 14 7f b4 85 ed c0 2e 52 75 a1 91 b5 69 7b 3f 15 c0 f1 13 7f 02 2f 21 71 08 2c 16 25 17 d1 21 81 63 52 8d 28 e9 2f c4 e0 5d 0d d0 0f a6 af f5 39 f1 df 9a 76 4d e5 d5 81 6d e3 08 74 9e fd 61 a9 Data Ascii: o^gqD]xlk\|KPfgHyEag<XP2.wEd/n7{]WM5:HAAl=+iApUS`~=^CdjY,0e.Rui{?/!q,%!cR(/]9vMmta
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 5e af 37 56 3d 9d d7 cc 24 50 56 98 09 c8 ea 19 04 3f d2 93 db 08 2a 3a 14 2a be da cc b2 50 c1 9a 00 0c b7 a1 08 17 d1 ed ad bf da 70 0f f9 1a e4 87 c7 13 98 1f 14 98 ef 7b 37 a9 12 af 9b 29 b2 38 69 e4 d7 50 a6 f5 b2 b8 e2 a6 f8 13 87 c6 fc 82 ab 67 b8 e9 80 df f5 ff 4e d7 0d dd a0 da 19 ad 74 0a 85 99 61 0d 88 37 b7 ba 11 62 6e 54 db e4 12 45 97 0a f6 66 32 bb 91 72 4b 82 90 e3 0c eb ff 54 d2 06 77 cf 26 5f e3 d5 1c b4 5d 92 a2 64 70 11 7c 00 e4 46 70 39 45 66 78 72 be 71 e9 66 82 d4 69 75 ba fe 48 d0 9b a8 ef 26 ff 18 09 c8 4c 2d 08 57 bf f9 f3 6f 75 3b c9 6c dc 04 26 d1 f7 98 9a 8c 77 74 9a ff 1a a0 6a 1f d7 9e 85 64 0f 6e a6 a8 97 4b 26 fb e2 bd a9 c0 56 2b 18 01 87 ba ae 2b 19 33 ba d5 14 ca ff 9c 37 f6 8d da 16 27 63 2e 13 f1 d8 07 66 83 64 c4 f7 Data Ascii: ^7V=$PV?:Pp{7)8iPgNta7bnTEf2rKTw&_]dp\|Fp9EfxrqfiuH&L-Wou;l&wtjdnK&V++37'c.fd
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: a1 16 aa e5 0b 0c cc 2f 43 5b 62 cd 8c 28 6f 63 68 d0 b2 2f a2 44 fd 5b 99 89 ab 1e 61 5a 51 d7 fa 1e d8 91 73 36 83 21 d3 2e 01 62 6e 44 95 9f 3d 2a 06 e6 0c 88 56 85 8f ee ca ef 0f fd e1 0d 18 6c 6e 7b 0e d5 92 ca 5d ab 34 9e 70 e9 14 99 ec 31 2c 2e 6a 15 19 3e d8 8d 95 d2 0a 0c 5c fb c7 30 d5 0f 6d 24 18 ac 4f cd a6 17 3b ae 29 08 30 c2 f4 fe fa 33 a6 4b 42 19 53 1f e0 24 8e 4f 6d 53 6f 12 fa 00 83 dc 69 99 7a 4e 8d ca c7 b7 c2 9f d4 ce b6 09 a5 1c 48 0e 34 0b 6a 51 6f 1e 95 4b 6a 52 6d c6 c2 1d 32 b0 74 67 49 0d 81 1b 79 9e 57 35 a8 80 08 be 81 4e 6c ab 4d 76 35 1f f2 44 df da af 39 96 08 56 1f c2 28 bc 78 09 d9 34 f5 56 1e 3c e8 e5 11 ae 08 bd 84 5d 83 94 cd ee 90 6f 9b 4e 66 9b fc 86 3d ec 7a 74 df 9a 5b 0d 98 9f 2a 57 e2 32 dd b6 66 ce a5 e3 bb 66 Data Ascii: /C[b(och/D[aZQs6!.bnD=Vln{]4p1,.j>\0m$O;)03KBS$OmSoizNH4jQoKjRm2tgIyW5NlMv5D9V(x4V<]oNf=zt[W2ff
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 92 f2 54 58 0b b0 ba 66 b2 76 93 3c 9d 66 57 ba 2d 59 14 0f 26 e8 21 f9 05 d8 c7 40 85 c9 3c 0d 74 e2 d2 ae fa e4 62 1a 35 0a 40 1f fc 59 4c 09 26 50 97 a4 27 2e 88 e7 07 0a 21 41 38 b7 a4 1e 16 97 27 e3 60 e4 71 6a fc 7a b0 a5 f8 b7 21 47 55 61 25 b7 f7 1c 67 7e ac 5c b9 43 51 7e af e7 3e 4a a0 cd e1 ac b5 e4 ea 43 f4 11 16 bf 14 73 5e 70 c7 d8 86 82 f3 5a cd d7 0b 4b 5f 61 ca 6d dd fe 86 71 2b 22 1f b2 95 8b 24 0e 65 bc 07 6f c8 5e 9f 08 71 06 59 80 d5 81 46 9f 78 8b 0d cd 86 da 5e 41 9d 39 46 b9 a6 bb bc 22 d5 4a 0b 12 ad f4 4e e0 2d 98 fd f9 d0 d6 84 54 b5 b7 a9 16 35 1b c5 5b bc 77 1f 71 c3 51 63 3d a4 ed e6 4d 83 1f 98 3f 16 85 36 f5 ee 40 6b 53 30 5b 0e ea 63 e8 dc 8a d6 63 17 d6 7c 1e c2 88 c6 f0 de 58 84 26 5a ae 24 83 9d 19 b4 5a 70 3f b7 5b d6 Data Ascii: TXfv<fW-Y&!@<tb5@YL&P'.!A8'`qjz!GUa%g~\CQ~>JCs^pZK_amq+"$eo^qYFx^A9F"JN-T5[wqQc=M?6@kS0[cc\|X&Z$Zp?[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49951	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	901	OUT	POST /el/AGSKWxWy3x9V2OEFveoc38wOdQ6ULu8hI3qhgInDkicneHIK0Uqoa7DBaoFEhUO-c7A8Vmt0gUAzYBinwTOdbDGJS1pP0wbDgK06jDXjZqCXQjzl3bgZoEKS5O9RtmaUVnQiPTztnZ5nsw== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 202 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.xn--invitacionesdecumpleaos-dic.org X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:19 UTC	202	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 39 38 31 30 30 39 37 36 33 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 30 30 2c 22 77 77 77 2e 78 6e 2d 2d 69 6e 76 69 74 61 63 69 6f 6e 65 73 64 65 63 75 6d 70 6c 65 61 6f 73 2d 64 69 63 2e 6f 72 67 22 2c 22 78 6e 2d 2d 69 6e 76 69 74 61 63 69 6f 6e 65 73 64 65 63 75 6d 70 6c 65 61 6f 73 2d 64 69 63 2e 6f 72 67 22 2c 33 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1729810097630,null,null,null,null,null,null,null,null,null,null,null,[[1,100,"www.xn--invitacionesdecumpleaos-dic.org","xn--invitacionesdecumpleaos-dic.org",3]]]
2024-10-24 22:48:20 UTC	1899	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.xn--invitacionesdecumpleaos-dic.org Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:19 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-hTy7b613ZM7Cxg0FiMpk5w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmLw05BicEqfwRoCxO5aF1n9gXjvx0usR4GY4esVVg4gFuLh2Dz39Q42gRWX3x1gVnJJyi-MT87PK0nNK9FNTCnWBbGLMpNKS_KLUNipZSAVOfnp6Zl56fFGBkYmhgZGxnoGZvEFBgB8cy5w" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49962	209.85.165.168	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	823	OUT	GET /videoplayback/id/346941773297da68/itag/347/source/web_video_ads/xpc/EgVovf3BOg%3D%3D/ctier/L/acao/yes/ip/0.0.0.0/ipbits/0/expire/1761346096/sparams/acao,ctier,expire,id,ip,ipbits,itag,met,mh,mip,mm,mn,ms,mv,mvi,pl,rms,source,xpc/signature/48C3F8B294E93BCE46020542EC1F00E0F157B6BA.698B24BA89FEC14079D6A3F27867742E34277915/key/cms1/cms_redirect/yes/met/1729810097,/mh/R-/mip/173.254.250.71/mm/42/mn/sn-q4flrne7/ms/onc/mt/1729809583/mv/u/mvi/3/pl/23/rms/onc,onc/file/file.mp4 HTTP/1.1 Host: r3---sn-q4flrne7.c.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:20 UTC	452	IN	HTTP/1.1 200 OK Last-Modified: Tue, 30 Jul 2024 12:26:25 GMT Content-Type: video/mp4 Date: Thu, 24 Oct 2024 22:48:19 GMT Expires: Thu, 24 Oct 2024 22:48:19 GMT Cache-Control: private, max-age=86400 Accept-Ranges: bytes Content-Length: 8548204 Connection: close Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-10-24 22:48:20 UTC	918	IN	Data Raw: 00 00 00 18 66 74 79 70 6d 70 34 32 00 00 00 00 69 73 6f 6d 6d 70 34 32 00 00 29 0f 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e8 00 00 75 55 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 0e b2 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 75 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 04 00 00 00 02 40 00 00 00 00 0e 4e 6d 64 69 61 00 00 00 20 6d 64 68 Data Ascii: ftypmp42isommp42)moovlmvhduU@trak\tkhduN@@Nmdia mdh
2024-10-24 22:48:20 UTC	2880	IN	Data Raw: 00 00 6f ee 00 00 1f ee 00 00 22 4f 00 00 1e 92 00 00 1e 0c 00 00 21 fd 00 00 1f 19 00 00 20 d5 00 00 1e 9a 00 00 1e d6 00 00 1c ff 00 00 1d 99 00 00 21 77 00 00 20 61 00 00 1f 7c 00 00 1d a3 00 00 21 21 00 00 20 be 00 00 20 70 00 00 1f d2 00 00 1f 8c 00 00 1f 66 00 00 21 40 00 00 22 55 00 00 22 2c 00 00 22 fd 00 00 23 4f 00 00 22 d7 00 00 23 7e 00 00 23 4e 00 00 26 12 00 00 21 58 00 00 25 a4 00 00 20 29 00 00 20 6a 00 00 20 11 00 00 1f 76 00 00 1f e5 00 00 1f e5 00 00 1f aa 00 00 20 58 00 00 1e c9 00 00 1f ee 00 00 1e 4e 00 00 1e 5a 00 00 1d 23 00 00 1c de 00 00 1d 8c 00 00 1d ac 00 00 16 c5 00 00 97 d3 00 00 2c 7a 00 00 2f 84 00 00 2f a7 00 00 30 f5 00 00 31 f7 00 00 30 04 00 00 34 57 00 00 30 b1 00 00 33 c6 00 00 c9 2d 00 00 24 b0 00 00 26 85 00 00 29 Data Ascii: o"O! !w a\|!! pf!@"U","#O"#~#N&!X% ) j v XNZ#,z//0104W03-$&)
2024-10-24 22:48:20 UTC	944	IN	Data Raw: 00 00 00 54 73 74 73 73 00 00 00 00 00 00 00 11 00 00 00 01 00 00 00 3d 00 00 00 79 00 00 00 81 00 00 00 bd 00 00 00 f9 00 00 01 01 00 00 01 3d 00 00 01 79 00 00 01 81 00 00 01 bd 00 00 01 f9 00 00 02 01 00 00 02 3d 00 00 02 79 00 00 02 81 00 00 02 bd 00 00 00 14 76 6d 68 64 00 00 00 01 00 00 00 00 00 00 00 00 00 00 19 58 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 75 55 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 18 f4 6d 64 69 61 00 00 00 20 6d 64 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bb 80 00 16 00 00 15 c7 00 00 00 00 00 47 68 64 6c 72 00 00 00 Data Ascii: Tstss=y=y=yvmhdXtrak\tkhduU@mdia mdhdGhdlr
2024-10-24 22:48:20 UTC	5632	IN	Data Raw: 00 00 02 00 00 00 02 00 00 00 02 1e 00 00 02 25 00 00 02 28 00 00 02 33 00 00 02 36 00 00 02 63 00 00 02 84 00 00 02 40 00 00 01 b9 00 00 01 cb 00 00 01 cd 00 00 01 d7 00 00 01 e6 00 00 01 ee 00 00 01 f9 00 00 01 eb 00 00 01 f7 00 00 01 f0 00 00 01 fd 00 00 01 f9 00 00 01 f9 00 00 01 fc 00 00 02 00 00 00 01 f3 00 00 02 03 00 00 02 03 00 00 01 ff 00 00 01 fa 00 00 01 fa 00 00 01 ff 00 00 01 ff 00 00 02 09 00 00 02 04 00 00 01 f9 00 00 02 02 00 00 02 06 00 00 01 f8 00 00 01 fc 00 00 02 02 00 00 01 f9 00 00 02 03 00 00 02 08 00 00 01 fe 00 00 01 f9 00 00 02 04 00 00 02 0c 00 00 01 fa 00 00 01 fb 00 00 01 f7 00 00 02 07 00 00 01 fa 00 00 02 00 00 00 02 05 00 00 01 fc 00 00 02 09 00 00 01 f5 00 00 01 fd 00 00 02 06 00 00 01 f6 00 00 01 f6 00 00 02 07 00 00 02 Data Ascii: %(36c@
2024-10-24 22:48:20 UTC	169	IN	Data Raw: 00 00 00 10 73 6d 68 64 00 00 00 00 00 00 00 00 00 00 00 91 75 64 74 61 00 00 00 89 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 6d 64 69 72 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 5c 69 6c 73 74 00 00 00 1e a9 74 6f 6f 00 00 00 16 64 61 74 61 00 00 00 01 00 00 00 00 47 6f 6f 67 6c 65 00 00 00 19 67 73 73 74 00 00 00 11 64 61 74 61 00 00 00 01 00 00 00 00 30 00 00 00 1d 67 73 74 64 00 00 00 15 64 61 74 61 00 00 00 01 00 00 00 00 33 30 30 38 30 00 82 46 45 6d 64 61 74 Data Ascii: smhdudtameta!hdlrmdirappl\ilsttoodataGooglegsstdata0gstddata30080FEmdat
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 00 00 00 32 06 05 2e dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 35 35 20 72 32 39 30 31 20 37 64 30 66 66 32 32 00 80 00 00 6f b4 65 88 84 1f ff e3 c9 9b da 4c a3 14 48 ef 88 e9 29 cd ff 43 35 ac 90 b1 6e 59 c2 d7 c8 85 99 20 14 0a d2 fe 0d ec be b5 e2 9b f1 bf 49 fb 1d 4c d1 60 50 e0 81 7e b4 db ce b2 63 55 96 92 ba de 5c 50 1a 0b d5 c5 0b be 0b 5b b7 53 ac cf 92 77 da 4f 27 f8 0b 40 06 5b bb 39 0e e4 cb 89 32 11 28 df 6f f4 79 fc e2 ed 14 48 68 7f ea 69 e1 2e 09 e6 5d 24 c4 3d 3c a8 aa a3 55 e1 92 4b d1 16 63 4c 1a ae 5c a8 6a 79 a2 1b 25 95 7f 1c 7c 54 9f f9 38 95 33 c3 10 a9 8d 8e 23 82 b3 26 ef 0d b1 de 44 f0 8c cd 9c d0 d8 41 3e 29 cc 36 29 f0 f8 67 01 31 b9 0c e8 06 8f 47 f1 4d 3b 2a e1 cd 20 c5 64 19 e3 Data Ascii: 2.EH, #x264 - core 155 r2901 7d0ff22oeLH)C5nY IL`P~cU\P[SwO'@[92(oyHhi.]$=<UKcL\jy%\|T83#&DA>)6)g1GM;* d
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: d9 db f0 c9 d9 6f 97 5e 67 f2 d4 71 c9 44 e0 bd 5d de 78 6c e5 6b a8 97 0f 7c 17 ec 05 4b f4 87 9f d2 81 ff a8 ae a1 9a db 04 dc 95 0c e2 50 fc 66 67 01 05 48 79 fd 2a 45 97 fa cf 0b e2 ab bf 61 67 88 ce f5 15 bf 3c f1 58 ee 50 32 c5 ea f3 2e 77 af 45 15 97 64 8a 1b b3 2f cc 6e 0e 82 ab 37 01 88 7b b6 d8 c9 e0 5d 57 8a ca c6 7f c8 ba 8e 4d aa 16 f7 d3 92 e7 ea d8 1a 35 ac 04 3a b8 89 48 2a 17 41 11 c7 1e 41 6c f6 10 e0 3d 09 a0 9f 2b 69 c9 e1 41 70 f7 ab bc ce 55 88 18 53 60 7e a1 d2 3d a5 b4 d8 1d 89 5e de cc 09 1f 43 a5 df 64 6a 59 e9 c8 9c 80 98 f2 0f 2c 30 65 10 14 7f b4 85 ed c0 2e 52 75 a1 91 b5 69 7b 3f 15 c0 f1 13 7f 02 2f 21 71 08 2c 16 25 17 d1 21 81 63 52 8d 28 e9 2f c4 e0 5d 0d d0 0f a6 af f5 39 f1 df 9a 76 4d e5 d5 81 6d e3 08 74 9e fd 61 a9 Data Ascii: o^gqD]xlk\|KPfgHyEag<XP2.wEd/n7{]WM5:HAAl=+iApUS`~=^CdjY,0e.Rui{?/!q,%!cR(/]9vMmta
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 5e af 37 56 3d 9d d7 cc 24 50 56 98 09 c8 ea 19 04 3f d2 93 db 08 2a 3a 14 2a be da cc b2 50 c1 9a 00 0c b7 a1 08 17 d1 ed ad bf da 70 0f f9 1a e4 87 c7 13 98 1f 14 98 ef 7b 37 a9 12 af 9b 29 b2 38 69 e4 d7 50 a6 f5 b2 b8 e2 a6 f8 13 87 c6 fc 82 ab 67 b8 e9 80 df f5 ff 4e d7 0d dd a0 da 19 ad 74 0a 85 99 61 0d 88 37 b7 ba 11 62 6e 54 db e4 12 45 97 0a f6 66 32 bb 91 72 4b 82 90 e3 0c eb ff 54 d2 06 77 cf 26 5f e3 d5 1c b4 5d 92 a2 64 70 11 7c 00 e4 46 70 39 45 66 78 72 be 71 e9 66 82 d4 69 75 ba fe 48 d0 9b a8 ef 26 ff 18 09 c8 4c 2d 08 57 bf f9 f3 6f 75 3b c9 6c dc 04 26 d1 f7 98 9a 8c 77 74 9a ff 1a a0 6a 1f d7 9e 85 64 0f 6e a6 a8 97 4b 26 fb e2 bd a9 c0 56 2b 18 01 87 ba ae 2b 19 33 ba d5 14 ca ff 9c 37 f6 8d da 16 27 63 2e 13 f1 d8 07 66 83 64 c4 f7 Data Ascii: ^7V=$PV?:Pp{7)8iPgNta7bnTEf2rKTw&_]dp\|Fp9EfxrqfiuH&L-Wou;l&wtjdnK&V++37'c.fd
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: a1 16 aa e5 0b 0c cc 2f 43 5b 62 cd 8c 28 6f 63 68 d0 b2 2f a2 44 fd 5b 99 89 ab 1e 61 5a 51 d7 fa 1e d8 91 73 36 83 21 d3 2e 01 62 6e 44 95 9f 3d 2a 06 e6 0c 88 56 85 8f ee ca ef 0f fd e1 0d 18 6c 6e 7b 0e d5 92 ca 5d ab 34 9e 70 e9 14 99 ec 31 2c 2e 6a 15 19 3e d8 8d 95 d2 0a 0c 5c fb c7 30 d5 0f 6d 24 18 ac 4f cd a6 17 3b ae 29 08 30 c2 f4 fe fa 33 a6 4b 42 19 53 1f e0 24 8e 4f 6d 53 6f 12 fa 00 83 dc 69 99 7a 4e 8d ca c7 b7 c2 9f d4 ce b6 09 a5 1c 48 0e 34 0b 6a 51 6f 1e 95 4b 6a 52 6d c6 c2 1d 32 b0 74 67 49 0d 81 1b 79 9e 57 35 a8 80 08 be 81 4e 6c ab 4d 76 35 1f f2 44 df da af 39 96 08 56 1f c2 28 bc 78 09 d9 34 f5 56 1e 3c e8 e5 11 ae 08 bd 84 5d 83 94 cd ee 90 6f 9b 4e 66 9b fc 86 3d ec 7a 74 df 9a 5b 0d 98 9f 2a 57 e2 32 dd b6 66 ce a5 e3 bb 66 Data Ascii: /C[b(och/D[aZQs6!.bnD=Vln{]4p1,.j>\0m$O;)03KBS$OmSoizNH4jQoKjRm2tgIyW5NlMv5D9V(x4V<]oNf=zt[W2ff
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 92 f2 54 58 0b b0 ba 66 b2 76 93 3c 9d 66 57 ba 2d 59 14 0f 26 e8 21 f9 05 d8 c7 40 85 c9 3c 0d 74 e2 d2 ae fa e4 62 1a 35 0a 40 1f fc 59 4c 09 26 50 97 a4 27 2e 88 e7 07 0a 21 41 38 b7 a4 1e 16 97 27 e3 60 e4 71 6a fc 7a b0 a5 f8 b7 21 47 55 61 25 b7 f7 1c 67 7e ac 5c b9 43 51 7e af e7 3e 4a a0 cd e1 ac b5 e4 ea 43 f4 11 16 bf 14 73 5e 70 c7 d8 86 82 f3 5a cd d7 0b 4b 5f 61 ca 6d dd fe 86 71 2b 22 1f b2 95 8b 24 0e 65 bc 07 6f c8 5e 9f 08 71 06 59 80 d5 81 46 9f 78 8b 0d cd 86 da 5e 41 9d 39 46 b9 a6 bb bc 22 d5 4a 0b 12 ad f4 4e e0 2d 98 fd f9 d0 d6 84 54 b5 b7 a9 16 35 1b c5 5b bc 77 1f 71 c3 51 63 3d a4 ed e6 4d 83 1f 98 3f 16 85 36 f5 ee 40 6b 53 30 5b 0e ea 63 e8 dc 8a d6 63 17 d6 7c 1e c2 88 c6 f0 de 58 84 26 5a ae 24 83 9d 19 b4 5a 70 3f b7 5b d6 Data Ascii: TXfv<fW-Y&!@<tb5@YL&P'.!A8'`qjz!GUa%g~\CQ~>JCs^pZK_amq+"$eo^qYFx^A9F"JN-T5[wqQc=M?6@kS0[cc\|X&Z$Zp?[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49961	216.58.212.130	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	1045	OUT	GET /pixel?google_ula=5153224&google_hm=n08H3X-PwKP0NrNRb-fL27VqjJYJVoKi36K2UOcJI7g&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHyir0Zx_autfYtqy-l3NSw&google_cver=1&google_push=AXcoOmQ7T_Ve3LTXgWtUdq1GXRO9yyaH5LvckcwzLjBQXocTizfcBpNYrYWR3FXE-5W8hd1xNBw6ocg4ViKLe_Qrvwsox8LJWJd2XzU&tc=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
2024-10-24 22:48:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 24 Oct 2024 22:48:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49955	142.250.184.206	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	942	OUT	GET /f/AGSKWxWUioDyXwcVGf1wg8irhXOy6T0P2_ntxw6Cjkh5tBOOTi33DNT0Xyor2GXtFskIKdvQmHNAexvlC_nnKyvs-Bj6f_k8bMIMnRA8Rdo-oLzyf63ht042M3jTIHW46W70wkHhwrPUAg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDk1LDgwOTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3LnhuLS1pbnZpdGFjaW9uZXNkZWN1bXBsZWFvcy1kaWMub3JnLyIsbnVsbCxbWzgsIlo3ZnhWeldjSEs0Il0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:20 UTC	1966	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:19 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-sJL7N0mOLnPZNUtA-zTPkg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjamDU4pJi8NCQYjhx6zbTBSA-73SH6ToQS3x9yaQFxE7pM1hDgLj15jnW6UCc9O88awkQu2tdZPUHYkOFS6zOQOxYdInVE4hVey6xmgPx_XWXWJ8D8d6Pl1iPAnGRxBXWFiC-3XSF9TEQM3y9wsoBxEI8HJvnvt7BJnDixesLzEoaSfmF8cn5eSVFmUmlJflFaclpqcWpRWWpRfFGBkYmhgZGRnoGBvEFBgBuyU7N" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:20 UTC	1966	IN	Data Raw: 64 39 66 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 78 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 72 6e 28 63 29 2c 66 2c 67 2c 68 3d Data Ascii: d9fif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var xn=function(a,b,c,d){var e=rn(c),f,g,h=
2024-10-24 22:48:20 UTC	1528	IN	Data Raw: 28 63 3d 5f 2e 47 28 63 2c 5f 2e 24 66 2c 32 29 2c 5f 2e 4f 28 64 2c 33 2c 63 29 29 3b 5f 2e 4f 28 62 2c 32 2c 64 29 3b 61 2e 52 28 32 2c 5f 2e 4b 28 62 29 29 7d 7d 7d 3b 76 61 72 20 45 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 45 6e 2c 5f 2e 4a 29 3b 76 61 72 20 46 6e 3d 5b 32 2c 33 5d 3b 76 61 72 20 44 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 44 6e 2c 5f 2e 4a 29 3b 76 61 72 20 47 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 47 6e 2c 5f 2e 4a 29 3b 76 61 72 20 48 6e 3d 5f 2e 76 28 47 6e 29 3b 76 61 72 20 49 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 49 6e 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (c=_.G(c,_.$f,2),_.O(d,3,c));_.O(b,2,d);a.R(2,_.K(b))}}};var En=function(a){this.l=_.u(a)};_.y(En,_.J);var Fn=[2,3];var Dn=function(a){this.l=_.u(a)};_.y(Dn,_.J);var Gn=function(a){this.l=_.u(a)};_.y(Gn,_.J);var Hn=_.v(Gn);var In=function(){};In.prototype
2024-10-24 22:48:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49952	142.250.184.238	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	1205	OUT	GET /f/AGSKWxUwBRZpG3FjTDvRcwCWmdrlMp_HbM0HFO1te4fBjKDKvQjDPrtCkInE07FocwFSEa3HqK9bwgiaODB_r5uK7WfN7kVpsOMT9dUpZSyWdVoJVdTGnJXZv0GZBkmS16NVyiYKhw4OaA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDk3LDYzNzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxNV0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3LnhuLS1pbnZpdGFjaW9uZXNkZWN1bXBsZWFvcy1kaWMub3JnLyIsbnVsbCxbWzgsIlo3ZnhWeldjSEs0Il0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXSxbMiwiW251bGwsW251bGwsMSxbMTcyOTgxMDA5OCwyMzY1MTMwMDBdXV0iXV1d HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.xn--invitacionesdecumpleaos-dic.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:20 UTC	1956	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:19 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-6VNy_SNWkJMQrVXmH81qBQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmJw0pBiOO90h-k6EEt8fcmkBcRO6TNYQ4C49eY51ulAnPTvPGsJELtrXWT1B2JDhUuszkDsWHSJ1ROIVXsusZoD8f11l1ifA_Hej5dYjwJxkcQV1hYgvt10hfUxEDN8vcLKAcRCPByb577ewSZw4MuJa8xKGkn5hfHJ-XklRZlJpSX5RWnJaanFqUVlqUXxRgZGJoYGRkZ6BgbxBQYA71pJnw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:20 UTC	1956	IN	Data Raw: 62 62 30 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 6a 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6a 44 2c 5f 2e Data Ascii: bb0if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var jD=function(a){this.l=_.u(a)};_.y(jD,_.
2024-10-24 22:48:20 UTC	1043	IN	Data Raw: 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 66 5c 2f 41 47 53 4b 57 78 58 53 57 71 39 6a 4e 56 69 5f 4c 35 67 64 63 6c 4c 67 38 4a 38 6c 71 58 52 7a 45 63 33 39 67 5a 5f 6d 4a 72 46 43 38 4f 4f 34 34 50 4a 77 62 69 6e 6a 57 4c 6c 58 34 6f 75 59 56 62 50 69 6a 61 58 70 67 2d 6f 76 63 77 73 4a 43 72 4e 39 64 79 41 75 6b 66 4e 66 59 38 7a 71 77 5f 39 58 69 30 74 7a 61 59 4c 43 31 71 68 4f 34 70 36 62 7a 61 74 2d 4f 63 6e 49 67 5f 6c 72 35 6d 49 49 31 57 54 68 34 53 4c 74 58 77 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 78 32 32 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 5c 78 35 62 37 2c 36 2c 31 35 5c 78 35 64 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: ages.google.com\/f\/AGSKWxXSWq9jNVi_L5gdclLg8J8lqXRzEc39gZ_mJrFC8OO44PJwbinjWLlX4ouYVbPijaXpg-ovcwsJCrN9dyAukfNfY8zqw_9Xi0tzaYLC1qhO4p6bzat-OcnIg_lr5mII1WTh4SLtXw\\\\u003d\\\\u003d\\\x22\x5d,\x5bnull,\x5b7,6,15\x5d,null,null,null,null,null,null,null,null,
2024-10-24 22:48:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49963	216.58.212.130	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	940	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=MTY4MjgyOTQzNDA2NjE5NDcyMQ&google_push=AXcoOmQI8g3JD5ydIRX6xAgC6hAbNnXg-ytDyy7hPbgZCgOSMMYDo0JlCTLDfBjXeLLyFvBqWHjKQCf9LeKutZyDfqsL2xE64CdHTw HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
2024-10-24 22:48:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 24 Oct 2024 22:48:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49960	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	878	OUT	GET /minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Attribution-Reporting-Eligible: navigation-source=trigger;event-source Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:20 UTC	494	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk; path=/ X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-10-24 22:48:20 UTC	15890	IN	Data Raw: 34 63 64 38 0d 0a 20 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 20 0d 0a 20 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 4d 65 74 61 20 54 61 67 73 20 2d 2d 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0d 0a Data Ascii: 4cd8 <!DOCTYPE html><html dir="ltr" lang="en"><head> ... Meta Tags --><meta name="viewport" content="width=device-width,initial-scale=1.0,shrink-to-fit=no"/><meta http-equiv="content-type" content="text/html; charset=UTF-8"/>
2024-10-24 22:48:20 UTC	3790	IN	Data Raw: 6d 61 67 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 69 6d 61 67 65 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 63 75 72 72 65 6e 74 27 29 2e 66 61 64 65 4f 75 74 28 29 2e 70 72 6f 6d 69 73 65 28 29 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 69 6d 61 67 65 2e 61 64 64 43 6c 61 73 73 28 27 63 75 72 72 65 6e 74 27 29 2e 66 61 64 65 49 6e 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 69 6d 61 67 65 73 2e 68 69 64 65 28 29 2e 66 69 72 73 74 28 29 2e 73 68 6f 77 28 29 2e 61 64 64 43 6c 61 73 73 28 27 63 75 72 72 65 6e 74 27 29 3b Data Ascii: mage) { $images.removeClass('current').fadeOut().promise().done(function () { $image.addClass('current').fadeIn(); }); }; $images.hide().first().show().addClass('current');
2024-10-24 22:48:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49953	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:19 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 43d08777-c01e-0014-2856-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224819Z-17c5cb586f6qt228zy1nuwhy2g00000001t00000000072fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:20 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49954	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:19 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 33c93406-d01e-0066-3d3d-26ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224819Z-15b8d89586f6nn8zb8x99wuenc00000000r00000000065z3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:20 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49948	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:19 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: dcef298c-a01e-003d-47df-2598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224819Z-16849878b78j7llf5vkyvvcehs00000000t000000000auh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:20 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49949	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:19 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224819Z-16849878b788tnsxzb2smucwdc00000008dg000000006xkd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:48:20 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49950	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:19 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224819Z-16849878b78s2lqfdex4tmpp78000000089000000000r8n0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49959	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	731	OUT	GET /minime/us_es/css/style-main.css?v=3 HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
2024-10-24 22:48:20 UTC	472	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:20 GMT Content-Type: text/css Content-Length: 189158 Last-Modified: Tue, 25 Jan 2022 20:43:07 GMT Connection: close Vary: Accept-Encoding ETag: "61f060db-2e2e6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-24 22:48:20 UTC	15912	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 5b 4d 61 73 74 65 72 20 53 74 79 6c 65 73 68 65 65 74 5d 0d 0a 0d 0a 50 72 6f 6a 65 63 74 3a 20 20 20 20 20 20 20 20 46 72 61 6d 65 77 6f 72 6b 20 41 6c 70 68 61 0d 0a 56 65 72 73 69 6f 6e 3a 20 20 20 20 20 20 20 20 31 2e 30 0d 0a 41 75 74 68 6f 72 3a 20 20 20 20 20 20 20 20 20 41 6c 65 78 61 6e 64 65 72 20 4b 79 72 69 61 6b 61 6b 69 73 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: @charset "utf-8";/*------------------------------------------------------------------[Master Stylesheet]Project: Framework AlphaVersion: 1.0Author: Alexander Kyriakakis---------------------------------------------------
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 30 30 20 7b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0d 0a 7d 0d 0a 2e 6c 69 6e 65 2d 68 65 69 67 68 74 2d 31 35 30 20 7b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 70 78 3b 0d 0a 7d 0d 0a 2e 6c 69 6e 65 2d 68 65 69 67 68 74 2d 32 30 30 20 7b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 30 70 78 3b 0d 0a 7d 0d 0a 2e 6c 69 6e 65 2d 68 65 69 67 68 74 2d 31 65 6d 20 7b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 65 6d 3b 0d 0a 7d 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 20 6c 69 73 74 20 69 6e 6c 69 6e 65 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 2e 64 69 73 70 6c 61 79 2d 69 6e 6c 69 6e 65 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a Data Ascii: 00 { line-height: 100px;}.line-height-150 { line-height: 150px;}.line-height-200 { line-height: 200px;}.line-height-1em { line-height: 1em;}/* -------- list inline ---------- */.display-inline { display: inline-block;}
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 2d 2d 2d 20 48 65 61 64 69 6e 67 20 53 74 79 6c 65 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 2e 68 65 61 64 69 6e 67 2d 62 6f 72 64 65 72 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 33 64 33 64 33 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 30 3b 0d 0a 7d 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 20 46 75 6c 6c 43 61 6c 65 6e 64 61 72 20 2d 20 50 6c 75 67 69 6e 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 2e 66 63 2d 64 61 79 2d 6e 75 6d 62 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 33 33 33 3b 0d 0a 7d 0d 0a 2e 66 63 2d 64 61 79 2d 6e 75 6d 62 65 72 2e 66 63 2d 6f 74 68 65 72 2d 6d 6f 6e 74 68 20 7b 0d 0a 20 20 Data Ascii: --- Heading Style ---------- /.heading-border { border-bottom: 1px solid #d3d3d3; margin: 30px 0; padding: 20px 0;}/ -------- FullCalendar - Plugin ---------- */.fc-day-number { color: #333333;}.fc-day-number.fc-other-month {
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 69 6e 64 65 78 3a 20 2d 31 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 2f 2a 6c 65 66 74 3a 20 2d 31 30 30 25 3b 2a 2f 0d 0a 20 20 2f 2a 6c 65 66 74 20 6f 72 20 72 69 67 68 74 20 61 6e 64 20 74 68 65 20 77 69 64 74 68 20 6f 66 20 79 6f 75 72 20 6e 61 76 69 67 61 74 69 6f 6e 20 70 61 6e 65 6c 2a 2f 0d 0a 20 20 6c 65 66 74 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 2f 2a 6c 65 66 74 20 6f 72 20 72 69 67 68 74 20 61 6e 64 20 74 68 65 20 77 69 64 74 68 20 6f 66 20 79 6f 75 72 20 6e 61 76 69 67 61 74 69 6f 6e 20 70 61 6e 65 6c 2a 2f 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 2f 2a 73 68 6f 75 6c 64 20 6d 61 74 63 68 20 74 68 65 20 61 62 6f 76 65 20 76 61 Data Ascii: index: -1; position: fixed; /left: -100%;/ /left or right and the width of your navigation panel/ left: 0 !important; /left or right and the width of your navigation panel/ opacity: 0; width: 100%; /*should match the above va
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 6f 6c 75 74 65 3b 0d 0a 20 20 74 6f 70 3a 20 30 3b 0d 0a 7d 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 20 54 72 61 6e 73 69 74 69 6f 6e 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 2e 73 69 64 65 2d 70 75 73 68 2d 70 61 6e 65 6c 2e 66 75 6c 6c 77 69 64 74 68 2d 70 61 67 65 20 23 77 72 61 70 70 65 72 2c 0d 0a 2e 73 69 64 65 2d 70 75 73 68 2d 70 61 6e 65 6c 2e 66 75 6c 6c 77 69 64 74 68 2d 70 61 67 65 20 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 73 63 72 6f 6c 6c 2d 74 6f 2d 66 69 78 65 64 2d 66 69 78 65 64 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 34 73 20 65 61 73 65 3b 0d 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c Data Ascii: olute; top: 0;}/* -------- Transition ---------- */.side-push-panel.fullwidth-page #wrapper,.side-push-panel.fullwidth-page header .header-nav-wrapper.scroll-to-fixed-fixed .container { -webkit-transition: all 0.4s ease; -o-transition: al
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 2d 63 61 72 6f 75 73 65 6c 2e 6f 77 6c 2d 6e 61 76 2d 74 6f 70 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 70 72 65 76 20 69 2c 0d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2e 6f 77 6c 2d 6e 61 76 2d 74 6f 70 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 6e 65 78 74 20 69 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0d 0a 7d 0d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2e 6e 6f 2d 62 75 6c 6c 65 74 20 2e 6f 77 6c 2d 6e 61 76 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 72 65 63 65 6e 74 2d 70 72 6f 6a 65 63 74 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 6e 61 76 20 3e 20 64 69 76 20 7b 0d 0a 20 20 74 6f Data Ascii: -carousel.owl-nav-top .owl-controls .owl-nav .owl-prev i,.owl-carousel.owl-nav-top .owl-controls .owl-nav .owl-next i { font-size: 24px;}.owl-carousel.no-bullet .owl-nav { display: none;}.recent-project .owl-controls .owl-nav > div { to
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 7d 0d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 63 61 72 74 20 2e 74 6f 74 61 6c 2d 63 61 72 74 20 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 2c 0d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 63 61 72 74 20 2e 74 6f 74 61 6c 2d 63 61 72 74 20 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 68 2c 0d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 63 61 72 74 20 2e 74 6f 74 61 6c 2d 63 61 72 74 20 2e 74 61 62 6c 65 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 64 2c 0d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 63 61 72 74 20 2e 74 6f 74 61 6c 2d 63 61 72 74 20 2e 74 61 62 6c 65 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 68 2c 0d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 63 61 72 74 20 2e 74 6f 74 61 Data Ascii: space: nowrap;}.dropdown-cart .total-cart .table > tbody > tr > td,.dropdown-cart .total-cart .table > tbody > tr > th,.dropdown-cart .total-cart .table > tfoot > tr > td,.dropdown-cart .total-cart .table > tfoot > tr > th,.dropdown-cart .tota
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 63 33 63 33 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 66 61 66 61 66 3b 0d 0a 7d 0d 0a 2e 62 74 6e 2d 67 72 61 79 3a 61 63 74 69 76 65 2c 0d 0a 2e 62 74 6e 2d 67 72 61 79 2e 61 63 74 69 76 65 2c 0d 0a 2e 6f 70 65 6e 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 67 72 61 79 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 62 74 6e 2d 67 72 61 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 0d 0a 2e 62 74 6e 2d 67 72 61 79 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 0d 0a 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 67 72 61 79 3a 68 6f 76 65 72 2c 0d 0a 2e 62 74 6e 2d 67 72 61 79 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 Data Ascii: c3c3; border-color: #afafaf;}.btn-gray:active,.btn-gray.active,.open > .dropdown-toggle.btn-gray { background-image: none;}.btn-gray.disabled:hover,.btn-gray[disabled]:hover,fieldset[disabled] .btn-gray:hover,.btn-gray.disabled:foc
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 29 3b 0d 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 0d 0a 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 37 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 73 3b 0d 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 37 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 73 3b 0d 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 37 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 73 3b 0d 0a 7d 0d 0a 2e 69 63 6f 6e 2d 62 6f 78 3a 68 6f 76 65 72 20 2e Data Ascii: ); -ms-transform: rotate(-45deg); -o-transform: rotate(-45deg); transform: rotate(-45deg); -webkit-transition: all 700ms ease-in-out 0s; -o-transition: all 700ms ease-in-out 0s; transition: all 700ms ease-in-out 0s;}.icon-box:hover .
2024-10-24 22:48:20 UTC	16384	IN	Data Raw: 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0d 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 63 61 70 69 74 61 6c 69 7a 65 3b 0d 0a 7d 0d 0a 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2d 74 61 62 2d 63 65 6e 74 65 72 65 64 20 2e 6e 61 76 2d 70 69 6c 6c 73 20 3e 20 6c 69 20 3e 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 7d 0d 0a 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2d 74 61 62 2d 63 65 6e 74 65 72 65 64 20 2e 6e 61 76 2d 70 69 6c 6c 73 20 3e 20 6c 69 20 3e 20 61 20 69 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 2e 68 6f Data Ascii: ; margin-right: 10px; margin-bottom: 10px; text-transform: capitalize;}.horizontal-tab-centered .nav-pills > li > a:hover { color: #fff;}.horizontal-tab-centered .nav-pills > li > a i { font-size: 14px; margin-right: 8px;}.ho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49974	104.17.25.14	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	594	OUT	GET /ajax/libs/twitter-bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://free.webcompanion.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:21 UTC	951	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:20 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb04010-1d9ac" Last-Modified: Mon, 04 May 2020 16:17:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 100204 Expires: Tue, 14 Oct 2025 22:48:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2FAujh317%2BN%2FsxamjMffxJXhYXyChs%2BTrxFp%2F4cIe4rqcPKiHFbsRXaCo5ipVT2NIUm4uVbsj3UJiLaY3H28dbznGBWomj4qepWewvjDCzhDvj23xkphktkq94Sro2Zv%2FN3cEJ8R"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d7d838b18926b58-DFW alt-svc: h3=":443"; ma=86400
2024-10-24 22:48:21 UTC	418	IN	Data Raw: 33 39 38 35 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b Data Ascii: 3985/! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f Data Ascii: ,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{bo
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 Data Ascii: height:auto}input[type=search]{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 Data Ascii: 1px solid #ddd!important}}@font-face{font-family:'Glyphicons Halflings';src:url(../fonts/glyphicons-halflings-regular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.woff
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 65 30 31 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 Data Ascii: e010"}.glyphicon-th:before{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphi
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 Data Ascii: on-bookmark:before{content:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-heig
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 68 69 63 6f 6e 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: hicon-step-forward:before{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{conte
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: }.glyphicon-comment:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\e114"}.glyphicon-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{conte
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f Data Ascii: d:before{content:"\e141"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{content:"\e144"}.glyphicon-phone:before{content:"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:befo
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 Data Ascii: e{content:"\e173"}.glyphicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:before{content:"\e176"}.glyphicon-credit-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49975	104.17.25.14	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	592	OUT	GET /ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://free.webcompanion.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:21 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:21 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e5f-6b4a" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 106533 Expires: Tue, 14 Oct 2025 22:48:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6TfEqXIQ%2BSeaWw%2BSqp4Y9XBOfQCaeW6NOlkBxCHCjme%2BA1ZcT1ScwoCeFRAJVEFEqEGTotWu2rAzD0nEqpCk7VE2ORQVH5sj87JEvuJH1ZQYbCSZmDoyd5rYIYGC6vvNJuulyXNJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d7d838b1a7e4749-DFW alt-svc: h3=":443"; ma=86400
2024-10-24 22:48:21 UTC	425	IN	Data Raw: 36 62 34 61 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 35 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 35 Data Ascii: 6b4a/! Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 35 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 Data Ascii: s/fontawesome-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 Data Ascii: t-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 Data Ascii: ;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"\f00
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: ntent:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{conte
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 Data Ascii: :before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:before
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 Data Ascii: .fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-up:b
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: re-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{cont
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 Data Ascii: before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-underline:bef
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b Data Ascii: re,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:before{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49976	104.17.25.14	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	561	OUT	GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free.webcompanion.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:21 UTC	964	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-14e4a" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 12650 Expires: Tue, 14 Oct 2025 22:48:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kuIg1Rf217cdLuVHgn%2Fv0%2BKIFYNkUWerC8efnOPayBKockzG0WTE1%2BehONsy2U%2FNM6qCYwIh19wwtIWMNFl0Wb4w5GTu3MUHo%2BfH1P9VY5J7jj%2FpLz1BG25trQSvPz2wvOt781v6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d7d838b1be56c0e-DFW alt-svc: h3=":443"; ma=86400
2024-10-24 22:48:21 UTC	405	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 Data Ascii: 7bec/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a d
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 2c 6a 3d 69 2e 74 6f 53 74 72 69 6e 67 2c 6b 3d 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6c 3d 7b 7d 2c 6d 3d 22 32 2e 32 2e 34 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 6c 65 6e 67 74 Data Ascii: ,j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",lengt
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 61 Data Ascii: );return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray,isWindow:function(a){return null!=a&&a
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 3f 6e 2e 6d 65 72 67 65 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 67 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 68 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 5b 5d 2c 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 Data Ascii: ?n.merge(c,"string"==typeof a?[a]:a):g.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:h.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;c>d;d++)a[e++]=b[d];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.lengt
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 67 74 68 3b 64 3e 63 3b 63 2b 2b 29 69 66 28 61 5b 63 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4c 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4d 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 5c 78 30 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4e 3d 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 22 2b 4d 2b 22 29 28 3f 3a 22 2b Data Ascii: gth;d>c;c++)if(a[c]===b)return c;return-1},K="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.\|[\\w-]\|[^\\x00-\\xa0])+",N="\\["+L+"*("+M+")(?:"+
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 45 3d 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 61 29 7b 48 3d 7b 61 70 70 6c 79 3a 45 2e Data Ascii: =function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},da=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(ea){H={apply:E.
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 67 61 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d Data Ascii: ga(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ha(a){return a[u]=!0,a}function ia(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.rem
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 5a 2e 74 65 73 74 28 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 63 2e 67 65 74 42 79 49 64 3d 69 61 28 66 75 6e 63 74 Data Ascii: ion(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagName=ia(function(a){return a.appendChild(n.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=Z.test(n.getElementsByClassName),c.getById=ia(funct
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 22 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4b 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 Data Ascii: ",a.querySelectorAll("[msallowcapture^='']").length&&q.push("[^$]="+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+L+"*(?:value\|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").lengt
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 6e 7c 7c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 61 29 3f 2d 31 3a 62 3d 3d 3d 6e 7c 7c 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 Data Ascii: ?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===n\|\|a.ownerDocument===v&&t(v,a)?-1:b===n\|\|b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49970	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	748	OUT	GET /minime/us_es/css/custom-bootstrap-margin-padding.css HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
2024-10-24 22:48:21 UTC	471	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:20 GMT Content-Type: text/css Content-Length: 66339 Last-Modified: Fri, 18 Oct 2019 16:59:11 GMT Connection: close Vary: Accept-Encoding ETag: "5da9ef5f-10323" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	15913	IN	Data Raw: 2f 2a 20 0d 0d 0a 20 2a 20 43 75 73 74 6f 6d 20 42 6f 6f 74 73 74 72 61 70 20 4d 61 72 67 69 6e 20 50 61 64 64 69 6e 67 0d 0d 0a 20 2a 20 41 75 74 68 6f 72 20 2d 20 4d 64 20 49 73 6d 61 69 6c 20 48 6f 73 73 61 69 6e 0d 0d 0a 20 2a 20 47 69 74 20 20 20 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 73 6d 61 69 6c 63 73 65 6b 75 2f 43 75 73 74 6f 6d 2d 42 6f 6f 74 73 74 72 61 70 2d 4d 61 72 67 69 6e 2d 50 61 64 64 69 6e 67 0d 0d 0a 20 2a 20 57 65 62 20 20 20 20 2d 20 68 74 74 70 3a 2f 2f 69 73 6d 61 69 6c 2d 68 6f 73 73 61 69 6e 2e 6d 65 2f 0d 0d 0a 20 2a 20 45 6d 61 69 6c 20 20 2d 20 69 73 6d 61 69 6c 63 73 65 6b 75 40 67 6d 61 69 6c 2e 63 6f 6d 0d 0d 0a 20 2a 2f 0d 0d 0a 0d 0d 0a 0d 0d 0a 2f 2a 2a 0d 0d 0a 20 2a 20 54 61 62 6c 65 20 Data Ascii: /* * Custom Bootstrap Margin Padding * Author - Md Ismail Hossain * Git - https://github.com/ismailcseku/Custom-Bootstrap-Margin-Padding * Web - http://ismail-hossain.me/ * Email - ismailcseku@gmail.com //* * Table
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 6c 67 2d 31 31 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 6c 67 2d 31 32 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 6c 67 2d 31 33 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 6c 67 2d 31 34 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 6c 67 2d 31 35 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d Data Ascii: 0px !important}.mb-lg-110 {margin-bottom: 110px !important}.mb-lg-120 {margin-bottom: 120px !important}.mb-lg-130 {margin-bottom: 130px !important}.mb-lg-140 {margin-bottom: 140px !important}.mb-lg-150 {margin-bottom: 150px !important}.m
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 3a 20 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 70 6c 2d 6d 64 2d 35 30 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 70 6c 2d 6d 64 2d 36 30 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 36 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 70 6c 2d 6d 64 2d 37 30 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 37 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 70 6c 2d 6d 64 2d 38 30 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 70 6c 2d 6d 64 2d 39 30 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 39 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 70 6c 2d 6d 64 2d 31 30 30 20 7b 70 61 Data Ascii: : 40px !important}.pl-md-50 {padding-left: 50px !important}.pl-md-60 {padding-left: 60px !important}.pl-md-70 {padding-left: 70px !important}.pl-md-80 {padding-left: 80px !important}.pl-md-90 {padding-left: 90px !important}.pl-md-100 {pa
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 62 2d 78 73 2d 34 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 78 73 2d 35 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 78 73 2d 36 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 36 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 78 73 2d 37 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 37 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 78 73 2d 38 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 38 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 6d 62 2d 78 73 2d 39 30 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 39 30 70 78 20 21 Data Ascii: b-xs-40 {margin-bottom: 40px !important}.mb-xs-50 {margin-bottom: 50px !important}.mb-xs-60 {margin-bottom: 60px !important}.mb-xs-70 {margin-bottom: 70px !important}.mb-xs-80 {margin-bottom: 80px !important}.mb-xs-90 {margin-bottom: 90px !
2024-10-24 22:48:21 UTC	1274	IN	Data Raw: 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 38 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 70 62 2d 78 78 73 2d 31 39 30 20 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 39 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 2e 70 62 2d 78 78 73 2d 32 30 30 20 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0d 0a 0d 0d 0a 2f 2a 0d 0d 0a 20 2a 20 36 2e 31 30 20 2d 3e 20 50 61 64 64 69 6e 67 20 6c 65 66 74 0d 0d 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0d 0a 2a 2f 0d 0d 0a 2e 70 6c 2d 78 78 73 2d 30 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 21 69 6d 70 6f 72 74 Data Ascii: ing-bottom: 180px !important}.pb-xxs-190 {padding-bottom: 190px !important}.pb-xxs-200 {padding-bottom: 200px !important}/* * 6.10 -> Padding left * -----------------------------------------------*/.pl-xxs-0 {padding-left: 0!import

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49969	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	724	OUT	GET /minime/us_es/css/animate.css HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
2024-10-24 22:48:21 UTC	472	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:20 GMT Content-Type: text/css Content-Length: 201573 Last-Modified: Thu, 27 Jan 2022 17:49:12 GMT Connection: close Vary: Accept-Encoding ETag: "61f2db18-31365" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	15912	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0d 0a 2f 2a 21 0d 0d 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0d 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0d 0a 20 2a 0d 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 44 61 6e 69 65 6c 20 45 64 65 6e 0d 0d 0a 20 2a 2f 0d 0d 0a 0d 0d 0a 2e 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 31 20 7b 0d 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 33 73 3b 0d 0d 0a 20 20 20 20 20 Data Ascii: @charset "UTF-8";/! animate.css -http://daneden.me/animate * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2016 Daniel Eden */.animation-delay1 { -webkit-animation-delay: 0.3s;
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 0d 0a 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 6c 69 70 49 6e 58 3b 0d 0d 0a 20 20 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0d 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 6c 69 70 49 6e 58 3b 0d 0d 0a 7d 0d 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 6c 69 70 4f 75 74 58 20 7b 0d 0d 0a 20 20 20 20 30 25 20 7b 0d 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 58 28 30 64 65 67 29 3b 0d 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0d 0a 20 20 20 20 7d 0d 0d 0a 20 20 31 30 30 25 20 Data Ascii: -o-animation-name: flipInX; backface-visibility: visible !important; animation-name: flipInX;}@-webkit-keyframes flipOutX { 0% { -webkit-transform: perspective(400px) rotateX(0deg); opacity: 1; } 100%
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0d 0d 0a 20 20 7d 0d 0d 0a 7d 0d 0d 0a 0d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 4f 75 74 52 69 67 68 74 20 7b 0d 0d 0a 20 20 30 25 20 7b 0d 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0d 0d 0a 20 20 7d 0d 0d 0a 20 20 0d 0d 0a 20 20 31 30 30 25 20 7b 0d 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0d 0d 0a 20 20 7d 0d 0d 0a 7d 0d 0d 0a 0d 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 61 64 65 4f 75 74 52 69 67 68 74 20 7b 0d 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 Data Ascii: orm: translateX(20px); }}@keyframes fadeOutRight { 0% { opacity: 1; transform: translateX(0); } 100% { opacity: 0; transform: translateX(20px); }}.animated.fadeOutRight { -webkit-anima
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 20 7d 0d 0d 0a 20 20 0d 0d 0a 20 20 32 30 25 20 7b 0d 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 70 78 29 3b 0d 0d 0a 20 20 7d 0d 0d 0a 20 20 0d 0d 0a 20 20 31 30 30 25 20 7b 0d 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 30 30 70 78 29 3b 0d 0d 0a 20 20 7d 0d 0d 0a 7d 0d 0d 0a 0d 0d 0a 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 4f 75 74 52 69 67 68 74 20 7b 0d 0d 0a 20 20 30 25 20 7b 0d 0d 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0d 0d 0a 20 20 7d 0d Data Ascii: } 20% { opacity: 1; -moz-transform: translateX(-20px); } 100% { opacity: 0; -moz-transform: translateX(2000px); }}@-o-keyframes bounceOutRight { 0% { -o-transform: translateX(0); }
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 74 79 3a 20 31 3b 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 20 7d 0d 0d 0a 7d 0d 0d 0a 0d 0d 0a 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 6c 6c 49 6e 20 7b 0d 0d 0a 20 20 30 25 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 20 72 6f 74 61 74 65 28 2d 31 32 30 64 65 67 29 3b 20 7d 0d 0d 0a 20 20 31 30 30 25 20 7b 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 20 7d 0d 0d 0a 7d 0d 0d 0a 0d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 6c 6c 49 6e 20 Data Ascii: ty: 1; -moz-transform: translateX(0px) rotate(0deg); }}@-o-keyframes rollIn { 0% { opacity: 0; -o-transform: translateX(-100%) rotate(-120deg); } 100% { opacity: 1; -o-transform: translateX(0px) rotate(0deg); }}@keyframes rollIn
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 61 6e 73 6c 61 74 65 33 64 28 31 30 30 30 70 78 2c 20 30 2c 20 30 29 3b 0d 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 35 35 2c 20 30 2e 36 37 35 2c 20 30 2e 31 39 30 29 3b 0d 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 35 35 2c 20 30 2e 36 37 35 2c 20 30 2e 31 39 30 29 3b 0d 0d 0a 20 20 7d 0d 0d 0a 0d 0d 0a 20 20 36 30 25 20 7b 0d 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 34 Data Ascii: anslate3d(1000px, 0, 0); -webkit-animation-timing-function: cubic-bezier(0.550, 0.055, 0.675, 0.190); animation-timing-function: cubic-bezier(0.550, 0.055, 0.675, 0.190); } 60% { opacity: 1; -webkit-transform: scale3d(.4
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 68 76 72 2d 67 72 6f 77 3a 61 63 74 69 76 65 2c 2e 68 76 72 2d 67 72 6f 77 3a 66 6f 63 75 73 2c 2e 68 Data Ascii: -webkit-backface-visibility:hidden;backface-visibility:hidden;-moz-osx-font-smoothing:grayscale;-webkit-transition-duration:.3s;transition-duration:.3s;-webkit-transition-property:transform;transition-property:transform}.hvr-grow:active,.hvr-grow:focus,.h
2024-10-24 22:48:22 UTC	16384	IN	Data Raw: 69 67 6e 3a 6d 69 64 64 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 68 76 72 2d 77 6f 62 62 6c 65 2d 74 6f 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 3a 61 63 74 69 76 65 2c 2e 68 76 72 2d 77 6f 62 62 6c 65 2d 74 6f 2d 62 6f 74 74 6f 6d 2d 72 69 Data Ascii: ign:middle;-webkit-transform:translateZ(0);transform:translateZ(0);box-shadow:0 0 1px rgba(0,0,0,0);-webkit-backface-visibility:hidden;backface-visibility:hidden;-moz-osx-font-smoothing:grayscale}.hvr-wobble-to-bottom-right:active,.hvr-wobble-to-bottom-ri
2024-10-24 22:48:22 UTC	16384	IN	Data Raw: 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 32 2c 31 2e 36 34 2c 2e 33 37 2c 2e 36 36 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 32 2c 31 2e 36 34 2c 2e 33 37 2c 2e 36 36 29 7d 2e 68 76 72 2d 62 6f 75 6e 63 65 2d 74 6f 2d 6c 65 66 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 Data Ascii: );transform:scaleX(1);-webkit-transition-timing-function:cubic-bezier(0.52,1.64,.37,.66);transition-timing-function:cubic-bezier(0.52,1.64,.37,.66)}.hvr-bounce-to-left{display:inline-block;vertical-align:middle;-webkit-transform:translateZ(0);transform:tr
2024-10-24 22:48:22 UTC	16384	IN	Data Raw: 6e 3a 61 63 74 69 76 65 3a 62 65 66 6f 72 65 2c 2e 68 76 72 2d 6f 75 74 6c 69 6e 65 2d 69 6e 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 68 76 72 2d 6f 75 74 6c 69 6e 65 2d 69 6e 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 74 6f 70 3a 2d 38 70 78 3b 72 69 67 68 74 3a 2d 38 70 78 3b 62 6f 74 74 6f 6d 3a 2d 38 70 78 3b 6c 65 66 74 3a 2d 38 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 68 76 72 2d 72 6f 75 6e 64 2d 63 6f 72 6e 65 72 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a Data Ascii: n:active:before,.hvr-outline-in:focus:before,.hvr-outline-in:hover:before{top:-8px;right:-8px;bottom:-8px;left:-8px;opacity:1}.hvr-round-corners{display:inline-block;vertical-align:middle;-webkit-transform:translateZ(0);transform:translateZ(0);box-shadow:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49972	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	728	OUT	GET /minime/us_es/css/style.css?v=3.7 HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
2024-10-24 22:48:21 UTC	470	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:20 GMT Content-Type: text/css Content-Length: 47117 Last-Modified: Thu, 02 Mar 2023 21:41:07 GMT Connection: close Vary: Accept-Encoding ETag: "640117f3-b80d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	15914	IN	Data Raw: 2f 2a 0a 09 40 41 75 74 68 6f 72 3a 20 41 6c 65 78 61 6e 64 65 72 20 4b 79 72 69 61 6b 61 6b 69 73 20 0a 2a 2f 0a 0a 2f 2a 20 20 54 55 52 4e 20 4f 4e 20 46 4f 52 20 43 4f 4f 4c 20 53 43 52 4f 4c 4c 42 41 52 0a 09 68 74 6d 6c 20 7b 20 20 2d 2d 73 63 72 6f 6c 6c 62 61 72 42 47 3a 62 6c 61 63 6b 3b 20 20 2d 2d 74 68 75 6d 62 42 47 3a 23 63 65 30 30 66 61 3b 7d 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 3b 7d 20 62 6f 64 79 20 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 38 31 32 33 61 3b 20 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 74 68 69 6e 3b 20 73 63 72 6f 6c 6c 62 61 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 74 68 75 6d 62 42 47 29 20 76 61 Data Ascii: /@Author: Alexander Kyriakakis //* TURN ON FOR COOL SCROLLBARhtml { --scrollbarBG:black; --thumbBG:#ce00fa;}html, body {overflow: ;} body {color:#000; font-size:15px; background:#18123a; scrollbar-width:thin; scrollbar-color: var(--thumbBG) va
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 7d 0a 2e 62 67 2d 64 61 72 6b 2d 74 72 61 6e 73 70 61 72 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 35 29 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2e 6c 65 66 74 7b 6c 65 66 74 3a 30 7d 0a 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2e 72 69 67 68 74 7b 72 69 67 68 74 3a 30 7d 0a 2e 69 63 6f 6e 2d 72 6f 75 6e 64 2d 62 6c 75 65 7b 62 6f 72 64 65 72 3a 34 70 78 20 73 6f 6c 69 64 20 23 31 39 33 37 62 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 70 61 64 64 69 6e 67 3a 35 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 62 63 66 32 7d 0a 0a 2e 6d 69 6e 2d 68 65 69 67 68 74 2d 32 30 30 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 33 30 70 78 7d 0a 2e Data Ascii: }.bg-dark-transparent{background-color:rgba(0,0,0,0.85)!important}.carousel-control.left{left:0}.carousel-control.right{right:0}.icon-round-blue{border:4px solid #1937bc;border-radius:50%;padding:5px;color:#00bcf2}.min-height-200{min-height:330px}.
2024-10-24 22:48:21 UTC	14819	IN	Data Raw: 3a 32 38 70 78 7d 0a 0a 0a 2e 6c 6f 67 6f 2d 68 6f 76 65 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 77 69 64 74 68 3a 32 33 30 70 78 3b 68 65 69 67 68 74 3a 32 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 2d 31 30 35 70 78 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 30 25 29 7d 0a 2e 6c 6f 67 6f 2d 68 6f 76 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6c 6f 67 6f 2d 68 6f 76 65 72 Data Ascii: :28px}.logo-hover-placeholder{width:230px;height:230px;position:absolute;bottom:-105px;left:0;right:0;margin:0 auto;-webkit-transform:translateX(-0%);-ms-transform:translateX(-0%);transform:translateX(-0%)}.logo-hover{-webkit-animation-name:logo-hover

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49971	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	725	OUT	GET /minime/us_es/js/jquery-plugin-collection.js HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
2024-10-24 22:48:21 UTC	486	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:20 GMT Content-Type: application/javascript Content-Length: 709646 Last-Modified: Thu, 23 Jul 2020 22:04:48 GMT Connection: close Vary: Accept-Encoding ETag: "5f1a0980-ad40e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	15898	IN	Data Raw: 2f 2a 0a 40 41 75 74 68 6f 72 3a 20 41 6c 65 78 61 6e 64 65 72 20 4b 79 72 69 61 6b 61 6b 69 73 0a 0a 0a 4e 65 63 65 73 73 61 72 79 20 6a 51 75 65 72 79 20 43 6f 6c 6c 65 63 74 69 6f 6e 0a 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 54 61 62 6c 65 20 6f 66 20 43 6f 6e 74 65 6e 74 73 3a 0a 20 2a 0a 20 2a 20 20 6a 51 75 65 72 79 20 43 6f 6f 6b 69 65 20 50 6c 75 67 69 6e 20 76 31 2e 34 2e 31 0a 20 2a 20 20 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 31 2e 33 2e 6a 73 20 66 6f 72 20 70 69 65 63 68 61 72 74 20 73 6d 6f 6f 74 68 6e 65 73 73 20 61 6e 64 20 6f 74 68 65 72 0a 20 2a 20 20 6a 71 75 65 72 79 2e 73 63 72 6f 6c 6c 54 6f 0a 20 2a 20 20 6a 71 75 65 72 79 2e 6c 6f 63 61 6c 53 63 72 6f 6c 6c 0a 20 2a 20 20 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 20 66 6f 72 20 77 65 62 73 Data Ascii: /@Author: Alexander KyriakakisNecessary jQuery Collection//** * Table of Contents: * * jQuery Cookie Plugin v1.4.1 * jquery.easing.1.3.js for piechart smoothness and other * jquery.scrollTo * jquery.localScroll * SmoothScroll for webs
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 65 2b 2b 29 7d 7d 28 29 2c 46 3d 7b 7d 3b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 26 26 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 53 53 5f 64 65 6c 74 61 42 75 66 66 65 72 26 26 28 4f 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 53 53 5f 64 65 6c 74 61 42 75 66 66 65 72 2e 73 70 6c 69 74 28 22 2c 22 29 29 3b 76 61 72 20 49 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 77 69 6e 64 6f 77 2e 77 65 62 6b 69 74 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 77 69 6e 64 6f 77 2e 6d 6f 7a 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 77 69 6e 64 6f 77 2e Data Ascii: e++)}}(),F={};window.localStorage&&localStorage.SS_deltaBuffer&&(O=localStorage.SS_deltaBuffer.split(","));var I,_=function(){return window.requestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.mozRequestAnimationFrame\|\|function(e,t,o){window.
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 53 63 72 6f 6c 6c 54 6f 46 69 78 65 64 22 29 3b 6c 28 29 3b 48 2e 74 72 69 67 67 65 72 28 22 75 6e 66 69 78 65 64 2e 53 63 72 6f 6c 6c 54 6f 46 69 78 65 64 22 29 7d 7d 7d 7d 65 6c 73 65 7b 69 66 28 4b 3e 30 29 7b 69 66 28 4e 2b 61 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 2d 48 2e 6f 75 74 65 72 48 65 69 67 68 74 28 74 72 75 65 29 3e 3d 4b 2d 28 74 28 29 7c 7c 2d 6e 28 29 29 29 7b 69 66 28 71 28 29 29 7b 70 28 29 3b 48 2e 74 72 69 67 67 65 72 28 22 70 72 65 55 6e 66 69 78 65 64 2e 53 63 72 6f 6c 6c 54 6f 46 69 78 65 64 22 29 3b 69 66 28 46 3d 3d 3d 22 61 62 73 6f 6c 75 74 65 22 29 7b 62 28 29 7d 65 6c 73 65 7b 6c 28 29 7d 48 2e 74 72 69 67 67 65 72 28 22 75 6e 66 69 78 65 64 2e 53 63 72 6f 6c 6c 54 6f 46 69 78 65 64 22 29 7d 7d 65 6c 73 65 7b 69 Data Ascii: ScrollToFixed");l();H.trigger("unfixed.ScrollToFixed")}}}}else{if(K>0){if(N+a(window).height()-H.outerHeight(true)>=K-(t()\|\|-n())){if(q()){p();H.trigger("preUnfixed.ScrollToFixed");if(F==="absolute"){b()}else{l()}H.trigger("unfixed.ScrollToFixed")}}else{i
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 3d 64 26 26 66 5b 65 5d 2e 73 70 6c 69 63 65 28 64 2c 31 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 64 2e 6f 66 66 3d 63 28 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 29 2c 64 2e 61 64 64 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 6e 69 70 75 6c 61 74 65 4c 69 73 74 65 6e 65 72 73 28 21 31 2c 61 2c 62 29 7d 2c 64 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 6e 69 70 75 6c 61 74 65 4c 69 73 74 65 6e 65 72 73 28 21 30 2c 61 2c 62 29 7d 2c 64 2e 6d 61 6e 69 70 75 6c 61 74 65 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 61 3f 74 Data Ascii: =d&&f[e].splice(d,1));return this},d.off=c("removeListener"),d.addListeners=function(a,b){return this.manipulateListeners(!1,a,b)},d.removeListeners=function(a,b){return this.manipulateListeners(!0,a,b)},d.manipulateListeners=function(a,b,c){var d,e,f=a?t
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 73 2c 61 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6c 6f 61 64 49 74 65 6d 73 28 29 2c 74 68 69 73 2e 73 74 61 6d 70 73 3d 5b 5d 2c 74 68 69 73 2e 73 74 61 6d 70 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 61 6d 70 29 2c 65 2e 65 78 74 65 6e 64 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 73 52 65 73 69 7a 65 42 6f 75 6e 64 26 26 74 68 69 73 2e 62 69 6e 64 52 65 73 69 7a 65 28 29 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6c 6f 61 64 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 74 65 6d 73 3d 74 68 69 Data Ascii: s,a)},g.prototype._create=function(){this.reloadItems(),this.stamps=[],this.stamp(this.options.stamp),e.extend(this.element.style,this.options.containerStyle),this.options.isResizeBound&&this.bindResize()},g.prototype.reloadItems=function(){this.items=thi
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 55 49 44 2b 2b 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 75 70 64 61 74 65 49 74 65 6d 73 53 6f 72 74 44 61 74 61 28 61 29 2c 61 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 4c 61 79 6f 75 74 4d 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 67 2e 6d 6f 64 65 73 5b 61 5d 2c 63 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 61 5d 7c 7c 7b 7d 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 61 5d 3d 62 2e 6f 70 74 69 6f 6e 73 3f 65 2e 65 78 74 65 6e 64 28 62 2e 6f 70 74 69 6f 6e 73 2c 63 29 3a 63 2c 74 68 69 73 2e 6d 6f 64 65 73 5b 61 5d 3d 6e 65 77 20 62 28 74 68 69 73 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 61 79 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 5f 69 73 4c 61 79 6f 75 74 49 6e 69 Data Ascii: UID++}return this._updateItemsSortData(a),a},m.prototype._initLayoutMode=function(a){var b=g.modes[a],c=this.options[a]\|\|{};this.options[a]=b.options?e.extend(b.options,c):c,this.modes[a]=new b(this)},m.prototype.layout=function(){return!this._isLayoutIni
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 74 74 69 6e 67 2e 2e 2e 22 3b 69 66 28 73 65 74 74 69 6e 67 73 2e 6c 61 6e 67 75 61 67 65 21 3d 3d 22 65 6e 22 26 26 24 2e 61 6a 61 78 43 68 69 6d 70 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 26 26 24 2e 61 6a 61 78 43 68 69 6d 70 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 73 65 74 74 69 6e 67 73 2e 6c 61 6e 67 75 61 67 65 5d 26 26 24 2e 61 6a 61 78 43 68 69 6d 70 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 73 65 74 74 69 6e 67 73 2e 6c 61 6e 67 75 61 67 65 5d 5b 22 73 75 62 6d 69 74 22 5d 29 7b 73 75 62 6d 69 74 4d 73 67 3d 24 2e 61 6a 61 78 43 68 69 6d 70 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 73 65 74 74 69 6e 67 73 2e 6c 61 6e 67 75 61 67 65 5d 5b 22 73 75 62 6d 69 74 22 5d 7d 6c 61 62 65 6c 2e 68 74 6d 6c 28 73 75 62 6d 69 74 4d 73 67 29 2e 73 68 6f 77 Data Ascii: tting...";if(settings.language!=="en"&&$.ajaxChimp.translations&&$.ajaxChimp.translations[settings.language]&&$.ajaxChimp.translations[settings.language]["submit"]){submitMsg=$.ajaxChimp.translations[settings.language]["submit"]}label.html(submitMsg).show
2024-10-24 22:48:21 UTC	16384	IN	Data Raw: 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 2c 65 7d 28 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 0a 0a 2f 2a 0a 20 2a 20 20 54 79 70 65 64 20 41 6e 69 6d 61 74 69 6f 6e 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 65 29 7b 74 68 69 73 2e 65 6c 3d 74 28 73 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 2e 66 6e 2e 74 79 70 65 64 2e 64 65 66 61 75 6c 74 73 2c 65 29 2c 74 68 69 73 2e 69 73 49 6e 70 75 74 3d 74 68 69 73 2e 65 6c 2e 69 73 28 22 69 6e 70 75 74 22 29 2c 74 68 69 Data Ascii: r.userAgent)},e}()}).call(this);/* * Typed Animation * -----------------------------------------------*/!function(t){"use strict";var s=function(s,e){this.el=t(s),this.options=t.extend({},t.fn.typed.defaults,e),this.isInput=this.el.is("input"),thi
2024-10-24 22:48:22 UTC	16384	IN	Data Raw: 73 74 61 74 65 2e 69 73 53 63 72 6f 6c 6c 69 6e 67 3d 21 30 2c 74 68 69 73 2e 64 72 61 67 2e 75 70 64 61 74 65 64 58 3d 74 68 69 73 2e 64 72 61 67 2e 73 74 61 72 74 29 2c 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 74 68 69 73 2e 64 72 61 67 2e 75 70 64 61 74 65 64 58 29 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 44 72 61 67 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 64 2c 65 2c 66 3b 69 66 28 74 68 69 73 2e 73 74 61 74 65 2e 69 73 54 6f 75 63 68 29 7b 69 66 28 22 6d 6f 75 73 65 75 70 22 3d 3d 3d 62 2e 74 79 70 65 26 26 74 68 69 73 2e 24 73 74 61 67 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6f 77 6c 2d 67 72 61 62 22 29 2c 74 68 69 73 2e 74 72 69 67 67 65 72 28 22 64 72 61 67 67 65 64 22 29 2c 74 68 69 73 2e 64 72 61 67 2e 74 61 Data Ascii: state.isScrolling=!0,this.drag.updatedX=this.drag.start),this.animate(this.drag.updatedX)))},e.prototype.onDragEnd=function(b){var d,e,f;if(this.state.isTouch){if("mouseup"===b.type&&this.$stage.removeClass("owl-grab"),this.trigger("dragged"),this.drag.ta
2024-10-24 22:48:22 UTC	16384	IN	Data Raw: 73 2e 5f 63 6f 72 65 2e 24 73 74 61 67 65 2e 68 65 69 67 68 74 28 29 3b 22 79 6f 75 74 75 62 65 22 3d 3d 3d 67 2e 74 79 70 65 3f 63 3d 27 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 27 2b 68 2b 27 22 20 68 65 69 67 68 74 3d 22 27 2b 69 2b 27 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 65 6d 62 65 64 2f 27 2b 67 2e 69 64 2b 22 3f 61 75 74 6f 70 6c 61 79 3d 31 26 76 3d 22 2b 67 2e 69 64 2b 27 22 20 61 6c 6c 6f 77 66 75 6c 6c 73 63 72 65 65 6e 3e 3c 2f 69 66 72 61 6d 65 3e 27 3a 22 76 69 6d 65 6f 22 3d 3d 3d 67 2e 74 79 70 65 26 26 28 63 3d 27 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 2f 27 2b 67 2e 69 64 2b 27 3f 61 75 74 6f 70 Data Ascii: s._core.$stage.height();"youtube"===g.type?c='<iframe width="'+h+'" height="'+i+'" src="http://www.youtube.com/embed/'+g.id+"?autoplay=1&v="+g.id+'" allowfullscreen></iframe>':"vimeo"===g.type&&(c='<iframe src="http://player.vimeo.com/video/'+g.id+'?autop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49973	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	760	OUT	GET /images/wc-logo.svg HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
2024-10-24 22:48:21 UTC	474	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:20 GMT Content-Type: image/svg+xml Content-Length: 7188 Last-Modified: Wed, 17 May 2023 20:56:57 GMT Connection: close Vary: Accept-Encoding ETag: "64653f99-1c14" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	7188	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 35 20 33 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 235 38" version="1.1" xmlns="http://www.w3.org/2000/svg" x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49966	216.58.212.130	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:20 UTC	924	OUT	GET /pixel?google_nid=gonet_ads_&google_hm=MmFlMmY1Mjg4NTVkYWIzOQ&google_push=AXcoOmTWhpMqwLawBs62Yg7feQg1kNyqWxieoWzJtae_8o9mkIe-8QaxTfEDYXR4FjcOD2f5AR6NcM_YXTi9DkMJJ22wro2J33l106Q HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi5z2hyhg3QJz8JZTo3EDVWE02ubJhxJzeLi3WXUJeBs7-dPrw
2024-10-24 22:48:21 UTC	443	IN	HTTP/1.1 302 Found Location: https://sync.gonet-ads.com/match/google Date: Thu, 24 Oct 2024 22:48:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 236 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:21 UTC	236	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 67 6f 6e 65 74 2d 61 64 73 2e 63 6f 6d 2f 6d 61 74 63 68 2f 67 6f 6f 67 6c 65 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://sync.gonet-ads.com/match/google">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49981	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:21 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224821Z-15b8d89586f8nxpt6ys645x5v000000000s000000000n349 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49979	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:21 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224821Z-16849878b78ngdnlw4w0762cms00000008c000000000kybz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49978	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:21 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9a9b06d2-601e-0032-5ff9-24eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224821Z-r197bdfb6b4gx6v9pg74w9f47s00000001e000000000b76q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49980	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:21 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 352988b4-001e-0065-3a25-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224821Z-17c5cb586f6bzvl6c2dt6tbmm400000001t0000000003370 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49977	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:21 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:21 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224821Z-16849878b78dsttbr1qw36rxs800000008c000000000dqt2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49992	104.17.25.14	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:21 UTC	578	OUT	GET /ajax/libs/twitter-bootstrap/3.3.6/js/bootstrap.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://free.webcompanion.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:21 UTC	957	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:21 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb04010-9004" Last-Modified: Mon, 04 May 2020 16:17:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 17820 Expires: Tue, 14 Oct 2025 22:48:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=El3ngQjZ3HG5zTtGMTC6gzYWyAm5NhPwVlbC0OS1D7XaP0p13lvnaDR0LYoXA8ig6iQvYNb4kEWz%2B285Ddni8XQWjZSHdk6EQK6JsAo%2BBfmCrUp40DBgNtngYoisHGETukv3XtE%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d7d838ecd8e345e-DFW alt-svc: h3=":443"; ma=86400
2024-10-24 22:48:21 UTC	412	IN	Data Raw: 37 62 66 34 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e Data Ascii: 7bf4/! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 20 68 69 67 68 65 72 2c 20 62 75 74 20 6c 6f 77 65 72 20 74 68 61 6e 20 76 65 72 73 69 6f 6e 20 33 22 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 Data Ascii: higher, but lower than version 3")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"t
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 63 6c 6f 73 65 2e 62 73 2e 61 6c 65 72 74 22 29 29 2c 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 28 67 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 2c 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 67 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 67 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 63 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 3a 63 28 29 29 7d 3b 76 61 72 20 65 3d 61 2e 66 6e 2e 61 6c 65 72 74 3b 61 2e 66 6e 2e 61 6c 65 72 74 3d 62 2c 61 2e 66 6e 2e 61 6c 65 72 74 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 64 2c 61 2e 66 6e 2e 61 6c 65 72 74 2e 6e 6f 43 6f 6e 66 6c 69 Data Ascii: close.bs.alert")),b.isDefaultPrevented()\|\|(g.removeClass("in"),a.support.transition&&g.hasClass("fade")?g.one("bsTransitionEnd",c).emulateTransitionEnd(d.TRANSITION_DURATION):c())};var e=a.fn.alert;a.fn.alert=b,a.fn.alert.Constructor=d,a.fn.alert.noConfli
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 3d 3d 63 2e 70 72 6f 70 28 22 74 79 70 65 22 29 26 26 28 63 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 29 21 3d 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 26 26 28 61 3d 21 31 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 29 2c 63 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 29 2c 61 26 26 63 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 65 6c 73 65 20 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 Data Ascii: ==c.prop("type")&&(c.prop("checked")!==this.$element.hasClass("active")&&(a=!1),this.$element.toggleClass("active")),c.prop("checked",this.$element.hasClass("active")),a&&c.trigger("change")}else this.$element.attr("aria-pressed",!this.$element.hasClass("
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 62 6f 61 72 64 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 6b 65 79 64 6f 77 6e 2c 74 68 69 73 29 29 2c 22 68 6f 76 65 72 22 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 75 73 65 26 26 21 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 70 61 75 73 65 2c 74 68 69 73 29 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 2e 62 73 2e 63 61 72 6f 75 73 Data Ascii: is.options.keyboard&&this.$element.on("keydown.bs.carousel",a.proxy(this.keydown,this)),"hover"==this.options.pause&&!("ontouchstart"in document.documentElement)&&this.$element.on("mouseenter.bs.carousel",a.proxy(this.pause,this)).on("mouseleave.bs.carous
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 3d 3d 61 3f 74 68 69 73 2e 70 61 75 73 65 28 29 2e 63 79 63 6c 65 28 29 3a 74 68 69 73 2e 73 6c 69 64 65 28 61 3e 63 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 2c 74 68 69 73 2e 24 69 74 65 6d 73 2e 65 71 28 61 29 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7c 7c 28 74 68 69 73 2e 70 61 75 73 65 64 3d 21 30 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 6e 65 78 74 2c 20 2e 70 72 65 76 22 29 2e 6c 65 6e 67 74 68 26 26 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 2e 65 6e 64 29 2c 74 68 69 73 2e 63 79 63 6c 65 Data Ascii: ==a?this.pause().cycle():this.slide(a>c?"next":"prev",this.$items.eq(a))},c.prototype.pause=function(b){return b\|\|(this.paused=!0),this.$element.find(".next, .prev").length&&a.support.transition&&(this.$element.trigger(a.support.transition.end),this.cycle
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 6e 73 69 74 69 6f 6e 45 6e 64 28 63 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 29 3a 28 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 66 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 6d 29 29 2c 67 26 26 74 68 69 73 2e 63 79 63 6c 65 28 29 2c 74 68 69 73 7d 7d 3b 76 61 72 20 64 3d 61 2e 66 6e 2e 63 61 72 6f 75 73 65 6c 3b 61 2e 66 6e 2e 63 61 72 6f 75 73 65 6c 3d 62 2c 61 2e 66 6e 2e 63 61 72 6f 75 73 65 6c 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 63 2c 61 2e 66 6e 2e 63 61 72 6f 75 73 65 6c 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e Data Ascii: nsitionEnd(c.TRANSITION_DURATION)):(e.removeClass("active"),f.addClass("active"),this.sliding=!1,this.$element.trigger(m)),g&&this.cycle(),this}};var d=a.fn.carousel;a.fn.carousel=b,a.fn.carousel.Constructor=c,a.fn.carousel.noConflict=function(){return a.
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 64 2b 27 22 5d 27 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 3f 74 68 69 73 2e 24 70 61 72 65 6e 74 3d 74 68 69 73 2e 67 65 74 50 61 72 65 6e 74 28 29 3a 74 68 69 73 2e 61 64 64 41 72 69 61 41 6e 64 43 6f 6c 6c 61 70 73 65 64 43 6c 61 73 73 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 24 74 72 69 67 67 65 72 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 67 67 6c 65 26 26 74 68 69 73 2e 74 6f 67 67 6c 65 28 29 7d 3b 64 2e 56 45 52 53 49 4f 4e 3d 22 33 2e 33 2e 36 22 2c 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 3d 33 35 30 2c 64 2e 44 45 46 41 55 4c 54 53 3d 7b 74 6f 67 67 6c 65 3a 21 30 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: d+'"]'),this.transitioning=null,this.options.parent?this.$parent=this.getParent():this.addAriaAndCollapsedClass(this.$element,this.$trigger),this.options.toggle&&this.toggle()};d.VERSION="3.3.6",d.TRANSITION_DURATION=350,d.DEFAULTS={toggle:!0},d.prototype
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 76 61 72 20 62 3d 61 2e 45 76 65 6e 74 28 22 68 69 64 65 2e 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 3b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 62 29 2c 21 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 64 69 6d 65 6e 73 69 6f 6e 28 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 63 5d 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 63 5d 28 29 29 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 20 69 6e 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 21 31 29 2c 74 68 69 Data Ascii: var b=a.Event("hide.bs.collapse");if(this.$element.trigger(b),!b.isDefaultPrevented()){var c=this.dimension();this.$element[c](this.$element[c]())[0].offsetHeight,this.$element.addClass("collapsing").removeClass("collapse in").attr("aria-expanded",!1),thi
2024-10-24 22:48:21 UTC	1369	IN	Data Raw: 73 2e 63 6f 6c 6c 61 70 73 65 22 29 2c 68 3d 67 3f 22 74 6f 67 67 6c 65 22 3a 65 2e 64 61 74 61 28 29 3b 63 2e 63 61 6c 6c 28 66 2c 68 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 76 61 72 20 63 3d 62 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 63 7c 7c 28 63 3d 62 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 63 3d 63 26 26 2f 23 5b 41 2d 5a 61 2d 7a 5d 2f 2e 74 65 73 74 28 63 29 26 26 63 2e 72 65 70 6c 61 63 65 28 2f 2e 2a 28 3f 3d 23 5b 5e 5c 73 5d 2a 24 29 2f 2c 22 22 29 29 3b 76 61 72 20 64 3d 63 26 26 61 28 63 29 3b 72 65 74 75 72 6e 20 64 26 26 64 2e 6c 65 6e 67 74 68 3f 64 3a 62 2e 70 61 72 65 6e 74 28 29 7d 66 75 6e 63 Data Ascii: s.collapse"),h=g?"toggle":e.data();c.call(f,h)})}(jQuery),+function(a){"use strict";function b(b){var c=b.attr("data-target");c\|\|(c=b.attr("href"),c=c&&/#[A-Za-z]/.test(c)&&c.replace(/.(?=#[^\s]$)/,""));var d=c&&a(c);return d&&d.length?d:b.parent()}func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49991	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:21 UTC	772	OUT	GET /minime/images/main-wc-1-sm.jpg HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
2024-10-24 22:48:21 UTC	471	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:21 GMT Content-Type: image/jpeg Content-Length: 6528 Last-Modified: Fri, 16 Sep 2022 16:29:07 GMT Connection: close Vary: Accept-Encoding ETag: "6324a453-1980" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-24 22:48:21 UTC	6528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 a0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 01 32 00 02 00 00 00 14 00 00 00 5a 87 69 00 04 00 00 00 01 00 00 00 6e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 32 30 32 32 3a 30 39 3a 31 36 20 31 39 3a 32 39 3a 30 37 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 03 00 00 00 01 00 96 00 00 a0 03 00 03 00 00 00 01 00 6d 00 00 00 00 00 00 ff e1 0b 41 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 Data Ascii: JFIFHHExifMM*JR(2ZinHH2022:09:16 19:29:07mAhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzre

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	50006	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224822Z-16849878b78ngdnlw4w0762cms00000008dg00000000f6an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	50005	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: c5ea9194-001e-00ad-143a-26554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224822Z-16849878b785dznd7xpawq9gcn0000000150000000001mgx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:48:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	50004	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224822Z-16849878b786lft2mu9uftf3y400000000wg00000000gmm1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:22 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	50003	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224822Z-16849878b78dsttbr1qw36rxs800000008cg00000000b1vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	50002	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:48:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:48:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224822Z-16849878b786lft2mu9uftf3y400000000wg00000000gmm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:48:22 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49995	142.250.185.66	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	747	OUT	GET /pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmQhelBJ1wSH0Emqb3WkFuG43WvNf_vcumYqWmVERJGxoaWuO0fjnuO8-WXIMbvVCgf3w1e903sl5dxzWdm72uQ3Ek0Y12jtKpc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi6aw7Mth6PZF-YR7s6ddp4zzNSGJN5mDnmMsMYXKvhpVUBY8w
2024-10-24 22:48:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 24 Oct 2024 22:48:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49996	142.250.185.66	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	784	OUT	GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmT0ctLnTozoBHAE1-jS0rDag3zRFVmI9FMtJkWsXyWgiHUsql5PZVwUPMg1jDvUJ2jyUVsQBfCRq2FWZYtUnvK3I80qb-D3lfg&google_hm=MjU2NTAzNDIyMzU1Nzc4NzYzMg== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi6aw7Mth6PZF-YR7s6ddp4zzNSGJN5mDnmMsMYXKvhpVUBY8w
2024-10-24 22:48:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 24 Oct 2024 22:48:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49997	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	772	OUT	GET /minime/images/main-wc-2-sm.jpg HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
2024-10-24 22:48:22 UTC	471	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:22 GMT Content-Type: image/jpeg Content-Length: 6904 Last-Modified: Fri, 16 Sep 2022 16:28:10 GMT Connection: close Vary: Accept-Encoding ETag: "6324a41a-1af8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-24 22:48:22 UTC	6904	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 a0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 01 32 00 02 00 00 00 14 00 00 00 5a 87 69 00 04 00 00 00 01 00 00 00 6e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 32 30 32 32 3a 30 39 3a 31 36 20 31 39 3a 32 38 3a 31 30 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 03 00 00 00 01 00 96 00 00 a0 03 00 03 00 00 00 01 00 6d 00 00 00 00 00 00 ff e1 0b 41 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 Data Ascii: JFIFHHExifMM*JR(2ZinHH2022:09:16 19:28:10mAhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49998	142.250.185.66	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	772	OUT	GET /pixel?google_nid=pulsepoint_inc_&google_push=AXcoOmS4tHHGCtIOgdS7IzRliJTgSqBb63NKj_93oDpNUY8vgaXYWL3yTtZoE8sF7BzRsh8n7sV2Hy3D1w0D5akleQLR7iSfI0GbIXuw&google_hm=UkV6VmxpZVIwa0tI HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2k8V4MHcqNLrWVZHmfuMT16zfZmwsvu0G_Vt2KgNoTvRy83R7HayinPfGpwk; DSID=NO_DATA; APC=AfxxVi6aw7Mth6PZF-YR7s6ddp4zzNSGJN5mDnmMsMYXKvhpVUBY8w
2024-10-24 22:48:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 24 Oct 2024 22:48:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	50008	45.63.66.114	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	772	OUT	GET /minime/images/main-wc-3-sm.jpg HTTP/1.1 Host: free.webcompanion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://free.webcompanion.com/minime/us_es/?campaign=20762542537&gad_source=5&gclid=EAIaIQobChMI47TT3oyoiQMVbo6DBx0hJAuTEAEYASAAEgJeXvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tprtkfhpni3el9a36af5i206pk
2024-10-24 22:48:22 UTC	471	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 24 Oct 2024 22:48:22 GMT Content-Type: image/jpeg Content-Length: 6141 Last-Modified: Fri, 16 Sep 2022 16:27:01 GMT Connection: close Vary: Accept-Encoding ETag: "6324a3d5-17fd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Cache: HIT from Backend Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-24 22:48:22 UTC	6141	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 a0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 01 32 00 02 00 00 00 14 00 00 00 5a 87 69 00 04 00 00 00 01 00 00 00 6e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 32 30 32 32 3a 30 39 3a 31 36 20 31 39 3a 32 37 3a 30 31 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 03 00 00 00 01 00 96 00 00 a0 03 00 03 00 00 00 01 00 6d 00 00 00 00 00 00 ff e1 0b 41 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 Data Ascii: JFIFHHExifMM*JR(2ZinHH2022:09:16 19:27:01mAhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	50000	142.250.185.66	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	387	OUT	GET /activeview/js/current/rx_omid_video.js HTTP/1.1 Host: www.googletagservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:22 UTC	829	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl Cross-Origin-Opener-Policy: same-origin; report-to="active-view-scs-read-write-acl" Report-To: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]} Timing-Allow-Origin: * Content-Length: 155817 Date: Thu, 24 Oct 2024 22:48:22 GMT Expires: Thu, 24 Oct 2024 22:48:22 GMT Cache-Control: private, max-age=3000 ETag: "1729164341206776" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 22:48:22 UTC	549	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e Data Ascii: (function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.
2024-10-24 22:48:22 UTC	1378	IN	Data Raw: 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 66 29 7b 74 68 69 73 2e 4d 65 3d 67 3b 62 61 28 Data Ascii: r c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};u("Symbol",function(a){if(a)return a;var b=function(g,f){this.Me=g;ba(
2024-10-24 22:48:22 UTC	1378	IN	Data Raw: 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 78 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 2c 6b 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: `"+String(a));},y=function(a){if(!(a instanceof Array)){a=x(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a},ja=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)},ka=typeof Object.assign=="function"?Object.assign:function(
2024-10-24 22:48:22 UTC	1378	IN	Data Raw: 61 7d 3b 6e 2e 52 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6b 61 3d 61 7d 3b 76 61 72 20 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 61 2e 46 63 2e 73 70 6c 69 63 65 28 63 7c 7c 30 29 5b 30 5d 3b 28 63 3d 61 2e 66 61 3d 61 2e 66 61 7c 7c 63 29 3f 63 2e 61 65 3f 61 2e 6b 61 3d 61 2e 4a 61 7c 7c 61 2e 76 61 3a 63 2e 52 61 21 3d 76 6f 69 64 20 30 26 26 61 2e 76 61 3c 63 2e 52 61 3f 28 61 2e 6b 61 3d 63 2e 52 61 2c 61 2e 66 61 3d 6e 75 6c 6c 29 3a 61 2e 6b 61 3d 61 2e 76 61 3a 61 2e 6b 61 3d 62 7d 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 6e 65 77 20 74 61 3b 74 68 69 73 2e 62 68 3d 61 7d 3b 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 2e 47 Data Ascii: a};n.Ra=function(a){this.ka=a};var ua=function(a,b,c){c=a.Fc.splice(c\|\|0)[0];(c=a.fa=a.fa\|\|c)?c.ae?a.ka=a.Ja\|\|a.va:c.Ra!=void 0&&a.va<c.Ra?(a.ka=c.Ra,a.fa=null):a.ka=a.va:a.ka=b},va=function(a){this.l=new ta;this.bh=a};va.prototype.yb=function(a){this.l.G
2024-10-24 22:48:22 UTC	1378	IN	Data Raw: 28 64 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 66 29 7b 66 2e 64 6f 6e 65 3f 64 28 66 2e 76 61 6c 75 65 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 66 2e 76 61 6c 75 65 29 2e 74 68 65 6e 28 62 2c 63 29 2e 74 68 65 6e 28 67 2c 65 29 7d 67 28 61 2e 6e 65 78 74 28 29 29 7d 29 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 3b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f Data Ascii: (d)}return new Promise(function(d,e){function g(f){f.done?d(f.value):Promise.resolve(f.value).then(b,c).then(g,e)}g(a.next())})},Ca=function(a){this[Symbol.asyncIterator]=function(){return this};this[Symbol.iterator]=function(){return a};this.next=functio
2024-10-24 22:48:22 UTC	1378	IN	Data Raw: 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 66 28 74 68 69 73 2e 6a 68 29 2c 72 65 6a 65 63 74 3a 66 28 74 68 69 73 2e 64 64 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 64 64 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 68 22 29 29 3b 65 6c 73 65 20 69 66 28 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 78 68 28 66 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 66 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 66 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d Data Ascii: l.call(h,m))}}var h=this,k=!1;return{resolve:f(this.jh),reject:f(this.dd)}};e.prototype.jh=function(f){if(f===this)this.dd(new TypeError("h"));else if(f instanceof e)this.xh(f);else{a:switch(typeof f){case "object":var h=f!=null;break a;case "function":h=
2024-10-24 22:48:22 UTC	1378	IN	Data Raw: 2e 79 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 7a 63 28 29 3b 74 72 79 7b 66 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6c 28 74 28 76 29 29 7d 63 61 74 63 68 28 7a 29 7b 6d 28 7a 29 7d 7d 3a 72 7d 76 61 72 20 6c 2c 6d 2c 71 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 6c 3d 74 3b 6d 3d 72 7d 29 3b 74 68 69 73 2e 4b 62 28 Data Ascii: .yh=function(f,h){var k=this.zc();try{f.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.then=function(f,h){function k(t,r){return typeof t=="function"?function(v){try{l(t(v))}catch(z){m(z)}}:r}var l,m,q=new e(function(t,r){l=t;m=r});this.Kb(
2024-10-24 22:48:22 UTC	1378	IN	Data Raw: 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 0a 75 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 64 61 7d 29 3b 0a 75 28 22 57 65 61 6b 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 69 Data Ascii: e.keys",function(a){return a?a:function(){return Da(this,function(b){return b})}});u("globalThis",function(a){return a\|\|da});u("WeakMap",function(a){function b(){}function c(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function d(k){i
2024-10-24 22:48:22 UTC	1378	IN	Data Raw: 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 78 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3d 6c 2e 6e 65 78 74 28 29 3b 69 66 28 6d 2e 64 6f 6e 65 7c 7c 6d 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 6d 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 6d 3d 6c 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6d 2e 64 6f 6e 65 7c 7c 6d 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 6d 2e 76 61 6c 75 65 Data Ascii: =Object.seal({x:4}),k=new a(x([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var l=k.entries(),m=l.next();if(m.done\|\|m.value[0]!=h\|\|m.value[1]!="s")return!1;m=l.next();return m.done\|\|m.value[0].x!=4\|\|m.value
2024-10-24 22:48:22 UTC	1378	IN	Data Raw: 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f 6c 3d 62 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 66 2c 62 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 6a 61 28 68 5b 30 5d 2c 6c 29 29 66 Data Ascii: ;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(h,k){var l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)?l=b.get(k):(l=""+ ++f,b.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&ja(h[0],l))f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	50007	142.250.184.206	443	6648	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:48:22 UTC	1006	OUT	GET /f/AGSKWxUwBRZpG3FjTDvRcwCWmdrlMp_HbM0HFO1te4fBjKDKvQjDPrtCkInE07FocwFSEa3HqK9bwgiaODB_r5uK7WfN7kVpsOMT9dUpZSyWdVoJVdTGnJXZv0GZBkmS16NVyiYKhw4OaA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI5ODEwMDk3LDYzNzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxNV0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd3d3LnhuLS1pbnZpdGFjaW9uZXNkZWN1bXBsZWFvcy1kaWMub3JnLyIsbnVsbCxbWzgsIlo3ZnhWeldjSEs0Il0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXSxbMiwiW251bGwsW251bGwsMSxbMTcyOTgxMDA5OCwyMzY1MTMwMDBdXV0iXV1d HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:48:22 UTC	1956	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 22:48:22 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-0XBElNRVjA3hsO-PO54Mmg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmII0pBiOO90h-k6EEt8fcmkBcRO6TNYQ4C49eY51ulAnPTvPGsJELtrXWT1B2JDhUuszkDsWHSJ1ROIVXsusZoD8f11l1ifA_Hej5dYjwJxkcQV1hYgvt10hfUxEDN8vcLKAcRCPBzb5r7ewSYw41rzFiYljaT8wvjk_LySosyk0pL8orTktNTi1KKy1KJ4IwMjE0MDIyM9A4P4AgMA29lJBA" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 22:48:22 UTC	1956	IN	Data Raw: 62 62 30 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 6a 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 79 28 6a 44 2c 5f 2e Data Ascii: bb0if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var jD=function(a){this.l=_.u(a)};_.y(jD,_.
2024-10-24 22:48:22 UTC	1043	IN	Data Raw: 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 66 5c 2f 41 47 53 4b 57 78 55 32 46 6f 63 73 74 32 54 68 71 53 33 52 45 6f 70 6f 6a 61 38 63 5a 63 42 6c 48 79 6d 39 37 64 6e 4e 4a 31 62 5f 38 34 6d 7a 6a 73 76 36 71 2d 45 2d 54 6a 4a 63 36 4e 37 53 69 62 2d 74 4d 6b 46 62 42 65 51 4c 38 6f 4a 4e 70 62 73 43 6c 42 5f 37 65 79 6d 79 46 71 54 32 63 59 43 4b 49 59 75 50 59 66 39 70 7a 2d 48 66 74 71 6a 66 61 45 33 55 6f 6f 78 6a 6d 69 64 37 50 57 5f 6f 6b 6a 57 78 54 41 53 41 34 67 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 78 32 32 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 5c 78 35 62 37 2c 36 2c 31 35 5c 78 35 64 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: ages.google.com\/f\/AGSKWxU2Focst2ThqS3REopoja8cZcBlHym97dnNJ1b_84mzjsv6q-E-TjJc6N7Sib-tMkFbBeQL8oJNpbsClB_7eymyFqT2cYCKIYuPYf9pz-HftqjfaE3Uooxjmid7PW_okjWxTASA4g\\\\u003d\\\\u003d\\\x22\x5d,\x5bnull,\x5b7,6,15\x5d,null,null,null,null,null,null,null,null,
2024-10-24 22:48:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	18:47:52
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:47:55
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:47:57
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.xn--invitacionesdecumpleaos-dic.org/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	18:48:18
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5772 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	18:49:11
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5788 --field-trial-handle=1964,i,3140702869292197805,2992003479003282898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.xn--invitacionesdecumpleaos-dic.org/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Downloads\89e82402-bbbd-4dca-9f2d-8ac190538981.tmp

C:\Users\user\Downloads\Unconfirmed 634769.crdownload

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Windows Analysis Report
http://www.xn--invitacionesdecumpleaos-dic.org/